$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS219427.roa File: AS219427.roa (raw, json) Hash identifier: TwUQQmBooplu5yiXjQi9me3qbDacU1EKCx3fBz9eL6E= Subject key identifier: 03:66:41:1C:79:7C:59:F4:42:65:A4:26:CA:E0:54:0B:7F:B0:44:78 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 50D30A7A9B896DD472E365ED4DEAF13719534E1A Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS219427.roa Signing time: Fri 11 Sep 2026 08:13:10 +0000 ROA not before: Fri 11 Sep 2026 08:08:10 +0000 ROA not after: Fri 10 Sep 2027 08:13:10 +0000 asID: 219427 IP address blocks: 201.50.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 00:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d3:0a:7a:9b:89:6d:d4:72:e3:65:ed:4d:ea:f1:37:19:53:4e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 11 08:08:10 2026 GMT Not After : Sep 10 08:13:10 2027 GMT Subject: CN=0366411C797C59F44265A426CAE0540B7FB04478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6f:eb:26:66:e2:e6:46:56:47:c6:d3:26:f7: 5b:9c:25:fb:aa:2e:2d:41:73:55:3b:0a:33:65:97: 75:16:38:bd:05:a4:a5:a2:8b:be:05:24:a8:a1:20: 96:86:84:49:7a:1a:df:ca:0f:da:40:74:a5:85:79: 2d:24:ae:2c:a9:f1:45:01:77:4a:85:0a:ad:84:1d: 6e:6b:4a:b8:97:67:9d:4d:b7:53:94:f0:bb:75:a3: 84:46:87:50:51:5f:48:7a:1e:42:7d:91:0c:4a:0f: ae:04:9a:46:81:2a:90:32:15:30:03:71:db:31:d8: f5:7c:a1:f5:31:66:f8:0c:26:0a:b1:75:e0:2d:fd: c1:ac:eb:a3:2e:f8:c0:12:a8:e6:57:52:38:a4:b7: eb:05:59:58:55:88:e1:1c:e9:6b:61:64:97:04:ad: de:fb:02:c7:9b:0f:04:f7:3a:49:11:8b:fc:c8:8b: 72:cc:bf:45:3d:d5:10:a3:bc:6a:e9:d0:81:0a:53: 09:f9:84:78:ab:ea:e0:5b:bd:6e:75:32:4f:51:b1: 1e:d0:d7:32:6f:a9:b7:13:22:4a:f2:0e:7c:b3:6f: a3:52:71:a4:db:8a:9b:3f:3c:e0:d7:68:67:cb:22: 4e:5a:9e:21:6b:91:3c:be:29:dd:36:5a:a2:bf:76: fc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:66:41:1C:79:7C:59:F4:42:65:A4:26:CA:E0:54:0B:7F:B0:44:78 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS219427.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.50.29.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:7f:31:06:94:8b:b5:99:fc:63:f7:40:08:e0:e6:88:97:36: f9:14:21:39:bd:e8:d1:48:f3:0e:f0:88:65:d6:9e:cc:02:34: 91:ae:08:70:0a:22:f2:41:27:c1:4a:e4:8f:b4:5c:8e:10:5d: 8d:f0:78:9f:f7:4d:65:d7:aa:e9:d8:09:c6:a3:b9:1e:51:c0: b3:a7:3f:85:76:c3:57:ff:db:de:da:1d:d8:ab:5d:90:13:0a: 7a:4e:2f:e1:b6:22:5a:3b:ea:4e:b6:ad:0a:ef:e3:61:bc:ea: 41:72:19:a7:a5:5b:63:1d:96:d1:7b:53:2e:a2:81:fd:88:b2: 34:19:78:2d:9c:64:b0:45:ca:07:ad:dd:06:e0:3f:64:0a:35: f6:a5:9f:7e:f3:b7:35:9c:b4:8c:ed:be:49:12:c1:a6:50:94: fc:fa:7d:3a:eb:08:f5:73:35:05:60:bf:c1:8a:b3:8d:d9:20: 61:8f:25:c6:c5:55:eb:d4:9d:3c:71:7a:3c:46:b7:03:07:37: d1:25:63:25:5f:84:06:41:a5:43:33:21:e1:d6:3a:7e:02:86: e5:f3:cf:bb:3d:7a:9e:88:f3:8d:4b:39:5d:a1:87:1d:a7:9b: 3a:8b:2f:8c:5a:1d:a1:9b:10:31:a4:59:68:8a:cd:02:57:8a: 63:7c:f1:02 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUUNMKepuJbdRy42XtTerxNxlTThowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTEwODA4MTBaFw0yNzA5MTAwODEzMTBaMDMxMTAvBgNV BAMTKDAzNjY0MTFDNzk3QzU5RjQ0MjY1QTQyNkNBRTA1NDBCN0ZCMDQ0NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpb+smZuLmRlZHxtMm91ucJfuq Li1Bc1U7CjNll3UWOL0FpKWii74FJKihIJaGhEl6Gt/KD9pAdKWFeS0kriyp8UUB d0qFCq2EHW5rSriXZ51Nt1OU8Lt1o4RGh1BRX0h6HkJ9kQxKD64EmkaBKpAyFTAD cdsx2PV8ofUxZvgMJgqxdeAt/cGs66Mu+MASqOZXUjikt+sFWVhViOEc6WthZJcE rd77AsebDwT3OkkRi/zIi3LMv0U91RCjvGrp0IEKUwn5hHir6uBbvW51Mk9RsR7Q 1zJvqbcTIkryDnyzb6NScaTbips/PODXaGfLIk5aniFrkTy+Kd02WqK/dvw9AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUA2ZBHHl8WfRCZaQmyuBUC3+wRHgwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMyMTk0Mjcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADJMh0wDQYJKoZIhvcNAQELBQADggEBAJp/MQaUi7WZ/GP3QAjg5oiX NvkUITm96NFI8w7wiGXWnswCNJGuCHAKIvJBJ8FK5I+0XI4QXY3weJ/3TWXXqunY CcajuR5RwLOnP4V2w1f/297aHdirXZATCnpOL+G2Ilo76k62rQrv42G86kFyGael W2MdltF7Uy6igf2IsjQZeC2cZLBFyget3QbgP2QKNfaln37ztzWctIztvkkSwaZQ lPz6fTrrCPVzNQVgv8GKs43ZIGGPJcbFVevUnTxxejxGtwMHN9ElYyVfhAZBpUMz IeHWOn4ChuXzz7s9ep6I841LOV2hhx2nmzqLL4xaHaGbEDGkWWiKzQJXimN88QI= -----END CERTIFICATE-----Generated at Sun Sep 20 14:43:53 2026 by rpki-client