$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS137409.roa File: AS137409.roa (raw, json) Hash identifier: OAHtflkSH7rfWtK82vwAdtKvj1khmmPIRF/8uLy9b/Y= Subject key identifier: 5D:D4:A1:FF:A7:B2:63:1D:88:00:D1:AD:1F:5D:81:E7:96:60:14:B5 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 4AB3390D944325D7C9FE655A19AF6AD5D8F45BF6 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS137409.roa Signing time: Tue 22 Sep 2026 05:10:23 +0000 ROA not before: Tue 22 Sep 2026 05:05:23 +0000 ROA not after: Tue 21 Sep 2027 05:10:23 +0000 asID: 137409 IP address blocks: 152.237.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 21:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b3:39:0d:94:43:25:d7:c9:fe:65:5a:19:af:6a:d5:d8:f4:5b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 22 05:05:23 2026 GMT Not After : Sep 21 05:10:23 2027 GMT Subject: CN=5DD4A1FFA7B2631D8800D1AD1F5D81E7966014B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b2:aa:2e:91:ef:18:88:7b:f8:cc:3d:68:f4: 9a:64:87:c7:a9:c2:c8:30:ad:90:e2:97:45:88:ec: 5a:86:09:fb:9f:12:a1:02:f8:7e:f3:f4:b0:06:a3: fa:77:d2:d0:3f:eb:4c:f4:ea:3d:0a:46:d0:f4:cb: a1:29:b7:ed:c2:46:c9:4f:d0:1b:11:a3:c4:97:b6: 38:45:26:40:67:94:fa:a8:7c:5e:45:d2:ea:90:a6: ab:fb:b4:97:03:c5:8a:2c:30:50:d4:34:e2:e9:dc: ba:43:89:f5:fc:d4:90:4e:5f:c9:6d:32:15:0f:b8: 55:79:50:1d:aa:36:ea:e3:1c:1b:ad:9a:bc:8d:21: c7:31:07:fc:2c:cc:3e:19:6a:63:e9:79:3e:3b:c5: 0f:99:84:5a:e7:4c:b6:d3:31:84:27:f2:3d:0c:ef: e8:6d:ce:97:0c:5d:87:5f:e7:da:8d:ad:36:ed:e7: 59:3d:0d:29:ad:4f:bb:1c:2d:8a:e5:10:38:42:40: f7:1b:d5:33:64:33:bc:c9:a0:50:64:ea:8c:f2:b4: e1:f3:53:cf:c7:0f:4e:33:22:a5:2c:7b:fb:66:92: de:b1:76:d3:98:b2:4f:0f:1e:4b:c8:7a:b6:b3:91: 0f:8c:dc:7a:af:5e:00:b5:43:8a:c8:5e:f0:64:a5: f4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D4:A1:FF:A7:B2:63:1D:88:00:D1:AD:1F:5D:81:E7:96:60:14:B5 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS137409.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.249.0/24 Signature Algorithm: sha256WithRSAEncryption 05:f0:ac:7e:6c:45:ac:03:36:c9:9f:0e:b4:f4:ee:6c:a1:73: 14:24:a5:e1:eb:77:4d:6f:38:95:bb:2c:16:96:f6:eb:88:c4: 7a:91:ab:c9:47:8f:c6:2b:c2:b6:27:90:03:20:60:8a:03:32: 69:ee:a8:0f:0e:43:e9:33:35:7e:3b:9e:42:aa:42:72:23:67: 77:e6:3b:83:65:eb:fd:9d:31:8c:6b:00:0f:b1:85:86:76:ea: f5:b9:e5:62:2b:58:fe:15:2d:d5:13:cb:8d:52:d4:3b:d0:f9: a4:62:12:7b:08:4d:b3:0e:20:09:f1:16:68:0a:53:92:4d:5c: 45:86:0c:84:76:71:4f:92:a6:87:b1:ff:13:aa:63:84:cf:a2: 1d:25:33:a3:70:20:e0:ec:75:44:34:77:c2:7f:3e:97:f2:9a: b0:f1:eb:17:f2:59:45:d6:91:e5:3f:2a:2e:84:06:06:11:b2: 8e:8e:eb:92:5a:77:a7:94:e2:6c:bc:35:de:c0:c9:77:46:86: 9b:d8:4e:31:0b:ad:c9:7c:f3:09:05:da:d8:c3:42:85:2b:1f: 7a:63:74:94:1c:47:60:9e:96:49:33:39:15:d0:d5:70:28:56: 0e:31:a6:21:41:fe:56:42:6f:5e:78:b9:b0:62:d8:01:06:f6: 34:c6:ec:b7 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUSrM5DZRDJdfJ/mVaGa9q1dj0W/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MjIwNTA1MjNaFw0yNzA5MjEwNTEwMjNaMDMxMTAvBgNV BAMTKDVERDRBMUZGQTdCMjYzMUQ4ODAwRDFBRDFGNUQ4MUU3OTY2MDE0QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwsqouke8YiHv4zD1o9Jpkh8ep wsgwrZDil0WI7FqGCfufEqEC+H7z9LAGo/p30tA/60z06j0KRtD0y6Ept+3CRslP 0BsRo8SXtjhFJkBnlPqofF5F0uqQpqv7tJcDxYosMFDUNOLp3LpDifX81JBOX8lt MhUPuFV5UB2qNurjHButmryNIccxB/wszD4ZamPpeT47xQ+ZhFrnTLbTMYQn8j0M 7+htzpcMXYdf59qNrTbt51k9DSmtT7scLYrlEDhCQPcb1TNkM7zJoFBk6ozytOHz U8/HD04zIqUse/tmkt6xdtOYsk8PHkvIerazkQ+M3HqvXgC1Q4rIXvBkpfQXAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUXdSh/6eyYx2IANGtH12B55ZgFLUwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxMzc0MDkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACY7fkwDQYJKoZIhvcNAQELBQADggEBAAXwrH5sRawDNsmfDrT07myh cxQkpeHrd01vOJW7LBaW9uuIxHqRq8lHj8YrwrYnkAMgYIoDMmnuqA8OQ+kzNX47 nkKqQnIjZ3fmO4Nl6/2dMYxrAA+xhYZ26vW55WIrWP4VLdUTy41S1DvQ+aRiEnsI TbMOIAnxFmgKU5JNXEWGDIR2cU+Spoex/xOqY4TPoh0lM6NwIODsdUQ0d8J/Ppfy mrDx6xfyWUXWkeU/Ki6EBgYRso6O65Jad6eU4my8Nd7AyXdGhpvYTjELrcl88wkF 2tjDQoUrH3pjdJQcR2CelkkzORXQ1XAoVg4xpiFB/lZCb154ubBi2AEG9jTG7Lc= -----END CERTIFICATE-----Generated at Wed Sep 23 14:48:56 2026 by rpki-client