$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS141001.roa File: AS141001.roa (raw, json) Hash identifier: 3lpszualxVyxRS9SSkC8eQmtsjFoLrPoghCg7Bvmw18= Subject key identifier: 7E:8B:62:53:7D:64:8C:C7:EB:21:E2:F5:D4:C4:81:0B:03:8B:0D:23 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 7E94DE2F79E392D24F8AD162953DAD9FEDE1D645 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS141001.roa Signing time: Mon 26 Oct 2026 07:06:12 +0000 ROA not before: Mon 26 Oct 2026 07:01:12 +0000 ROA not after: Mon 25 Oct 2027 07:06:12 +0000 asID: 141001 IP address blocks: 186.241.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 18:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:94:de:2f:79:e3:92:d2:4f:8a:d1:62:95:3d:ad:9f:ed:e1:d6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 26 07:01:12 2026 GMT Not After : Oct 25 07:06:12 2027 GMT Subject: CN=7E8B62537D648CC7EB21E2F5D4C4810B038B0D23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9e:f7:d6:4b:72:bd:75:3b:47:d4:9e:0c:53: 8b:f0:03:3d:4f:55:6d:86:15:94:d8:0c:ed:1f:55: 97:e0:9a:fb:f1:53:99:36:48:c5:dd:23:61:63:85: ae:0f:73:47:eb:90:ef:a4:c1:cd:d5:5e:a1:35:5c: 89:84:3b:40:a7:a2:86:c0:da:27:4d:ce:51:d0:03: 20:07:b4:27:c5:56:23:9a:ad:90:13:b7:41:93:ec: dc:9d:14:d1:1b:3f:f6:4d:31:b0:08:14:e6:1e:3a: 56:b9:51:15:5d:b8:54:66:69:64:1e:de:d6:f1:52: 00:6b:07:17:a4:11:47:b3:f1:d7:f2:14:16:21:fd: c9:a2:3c:4f:5c:bc:cd:66:df:c6:36:cc:58:9f:4c: 0d:67:8a:0d:48:03:18:fd:da:05:4d:5a:40:70:bb: 56:17:94:1d:9b:ae:da:25:6d:51:68:6e:77:bd:16: 75:b8:c7:d8:4c:25:fd:66:00:a6:98:20:d4:e7:ce: d0:03:97:a4:73:bc:bb:b8:fc:f7:14:da:35:ff:05: 78:cc:33:af:f0:14:8e:b4:64:c6:49:ae:c4:35:f0: 94:c1:98:65:16:ee:51:20:f0:fd:e4:8f:79:59:51: b7:97:70:74:47:48:c7:a1:f5:58:d1:de:c8:60:91: 39:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8B:62:53:7D:64:8C:C7:EB:21:E2:F5:D4:C4:81:0B:03:8B:0D:23 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS141001.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.241.182.0/23 Signature Algorithm: sha256WithRSAEncryption 71:75:f2:b2:b6:0a:cb:bb:9b:8d:a5:bb:69:e8:30:ae:24:10: dd:b7:d2:06:8d:f9:72:25:2b:6d:63:5c:45:b7:2b:66:cf:29: 66:e5:b6:62:43:e0:8d:82:c6:a5:77:66:b5:6a:da:d9:18:fe: ca:16:5b:86:e1:f2:09:6a:49:53:09:6f:29:77:0d:50:c9:27: dc:de:7c:2e:85:63:64:f2:7e:93:67:9a:91:30:e8:4a:af:a4: a8:bb:d8:9f:7d:5d:b3:5c:8f:0a:9a:4c:aa:36:f5:1e:6d:5f: 3e:35:40:48:f9:74:2e:93:2f:66:18:da:64:b3:88:dd:a1:cf: 02:93:ca:db:b4:6a:43:cc:96:28:d0:02:c3:c9:f6:a1:5c:9d: fb:a4:ad:e7:81:ef:af:c6:c7:b2:f5:9e:ad:4f:2b:cf:20:3f: b7:a8:da:4f:9d:56:10:78:a9:59:93:18:e9:63:fe:03:45:1c: 79:59:7e:45:b8:d0:a2:df:61:86:22:27:1c:ae:9a:ba:b2:f5: 6a:1c:ab:9a:51:4d:48:04:0f:0a:d1:2a:53:80:89:c2:87:22: c1:30:7a:b8:a6:6b:10:0c:8e:ec:7f:fa:0a:6c:03:e9:b1:0d: c4:b6:14:a3:46:8b:d9:55:17:3f:50:b7:55:77:b9:a7:fe:f4: 93:25:31:d9 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUfpTeL3njktJPitFilT2tn+3h1kUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMjYwNzAxMTJaFw0yNzEwMjUwNzA2MTJaMDMxMTAvBgNV BAMTKDdFOEI2MjUzN0Q2NDhDQzdFQjIxRTJGNUQ0QzQ4MTBCMDM4QjBEMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/nvfWS3K9dTtH1J4MU4vwAz1P VW2GFZTYDO0fVZfgmvvxU5k2SMXdI2Fjha4Pc0frkO+kwc3VXqE1XImEO0CnoobA 2idNzlHQAyAHtCfFViOarZATt0GT7NydFNEbP/ZNMbAIFOYeOla5URVduFRmaWQe 3tbxUgBrBxekEUez8dfyFBYh/cmiPE9cvM1m38Y2zFifTA1nig1IAxj92gVNWkBw u1YXlB2brtolbVFobne9FnW4x9hMJf1mAKaYINTnztADl6RzvLu4/PcU2jX/BXjM M6/wFI60ZMZJrsQ18JTBmGUW7lEg8P3kj3lZUbeXcHRHSMeh9VjR3shgkTnTAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUfotiU31kjMfrIeL11MSBCwOLDSMwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxNDEwMDEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAG68bYwDQYJKoZIhvcNAQELBQADggEBAHF18rK2Csu7m42lu2noMK4k EN230gaN+XIlK21jXEW3K2bPKWbltmJD4I2CxqV3ZrVq2tkY/soWW4bh8glqSVMJ byl3DVDJJ9zefC6FY2TyfpNnmpEw6EqvpKi72J99XbNcjwqaTKo29R5tXz41QEj5 dC6TL2YY2mSziN2hzwKTytu0akPMlijQAsPJ9qFcnfukreeB76/Gx7L1nq1PK88g P7eo2k+dVhB4qVmTGOlj/gNFHHlZfkW40KLfYYYiJxyumrqy9Wocq5pRTUgEDwrR KlOAicKHIsEwerimaxAMjux/+gpsA+mxDcS2FKNGi9lVFz9Qt1V3uaf+9JMlMdk= -----END CERTIFICATE-----Generated at Sun Nov 15 10:44:35 2026 by rpki-client