$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS38186.roa File: AS38186.roa (raw, json) Hash identifier: dsuwn/3M2LUnV+IKnH32JptJyKflMmZT+0mNMEafWOA= Subject key identifier: 26:D9:A6:D4:17:5B:D2:33:F2:7E:DC:2F:9E:0E:E9:29:8F:8B:E5:1F Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 7A0572B601BEBF05C484C0D5C2E69DAF3CE5FC2C Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS38186.roa Signing time: Mon 14 Sep 2026 12:03:15 +0000 ROA not before: Mon 14 Sep 2026 11:58:15 +0000 ROA not after: Mon 13 Sep 2027 12:03:15 +0000 asID: 38186 IP address blocks: 152.237.242.0/24 maxlen: 24 186.241.160.0/24 maxlen: 24 186.241.168.0/24 maxlen: 24 186.241.171.0/24 maxlen: 24 201.4.26.0/24 maxlen: 24 201.4.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 04:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:05:72:b6:01:be:bf:05:c4:84:c0:d5:c2:e6:9d:af:3c:e5:fc:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 14 11:58:15 2026 GMT Not After : Sep 13 12:03:15 2027 GMT Subject: CN=26D9A6D4175BD233F27EDC2F9E0EE9298F8BE51F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:33:48:87:cf:9d:99:92:cc:ab:9e:8f:8e: 5e:4d:bb:89:a6:7a:23:24:9e:29:9c:15:77:13:3b: 0e:0b:43:41:8e:76:6b:6f:5f:d9:64:73:9e:a2:40: 07:df:e7:d4:d9:76:00:bd:29:48:08:d4:61:2e:26: 64:2e:c9:8b:76:ff:67:0b:eb:e1:47:28:b3:c1:60: 97:a5:a3:e5:63:83:09:8a:78:f9:b3:a6:92:70:b6: 23:09:89:ce:b6:88:4b:71:d1:0b:a0:a8:69:de:6b: 8c:cd:d9:6a:62:c3:81:40:6f:74:93:b1:e4:e8:96: c6:1d:ce:26:3b:1d:1e:85:fc:70:ea:7b:e2:bc:56: ee:38:d9:9e:99:bd:1e:96:85:77:12:32:1f:2a:f0: a0:aa:1f:78:42:d1:83:f4:00:55:1f:80:ef:ff:46: 63:cb:f5:8d:d9:83:13:f4:ab:be:d1:d1:5d:57:2e: 4d:64:cf:fe:80:52:e9:26:c8:53:f6:ce:1d:47:a3: d0:54:78:21:13:fc:44:21:a8:73:3e:dd:24:b7:1b: 1d:51:9c:38:8b:ab:e8:f3:0e:3d:53:55:72:8f:50: 7c:d2:96:88:37:1b:19:ee:14:7a:05:73:3a:c0:4d: 03:56:c7:33:87:3b:d1:08:f4:15:d4:8c:18:df:b3: 80:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D9:A6:D4:17:5B:D2:33:F2:7E:DC:2F:9E:0E:E9:29:8F:8B:E5:1F X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS38186.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.242.0/24 186.241.160.0/24 186.241.168.0/24 186.241.171.0/24 201.4.26.0/24 201.4.28.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:fe:30:36:f8:46:ac:89:13:3d:ba:65:7a:a8:05:f6:c5:96: 27:7e:d0:5d:e5:9e:d4:c6:a9:6d:73:68:02:ec:39:c1:1d:27: 06:b2:50:7e:b6:93:d9:52:a3:12:91:aa:3a:b9:55:42:88:99: 25:91:0d:a8:30:8c:95:a9:97:fe:e6:4b:fc:6a:c0:72:01:db: f1:bb:a2:04:2b:b8:bd:25:00:1d:fd:e4:77:46:85:b0:b9:b0: b7:41:38:a6:e9:3a:7e:d9:a5:f1:d5:ac:87:37:62:b4:75:c5: 14:fc:43:ad:0a:95:ab:c2:36:4c:01:79:2a:cb:4a:71:ce:48: 18:66:c9:17:c3:ad:70:bb:56:e0:02:49:db:12:9e:a0:db:58: 8e:28:86:8e:f7:55:35:2c:84:3f:59:76:51:20:37:b9:cd:72: e6:75:68:25:86:6c:9b:80:49:00:7e:7a:86:45:33:da:e2:cf: 64:6f:66:47:d9:72:6c:5a:0b:e2:56:53:3e:3c:6d:c6:05:c5: 3f:b7:06:a5:60:62:58:83:aa:b1:1e:27:3c:b4:88:51:a0:9a: c1:49:09:85:08:9c:3e:1f:31:43:c6:20:a0:69:72:75:6f:c0: c5:8f:38:0d:37:8d:e4:62:a1:d8:46:2b:64:b1:c5:0b:13:41: 48:9d:98:67 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUegVytgG+vwXEhMDVwuadrzzl/CwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTQxMTU4MTVaFw0yNzA5MTMxMjAzMTVaMDMxMTAvBgNV BAMTKDI2RDlBNkQ0MTc1QkQyMzNGMjdFREMyRjlFMEVFOTI5OEY4QkU1MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5zNIh8+dmZLMq56Pjl5Nu4mm eiMknimcFXcTOw4LQ0GOdmtvX9lkc56iQAff59TZdgC9KUgI1GEuJmQuyYt2/2cL 6+FHKLPBYJelo+VjgwmKePmzppJwtiMJic62iEtx0QugqGnea4zN2Wpiw4FAb3ST seTolsYdziY7HR6F/HDqe+K8Vu442Z6ZvR6WhXcSMh8q8KCqH3hC0YP0AFUfgO// RmPL9Y3ZgxP0q77R0V1XLk1kz/6AUukmyFP2zh1Ho9BUeCET/EQhqHM+3SS3Gx1R nDiLq+jzDj1TVXKPUHzSlog3GxnuFHoFczrATQNWxzOHO9EI9BXUjBjfs4DXAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUJtmm1Bdb0jPyftwvng7pKY+L5R8wHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMzODE4Ni5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQC AAEwJAMEAJjt8gMEALrxoAMEALrxqAMEALrxqwMEAMkEGgMEAMkEHDANBgkqhkiG 9w0BAQsFAAOCAQEAT/4wNvhGrIkTPbpleqgF9sWWJ37QXeWe1MapbXNoAuw5wR0n BrJQfraT2VKjEpGqOrlVQoiZJZENqDCMlamX/uZL/GrAcgHb8buiBCu4vSUAHf3k d0aFsLmwt0E4puk6ftml8dWshzditHXFFPxDrQqVq8I2TAF5KstKcc5IGGbJF8Ot cLtW4AJJ2xKeoNtYjiiGjvdVNSyEP1l2USA3uc1y5nVoJYZsm4BJAH56hkUz2uLP ZG9mR9lybFoL4lZTPjxtxgXFP7cGpWBiWIOqsR4nPLSIUaCawUkJhQicPh8xQ8Yg oGlydW/AxY84DTeN5GKh2EYrZLHFCxNBSJ2YZw== -----END CERTIFICATE-----Generated at Tue Sep 22 18:34:26 2026 by rpki-client