$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS30058.roa File: AS30058.roa (raw, json) Hash identifier: UGt+SIVeb0LemuBYj3/waOpXv38KjdEdXOaEMLmCdfE= Subject key identifier: E7:0F:C4:04:68:AB:D1:6C:A4:CA:E0:77:67:92:72:F8:49:3D:D3:7C Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 1978FF4BFAC5F9EC26E1778D9207AD861E291131 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS30058.roa Signing time: Tue 27 Oct 2026 14:19:07 +0000 ROA not before: Tue 27 Oct 2026 14:14:07 +0000 ROA not after: Tue 26 Oct 2027 14:19:07 +0000 asID: 30058 IP address blocks: 152.237.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Nov 2026 23:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:78:ff:4b:fa:c5:f9:ec:26:e1:77:8d:92:07:ad:86:1e:29:11:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 27 14:14:07 2026 GMT Not After : Oct 26 14:19:07 2027 GMT Subject: CN=E70FC40468ABD16CA4CAE077679272F8493DD37C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:bc:84:7c:43:ea:ee:61:b2:a1:8a:bb:db: 50:5c:ec:a1:6b:4b:69:ab:1e:7b:36:6e:7c:3b:39: d2:49:a7:8f:cd:77:f5:41:3f:29:a4:8a:5a:22:1d: 36:c6:2d:aa:2b:95:53:39:94:d8:21:37:54:2c:c3: 5f:6c:70:99:3e:5c:20:52:13:d4:c0:e9:65:48:fe: 38:d0:c2:32:64:53:cb:af:66:fc:99:95:c0:bf:73: 24:15:68:33:2d:66:26:6c:56:41:d1:3e:44:16:5f: 2b:36:5c:f5:26:91:f0:87:4c:43:49:3d:40:1b:d8: 13:46:25:f0:9a:89:65:65:f0:ce:49:03:de:e9:9c: bf:0c:a3:e6:e5:88:eb:4f:a7:32:86:b8:92:db:28: 16:22:11:a2:73:d8:a9:ca:93:89:76:62:7e:20:88: 78:12:94:e8:22:f4:d1:3e:91:1a:82:15:a8:2b:c1: 6e:fd:06:10:d1:f5:a9:c1:36:aa:f4:fd:e9:fc:56: 35:ad:94:36:b7:19:82:fc:e5:a1:e8:9f:89:10:17: 06:9b:44:19:42:b8:04:7e:c2:32:9e:9b:01:2a:a1: bf:84:a0:60:e4:8e:c4:22:96:fb:65:64:fb:76:90: 86:81:c5:e1:3d:2e:27:02:05:48:fc:f1:ae:8e:36: de:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0F:C4:04:68:AB:D1:6C:A4:CA:E0:77:67:92:72:F8:49:3D:D3:7C X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS30058.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.254.0/24 Signature Algorithm: sha256WithRSAEncryption 44:08:34:d2:7c:7f:d1:b8:53:6e:b3:ca:9f:84:d1:b1:8a:d7: 1f:0a:88:e0:f2:05:8e:37:ca:8a:8a:2b:06:9b:29:94:ff:bf: 00:a0:d4:f8:17:56:00:5e:39:28:7b:6e:c5:aa:32:9d:e1:18: 83:37:84:af:0c:97:14:9b:5f:b7:c1:e2:4d:de:e0:c9:b7:bb: 18:10:16:01:2a:d7:ca:45:fd:ea:c9:a1:7b:9e:44:ab:0c:35: 77:a8:93:bf:4c:59:67:02:80:a8:b2:02:49:88:0b:3f:13:07: ec:00:7a:cd:1d:80:bf:f7:b4:5c:bb:a3:59:63:b5:9b:ee:81: 11:27:ce:68:08:7a:42:32:e4:d9:ac:22:14:c1:03:70:cb:12: 0d:e7:9a:72:cf:0e:01:83:a8:4d:49:bd:d0:76:38:15:0f:dc: 69:d3:80:8b:35:fa:46:c3:be:1d:88:19:81:50:65:7f:d1:1c: b5:b0:79:04:33:ea:ac:3a:8c:a0:dc:ba:9b:ad:b9:5a:7c:c1: 6c:c5:0a:f7:e1:91:36:29:9d:ec:7f:4a:03:0a:2b:11:8d:5e: 83:b7:9c:21:f8:b4:de:61:3c:d2:8e:50:a5:79:23:3d:dc:51: 19:76:d6:24:b5:21:47:bd:35:a7:72:a4:e9:a2:ee:ac:47:1e: 33:fd:f1:d0 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUGXj/S/rF+ewm4XeNkgethh4pETEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMjcxNDE0MDdaFw0yNzEwMjYxNDE5MDdaMDMxMTAvBgNV BAMTKEU3MEZDNDA0NjhBQkQxNkNBNENBRTA3NzY3OTI3MkY4NDkzREQzN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+o7yEfEPq7mGyoYq721Bc7KFr S2mrHns2bnw7OdJJp4/Nd/VBPymkiloiHTbGLaorlVM5lNghN1Qsw19scJk+XCBS E9TA6WVI/jjQwjJkU8uvZvyZlcC/cyQVaDMtZiZsVkHRPkQWXys2XPUmkfCHTENJ PUAb2BNGJfCaiWVl8M5JA97pnL8Mo+bliOtPpzKGuJLbKBYiEaJz2KnKk4l2Yn4g iHgSlOgi9NE+kRqCFagrwW79BhDR9anBNqr0/en8VjWtlDa3GYL85aHon4kQFwab RBlCuAR+wjKemwEqob+EoGDkjsQilvtlZPt2kIaBxeE9LicCBUj88a6ONt6RAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU5w/EBGir0WykyuB3Z5Jy+Ek903wwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMzMDA1OC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAJjt/jANBgkqhkiG9w0BAQsFAAOCAQEARAg00nx/0bhTbrPKn4TRsYrX HwqI4PIFjjfKioorBpsplP+/AKDU+BdWAF45KHtuxaoyneEYgzeErwyXFJtft8Hi Td7gybe7GBAWASrXykX96smhe55Eqww1d6iTv0xZZwKAqLICSYgLPxMH7AB6zR2A v/e0XLujWWO1m+6BESfOaAh6QjLk2awiFMEDcMsSDeeacs8OAYOoTUm90HY4FQ/c adOAizX6RsO+HYgZgVBlf9EctbB5BDPqrDqMoNy6m625WnzBbMUK9+GRNimd7H9K AworEY1eg7ecIfi03mE80o5QpXkjPdxRGXbWJLUhR701p3Kk6aLurEceM/3x0A== -----END CERTIFICATE-----Generated at Sun Nov 8 06:36:31 2026 by rpki-client