$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS400618.roa File: AS400618.roa (raw, json) Hash identifier: WLTSnML/GibDqiHtShphb1cdpvEqN9tiSS5csCsX7xQ= Subject key identifier: 3E:81:1E:24:81:DB:37:95:AD:17:31:60:F5:91:FE:44:89:BF:C2:76 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 1404CCA285F6B6A5A83FBB1AE0DFC54C69BF8D36 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS400618.roa Signing time: Mon 26 Oct 2026 07:06:12 +0000 ROA not before: Mon 26 Oct 2026 07:01:12 +0000 ROA not after: Mon 25 Oct 2027 07:06:12 +0000 asID: 400618 IP address blocks: 186.241.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 11:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:04:cc:a2:85:f6:b6:a5:a8:3f:bb:1a:e0:df:c5:4c:69:bf:8d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 26 07:01:12 2026 GMT Not After : Oct 25 07:06:12 2027 GMT Subject: CN=3E811E2481DB3795AD173160F591FE4489BFC276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:34:93:30:09:90:a4:ef:7f:63:d1:39:96:d1: 4c:eb:79:c6:47:38:77:5a:56:f2:bb:2a:9a:af:9c: e4:c8:40:00:86:cc:b4:88:28:48:c4:e6:71:eb:55: 85:b8:80:9e:9e:65:df:2e:36:7c:49:a1:1d:c8:df: d9:28:74:5c:35:bb:ae:ec:38:48:66:00:4e:c2:39: f8:f2:d9:f1:ff:a3:94:0a:ee:5a:56:9b:f6:3b:5d: ae:ab:cd:01:b9:d8:22:d7:68:0b:56:03:c0:b2:f3: 07:35:45:05:90:74:96:f3:af:7d:1a:e5:ea:35:8a: 87:ad:19:38:7c:2a:ca:7e:5b:2f:24:0a:6c:72:62: dc:be:5e:0e:b4:0d:7a:7d:b4:e0:a7:ff:16:37:b8: 55:0f:ce:29:8c:6b:d5:fd:94:95:31:f8:18:33:d3: 2c:c6:b2:ac:e3:98:15:8f:50:1f:43:a6:fb:7a:94: 9b:5d:79:e6:93:6a:a7:2b:e4:78:a3:3f:f8:23:4d: 65:ce:25:cb:4c:7a:6d:fa:bc:79:e5:10:d9:09:87: 54:e7:24:6f:fd:aa:f8:42:27:48:d2:9c:ee:73:c9: bb:f8:60:33:74:c0:3f:99:ae:64:51:51:73:2f:79: 3f:4a:84:e9:9e:d2:3a:b7:82:34:4a:33:93:b6:37: ac:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:81:1E:24:81:DB:37:95:AD:17:31:60:F5:91:FE:44:89:BF:C2:76 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS400618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.241.182.0/23 Signature Algorithm: sha256WithRSAEncryption 84:7e:a2:b5:54:8a:fa:61:56:74:b2:71:6a:9e:08:60:55:5b: f4:13:25:55:ae:09:cb:34:c5:3c:89:02:97:5c:9e:3f:19:6b: f5:03:4b:5f:7b:a8:6f:e7:b9:31:50:00:7a:72:41:44:20:32: f5:9f:dd:29:e7:93:e1:d1:11:c9:89:c0:c7:10:01:ae:c3:71: 88:bd:19:17:cd:02:ed:2b:a3:f5:1d:ab:8f:f8:79:8e:06:49: 44:2d:01:c1:bd:89:5f:74:90:81:de:4c:25:98:43:22:fd:a0: b0:fb:f2:c6:94:e3:d3:eb:fc:10:a2:2a:7c:1e:8f:81:e9:63: c9:c5:23:27:d6:37:d8:e5:b2:f2:06:37:5d:3d:47:37:dc:1a: b4:6d:d3:91:1e:a1:69:bd:d2:d6:ef:46:62:f9:df:d2:42:48: f5:eb:a5:70:0f:23:54:e7:67:82:78:7d:5e:6e:56:40:70:96: 68:11:98:57:8d:4e:89:e3:15:90:c0:1a:2f:8c:08:39:2d:95: 68:a0:44:bd:b3:d1:c7:35:d6:11:98:55:f7:6c:6e:81:d2:4d: 6f:6c:56:b1:92:f0:05:10:aa:e9:ad:c2:a1:51:c7:ff:3f:ce: ba:8f:4d:8a:da:e8:14:4f:3b:9b:fd:12:8c:d4:d9:dc:68:34: 45:68:f0:9e -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUFATMooX2tqWoP7sa4N/FTGm/jTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMjYwNzAxMTJaFw0yNzEwMjUwNzA2MTJaMDMxMTAvBgNV BAMTKDNFODExRTI0ODFEQjM3OTVBRDE3MzE2MEY1OTFGRTQ0ODlCRkMyNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDNJMwCZCk739j0TmW0UzrecZH OHdaVvK7KpqvnOTIQACGzLSIKEjE5nHrVYW4gJ6eZd8uNnxJoR3I39kodFw1u67s OEhmAE7COfjy2fH/o5QK7lpWm/Y7Xa6rzQG52CLXaAtWA8Cy8wc1RQWQdJbzr30a 5eo1ioetGTh8Ksp+Wy8kCmxyYty+Xg60DXp9tOCn/xY3uFUPzimMa9X9lJUx+Bgz 0yzGsqzjmBWPUB9Dpvt6lJtdeeaTaqcr5HijP/gjTWXOJctMem36vHnlENkJh1Tn JG/9qvhCJ0jSnO5zybv4YDN0wD+ZrmRRUXMveT9KhOme0jq3gjRKM5O2N6y/AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUPoEeJIHbN5WtFzFg9ZH+RIm/wnYwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVM0MDA2MTgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAG68bYwDQYJKoZIhvcNAQELBQADggEBAIR+orVUivphVnSycWqeCGBV W/QTJVWuCcs0xTyJApdcnj8Za/UDS197qG/nuTFQAHpyQUQgMvWf3Snnk+HREcmJ wMcQAa7DcYi9GRfNAu0ro/Udq4/4eY4GSUQtAcG9iV90kIHeTCWYQyL9oLD78saU 49Pr/BCiKnwej4HpY8nFIyfWN9jlsvIGN109RzfcGrRt05EeoWm90tbvRmL539JC SPXrpXAPI1TnZ4J4fV5uVkBwlmgRmFeNTonjFZDAGi+MCDktlWigRL2z0cc11hGY VfdsboHSTW9sVrGS8AUQqumtwqFRx/8/zrqPTYra6BRPO5v9EozU2dxoNEVo8J4= -----END CERTIFICATE-----Generated at Sun Nov 15 23:13:57 2026 by rpki-client