$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS147281.roa File: AS147281.roa (raw, json) Hash identifier: DiSiRw64bLLgFoNg29O/bSC+8t5k8ctXCfYCCfDIz54= Subject key identifier: BA:79:E7:3F:15:18:6D:1A:F3:CC:45:4E:F6:90:98:98:6E:1A:3C:F7 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 690529C91AA6D6348F012753CFFC865CB6716DC2 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS147281.roa Signing time: Tue 22 Sep 2026 07:01:40 +0000 ROA not before: Tue 22 Sep 2026 06:56:40 +0000 ROA not after: Tue 21 Sep 2027 07:01:40 +0000 asID: 147281 IP address blocks: 152.237.226.0/24 maxlen: 24 186.241.180.0/24 maxlen: 24 201.4.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 21:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:05:29:c9:1a:a6:d6:34:8f:01:27:53:cf:fc:86:5c:b6:71:6d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 22 06:56:40 2026 GMT Not After : Sep 21 07:01:40 2027 GMT Subject: CN=BA79E73F15186D1AF3CC454EF69098986E1A3CF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7f:9b:4e:33:aa:38:04:8a:cc:c1:3e:bd:15: d3:86:b8:5d:ac:ee:db:66:ec:0c:4b:e9:78:5d:fb: ef:7f:8c:e2:0c:c8:e0:11:b0:98:92:6c:11:80:94: d7:62:cf:64:e5:9c:9d:fd:da:84:43:de:62:7b:a7: 32:c2:85:44:f4:27:86:5d:56:7b:b2:dd:a4:e2:8d: 8a:ba:fe:9f:84:d3:35:41:e1:d1:e1:aa:03:28:e5: e0:cc:2a:64:b1:18:24:7d:d2:8a:8e:6e:2d:16:de: b9:c1:c7:bb:cb:39:c7:cf:6a:10:84:5c:fd:32:52: 16:99:9f:17:f7:69:72:3d:1a:1e:b3:d2:1c:0a:da: ce:1f:12:98:05:83:58:9e:80:fb:4b:b5:ed:29:79: df:df:38:bf:56:28:d2:61:d6:51:e4:de:fd:ae:11: f2:32:b8:80:cc:31:57:e7:cb:3c:b5:d2:cc:db:84: 7e:5c:d5:1a:e1:4b:74:84:b9:1b:9c:2b:d7:1a:8a: e0:36:11:2f:6c:ca:dc:82:6a:bf:76:9b:04:0f:ce: b6:f2:b0:d5:54:d7:52:e9:34:b9:ae:82:3e:cc:ba: fb:3d:2d:ca:bf:d9:72:03:19:ee:8c:96:6f:5a:ca: 75:da:5b:68:5d:ec:89:50:9f:41:0d:44:d5:2d:4c: 86:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:79:E7:3F:15:18:6D:1A:F3:CC:45:4E:F6:90:98:98:6E:1A:3C:F7 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS147281.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.226.0/24 186.241.180.0/24 201.4.22.0/24 Signature Algorithm: sha256WithRSAEncryption 99:a8:f4:9a:25:5d:af:af:f1:94:88:e8:c7:8c:0a:aa:a5:cc: e3:ab:a4:e4:b0:23:55:5b:11:a5:b7:9e:8e:21:d4:5b:02:fa: bc:9e:f2:66:14:bd:00:b2:2c:ca:17:83:b0:fa:7b:01:60:a8: 94:cf:af:9b:5c:d9:50:96:c0:de:5d:9c:83:ff:c5:2d:27:90: 28:26:6c:18:af:46:c7:17:2a:97:a1:84:a8:ec:32:cf:ea:ea: bc:8e:56:a8:a0:f7:43:67:c3:64:b2:36:c6:49:c2:07:c4:e7: 4b:ec:e4:11:15:a3:a0:f0:e3:d9:44:7d:29:c2:41:ba:a6:41: 01:40:b3:32:16:38:63:e1:e6:0e:86:47:11:fb:87:3c:c7:b2: 34:db:b1:d0:60:e4:a1:e3:40:15:dc:af:8a:f9:98:fa:6c:08: 30:af:63:94:e8:28:be:aa:10:fa:1d:0e:77:e1:8b:0c:30:b9: d2:53:bc:1c:72:3c:7d:80:1f:d5:62:3a:7a:94:41:44:00:8e: ff:37:da:24:f2:16:ef:e6:70:10:96:61:e4:57:26:7c:69:47: e9:1d:e6:cb:ed:a3:9e:a3:40:46:49:1b:11:fb:b9:58:de:c3: 93:5b:81:9f:28:c1:82:d8:f9:4c:3f:77:fd:43:e8:c4:80:fb: c3:7e:70:af -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUaQUpyRqm1jSPASdTz/yGXLZxbcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MjIwNjU2NDBaFw0yNzA5MjEwNzAxNDBaMDMxMTAvBgNV BAMTKEJBNzlFNzNGMTUxODZEMUFGM0NDNDU0RUY2OTA5ODk4NkUxQTNDRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwf5tOM6o4BIrMwT69FdOGuF2s 7ttm7AxL6Xhd++9/jOIMyOARsJiSbBGAlNdiz2TlnJ392oRD3mJ7pzLChUT0J4Zd Vnuy3aTijYq6/p+E0zVB4dHhqgMo5eDMKmSxGCR90oqObi0W3rnBx7vLOcfPahCE XP0yUhaZnxf3aXI9Gh6z0hwK2s4fEpgFg1iegPtLte0ped/fOL9WKNJh1lHk3v2u EfIyuIDMMVfnyzy10szbhH5c1RrhS3SEuRucK9caiuA2ES9sytyCar92mwQPzrby sNVU11LpNLmugj7Muvs9Lcq/2XIDGe6Mlm9aynXaW2hd7IlQn0ENRNUtTIbHAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUunnnPxUYbRrzzEVO9pCYmG4aPPcwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxNDcyODEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBACY7eIDBAC68bQDBADJBBYwDQYJKoZIhvcNAQELBQADggEBAJmo9Jol Xa+v8ZSI6MeMCqqlzOOrpOSwI1VbEaW3no4h1FsC+rye8mYUvQCyLMoXg7D6ewFg qJTPr5tc2VCWwN5dnIP/xS0nkCgmbBivRscXKpehhKjsMs/q6ryOVqig90Nnw2Sy NsZJwgfE50vs5BEVo6Dw49lEfSnCQbqmQQFAszIWOGPh5g6GRxH7hzzHsjTbsdBg 5KHjQBXcr4r5mPpsCDCvY5ToKL6qEPodDnfhiwwwudJTvBxyPH2AH9ViOnqUQUQA jv832iTyFu/mcBCWYeRXJnxpR+kd5svto56jQEZJGxH7uVjew5NbgZ8owYLY+Uw/ d/1D6MSA+8N+cK8= -----END CERTIFICATE-----Generated at Wed Sep 23 09:40:08 2026 by rpki-client