$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS147281.roa File: AS147281.roa (raw, json) Hash identifier: oyKJwpSl+7yDMOs7VvbjljCq9OSfl9oYnW/JyWTwv5U= Subject key identifier: 25:4C:D4:B2:D5:8E:F0:C0:5A:37:AD:4E:90:81:AB:10:A0:44:22:B0 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 70EE2F8BFE35C732B2A915E73254CDED009F7C8A Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS147281.roa Signing time: Mon 02 Nov 2026 16:37:40 +0000 ROA not before: Mon 02 Nov 2026 16:32:40 +0000 ROA not after: Mon 01 Nov 2027 16:37:40 +0000 asID: 147281 IP address blocks: 152.237.244.0/24 maxlen: 24 201.50.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 10:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ee:2f:8b:fe:35:c7:32:b2:a9:15:e7:32:54:cd:ed:00:9f:7c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Nov 2 16:32:40 2026 GMT Not After : Nov 1 16:37:40 2027 GMT Subject: CN=254CD4B2D58EF0C05A37AD4E9081AB10A04422B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:62:15:75:e0:88:28:84:7c:bd:ea:bc:8f:cb: f7:57:61:c2:e2:33:ae:09:d9:88:8f:a7:9e:d7:20: 67:9f:4d:46:d2:86:a1:3b:9e:d4:ea:8b:9d:e9:b5: e9:a0:7a:e5:7e:8b:01:d9:36:f4:d8:21:f6:23:b3: 97:3f:38:57:07:3f:b4:27:ab:37:50:9c:e6:f0:6d: 26:ee:59:1e:83:9b:c4:d1:0e:f6:fb:4a:a2:a3:92: 4e:70:26:97:33:9b:34:b3:56:9d:c8:84:45:85:58: 68:ae:ad:07:03:43:b4:77:d1:a2:da:45:86:86:b7: b3:eb:3f:4b:b0:f4:94:7a:d5:35:2b:7d:7e:2c:ce: 5f:38:32:7d:86:f2:2a:11:72:89:54:a2:7b:3f:2a: 6f:bb:f5:78:31:3d:c3:55:97:73:aa:31:32:bc:03: 34:83:a7:a0:13:00:82:fa:87:b9:9f:d6:0e:ea:2e: 51:26:71:a3:ea:15:58:7b:a4:1b:50:44:e4:ff:db: 9f:4b:e9:f5:0c:81:b1:20:1b:91:fa:17:db:e6:ae: cb:83:81:86:7d:c3:a8:81:1a:64:dd:b3:84:2f:06: d1:9a:e9:37:b6:72:50:85:c2:d5:de:ce:3c:30:46: 57:73:71:91:25:fc:58:00:ce:73:32:09:5b:7f:7c: 6b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4C:D4:B2:D5:8E:F0:C0:5A:37:AD:4E:90:81:AB:10:A0:44:22:B0 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS147281.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.244.0/24 201.50.26.0/24 Signature Algorithm: sha256WithRSAEncryption 63:9c:9e:95:b6:7a:44:e5:0d:05:90:21:cc:92:7f:4d:e4:53: d6:bc:a4:45:b3:a7:83:f3:fc:c7:78:c2:83:91:06:37:f2:91: 34:a3:21:cc:fa:53:ed:c7:65:ac:4a:64:29:99:e4:35:69:b3: 06:92:40:7e:d4:20:af:b9:f8:d3:e6:59:6c:7e:ff:b3:15:ad: 12:71:7f:ea:4f:bc:70:1b:9d:ec:39:38:67:ea:bd:59:38:a2: 44:4d:9d:25:e1:0a:a2:94:2d:4f:8c:16:df:86:42:01:2a:13: 47:fb:fd:83:7f:3e:dc:49:8c:7a:83:c2:47:5e:94:04:24:3e: 5d:7f:f9:29:36:97:0d:a5:e6:50:79:2c:7b:66:8a:d1:d5:38: 5d:43:6f:72:48:eb:14:a6:34:7e:5e:89:d2:9a:08:c8:01:6a: 3a:04:36:75:da:63:4e:52:97:1b:1a:4e:f0:8e:0a:01:33:0b: 74:65:99:3d:e3:38:ac:7a:9e:2f:be:1f:7f:04:bd:01:56:4c: 13:d5:71:b3:fe:8c:87:67:3b:01:63:69:6b:6b:7d:0d:a9:4b: 33:c2:01:fe:5d:5c:55:5f:e4:f3:a4:e6:33:b1:0d:8f:7f:d4: 4c:2b:2d:8a:bc:13:7d:a6:a6:9a:34:de:23:f4:84:8c:f0:ce: b7:bd:41:ca -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUcO4vi/41xzKyqRXnMlTN7QCffIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjExMDIxNjMyNDBaFw0yNzExMDExNjM3NDBaMDMxMTAvBgNV BAMTKDI1NENENEIyRDU4RUYwQzA1QTM3QUQ0RTkwODFBQjEwQTA0NDIyQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDYhV14IgohHy96ryPy/dXYcLi M64J2YiPp57XIGefTUbShqE7ntTqi53ptemgeuV+iwHZNvTYIfYjs5c/OFcHP7Qn qzdQnObwbSbuWR6Dm8TRDvb7SqKjkk5wJpczmzSzVp3IhEWFWGiurQcDQ7R30aLa RYaGt7PrP0uw9JR61TUrfX4szl84Mn2G8ioRcolUons/Km+79XgxPcNVl3OqMTK8 AzSDp6ATAIL6h7mf1g7qLlEmcaPqFVh7pBtQROT/259L6fUMgbEgG5H6F9vmrsuD gYZ9w6iBGmTds4QvBtGa6Te2clCFwtXezjwwRldzcZEl/FgAznMyCVt/fGt9AgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUJUzUstWO8MBaN61OkIGrEKBEIrAwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxNDcyODEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBACY7fQDBADJMhowDQYJKoZIhvcNAQELBQADggEBAGOcnpW2ekTlDQWQ IcySf03kU9a8pEWzp4Pz/Md4woORBjfykTSjIcz6U+3HZaxKZCmZ5DVpswaSQH7U IK+5+NPmWWx+/7MVrRJxf+pPvHAbnew5OGfqvVk4okRNnSXhCqKULU+MFt+GQgEq E0f7/YN/PtxJjHqDwkdelAQkPl1/+Sk2lw2l5lB5LHtmitHVOF1Db3JI6xSmNH5e idKaCMgBajoENnXaY05SlxsaTvCOCgEzC3RlmT3jOKx6ni++H38EvQFWTBPVcbP+ jIdnOwFjaWtrfQ2pSzPCAf5dXFVf5POk5jOxDY9/1EwrLYq8E32mppo03iP0hIzw zre9Qco= -----END CERTIFICATE-----Generated at Sat Nov 14 21:30:00 2026 by rpki-client