$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: s+ZXfKK2Efe76f5vy430DRyw2s4Z5B6951PxWoqKUXA= Subject key identifier: DA:28:01:C6:E0:DE:41:D0:EC:13:89:D1:89:4D:D8:8C:F6:FF:77:7B Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 08EF0B2DC9B5042132CB90A8F00A0A61F6EBC164 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS40676.roa Signing time: Fri 06 Nov 2026 13:23:11 +0000 ROA not before: Fri 06 Nov 2026 13:18:11 +0000 ROA not after: Fri 05 Nov 2027 13:23:11 +0000 asID: 40676 IP address blocks: 152.237.255.0/24 maxlen: 24 177.177.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Nov 2026 23:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ef:0b:2d:c9:b5:04:21:32:cb:90:a8:f0:0a:0a:61:f6:eb:c1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Nov 6 13:18:11 2026 GMT Not After : Nov 5 13:23:11 2027 GMT Subject: CN=DA2801C6E0DE41D0EC1389D1894DD88CF6FF777B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:38:78:e8:80:89:a3:02:9f:07:a8:0d:85: d3:ba:bf:4a:cf:e1:47:b5:a9:1c:69:9d:b7:1e:be: b4:ed:eb:39:64:12:8a:8e:2c:e1:09:12:a6:1d:47: 68:4a:1d:23:98:75:fc:09:87:30:a2:06:78:c2:d9: 93:a7:c7:ca:01:a2:3b:ed:23:a0:3b:f3:33:6e:48: d5:38:a9:f2:8c:d0:b2:7b:c0:bc:8a:2b:5d:5f:26: f3:9f:04:d1:35:ef:48:95:80:b1:de:9a:ae:61:4f: e1:c5:41:69:b1:df:86:c9:ab:c0:ef:27:26:f8:56: 74:db:c9:c0:5f:48:67:b3:25:3b:55:4e:b2:71:51: cc:46:1e:86:76:60:1d:ff:87:81:44:2a:b0:7b:b6: f5:a5:5d:3a:11:dd:aa:36:4d:d3:53:53:1b:27:9f: 6e:86:32:c2:f5:e8:f8:23:7e:d1:bc:57:07:08:ea: 2a:f1:c3:ac:d2:2d:6d:c3:6b:2c:11:98:50:71:52: 5d:48:e2:6c:1e:22:f9:71:56:9b:c1:b6:3e:92:b8: 3c:7b:13:11:39:2b:d9:ec:2f:7b:e0:94:59:3c:04: 72:cd:87:2d:f8:f2:ec:b5:74:7f:25:2f:6b:1c:8f: 77:f9:29:48:bb:a4:28:bc:f9:0a:70:0f:c9:18:db: 63:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:28:01:C6:E0:DE:41:D0:EC:13:89:D1:89:4D:D8:8C:F6:FF:77:7B X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.255.0/24 177.177.241.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:2f:bb:1c:b2:1c:71:bc:d1:32:02:aa:f8:57:e7:44:ea:4d: 2d:55:9c:7f:c3:01:4d:ca:a5:42:53:36:00:da:eb:c1:55:87: 3c:71:4b:4d:14:12:78:18:3a:82:93:6a:d6:c5:e8:43:4c:07: 89:0a:09:ae:b6:90:a1:4e:7d:c8:01:41:45:70:4b:5d:03:73: e6:88:2b:be:72:7c:0a:15:72:cb:bd:48:8a:2f:68:e9:d6:21: 9b:74:0b:91:fc:27:fc:a6:c4:08:e2:39:45:9a:d3:87:19:fa: b8:30:67:d3:d1:71:0f:34:39:9f:b5:33:5c:d8:99:98:1b:2b: f2:fc:c5:cf:34:82:11:3b:77:cd:b5:63:5a:0b:37:d9:7e:8a: dd:9f:44:a8:73:f3:87:5f:0c:10:4c:93:e3:54:00:81:2b:a3: 98:68:73:3d:0a:4f:27:2e:65:02:d2:e4:64:4a:67:e6:9a:6a: ec:b7:61:7b:aa:82:e7:c0:da:81:4a:94:32:a0:4f:59:c7:b4: 6f:52:10:31:e0:aa:4f:97:b8:54:c9:80:45:dc:80:bb:15:e0: c9:75:2a:b1:c9:60:ab:d8:37:e1:c1:ac:c9:70:64:7d:a5:3c: cf:63:64:cb:b2:4d:62:51:f6:d5:d0:9b:2e:8b:75:89:8f:2f: d1:e4:4f:00 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUCO8LLcm1BCEyy5Co8AoKYfbrwWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjExMDYxMzE4MTFaFw0yNzExMDUxMzIzMTFaMDMxMTAvBgNV BAMTKERBMjgwMUM2RTBERTQxRDBFQzEzODlEMTg5NEREODhDRjZGRjc3N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3KTh46ICJowKfB6gNhdO6v0rP 4Ue1qRxpnbcevrTt6zlkEoqOLOEJEqYdR2hKHSOYdfwJhzCiBnjC2ZOnx8oBojvt I6A78zNuSNU4qfKM0LJ7wLyKK11fJvOfBNE170iVgLHemq5hT+HFQWmx34bJq8Dv Jyb4VnTbycBfSGezJTtVTrJxUcxGHoZ2YB3/h4FEKrB7tvWlXToR3ao2TdNTUxsn n26GMsL16PgjftG8VwcI6irxw6zSLW3DaywRmFBxUl1I4mweIvlxVpvBtj6SuDx7 ExE5K9nsL3vglFk8BHLNhy348uy1dH8lL2scj3f5KUi7pCi8+QpwD8kY22M/AgMB AAGjggJKMIICRjAdBgNVHQ4EFgQU2igBxuDeQdDsE4nRiU3YjPb/d3swHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVM0MDY3Ni5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQC AAEwDAMEAJjt/wMEALGx8TANBgkqhkiG9w0BAQsFAAOCAQEALS+7HLIccbzRMgKq +FfnROpNLVWcf8MBTcqlQlM2ANrrwVWHPHFLTRQSeBg6gpNq1sXoQ0wHiQoJrraQ oU59yAFBRXBLXQNz5ogrvnJ8ChVyy71Iii9o6dYhm3QLkfwn/KbECOI5RZrThxn6 uDBn09FxDzQ5n7UzXNiZmBsr8vzFzzSCETt3zbVjWgs32X6K3Z9EqHPzh18MEEyT 41QAgSujmGhzPQpPJy5lAtLkZEpn5ppq7Ldhe6qC58DagUqUMqBPWce0b1IQMeCq T5e4VMmARdyAuxXgyXUqsclgq9g34cGsyXBkfaU8z2Nky7JNYlH21dCbLot1iY8v 0eRPAA== -----END CERTIFICATE-----Generated at Sun Nov 8 05:37:56 2026 by rpki-client