$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS13335.roa File: AS13335.roa (raw, json) Hash identifier: uK7s+tEEKoeyf+dCQJSXp7mA1Y4A+ueLdEPTcwulHMc= Subject key identifier: B9:46:64:8F:86:8C:68:7A:B6:13:C0:3E:3B:D9:74:67:53:4B:25:8F Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 24E46FD3729020494B85BDFCCCC0C2E963B473DE Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS13335.roa Signing time: Tue 10 Nov 2026 22:39:23 +0000 ROA not before: Tue 10 Nov 2026 22:34:23 +0000 ROA not after: Tue 09 Nov 2027 22:39:23 +0000 asID: 13335 IP address blocks: 186.241.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Nov 2026 14:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e4:6f:d3:72:90:20:49:4b:85:bd:fc:cc:c0:c2:e9:63:b4:73:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Nov 10 22:34:23 2026 GMT Not After : Nov 9 22:39:23 2027 GMT Subject: CN=B946648F868C687AB613C03E3BD97467534B258F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:77:ba:c1:5f:b7:de:14:35:89:fb:00:d6:34: ea:dd:8c:8a:13:96:61:68:6c:ce:bf:59:68:94:56: 38:72:dd:08:96:55:94:a9:14:0f:72:60:ff:8d:b4: d6:6d:a3:46:7d:e9:27:67:78:fd:1b:b1:50:96:e7: bf:0c:f6:c8:95:ed:76:da:a3:89:42:a1:5f:30:12: f1:42:7b:66:e8:ba:7c:15:64:a8:69:51:31:f9:0c: b6:fd:7f:4b:37:ce:60:5f:48:61:5c:22:37:b8:85: 3e:4d:0e:7d:98:3b:ab:75:20:c7:f8:de:fe:eb:ff: f0:d1:22:63:fd:6a:87:ab:5c:37:95:c1:08:da:7c: 2c:97:11:59:f4:3c:f6:12:76:53:5a:d5:47:bb:82: e6:cd:53:7d:2e:cf:a0:cc:69:e8:29:88:81:ec:c9: 3f:80:18:9d:9b:27:f9:32:14:b2:0e:75:d3:0c:bf: b7:06:5c:df:34:ed:db:b4:41:b3:98:47:58:b2:e6: 55:bc:21:12:99:fd:1a:83:e0:3f:cb:31:d2:30:fc: 5a:67:45:5c:4b:9c:04:32:e1:b8:1e:4a:ed:db:cf: ce:5e:9b:89:3c:98:7e:08:34:73:13:06:7e:fa:69: e8:64:ab:a9:3e:dc:4c:da:38:ea:54:06:90:53:07: c8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:46:64:8F:86:8C:68:7A:B6:13:C0:3E:3B:D9:74:67:53:4B:25:8F X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS13335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.241.191.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:1b:de:2f:f5:fa:60:b5:95:8b:fc:5d:d4:a6:f8:d2:27:bf: e6:11:24:9c:24:d9:ec:1e:77:b5:2c:b7:7f:af:e5:5f:57:b3: f0:77:da:4c:08:92:72:0f:c4:57:50:f3:66:44:3f:8c:05:bb: 3c:2c:85:55:0d:46:ea:84:ca:24:d9:7f:f1:49:ab:fc:5a:f6: 1b:78:5d:e6:c6:64:f3:30:40:af:50:fa:4e:51:b0:77:50:10: 98:54:c9:99:a5:29:06:9a:fc:b5:24:23:3e:84:a1:30:29:27: 79:9c:af:4b:6d:6a:4e:2c:43:39:e0:ea:46:c4:1e:c2:7f:27: 99:c3:89:be:cd:fb:cd:4b:8e:67:16:13:16:c7:39:29:5e:2d: 48:09:df:79:ab:92:7b:ba:96:64:73:4d:d8:58:8e:8b:de:1f: d4:f9:80:63:25:85:ff:15:34:9b:90:76:fb:87:cc:bc:00:c4: 92:cd:26:aa:b8:66:f3:97:9e:49:d5:3e:ed:4c:ca:11:e6:2b: 3a:62:5a:35:fb:1f:ac:d0:e5:64:fa:44:21:fc:dc:e2:82:5e: bf:8f:5f:6b:b1:ec:46:2f:d0:7b:38:49:d3:d0:fd:8c:7a:c4: 46:2a:81:82:66:0d:f3:64:a7:7c:97:63:1c:2b:86:cd:66:13: bb:62:31:0c -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUJORv03KQIElLhb38zMDC6WO0c94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjExMTAyMjM0MjNaFw0yNzExMDkyMjM5MjNaMDMxMTAvBgNV BAMTKEI5NDY2NDhGODY4QzY4N0FCNjEzQzAzRTNCRDk3NDY3NTM0QjI1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOd7rBX7feFDWJ+wDWNOrdjIoT lmFobM6/WWiUVjhy3QiWVZSpFA9yYP+NtNZto0Z96SdneP0bsVCW578M9siV7Xba o4lCoV8wEvFCe2bounwVZKhpUTH5DLb9f0s3zmBfSGFcIje4hT5NDn2YO6t1IMf4 3v7r//DRImP9aoerXDeVwQjafCyXEVn0PPYSdlNa1Ue7gubNU30uz6DMaegpiIHs yT+AGJ2bJ/kyFLIOddMMv7cGXN807du0QbOYR1iy5lW8IRKZ/RqD4D/LMdIw/Fpn RVxLnAQy4bgeSu3bz85em4k8mH4INHMTBn76aehkq6k+3EzaOOpUBpBTB8i7AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUuUZkj4aMaHq2E8A+O9l0Z1NLJY8wHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxMzMzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALrxvzANBgkqhkiG9w0BAQsFAAOCAQEADBveL/X6YLWVi/xd1Kb40ie/ 5hEknCTZ7B53tSy3f6/lX1ez8HfaTAiScg/EV1DzZkQ/jAW7PCyFVQ1G6oTKJNl/ 8Umr/Fr2G3hd5sZk8zBAr1D6TlGwd1AQmFTJmaUpBpr8tSQjPoShMCkneZyvS21q TixDOeDqRsQewn8nmcOJvs37zUuOZxYTFsc5KV4tSAnfeauSe7qWZHNN2FiOi94f 1PmAYyWF/xU0m5B2+4fMvADEks0mqrhm85eeSdU+7UzKEeYrOmJaNfsfrNDlZPpE Ifzc4oJev49fa7HsRi/QezhJ09D9jHrERiqBgmYN82SnfJdjHCuGzWYTu2IxDA== -----END CERTIFICATE-----Generated at Wed Nov 11 21:23:54 2026 by rpki-client