$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS29802.roa File: AS29802.roa (raw, json) Hash identifier: KT6ZRsx/jQF6DHHkLdkG2KbRcpj858/4Isq60Xcx8Ws= Subject key identifier: C4:F6:C1:3C:41:05:68:A0:9A:CC:42:C2:E6:97:91:E9:CE:56:A5:FD Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 18573BC3E61CDF439B3FB18B95272995BB38B598 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS29802.roa Signing time: Fri 18 Sep 2026 11:53:14 +0000 ROA not before: Fri 18 Sep 2026 11:48:14 +0000 ROA not after: Fri 17 Sep 2027 11:53:14 +0000 asID: 29802 IP address blocks: 186.241.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 00:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:57:3b:c3:e6:1c:df:43:9b:3f:b1:8b:95:27:29:95:bb:38:b5:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 18 11:48:14 2026 GMT Not After : Sep 17 11:53:14 2027 GMT Subject: CN=C4F6C13C410568A09ACC42C2E69791E9CE56A5FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ac:96:a6:ae:46:97:51:2f:49:59:ed:0d:25: b0:3d:62:03:20:02:2a:97:31:0b:70:39:54:7b:3e: 12:2f:e2:d5:c1:d8:e8:cd:7b:31:83:bb:f5:9f:fb: 05:d6:0b:f6:24:0f:80:c1:0c:c3:dc:db:c6:dd:3a: 60:88:ce:4b:78:cf:a0:0f:2d:b9:23:6f:68:01:4c: f1:92:cd:ec:f4:65:cf:90:49:4c:2c:32:68:e2:29: c2:29:ee:7e:21:57:aa:81:8b:64:af:ed:0c:02:da: 8f:f4:34:a6:06:3f:ac:54:6f:c5:4b:4c:65:a8:ea: 77:b9:1c:1f:73:09:90:28:75:b5:e1:02:e6:f2:3a: ab:16:86:2f:3f:f9:72:15:5b:8b:cb:7a:c6:7e:29: c5:e0:43:96:19:d3:e3:a2:b7:fe:b4:df:ce:60:4b: fd:1b:24:64:87:f5:c5:88:4f:83:c0:26:c8:b3:30: 12:cb:62:7f:dc:fe:e8:37:67:cf:28:c6:fe:a7:75: 46:8d:01:9e:36:83:5b:36:2d:b3:46:9e:53:04:32: b0:8d:e6:54:00:d1:64:1b:14:4e:16:aa:fa:b3:b9: 72:0f:a9:d7:99:1d:dd:31:ff:79:4c:c7:9d:26:e6: bc:67:29:55:56:59:3f:fe:88:4a:ca:9a:18:69:db: e6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F6:C1:3C:41:05:68:A0:9A:CC:42:C2:E6:97:91:E9:CE:56:A5:FD X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS29802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.241.191.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:1d:e1:40:76:cf:a2:e9:0a:e0:f4:eb:06:55:8d:82:3a:c1: 87:2e:9b:07:63:62:e4:23:e3:71:1d:8e:8e:26:1a:10:cb:a6: b6:38:6d:2b:4b:03:b1:99:62:b1:dc:dd:44:51:04:4a:5b:7c: 84:2a:fa:a0:0f:44:d7:c4:9f:c4:e1:dc:c5:f9:e8:75:47:1e: 63:0b:09:78:ed:02:e8:57:10:6a:9c:47:22:90:f3:1d:4f:64: 56:fd:c1:43:c1:b6:43:4e:1e:8c:f5:6a:16:eb:31:2e:d2:85: da:40:43:12:4c:64:f9:6d:70:e7:eb:27:56:38:51:ed:10:a4: ce:e1:3c:c7:71:0b:a3:5b:3b:a1:1c:21:31:29:4c:1f:a7:74: 69:52:c8:f4:7f:a5:61:b6:3c:d8:cf:a7:29:76:a6:e7:33:34: ac:8a:02:c6:52:36:46:5e:8a:07:20:03:d9:fb:39:93:1a:9f: 33:7c:7d:f1:66:7c:44:7e:9a:22:c0:c0:01:df:3e:21:2f:9a: 50:80:2a:04:ab:aa:38:7d:92:69:f6:49:51:cd:d6:29:0b:6a: 4e:01:a7:57:18:54:80:ea:27:85:bb:61:75:14:88:9f:44:6b: 43:6e:1a:e3:85:db:30:c8:a5:58:b3:19:ef:37:c1:b9:e3:6f: f9:9b:6a:c9 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUGFc7w+Yc30ObP7GLlScplbs4tZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTgxMTQ4MTRaFw0yNzA5MTcxMTUzMTRaMDMxMTAvBgNV BAMTKEM0RjZDMTNDNDEwNTY4QTA5QUNDNDJDMkU2OTc5MUU5Q0U1NkE1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMrJamrkaXUS9JWe0NJbA9YgMg AiqXMQtwOVR7PhIv4tXB2OjNezGDu/Wf+wXWC/YkD4DBDMPc28bdOmCIzkt4z6AP Lbkjb2gBTPGSzez0Zc+QSUwsMmjiKcIp7n4hV6qBi2Sv7QwC2o/0NKYGP6xUb8VL TGWo6ne5HB9zCZAodbXhAubyOqsWhi8/+XIVW4vLesZ+KcXgQ5YZ0+Oit/60385g S/0bJGSH9cWIT4PAJsizMBLLYn/c/ug3Z88oxv6ndUaNAZ42g1s2LbNGnlMEMrCN 5lQA0WQbFE4WqvqzuXIPqdeZHd0x/3lMx50m5rxnKVVWWT/+iErKmhhp2+bFAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUxPbBPEEFaKCazELC5peR6c5Wpf0wHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMyOTgwMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALrxvzANBgkqhkiG9w0BAQsFAAOCAQEAax3hQHbPoukK4PTrBlWNgjrB hy6bB2Ni5CPjcR2OjiYaEMumtjhtK0sDsZlisdzdRFEESlt8hCr6oA9E18SfxOHc xfnodUceYwsJeO0C6FcQapxHIpDzHU9kVv3BQ8G2Q04ejPVqFusxLtKF2kBDEkxk +W1w5+snVjhR7RCkzuE8x3ELo1s7oRwhMSlMH6d0aVLI9H+lYbY82M+nKXam5zM0 rIoCxlI2Rl6KByAD2fs5kxqfM3x98WZ8RH6aIsDAAd8+IS+aUIAqBKuqOH2SafZJ Uc3WKQtqTgGnVxhUgOonhbthdRSIn0RrQ24a44XbMMilWLMZ7zfBueNv+ZtqyQ== -----END CERTIFICATE-----Generated at Sun Sep 20 15:44:14 2026 by rpki-client