$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS834.roa File: AS834.roa (raw, json) Hash identifier: cIjKI4U3uJ/1i8APzoHcDtU2gIBF6MaRUgN2HsBR+uI= Subject key identifier: A6:9B:0B:91:E4:64:A2:FB:B0:D8:57:66:DC:B9:96:21:58:09:5A:6B Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 50A7AF21A717B9F4073B1D29A0721E2B5CC63EA3 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS834.roa Signing time: Sun 20 Sep 2026 09:42:51 +0000 ROA not before: Sun 20 Sep 2026 09:37:51 +0000 ROA not after: Sun 19 Sep 2027 09:42:51 +0000 asID: 834 IP address blocks: 152.237.230.0/24 maxlen: 24 152.237.245.0/24 maxlen: 24 152.237.246.0/23 maxlen: 24 152.237.248.0/21 maxlen: 24 186.241.163.0/24 maxlen: 24 186.241.165.0/24 maxlen: 24 186.241.176.0/24 maxlen: 24 201.4.21.0/24 maxlen: 24 201.50.19.0/24 maxlen: 24 201.50.20.0/23 maxlen: 24 201.50.25.0/24 maxlen: 24 201.50.26.0/23 maxlen: 24 201.50.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 16:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a7:af:21:a7:17:b9:f4:07:3b:1d:29:a0:72:1e:2b:5c:c6:3e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 20 09:37:51 2026 GMT Not After : Sep 19 09:42:51 2027 GMT Subject: CN=A69B0B91E464A2FBB0D85766DCB9962158095A6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:27:01:27:de:85:ef:87:ec:80:ba:79:c0:21: a3:57:47:bd:74:d5:8c:ea:1e:05:e1:87:2e:64:4a: bf:8c:4e:37:02:95:61:55:0c:e6:55:96:30:60:24: 8a:a6:35:70:1f:be:8e:2d:9a:34:87:5a:07:09:4f: 1a:c3:91:92:c4:a6:d2:cd:5f:c5:80:17:84:bf:8d: 33:8d:d4:e3:65:a9:14:9e:36:a8:11:0b:f8:3f:25: 8c:45:fb:1b:cf:33:04:58:e4:0f:6e:d8:6f:1c:57: dd:60:c7:13:0f:9b:c7:00:3b:fd:ab:23:65:33:1a: 85:8f:27:cd:29:11:41:f2:de:a2:87:8b:38:ce:2a: 2f:b3:e1:19:c4:f6:17:ae:a0:69:ac:53:62:7a:e5: cc:b9:c3:2d:08:e8:90:54:a2:39:be:d5:e6:fd:fc: 27:92:50:ab:ed:a7:be:76:3f:df:de:ed:c4:fd:c5: a2:92:24:c7:6d:66:69:cf:17:26:d1:21:65:25:c0: 11:72:c3:61:7a:ec:26:11:bd:82:dd:1e:d8:41:cf: 93:56:b5:8c:92:2b:79:9d:a5:af:15:ad:f5:65:f0: c4:7e:08:d5:aa:a7:e9:01:f2:65:35:7f:a3:16:0f: c0:38:8c:9c:0d:be:c3:84:26:f0:8f:dc:94:2d:b6: 3e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9B:0B:91:E4:64:A2:FB:B0:D8:57:66:DC:B9:96:21:58:09:5A:6B X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.230.0/24 152.237.245.0-152.237.255.255 186.241.163.0/24 186.241.165.0/24 186.241.176.0/24 201.4.21.0/24 201.50.19.0-201.50.21.255 