$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS402215.roa File: AS402215.roa (raw, json) Hash identifier: U4zqGiRh2HKz7V2BVswG4BxWJSD8QZQJN6sTG6xQBqE= Subject key identifier: 30:E6:5A:C3:B8:A0:B4:CD:79:74:7A:C5:BC:62:9A:99:BD:73:9E:B2 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 5A0CF0B73DBD9051DE7DC3B7F3AD742D39F2BAF8 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS402215.roa Signing time: Fri 11 Sep 2026 08:13:10 +0000 ROA not before: Fri 11 Sep 2026 08:08:10 +0000 ROA not after: Fri 10 Sep 2027 08:13:10 +0000 asID: 402215 IP address blocks: 186.241.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 04:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:0c:f0:b7:3d:bd:90:51:de:7d:c3:b7:f3:ad:74:2d:39:f2:ba:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 11 08:08:10 2026 GMT Not After : Sep 10 08:13:10 2027 GMT Subject: CN=30E65AC3B8A0B4CD79747AC5BC629A99BD739EB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:53:e4:0e:81:92:fb:ca:07:a8:05:72:0a:d2: eb:15:41:aa:88:1d:33:54:77:ee:ed:76:21:20:50: 9a:be:3b:61:1f:1e:65:2c:21:32:c1:8a:0a:3d:1a: 63:0a:b8:c3:00:92:04:4e:98:84:06:8d:7d:4c:f5: 68:f1:43:e4:d7:c6:46:2f:0e:32:c3:de:50:f6:1d: c6:45:fc:e7:06:23:9a:c4:40:c1:ff:37:dd:17:fb: 25:ea:81:8c:7a:1f:c1:25:24:ce:88:9c:d9:57:f8: 03:3a:37:a3:25:94:a8:95:92:da:77:ee:f7:6a:30: bc:36:80:fe:c0:89:33:df:05:8c:0d:16:09:06:e2: 28:1b:af:c7:58:98:7f:df:fa:38:72:2f:55:75:c5: 6c:9d:04:f5:40:4d:b3:f1:d6:fc:d6:00:8b:b6:a5: 54:74:92:87:cf:56:b3:67:bf:fc:5f:6b:24:08:f4: 6e:3d:72:45:43:5e:43:34:b4:3d:e1:0b:49:3b:a0: b5:c9:75:9e:5a:c4:e6:31:dc:1f:c7:d0:10:c4:f6: 86:3a:6f:57:d0:70:98:f4:37:ba:2b:1d:45:c3:79: 88:96:88:0b:4a:df:2b:4c:05:63:5a:6d:33:3c:e8: 96:a8:cc:7b:9a:cd:ef:02:4b:a1:77:bf:11:89:4d: c4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E6:5A:C3:B8:A0:B4:CD:79:74:7A:C5:BC:62:9A:99:BD:73:9E:B2 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS402215.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.241.178.0/24 Signature Algorithm: sha256WithRSAEncryption 43:b4:95:b3:24:22:a1:9c:b0:a6:54:bd:4b:5a:fe:8a:65:0c: ea:99:d8:bc:f1:fe:34:a5:0c:93:9d:86:6e:0a:2e:76:3e:80: 3d:a8:f9:5a:2b:ce:26:bf:25:8f:fb:3f:26:72:bb:c4:27:e4: 9d:c4:42:04:bd:95:4a:16:6e:12:e8:6a:04:db:e1:de:44:95: e4:c7:64:b7:78:11:0e:58:49:31:b3:cd:05:3c:8e:08:ca:9e: a0:bc:c0:08:4f:02:45:a7:06:e7:fa:36:95:a8:3f:a7:0f:aa: 69:da:0f:3c:f1:9c:b5:ba:fe:90:5f:36:12:9b:36:1f:0f:64: c3:f7:f0:b4:24:ca:e0:ed:28:e9:4f:ff:f8:c2:c4:c1:2f:92: 79:16:73:54:83:1a:0a:b1:db:fc:ad:e9:20:ea:3e:c0:b3:f7: 72:9a:cb:92:d5:d5:27:86:b4:77:10:8e:dd:f8:bf:1e:a6:6a: 90:15:d0:6a:90:7d:64:b9:7f:87:66:be:cd:48:92:81:35:05: 68:7a:a4:08:b3:26:ea:98:68:43:8a:f1:c2:38:ea:3f:7c:f2: 97:46:b9:89:0f:4e:1d:26:3f:c0:0b:2f:ed:47:a2:02:9a:81: 5e:f4:27:cd:f2:9b:1d:47:25:10:01:d2:d9:47:97:a8:55:f6: 64:a0:c3:44 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUWgzwtz29kFHefcO38610LTnyuvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTEwODA4MTBaFw0yNzA5MTAwODEzMTBaMDMxMTAvBgNV BAMTKDMwRTY1QUMzQjhBMEI0Q0Q3OTc0N0FDNUJDNjI5QTk5QkQ3MzlFQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNU+QOgZL7ygeoBXIK0usVQaqI HTNUd+7tdiEgUJq+O2EfHmUsITLBigo9GmMKuMMAkgROmIQGjX1M9WjxQ+TXxkYv DjLD3lD2HcZF/OcGI5rEQMH/N90X+yXqgYx6H8ElJM6InNlX+AM6N6MllKiVktp3 7vdqMLw2gP7AiTPfBYwNFgkG4igbr8dYmH/f+jhyL1V1xWydBPVATbPx1vzWAIu2 pVR0kofPVrNnv/xfayQI9G49ckVDXkM0tD3hC0k7oLXJdZ5axOYx3B/H0BDE9oY6 b1fQcJj0N7orHUXDeYiWiAtK3ytMBWNabTM86JaozHuaze8CS6F3vxGJTcT/AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUMOZaw7igtM15dHrFvGKamb1znrIwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVM0MDIyMTUucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAC68bIwDQYJKoZIhvcNAQELBQADggEBAEO0lbMkIqGcsKZUvUta/opl DOqZ2Lzx/jSlDJOdhm4KLnY+gD2o+Vorzia/JY/7PyZyu8Qn5J3EQgS9lUoWbhLo agTb4d5EleTHZLd4EQ5YSTGzzQU8jgjKnqC8wAhPAkWnBuf6NpWoP6cPqmnaDzzx nLW6/pBfNhKbNh8PZMP38LQkyuDtKOlP//jCxMEvknkWc1SDGgqx2/yt6SDqPsCz 93Kay5LV1SeGtHcQjt34vx6mapAV0GqQfWS5f4dmvs1IkoE1BWh6pAizJuqYaEOK 8cI46j988pdGuYkPTh0mP8ALL+1HogKagV70J83ymx1HJRAB0tlHl6hV9mSgw0Q= -----END CERTIFICATE-----Generated at Tue Sep 22 18:34:31 2026 by rpki-client