$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS3223.roa File: AS3223.roa (raw, json) Hash identifier: gla7DtHK1OrkIGVDoA01+OL3aT0M7RlbtSvmDghbNT0= Subject key identifier: 31:53:A4:F5:2D:8E:13:01:79:EB:01:15:C3:F3:2E:CA:39:4A:EF:58 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 343F004E1799F2C50E5E4DE0C6A62A432D9A962C Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS3223.roa Signing time: Thu 17 Sep 2026 13:51:40 +0000 ROA not before: Thu 17 Sep 2026 13:46:40 +0000 ROA not after: Thu 16 Sep 2027 13:51:40 +0000 asID: 3223 IP address blocks: 152.237.244.0/24 maxlen: 24 201.50.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 00:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:3f:00:4e:17:99:f2:c5:0e:5e:4d:e0:c6:a6:2a:43:2d:9a:96:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 17 13:46:40 2026 GMT Not After : Sep 16 13:51:40 2027 GMT Subject: CN=3153A4F52D8E130179EB0115C3F32ECA394AEF58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:3f:66:d7:05:7a:10:04:fd:d6:e5:7d:fd: 60:f2:47:2a:53:08:92:8f:7f:24:0a:ba:d7:d3:1e: a7:37:73:c5:62:35:06:4a:67:15:24:e8:a8:ae:56: 28:06:cd:d2:3b:1f:89:17:dc:f3:4b:cd:63:58:cc: 35:9b:8a:13:44:45:50:79:b0:fa:bc:e6:4f:93:48: ff:98:02:5d:26:2a:0a:62:bc:c9:37:d0:ed:5f:a8: 1d:be:92:d7:a8:1d:64:9f:e7:0b:ac:d7:b0:75:33: 0f:0c:af:25:2b:9b:ac:74:92:29:db:eb:fc:27:e9: 05:b5:0d:5c:33:12:6f:65:15:42:2c:7a:9e:68:58: e6:26:04:84:54:fc:e8:99:7e:a6:6a:c7:66:49:98: a7:d7:9f:68:bf:85:b6:e2:d4:2f:f6:a1:f7:ae:fb: 47:64:f5:0c:37:21:bd:9a:b2:0e:65:a3:0e:29:f0: a9:3b:dc:8d:63:39:7e:62:9b:4c:f3:fe:c9:92:9e: a3:f5:e0:97:23:45:e0:34:d0:e5:80:0e:e9:7c:27: c9:e6:19:cf:ae:0b:94:08:7d:52:40:f8:e5:f3:5d: 30:5d:ed:0e:20:88:ae:10:f3:c5:33:85:23:65:af: d8:98:fb:3e:cc:00:30:0a:83:75:15:4b:5c:be:cf: 02:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:53:A4:F5:2D:8E:13:01:79:EB:01:15:C3:F3:2E:CA:39:4A:EF:58 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS3223.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.244.0/24 201.50.18.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:b2:b9:63:2f:64:28:1a:a7:cd:ae:52:92:f3:af:87:fa:8c: 04:78:f7:29:2d:a9:58:63:89:3e:43:d3:10:97:5f:63:1a:35: 1d:3a:9d:6f:7b:5f:cb:e6:de:95:96:6e:34:34:58:0f:5b:1c: 03:60:64:4f:a0:13:44:5f:53:4d:87:35:5c:ce:5d:d6:bc:ae: 2d:95:8c:52:6d:c9:6b:ae:4f:24:f2:ad:9e:9a:61:18:6d:55: 72:14:c5:03:fb:a1:6c:90:68:57:b4:d2:76:ed:3b:07:54:3d: b9:d3:92:81:5b:9c:fd:5c:fe:37:c4:97:7c:71:88:62:05:33: 0d:a9:40:07:41:75:81:1b:5a:f0:c1:e7:37:b8:22:b3:9a:42: 43:99:d5:18:ec:f6:d4:dd:81:24:00:bb:70:be:70:37:b5:5d: f0:29:24:41:bc:dd:8c:6b:e1:98:e3:28:17:23:71:b0:a3:d2: d6:6e:58:df:cc:b7:f0:f8:6e:d6:cd:77:9d:10:18:c2:81:d5: 53:36:5a:be:46:83:22:bc:83:c7:a3:b3:42:50:1e:79:b7:1e: 8e:bb:1b:01:15:d8:7b:f5:4d:d5:a0:d7:dd:47:51:a3:27:0b: b3:e6:b4:e6:86:32:a0:88:f9:46:1b:68:41:80:b7:2c:4b:c4: 0a:7e:63:dc -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUND8ATheZ8sUOXk3gxqYqQy2aliwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTcxMzQ2NDBaFw0yNzA5MTYxMzUxNDBaMDMxMTAvBgNV BAMTKDMxNTNBNEY1MkQ4RTEzMDE3OUVCMDExNUMzRjMyRUNBMzk0QUVGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBKz9m1wV6EAT91uV9/WDyRypT CJKPfyQKutfTHqc3c8ViNQZKZxUk6KiuVigGzdI7H4kX3PNLzWNYzDWbihNERVB5 sPq85k+TSP+YAl0mKgpivMk30O1fqB2+kteoHWSf5wus17B1Mw8MryUrm6x0kinb 6/wn6QW1DVwzEm9lFUIsep5oWOYmBIRU/OiZfqZqx2ZJmKfXn2i/hbbi1C/2ofeu +0dk9Qw3Ib2asg5low4p8Kk73I1jOX5im0zz/smSnqP14JcjReA00OWADul8J8nm Gc+uC5QIfVJA+OXzXTBd7Q4giK4Q88UzhSNlr9iY+z7MADAKg3UVS1y+zwL9AgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUMVOk9S2OEwF56wEVw/MuyjlK71gwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMzMjIzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQAmO30AwQAyTISMA0GCSqGSIb3DQEBCwUAA4IBAQBbsrljL2QoGqfNrlKS 86+H+owEePcpLalYY4k+Q9MQl19jGjUdOp1ve1/L5t6Vlm40NFgPWxwDYGRPoBNE X1NNhzVczl3WvK4tlYxSbclrrk8k8q2emmEYbVVyFMUD+6FskGhXtNJ27TsHVD25 05KBW5z9XP43xJd8cYhiBTMNqUAHQXWBG1rwwec3uCKzmkJDmdUY7PbU3YEkALtw vnA3tV3wKSRBvN2Ma+GY4ygXI3Gwo9LWbljfzLfw+G7WzXedEBjCgdVTNlq+RoMi vIPHo7NCUB55tx6OuxsBFdh79U3VoNfdR1GjJwuz5rTmhjKgiPlGG2hBgLcsS8QK fmPc -----END CERTIFICATE-----Generated at Sun Sep 20 14:43:51 2026 by rpki-client