$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS152606.roa File: AS152606.roa (raw, json) Hash identifier: uDuV7tvQWzkiF5AA7TqE4QlIsfuc4B9RUXRZHAGqMM0= Subject key identifier: 31:70:A1:49:54:31:25:8E:A1:5C:FB:A0:65:DB:E3:AA:3D:99:31:19 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 671A731224F1474CE094F3734867FA1A68A9590C Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS152606.roa Signing time: Sun 25 Oct 2026 10:36:09 +0000 ROA not before: Sun 25 Oct 2026 10:31:09 +0000 ROA not after: Sun 24 Oct 2027 10:36:09 +0000 asID: 152606 IP address blocks: 201.50.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 10:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1a:73:12:24:f1:47:4c:e0:94:f3:73:48:67:fa:1a:68:a9:59:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 25 10:31:09 2026 GMT Not After : Oct 24 10:36:09 2027 GMT Subject: CN=3170A1495431258EA15CFBA065DBE3AA3D993119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:df:42:df:83:ab:24:47:55:1a:a6:a3:4b:d9: 7d:ff:f0:41:24:42:fe:1e:d7:f0:ea:b0:78:4b:dd: 7a:a1:53:31:09:58:8b:2d:e9:46:71:72:46:50:ce: c2:07:2d:b3:54:c3:a5:9f:01:13:e0:05:20:cd:81: bd:9b:57:83:76:0a:38:39:dc:43:32:7b:80:b9:2f: 55:c4:be:1b:42:6e:fc:ea:65:33:39:9a:7a:0f:ea: 58:29:d2:12:35:52:a3:b8:d2:30:16:9e:81:b5:3d: ac:53:f2:50:b2:53:78:ba:79:33:b8:1b:ce:c9:10: 60:0d:46:26:73:6a:dd:10:3c:d8:60:af:4a:9b:4d: f5:25:59:16:29:0f:53:91:d6:bc:f9:76:aa:35:9a: 0d:7f:af:d2:f9:f7:87:99:28:f9:ad:5d:c4:f3:eb: d4:55:75:e8:44:3c:af:a3:19:01:44:8b:8c:79:2b: 11:03:46:da:d2:00:50:27:9d:40:46:47:1e:03:aa: a8:6c:10:05:cf:58:60:a8:f7:4f:3d:7b:c4:da:bd: fa:a4:f8:97:5b:8a:bb:f2:ee:f7:2d:b1:4a:ea:5e: ec:ce:2f:5a:d3:3d:c4:ad:df:56:65:a8:d4:e8:13: 32:6a:6b:84:80:8e:11:a3:69:0f:0d:60:9b:6f:80: 92:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:70:A1:49:54:31:25:8E:A1:5C:FB:A0:65:DB:E3:AA:3D:99:31:19 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS152606.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.50.19.0/24 Signature Algorithm: sha256WithRSAEncryption 14:ca:67:e3:f9:8d:55:21:54:19:51:01:a9:46:56:b1:b3:ce: 06:71:d8:9e:34:e9:08:6d:84:e9:a2:e5:f4:9d:40:73:09:e5: d2:02:fd:08:1f:f2:1d:63:2a:0e:c9:cf:ce:55:e1:77:b9:9d: 89:5e:bb:22:a4:90:eb:f7:b5:be:11:5f:07:15:99:0e:2f:60: a0:4a:ca:23:4d:17:f8:d1:f3:24:97:8d:18:fc:c8:45:97:7a: 12:8e:e9:fb:29:d8:0d:98:16:34:6c:51:c5:7a:e8:2b:96:d7: 73:79:89:9a:4f:d7:69:d9:1f:d6:1a:1a:f8:b0:b0:ba:37:05: 18:59:d0:5e:ca:00:c8:40:5f:85:0f:17:64:78:14:ca:12:0e: b3:b0:7f:3b:60:90:5e:40:f5:7e:16:2d:d2:8e:65:e5:db:75: 0f:f6:03:8e:a9:25:4c:7e:84:02:39:c6:51:3b:7f:6d:30:ba: bd:08:83:c7:5a:8f:d0:2a:58:27:8b:a0:40:f8:73:c8:9f:bf: 67:92:e4:44:20:95:61:dd:fc:d3:b6:59:ae:03:08:5b:87:6b: a8:23:20:ea:2a:55:d8:19:41:72:f9:bc:3f:ac:ce:32:d9:20: 6b:3b:69:d1:3e:f7:64:f0:a1:ec:1d:a7:8a:cc:f0:f5:83:cc: e6:e9:30:69 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUZxpzEiTxR0zglPNzSGf6GmipWQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMjUxMDMxMDlaFw0yNzEwMjQxMDM2MDlaMDMxMTAvBgNV BAMTKDMxNzBBMTQ5NTQzMTI1OEVBMTVDRkJBMDY1REJFM0FBM0Q5OTMxMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE30Lfg6skR1UapqNL2X3/8EEk Qv4e1/DqsHhL3XqhUzEJWIst6UZxckZQzsIHLbNUw6WfARPgBSDNgb2bV4N2Cjg5 3EMye4C5L1XEvhtCbvzqZTM5mnoP6lgp0hI1UqO40jAWnoG1PaxT8lCyU3i6eTO4 G87JEGANRiZzat0QPNhgr0qbTfUlWRYpD1OR1rz5dqo1mg1/r9L594eZKPmtXcTz 69RVdehEPK+jGQFEi4x5KxEDRtrSAFAnnUBGRx4DqqhsEAXPWGCo9089e8Tavfqk +Jdbirvy7vctsUrqXuzOL1rTPcSt31ZlqNToEzJqa4SAjhGjaQ8NYJtvgJJRAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUMXChSVQxJY6hXPugZdvjqj2ZMRkwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxNTI2MDYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADJMhMwDQYJKoZIhvcNAQELBQADggEBABTKZ+P5jVUhVBlRAalGVrGz zgZx2J406QhthOmi5fSdQHMJ5dIC/Qgf8h1jKg7Jz85V4Xe5nYleuyKkkOv3tb4R XwcVmQ4vYKBKyiNNF/jR8ySXjRj8yEWXehKO6fsp2A2YFjRsUcV66CuW13N5iZpP 12nZH9YaGviwsLo3BRhZ0F7KAMhAX4UPF2R4FMoSDrOwfztgkF5A9X4WLdKOZeXb dQ/2A46pJUx+hAI5xlE7f20wur0Ig8daj9AqWCeLoED4c8ifv2eS5EQglWHd/NO2 Wa4DCFuHa6gjIOoqVdgZQXL5vD+szjLZIGs7adE+92Twoewdp4rM8PWDzObpMGk= -----END CERTIFICATE-----Generated at Sat Nov 14 21:27:24 2026 by rpki-client