$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS402265.roa File: AS402265.roa (raw, json) Hash identifier: nepIyk75nH/AuxkdJagyuE6I7GsAJVUuqzG1lzehl1w= Subject key identifier: 11:34:21:C7:7A:3A:3A:CA:43:02:EF:75:8F:F0:BB:5E:4E:F2:DC:37 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 6B6C2CFA18268C781D75F4082D167ADF3899840D Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS402265.roa Signing time: Fri 11 Sep 2026 08:13:10 +0000 ROA not before: Fri 11 Sep 2026 08:08:10 +0000 ROA not after: Fri 10 Sep 2027 08:13:10 +0000 asID: 402265 IP address blocks: 201.4.30.0/24 maxlen: 24 201.50.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 09:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:6c:2c:fa:18:26:8c:78:1d:75:f4:08:2d:16:7a:df:38:99:84:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 11 08:08:10 2026 GMT Not After : Sep 10 08:13:10 2027 GMT Subject: CN=113421C77A3A3ACA4302EF758FF0BB5E4EF2DC37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f2:98:8a:b4:10:10:b8:2a:94:7a:b9:25:ca: db:46:66:6e:15:85:e0:78:fa:09:0d:55:d4:c4:e1: f7:23:22:b2:54:1c:1c:5f:f6:03:2f:b8:89:e7:17: e3:98:70:a7:91:f6:0d:00:de:05:06:5c:59:2e:29: 6f:9f:d1:39:d8:18:cb:39:54:27:37:47:44:cf:a3: b9:30:bc:36:b4:84:94:2f:f9:85:e2:91:3c:3b:bb: 2e:a9:92:7a:1a:1a:b5:c8:e0:e6:45:43:71:95:e3: c6:cb:05:3d:74:3c:ed:db:14:6d:ec:7c:85:37:87: fc:6f:d6:fa:bd:8a:9a:2a:b6:25:37:26:38:37:cb: 41:87:17:fe:73:63:88:a8:b2:17:b3:cd:b7:e9:cf: c9:a6:5c:73:81:eb:50:0a:e1:e8:8f:09:50:f1:ff: 2d:2b:79:ea:c3:ee:ee:1f:bc:4a:b1:50:3f:1e:dd: fa:07:4b:32:dc:18:2e:0e:16:ab:59:1a:c2:45:bf: 7a:11:8a:e2:b3:ec:75:8b:5b:a0:e4:51:78:bb:5a: a6:5c:3e:11:9a:ea:a4:d2:14:65:26:41:ba:0c:32: 4a:65:50:ee:a2:40:c2:3e:76:ee:42:04:69:47:18: b9:1e:f7:7d:33:ba:b9:fd:9f:a2:cb:ee:48:02:70: 26:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:34:21:C7:7A:3A:3A:CA:43:02:EF:75:8F:F0:BB:5E:4E:F2:DC:37 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS402265.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.4.30.0/24 201.50.31.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:7a:e4:94:b3:4f:40:61:53:4b:55:22:6a:61:78:7e:79:22: 4a:83:3e:41:fd:fd:2b:1d:9f:6e:0f:fb:2a:69:ae:0d:9e:4f: ad:1d:6f:5f:2b:1b:71:2a:6f:67:52:57:81:da:fc:65:4c:fa: 03:56:22:e2:55:6b:34:81:50:4e:c0:b8:dc:42:2e:41:81:6e: db:96:ea:07:9c:73:fb:33:fe:a7:3a:69:09:78:f4:3a:bc:9a: 53:97:0a:1d:c7:1d:9f:82:1f:04:ce:50:d5:bc:91:3b:cf:44: c6:c4:08:6a:58:27:52:b1:27:87:46:bf:38:73:7d:c1:b8:79: 84:7b:77:d4:90:da:d1:ac:00:00:0a:76:91:0d:12:e4:47:42: fb:2a:91:80:01:e4:1a:f8:9c:f3:34:c1:43:ec:bc:0e:ce:71: b8:28:82:04:9d:08:50:a0:69:60:38:06:00:62:a5:e3:bb:0d: 76:c7:d7:76:a6:3e:67:78:d1:43:ba:5d:a9:54:a1:23:0f:90: 70:95:7b:9b:b1:3c:19:ed:84:11:e8:a5:f2:9b:22:78:bd:61: e8:ff:15:28:d9:13:56:d6:09:6d:3c:39:0c:84:3a:c6:95:3b: 69:95:8f:41:f1:27:4b:b6:66:6a:5d:0d:82:40:af:45:ed:f6: af:40:2a:7c -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUa2ws+hgmjHgddfQILRZ63ziZhA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTEwODA4MTBaFw0yNzA5MTAwODEzMTBaMDMxMTAvBgNV BAMTKDExMzQyMUM3N0EzQTNBQ0E0MzAyRUY3NThGRjBCQjVFNEVGMkRDMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc8piKtBAQuCqUerklyttGZm4V heB4+gkNVdTE4fcjIrJUHBxf9gMvuInnF+OYcKeR9g0A3gUGXFkuKW+f0TnYGMs5 VCc3R0TPo7kwvDa0hJQv+YXikTw7uy6pknoaGrXI4OZFQ3GV48bLBT10PO3bFG3s fIU3h/xv1vq9ipoqtiU3Jjg3y0GHF/5zY4ioshezzbfpz8mmXHOB61AK4eiPCVDx /y0reerD7u4fvEqxUD8e3foHSzLcGC4OFqtZGsJFv3oRiuKz7HWLW6DkUXi7WqZc PhGa6qTSFGUmQboMMkplUO6iQMI+du5CBGlHGLke930zurn9n6LL7kgCcCZ7AgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUETQhx3o6OspDAu91j/C7Xk7y3DcwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVM0MDIyNjUucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBADJBB4DBADJMh8wDQYJKoZIhvcNAQELBQADggEBAG565JSzT0BhU0tV ImpheH55IkqDPkH9/Ssdn24P+ypprg2eT60db18rG3Eqb2dSV4Ha/GVM+gNWIuJV azSBUE7AuNxCLkGBbtuW6gecc/sz/qc6aQl49Dq8mlOXCh3HHZ+CHwTOUNW8kTvP RMbECGpYJ1KxJ4dGvzhzfcG4eYR7d9SQ2tGsAAAKdpENEuRHQvsqkYAB5Br4nPM0 wUPsvA7OcbgoggSdCFCgaWA4BgBipeO7DXbH13amPmd40UO6XalUoSMPkHCVe5ux PBnthBHopfKbIni9Yej/FSjZE1bWCW08OQyEOsaVO2mVj0HxJ0u2ZmpdDYJAr0Xt 9q9AKnw= -----END CERTIFICATE-----Generated at Sun Sep 20 23:21:40 2026 by rpki-client