$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS60542.roa File: AS60542.roa (raw, json) Hash identifier: PdSxg78rV4Mx62oaBObWoPVHeTuj4abwQQPgd/9MvcE= Subject key identifier: 30:11:66:45:DE:B1:8C:B3:89:1B:12:25:27:87:96:8D:B5:CB:49:DD Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 70FC9451678AE4344B8C1F7DEA45B8B20A46B827 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS60542.roa Signing time: Tue 27 Oct 2026 15:15:50 +0000 ROA not before: Tue 27 Oct 2026 15:10:50 +0000 ROA not after: Tue 26 Oct 2027 15:15:50 +0000 asID: 60542 IP address blocks: 109.66.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Nov 2026 23:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:fc:94:51:67:8a:e4:34:4b:8c:1f:7d:ea:45:b8:b2:0a:46:b8:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 27 15:10:50 2026 GMT Not After : Oct 26 15:15:50 2027 GMT Subject: CN=30116645DEB18CB3891B12252787968DB5CB49DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7e:99:7e:44:7d:9e:9c:b0:b7:45:8c:38:1c: ce:14:a2:b1:40:a1:33:a5:5f:a6:41:7b:a4:4b:86: 62:ac:29:4b:95:8b:25:c9:af:70:b5:a7:b8:a5:bf: 78:8d:25:bb:d7:53:ea:99:bf:ae:0d:d5:86:a4:0c: 29:3a:e1:10:27:c7:27:48:46:45:5c:7a:d9:43:94: 70:5f:02:de:99:bb:7d:5c:00:17:28:91:ed:8a:9d: 16:ac:4b:c8:f5:d2:2b:98:41:f0:49:10:28:4d:48: 4b:7f:84:c7:48:fa:3e:64:b1:10:fc:60:40:39:ee: 18:e3:3b:7c:08:a1:57:cb:ef:38:4d:dd:b0:16:94: 17:f6:9b:0a:58:6b:e5:6c:22:dc:db:65:d9:0e:17: a3:43:63:37:9c:fa:a6:63:79:85:ad:b5:78:0c:56: 11:05:56:bb:e8:b9:97:f7:9a:cb:be:36:3e:f0:8f: e4:4a:65:79:0b:f2:82:12:92:c0:62:d7:eb:0a:70: 2d:6b:29:ff:3c:fb:52:3b:5d:0e:a1:7f:7e:80:6d: aa:84:26:92:ee:4f:c2:3c:b3:fe:64:46:3a:6e:f3: ba:3c:2e:05:3e:b9:21:4c:87:e6:17:21:bf:d2:71: 21:92:ea:d8:88:05:5c:4c:18:7d:c4:58:db:33:19: 4f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:11:66:45:DE:B1:8C:B3:89:1B:12:25:27:87:96:8D:B5:CB:49:DD X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS60542.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.44.0/24 Signature Algorithm: sha256WithRSAEncryption 02:db:84:42:10:66:ba:d4:61:a9:d0:b1:ae:a4:99:42:bb:16: a9:58:82:7b:00:be:d3:6b:80:07:47:c4:bf:ae:fa:65:64:2d: 7b:d4:76:c2:4e:12:33:69:14:4c:2d:d5:b0:05:55:35:a8:f4: 85:6c:a0:08:9a:1b:27:fc:48:49:e5:1b:2a:18:02:a3:80:9e: ae:85:8b:25:9c:27:b0:9e:fd:2b:28:76:fd:0b:3d:79:f4:10: a2:69:a1:7a:ec:59:ee:18:a7:d5:96:d1:92:cc:9c:e0:14:2b: 87:b7:ce:37:a2:2d:0a:38:00:b7:e0:af:de:77:b0:93:09:59: 77:36:19:43:f7:8e:64:2b:a6:03:68:06:84:83:63:20:57:c2: 1a:c9:83:28:17:e4:c6:a7:85:0d:10:be:43:1a:e6:35:bd:22: fd:04:f6:fb:0e:c8:aa:dd:6e:45:a6:8d:cf:3b:59:f6:df:e3: b9:29:8a:30:c5:b9:5b:b2:50:0c:e1:45:c5:38:a4:7e:6d:c2: a1:f5:de:41:57:2f:92:fd:14:09:3d:a7:8e:c4:b4:8c:95:68: 56:83:5f:d2:68:27:52:ab:61:22:54:44:66:57:bb:79:ac:61: 2c:5d:ca:db:c6:62:b8:e1:c6:cf:11:d7:48:48:f7:88:30:15: f6:59:12:26 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUcPyUUWeK5DRLjB996kW4sgpGuCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMjcxNTEwNTBaFw0yNzEwMjYxNTE1NTBaMDMxMTAvBgNV BAMTKDMwMTE2NjQ1REVCMThDQjM4OTFCMTIyNTI3ODc5NjhEQjVDQjQ5REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsfpl+RH2enLC3RYw4HM4UorFA oTOlX6ZBe6RLhmKsKUuViyXJr3C1p7ilv3iNJbvXU+qZv64N1YakDCk64RAnxydI RkVcetlDlHBfAt6Zu31cABcoke2KnRasS8j10iuYQfBJEChNSEt/hMdI+j5ksRD8 YEA57hjjO3wIoVfL7zhN3bAWlBf2mwpYa+VsItzbZdkOF6NDYzec+qZjeYWttXgM VhEFVrvouZf3msu+Nj7wj+RKZXkL8oISksBi1+sKcC1rKf88+1I7XQ6hf36AbaqE JpLuT8I8s/5kRjpu87o8LgU+uSFMh+YXIb/ScSGS6tiIBVxMGH3EWNszGU83AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUMBFmRd6xjLOJGxIlJ4eWjbXLSd0wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM2MDU0Mi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAG1CLDANBgkqhkiG9w0BAQsFAAOCAQEAAtuEQhBmutRhqdCxrqSZQrsW qViCewC+02uAB0fEv676ZWQte9R2wk4SM2kUTC3VsAVVNaj0hWygCJobJ/xISeUb KhgCo4CeroWLJZwnsJ79Kyh2/Qs9efQQommheuxZ7hin1ZbRksyc4BQrh7fON6It CjgAt+Cv3newkwlZdzYZQ/eOZCumA2gGhINjIFfCGsmDKBfkxqeFDRC+QxrmNb0i /QT2+w7Iqt1uRaaNzztZ9t/juSmKMMW5W7JQDOFFxTikfm3CofXeQVcvkv0UCT2n jsS0jJVoVoNf0mgnUqthIlREZle7eaxhLF3K28ZiuOHGzxHXSEj3iDAV9lkSJg== -----END CERTIFICATE-----Generated at Sun Nov 8 06:42:01 2026 by rpki-client