$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: nBaGqH7C3J6hVVl/hLrUaoZEzWKu3gb3dTaTOsqnhZ4= Subject key identifier: 64:3E:2C:59:A7:6F:0C:07:AF:63:FF:52:9B:45:38:A9:08:73:53:F8 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 06B898022207C7CFB9D36ED26148FE43D92E0EE8 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS40676.roa Signing time: Sat 12 Sep 2026 10:34:26 +0000 ROA not before: Sat 12 Sep 2026 10:29:26 +0000 ROA not after: Sat 11 Sep 2027 10:34:26 +0000 asID: 40676 IP address blocks: 177.177.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 00:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:b8:98:02:22:07:c7:cf:b9:d3:6e:d2:61:48:fe:43:d9:2e:0e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 12 10:29:26 2026 GMT Not After : Sep 11 10:34:26 2027 GMT Subject: CN=643E2C59A76F0C07AF63FF529B4538A9087353F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:15:12:bf:86:ab:56:1a:9b:eb:83:b6:a8: e8:f9:78:78:1a:5a:5a:6b:51:e3:59:86:cb:7a:d4: 79:39:05:eb:4a:6e:48:2e:d7:2d:a3:27:61:56:63: 3f:49:13:d4:c3:6b:bb:7b:d3:5d:6e:fa:5d:43:8f: 2b:91:98:55:61:05:3d:35:a9:6d:20:17:01:df:d6: c6:44:c9:fe:ab:3e:95:6e:a2:49:20:71:b6:c8:2e: f4:64:60:5f:5c:20:f1:2f:53:b4:5b:54:99:40:be: 5b:b5:37:0a:da:4b:95:df:6e:f3:73:d6:d7:6a:35: bb:96:17:7c:0e:3c:13:23:bb:59:fe:a9:fb:cd:61: 2e:b3:44:70:7f:75:dc:b2:f2:56:b3:47:2e:ff:be: 4d:8c:79:94:cb:51:ea:28:c5:b9:b8:c6:a2:46:dc: 0d:da:d7:6a:39:0b:8a:64:36:11:7f:32:51:8a:83: 67:83:90:8e:86:e9:dd:6d:09:7b:5c:5f:3a:b2:bb: 43:d4:f9:98:da:5c:d0:93:f7:a2:5a:b8:4d:84:2f: 93:ce:e8:0c:d1:5e:53:3c:60:07:34:39:33:01:c7: b1:80:27:ad:5e:80:11:38:f1:0e:84:2d:3e:0d:3a: 11:c5:82:14:5c:88:4c:d3:ab:c4:c9:9a:28:b2:41: bd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3E:2C:59:A7:6F:0C:07:AF:63:FF:52:9B:45:38:A9:08:73:53:F8 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.177.241.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:ff:6c:fb:43:74:5c:1f:1c:62:42:a6:13:f0:e6:f1:12:55: c0:c4:70:83:6d:4a:97:0b:c3:38:eb:bb:59:f2:83:2c:f1:9b: a6:6c:24:d1:6b:f6:fe:07:ec:10:b1:45:e8:1c:b2:51:f4:65: f2:38:9d:d0:7b:fb:0b:28:43:38:43:eb:3a:c1:2f:71:b9:34: a1:32:e5:d1:1c:64:b0:b0:9a:1d:c9:4c:31:f3:8b:02:6b:8d: fe:0b:96:1d:ba:ab:59:f7:e3:28:0f:d4:ba:64:52:5e:08:f2: 6e:0c:0d:df:c1:90:dd:e5:3a:77:40:16:7c:02:f2:34:c5:8c: 67:dd:23:d3:5a:6e:a0:f1:20:e0:29:5a:4a:a4:16:7c:da:a6: b2:48:72:0e:f0:56:27:c9:9e:ad:f5:cc:76:ea:8a:36:b9:95: f5:a1:fa:b5:df:3a:00:ac:c0:72:68:f2:96:43:73:f3:a7:3d: 34:04:2b:56:b0:f2:76:58:41:76:5b:78:4b:a1:5e:61:30:77: ad:26:02:d2:c0:47:10:75:2c:64:4e:5d:4f:f4:3d:8a:e6:5e: d1:1e:4c:7c:ae:b0:fc:f7:f2:4d:9e:b0:64:92:ce:fb:f9:a7: 82:d2:b5:7c:38:6b:b6:29:b4:43:ac:ea:bb:6f:04:ff:de:f4: b4:39:fa:af -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUBriYAiIHx8+5027SYUj+Q9kuDugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTIxMDI5MjZaFw0yNzA5MTExMDM0MjZaMDMxMTAvBgNV BAMTKDY0M0UyQzU5QTc2RjBDMDdBRjYzRkY1MjlCNDUzOEE5MDg3MzUzRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI5BUSv4arVhqb64O2qOj5eHga WlprUeNZhst61Hk5BetKbkgu1y2jJ2FWYz9JE9TDa7t7011u+l1DjyuRmFVhBT01 qW0gFwHf1sZEyf6rPpVuokkgcbbILvRkYF9cIPEvU7RbVJlAvlu1NwraS5XfbvNz 1tdqNbuWF3wOPBMju1n+qfvNYS6zRHB/ddyy8lazRy7/vk2MeZTLUeooxbm4xqJG 3A3a12o5C4pkNhF/MlGKg2eDkI6G6d1tCXtcXzqyu0PU+ZjaXNCT96JauE2EL5PO 6AzRXlM8YAc0OTMBx7GAJ61egBE48Q6ELT4NOhHFghRciEzTq8TJmiiyQb2HAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUZD4sWadvDAevY/9Sm0U4qQhzU/gwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVM0MDY3Ni5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALGx8TANBgkqhkiG9w0BAQsFAAOCAQEALf9s+0N0XB8cYkKmE/Dm8RJV wMRwg21KlwvDOOu7WfKDLPGbpmwk0Wv2/gfsELFF6ByyUfRl8jid0Hv7CyhDOEPr OsEvcbk0oTLl0RxksLCaHclMMfOLAmuN/guWHbqrWffjKA/UumRSXgjybgwN38GQ 3eU6d0AWfALyNMWMZ90j01puoPEg4ClaSqQWfNqmskhyDvBWJ8merfXMduqKNrmV 9aH6td86AKzAcmjylkNz86c9NAQrVrDydlhBdlt4S6FeYTB3rSYC0sBHEHUsZE5d T/Q9iuZe0R5MfK6w/PfyTZ6wZJLO+/mngtK1fDhrtim0Q6zqu28E/970tDn6rw== -----END CERTIFICATE-----Generated at Sun Sep 20 15:44:18 2026 by rpki-client