$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS31715.roa File: AS31715.roa (raw, json) Hash identifier: IgCz/N9E+w8nKuNJLUAbrE0l2DE1qoW2P/h+62/qPNU= Subject key identifier: 12:3D:B5:56:6B:47:2F:6B:A2:F5:D9:69:05:8A:34:1D:13:1C:2C:FF Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 634C1AA875D9D355669EE2676218A771305CECAE Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS31715.roa Signing time: Fri 11 Sep 2026 08:13:10 +0000 ROA not before: Fri 11 Sep 2026 08:08:10 +0000 ROA not after: Fri 10 Sep 2027 08:13:10 +0000 asID: 31715 IP address blocks: 186.241.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 04:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:4c:1a:a8:75:d9:d3:55:66:9e:e2:67:62:18:a7:71:30:5c:ec:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 11 08:08:10 2026 GMT Not After : Sep 10 08:13:10 2027 GMT Subject: CN=123DB5566B472F6BA2F5D969058A341D131C2CFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:d3:b7:94:69:55:2b:9d:50:0c:c0:ab:ff: ea:19:80:b7:fb:a2:97:80:83:48:d6:da:a9:0a:cc: 59:2b:78:a2:8c:a4:a7:9a:a5:93:d4:f1:54:6c:fb: 35:8c:dc:04:8e:32:6c:6e:de:56:a2:a1:28:2f:0d: 7e:3a:f8:5a:95:7a:ea:23:9e:32:86:94:8d:ae:45: 57:e8:8c:a6:ee:ae:b9:17:97:ba:d6:e3:e1:ad:73: da:66:e0:8d:21:f6:a8:64:bb:5b:9f:80:d2:05:3a: f6:89:20:6f:94:87:12:01:58:4d:0e:4e:ff:c2:6c: 29:61:ed:5c:e2:8d:f1:39:49:77:c5:b4:35:58:1d: 36:7d:12:7a:e3:51:4a:f7:5e:02:fb:b3:9b:33:b4: f0:1f:94:ae:a7:01:02:1f:8a:0c:a5:ed:0d:6a:b0: a6:dd:07:e4:57:95:14:37:c5:f6:81:cb:cf:d8:a6: 53:5e:71:72:cc:12:c8:4d:cf:94:39:8b:de:8a:c2: ba:4e:12:c8:0e:a3:1a:16:61:f4:83:af:47:77:0f: 66:96:17:55:cf:c2:03:76:fd:98:ef:f4:63:b2:79: 22:c3:21:9f:33:9b:9d:cb:ce:bc:bc:41:c2:38:6e: 46:a2:68:08:bb:e7:80:93:27:34:48:69:57:8b:bb: 07:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3D:B5:56:6B:47:2F:6B:A2:F5:D9:69:05:8A:34:1D:13:1C:2C:FF X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS31715.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.241.162.0/24 Signature Algorithm: sha256WithRSAEncryption 73:f0:5e:1c:10:88:ea:1a:de:40:4d:1a:18:f3:5d:34:d8:55: c7:97:07:f4:ff:58:0a:15:77:b8:2e:e1:c6:50:91:e2:af:6d: 5a:81:44:9b:34:ac:f6:9f:6c:e5:94:f1:e4:ee:fa:d8:fe:4d: a5:b7:f2:b5:de:be:fe:ab:70:8e:60:b0:74:3f:fc:f2:7f:77: 4c:f4:be:c1:25:f2:81:71:46:30:4b:e0:6d:b2:77:27:aa:58: a3:a1:70:9e:17:1a:87:2f:77:5b:d3:d4:e2:52:bb:fc:cd:e8: 01:84:fc:1d:91:33:d5:a9:19:88:26:e1:3c:ea:37:08:34:85: 59:57:84:77:d0:d5:d9:4c:b3:cb:47:01:14:47:12:31:5d:88: c7:bb:1b:79:ce:21:6f:56:9e:b0:0f:b6:70:5c:85:0e:e0:59: 4c:e9:db:11:a8:d3:17:29:25:3e:26:25:66:2d:17:64:14:f4: d6:2d:d4:15:80:4b:2a:b0:65:e3:df:b5:f1:1f:e1:af:19:1e: dc:30:47:14:59:16:36:02:59:f6:55:66:27:94:f7:99:a7:fc: 0d:91:6b:d2:85:c9:0a:bb:97:35:9e:57:23:91:db:5f:35:e7: 7a:6a:52:75:ec:23:44:fc:f9:2d:fe:26:a1:ed:8f:ee:df:2f: be:32:f0:62 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUY0waqHXZ01VmnuJnYhincTBc7K4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTEwODA4MTBaFw0yNzA5MTAwODEzMTBaMDMxMTAvBgNV BAMTKDEyM0RCNTU2NkI0NzJGNkJBMkY1RDk2OTA1OEEzNDFEMTMxQzJDRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1HdO3lGlVK51QDMCr/+oZgLf7 opeAg0jW2qkKzFkreKKMpKeapZPU8VRs+zWM3ASOMmxu3laioSgvDX46+FqVeuoj njKGlI2uRVfojKburrkXl7rW4+Gtc9pm4I0h9qhku1ufgNIFOvaJIG+UhxIBWE0O Tv/CbClh7VzijfE5SXfFtDVYHTZ9EnrjUUr3XgL7s5sztPAflK6nAQIfigyl7Q1q sKbdB+RXlRQ3xfaBy8/YplNecXLMEshNz5Q5i96KwrpOEsgOoxoWYfSDr0d3D2aW F1XPwgN2/Zjv9GOyeSLDIZ8zm53Lzry8QcI4bkaiaAi754CTJzRIaVeLuwctAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUEj21VmtHL2ui9dlpBYo0HRMcLP8wHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMzMTcxNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALrxojANBgkqhkiG9w0BAQsFAAOCAQEAc/BeHBCI6hreQE0aGPNdNNhV x5cH9P9YChV3uC7hxlCR4q9tWoFEmzSs9p9s5ZTx5O762P5Npbfytd6+/qtwjmCw dD/88n93TPS+wSXygXFGMEvgbbJ3J6pYo6Fwnhcahy93W9PU4lK7/M3oAYT8HZEz 1akZiCbhPOo3CDSFWVeEd9DV2Uyzy0cBFEcSMV2Ix7sbec4hb1aesA+2cFyFDuBZ TOnbEajTFyklPiYlZi0XZBT01i3UFYBLKrBl49+18R/hrxke3DBHFFkWNgJZ9lVm J5T3maf8DZFr0oXJCruXNZ5XI5HbXzXnempSdewjRPz5Lf4moe2P7t8vvjLwYg== -----END CERTIFICATE-----Generated at Tue Sep 22 18:34:35 2026 by rpki-client