$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS6475.roa File: AS6475.roa (raw, json) Hash identifier: d6ROn/nCD56lej6Y1IiGDIfiFPYv5is5YCxb2AaX6pE= Subject key identifier: 31:47:75:E0:AB:2E:EA:74:81:2B:39:AD:CA:10:EE:26:FA:F5:11:F1 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 2820EE740723F9DFD2C39B383B629357ADCBA8CE Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS6475.roa Signing time: Fri 11 Sep 2026 08:13:10 +0000 ROA not before: Fri 11 Sep 2026 08:08:10 +0000 ROA not after: Fri 10 Sep 2027 08:13:10 +0000 asID: 6475 IP address blocks: 152.237.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 16:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:20:ee:74:07:23:f9:df:d2:c3:9b:38:3b:62:93:57:ad:cb:a8:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 11 08:08:10 2026 GMT Not After : Sep 10 08:13:10 2027 GMT Subject: CN=314775E0AB2EEA74812B39ADCA10EE26FAF511F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:02:2f:71:2f:08:68:96:d9:7e:2e:11:2b:47: 04:74:9c:31:f6:2a:3c:7b:7a:e6:66:fa:42:e0:e8: b8:41:19:dd:9c:f6:52:6b:c5:4f:df:9b:cf:cb:03: 56:5c:2a:ab:10:da:59:e7:c4:a5:de:97:84:42:0e: bd:ce:01:87:8c:21:0a:60:9c:b6:77:cd:82:15:fc: b6:8b:b7:a8:13:ab:89:a4:98:6b:35:ce:90:71:73: 62:5a:8d:dd:41:4c:fc:86:95:4c:9d:8d:b5:9a:b1: 17:b0:92:cb:3a:f1:3d:e5:20:45:6d:11:a5:7f:e4: cd:75:20:a4:db:42:bb:f0:d5:ec:f7:26:7e:7c:18: cc:5b:1e:14:e6:dc:f9:60:fa:69:6a:b4:b8:7e:d8: 0f:c6:a9:33:8c:a7:3f:89:47:21:6e:92:d6:82:d6: 29:23:48:a8:90:8a:ea:eb:ca:c2:d4:1c:a3:f6:89: e9:fe:79:b7:4a:e0:ed:ed:8c:8c:de:ee:35:f6:07: fb:3a:ad:a1:0a:19:2f:76:1b:63:41:3f:af:a1:f6: 86:4f:05:16:c5:1b:f1:58:fd:e8:c7:5c:9d:b5:3e: 27:93:bb:09:38:e4:a3:a9:85:e7:74:5a:4c:ed:d3: 1b:5a:9d:5f:03:8a:92:3f:a8:a7:ae:fe:f1:c7:81: 84:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:47:75:E0:AB:2E:EA:74:81:2B:39:AD:CA:10:EE:26:FA:F5:11:F1 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS6475.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.229.0/24 Signature Algorithm: sha256WithRSAEncryption 77:eb:fa:ea:62:84:b3:71:72:bf:16:f6:cc:16:9f:a9:d0:01: da:ce:33:88:7c:2b:47:fd:45:5a:9b:10:c7:3d:40:31:65:cc: c4:4f:26:c5:52:94:13:f4:09:04:45:d7:34:9a:33:21:be:28: d0:6f:26:eb:14:63:21:e4:9b:5b:ac:3a:33:8a:c8:d2:5e:1d: 08:74:eb:c9:5c:fb:01:89:55:06:d4:d3:03:a6:d3:89:a5:f3: 83:fa:31:34:e3:7d:59:6c:36:2b:f7:7d:57:60:14:44:13:64: 55:30:2a:9e:fa:96:95:09:c4:3e:50:56:a1:36:32:01:ac:4d: ca:cc:de:64:1c:6c:9a:af:14:42:87:d1:c0:42:6f:7d:99:f2: eb:e4:95:fe:03:f4:61:82:3a:01:c1:16:ae:e1:3e:27:c2:df: 0b:c7:cb:a2:78:f3:78:dc:3a:b2:8d:54:3c:6e:78:7a:aa:3d: 93:c5:c2:52:80:3e:b7:3d:05:5b:ee:2b:4e:f9:1d:d3:2d:3c: 52:05:72:67:e8:eb:b4:f1:c5:1b:56:25:8e:de:58:67:05:72: ca:e7:78:2a:8e:42:bb:db:24:fc:c4:58:b3:74:a6:88:8c:d8: 11:9e:df:65:bb:cb:89:4d:2f:2d:8d:1a:0e:5d:1e:9b:89:d2: 49:a6:eb:15 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgIUKCDudAcj+d/Sw5s4O2KTV63LqM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTEwODA4MTBaFw0yNzA5MTAwODEzMTBaMDMxMTAvBgNV BAMTKDMxNDc3NUUwQUIyRUVBNzQ4MTJCMzlBRENBMTBFRTI2RkFGNTExRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGAi9xLwholtl+LhErRwR0nDH2 Kjx7euZm+kLg6LhBGd2c9lJrxU/fm8/LA1ZcKqsQ2lnnxKXel4RCDr3OAYeMIQpg nLZ3zYIV/LaLt6gTq4mkmGs1zpBxc2Jajd1BTPyGlUydjbWasRewkss68T3lIEVt EaV/5M11IKTbQrvw1ez3Jn58GMxbHhTm3Plg+mlqtLh+2A/GqTOMpz+JRyFuktaC 1ikjSKiQiurrysLUHKP2ien+ebdK4O3tjIze7jX2B/s6raEKGS92G2NBP6+h9oZP BRbFG/FY/ejHXJ21PieTuwk45KOphed0Wkzt0xtanV8DipI/qKeu/vHHgYS9AgMB AAGjggJDMIICPzAdBgNVHQ4EFgQUMUd14Ksu6nSBKzmtyhDuJvr1EfEwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVM2NDc1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAmO3lMA0GCSqGSIb3DQEBCwUAA4IBAQB36/rqYoSzcXK/FvbMFp+p0AHa zjOIfCtH/UVamxDHPUAxZczETybFUpQT9AkERdc0mjMhvijQbybrFGMh5JtbrDoz isjSXh0IdOvJXPsBiVUG1NMDptOJpfOD+jE0431ZbDYr931XYBREE2RVMCqe+paV CcQ+UFahNjIBrE3KzN5kHGyarxRCh9HAQm99mfLr5JX+A/RhgjoBwRau4T4nwt8L x8uiePN43DqyjVQ8bnh6qj2TxcJSgD63PQVb7itO+R3TLTxSBXJn6Ou08cUbViWO 3lhnBXLK53gqjkK72yT8xFizdKaIjNgRnt9lu8uJTS8tjRoOXR6bidJJpusV -----END CERTIFICATE-----Generated at Mon Sep 21 08:26:47 2026 by rpki-client