$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS219394.roa File: AS219394.roa (raw, json) Hash identifier: vzJcrg3ajNSV/DDqLPXW+cJV9GTjaQelCQvixE03OAI= Subject key identifier: 97:BA:52:DA:E7:A3:E2:E6:A3:6B:42:95:1B:48:AA:D5:EB:EC:6D:2D Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 0E41DE3D844F324FF9033A98D8500E7958A51C05 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS219394.roa Signing time: Fri 11 Sep 2026 08:13:10 +0000 ROA not before: Fri 11 Sep 2026 08:08:10 +0000 ROA not after: Fri 10 Sep 2027 08:13:10 +0000 asID: 219394 IP address blocks: 152.237.238.0/24 maxlen: 24 152.237.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 04:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:41:de:3d:84:4f:32:4f:f9:03:3a:98:d8:50:0e:79:58:a5:1c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 11 08:08:10 2026 GMT Not After : Sep 10 08:13:10 2027 GMT Subject: CN=97BA52DAE7A3E2E6A36B42951B48AAD5EBEC6D2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fe:cb:1d:44:e0:4c:d7:da:a6:0e:21:c2:22: f9:1d:c8:be:96:5f:7b:c7:76:f3:1f:3b:2d:6d:5e: 22:b3:aa:4a:25:09:25:89:b1:14:13:47:dc:10:dc: 41:d3:9a:34:3a:d5:e4:e8:f9:4a:3b:b1:25:30:86: 8e:51:29:f3:76:df:2a:10:4e:da:31:2a:05:88:88: 5c:a6:e4:cd:fe:24:f8:bb:ed:8d:2d:7e:04:62:d8: 14:78:4d:b2:13:0c:fb:33:d5:3f:91:04:b9:93:54: 7e:22:a9:af:e1:79:33:1b:52:c6:91:51:c0:57:66: 96:18:58:c8:5e:fc:98:1f:f7:17:50:17:de:87:2f: 95:99:89:4b:75:3d:c8:23:e5:fb:2c:88:75:44:d5: 8a:e2:08:3a:d3:fe:5c:70:04:dc:17:8b:61:04:54: 99:bf:96:d7:00:c3:b8:37:c2:67:93:86:1b:d3:a8: ad:d5:ff:04:02:d1:b6:1a:69:69:1c:16:ae:76:9a: cc:63:18:49:e8:6c:87:cb:ce:5c:57:95:1a:60:40: cd:a3:f0:2b:3f:5b:fa:f3:45:04:62:d4:31:0c:3b: d4:98:ec:7e:1f:e0:5c:ba:ae:a5:3b:ef:26:92:b3: 61:61:2a:9b:ea:55:dd:ad:c5:9e:2e:59:db:44:63: f6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BA:52:DA:E7:A3:E2:E6:A3:6B:42:95:1B:48:AA:D5:EB:EC:6D:2D X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS219394.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.238.0/24 152.237.240.0/24 Signature Algorithm: sha256WithRSAEncryption 08:36:34:56:73:1e:e2:61:cf:85:1b:ec:a0:41:17:87:d4:34: 86:cf:e3:b4:c6:81:00:2a:f1:28:a4:e0:76:f9:da:64:6b:9f: 56:19:e5:ce:aa:f1:62:e2:65:9d:a3:ce:4f:76:14:30:cf:76: 19:02:29:d3:58:84:f6:c5:94:0f:2c:bb:31:18:63:67:d7:31: 2e:88:8a:43:75:9f:f9:2d:b6:13:06:2f:2b:bb:a0:6d:4f:d7: 7f:63:3e:ba:de:bb:c7:64:4e:64:1f:84:89:12:bd:b0:d4:84: a0:f6:b1:fd:ad:92:22:6a:74:d5:36:bc:c5:c8:20:1e:2b:02: c0:02:24:2c:20:18:6d:ef:32:f4:78:94:fe:a3:52:e1:59:a8: b4:d3:14:d9:2b:50:d8:bb:43:c6:41:77:70:42:36:b8:fa:d0: 36:7d:4b:e2:f7:7f:90:1a:95:50:19:e5:db:d5:f2:86:75:97: 9f:78:4b:a5:c8:9f:00:ff:74:57:d9:3e:fd:f4:56:83:e4:0e: 8e:44:41:6d:2f:7c:6c:02:54:3e:7b:1a:b9:27:e7:1a:e9:57: 12:65:14:fd:75:8b:17:f0:88:00:b8:ff:bc:fd:0b:6c:d7:2c: f6:82:ee:3f:c6:b6:06:e9:89:e9:c6:68:6e:64:8e:b9:14:cd: 18:55:fb:55 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUDkHePYRPMk/5AzqY2FAOeVilHAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTEwODA4MTBaFw0yNzA5MTAwODEzMTBaMDMxMTAvBgNV BAMTKDk3QkE1MkRBRTdBM0UyRTZBMzZCNDI5NTFCNDhBQUQ1RUJFQzZEMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2/ssdROBM19qmDiHCIvkdyL6W X3vHdvMfOy1tXiKzqkolCSWJsRQTR9wQ3EHTmjQ61eTo+Uo7sSUwho5RKfN23yoQ TtoxKgWIiFym5M3+JPi77Y0tfgRi2BR4TbITDPsz1T+RBLmTVH4iqa/heTMbUsaR UcBXZpYYWMhe/Jgf9xdQF96HL5WZiUt1Pcgj5fssiHVE1YriCDrT/lxwBNwXi2EE VJm/ltcAw7g3wmeThhvTqK3V/wQC0bYaaWkcFq52msxjGEnobIfLzlxXlRpgQM2j 8Cs/W/rzRQRi1DEMO9SY7H4f4Fy6rqU77yaSs2FhKpvqVd2txZ4uWdtEY/ZDAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUl7pS2uej4uaja0KVG0iq1evsbS0wHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMyMTkzOTQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBACY7e4DBACY7fAwDQYJKoZIhvcNAQELBQADggEBAAg2NFZzHuJhz4Ub 7KBBF4fUNIbP47TGgQAq8Sik4Hb52mRrn1YZ5c6q8WLiZZ2jzk92FDDPdhkCKdNY hPbFlA8suzEYY2fXMS6IikN1n/ktthMGLyu7oG1P139jPrreu8dkTmQfhIkSvbDU hKD2sf2tkiJqdNU2vMXIIB4rAsACJCwgGG3vMvR4lP6jUuFZqLTTFNkrUNi7Q8ZB d3BCNrj60DZ9S+L3f5AalVAZ5dvV8oZ1l594S6XInwD/dFfZPv30VoPkDo5EQW0v fGwCVD57Grkn5xrpVxJlFP11ixfwiAC4/7z9C2zXLPaC7j/GtgbpienGaG5kjrkU zRhV+1U= -----END CERTIFICATE-----Generated at Tue Sep 22 18:34:29 2026 by rpki-client