201.50.25.0-201.50.28.255 Signature Algorithm: sha256WithRSAEncryption 60:39:e8:f8:74:71:44:c8:3d:4b:98:5b:54:83:f5:6d:57:70: 3b:42:7a:41:cc:9e:c7:14:91:a9:0c:4a:9d:3c:21:77:29:74: 85:6d:c0:de:4c:1f:d7:a3:b9:64:fb:bc:ef:21:84:09:e0:21: f5:1d:e0:3a:70:a4:fa:06:de:58:24:e6:9a:1c:82:ac:ce:f8: 9c:ff:44:84:48:63:24:ef:89:3d:a8:10:d0:b8:60:f7:bf:fb: de:0b:0a:0f:26:4d:b1:27:88:bc:bf:84:d8:f6:c5:93:9c:06: 89:fe:1f:02:05:ab:6b:02:8a:6d:15:80:68:6e:6e:55:a5:0b: ee:19:89:12:1e:2b:dd:e8:0a:26:c8:b2:a1:6f:a5:b1:9b:16: 3b:01:11:00:e2:4f:53:31:07:45:a2:b5:d3:fc:b0:5f:74:f5: 77:00:d0:3a:02:19:3a:53:64:eb:33:f9:d3:e3:7e:ea:88:76: 6c:d6:dd:eb:45:fe:87:31:6a:04:f0:ab:bc:5a:59:e1:66:75: f8:1d:5d:1b:01:3e:68:23:e4:02:3b:a6:15:f6:e7:f5:91:a1: 3b:e9:ec:c0:fb:b4:e9:fd:38:29:e7:98:c2:fc:f2:45:f1:5f: bf:bf:72:2b:de:e1:81:51:9d:b7:8f:ab:04:b0:c0:8c:b9:03: 0a:3a:25:85 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUUKevIacXufQHOx0poHIeK1zGPqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MjAwOTM3NTFaFw0yNzA5MTkwOTQyNTFaMDMxMTAvBgNV BAMTKEE2OUIwQjkxRTQ2NEEyRkJCMEQ4NTc2NkRDQjk5NjIxNTgwOTVBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJwEn3oXvh+yAunnAIaNXR710 1YzqHgXhhy5kSr+MTjcClWFVDOZVljBgJIqmNXAfvo4tmjSHWgcJTxrDkZLEptLN X8WAF4S/jTON1ONlqRSeNqgRC/g/JYxF+xvPMwRY5A9u2G8cV91gxxMPm8cAO/2r I2UzGoWPJ80pEUHy3qKHizjOKi+z4RnE9heuoGmsU2J65cy5wy0I6JBUojm+1eb9 /CeSUKvtp752P9/e7cT9xaKSJMdtZmnPFybRIWUlwBFyw2F67CYRvYLdHthBz5NW tYySK3mdpa8VrfVl8MR+CNWqp+kB8mU1f6MWD8A4jJwNvsOEJvCP3JQttj4VAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUppsLkeRkovuw2Fdm3LmWIVgJWmswHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuG XHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVM4MzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwYAYIKwYBBQUHAQcBAf8EUTBPME0EAgAB MEcDBACY7eYwCwMEAJjt9QMDAZjsAwQAuvGjAwQAuvGlAwQAuvGwAwQAyQQVMAwD BADJMhMDBAHJMhQwDAMEAMkyGQMEAMkyHDANBgkqhkiG9w0BAQsFAAOCAQEAYDno +HRxRMg9S5hbVIP1bVdwO0J6QcyexxSRqQxKnTwhdyl0hW3A3kwf16O5ZPu87yGE CeAh9R3gOnCk+gbeWCTmmhyCrM74nP9EhEhjJO+JPagQ0Lhg97/73gsKDyZNsSeI vL+E2PbFk5wGif4fAgWrawKKbRWAaG5uVaUL7hmJEh4r3egKJsiyoW+lsZsWOwER AOJPUzEHRaK10/ywX3T1dwDQOgIZOlNk6zP50+N+6oh2bNbd60X+hzFqBPCrvFpZ 4WZ1+B1dGwE+aCPkAjumFfbn9ZGhO+nswPu06f04KeeYwvzyRfFfv79yK97hgVGd t4+rBLDAjLkDCjolhQ== -----END CERTIFICATE-----Generated at Mon Sep 21 08:26:52 2026 by rpki-client