$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS152726.roa File: AS152726.roa (raw, json) Hash identifier: 5Hdb/5t2sPEu0p1KUxbgVjpPkD4JsHY5zxR01UssIeY= Subject key identifier: 4F:DE:FF:4C:BD:9C:8D:30:C6:14:B3:B9:F0:7B:84:DB:0C:78:D5:4F Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 48DAFA921B49C89ADB585DB600F4A450CC003E27 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS152726.roa Signing time: Sat 14 Nov 2026 01:19:02 +0000 ROA not before: Sat 14 Nov 2026 01:14:02 +0000 ROA not after: Sat 13 Nov 2027 01:19:02 +0000 asID: 152726 IP address blocks: 152.237.232.0/24 maxlen: 24 177.177.232.0/24 maxlen: 24 186.241.186.0/24 maxlen: 24 201.4.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 18:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:da:fa:92:1b:49:c8:9a:db:58:5d:b6:00:f4:a4:50:cc:00:3e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Nov 14 01:14:02 2026 GMT Not After : Nov 13 01:19:02 2027 GMT Subject: CN=4FDEFF4CBD9C8D30C614B3B9F07B84DB0C78D54F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:66:47:8c:5c:65:99:4f:4e:d4:4d:65:6f:bb: 3a:1e:d1:8e:d5:29:0d:fe:dd:a2:d7:8f:0f:1a:28: 2b:0a:0e:3b:db:ca:51:1a:26:ab:5f:08:ef:97:0b: 1b:92:48:ef:2d:a5:42:25:d5:fa:2c:99:ee:cf:08: cd:85:35:f0:3c:d5:b7:a7:92:be:46:31:20:dd:cb: ed:7a:78:e3:50:59:d4:b4:ec:13:9d:91:49:b9:0f: 09:be:f2:c4:cf:2e:2d:b1:33:e7:e7:0c:bc:b7:b4: 20:76:a2:ac:75:c5:87:e4:07:d5:a1:3a:ab:03:35: 00:e8:7b:79:d2:03:ca:bf:e4:17:3b:4e:62:3b:88: 6f:41:58:ee:62:65:5f:0e:aa:ee:3a:00:1f:9a:97: 95:1c:0f:73:1a:fe:26:d2:cc:86:e7:13:f4:32:fb: 23:88:82:d5:86:bf:26:cf:a3:56:cf:b5:66:99:40: 9b:c0:77:5c:ed:37:a6:a0:92:27:b8:40:f8:27:b3: 9a:6c:ce:3f:3b:33:70:eb:ce:30:74:f6:cf:0b:9f: d7:1e:0f:bb:59:63:40:a5:7d:4b:75:31:80:e7:9e: b0:12:f6:0a:b4:56:25:1a:39:e4:bc:e3:68:53:bf: 33:bc:3a:bf:3f:c3:f2:0e:b9:c4:49:d9:91:c0:e3: 51:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DE:FF:4C:BD:9C:8D:30:C6:14:B3:B9:F0:7B:84:DB:0C:78:D5:4F X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS152726.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.232.0/24 177.177.232.0/24 186.241.186.0/24 201.4.25.0/24 Signature Algorithm: sha256WithRSAEncryption 41:b0:26:de:47:93:79:df:35:f7:54:7e:4f:0b:39:30:c0:df: bd:6b:b6:f7:ff:a8:e9:9b:c0:ab:01:57:ae:ff:61:ea:99:fb: 13:7e:c2:29:ee:8a:15:72:3b:8b:33:3a:32:e3:5c:1f:7f:64: 3c:40:1f:60:87:77:f5:8c:e8:d6:05:87:1f:e8:a7:ae:8a:80: 18:d2:81:37:8d:a5:b8:b7:ca:17:66:87:b6:98:f1:95:a3:3c: ea:75:5a:c1:1d:6c:3a:8a:43:e5:40:c5:ad:cd:ab:56:b9:75: e2:84:b3:fc:3e:55:e8:d9:fd:fd:ae:20:5b:86:bb:8b:f1:e1: 25:e5:1e:0e:38:7c:25:71:02:06:c8:47:ab:be:64:f9:80:9b: f6:3d:93:b1:b5:b1:11:62:46:d8:7e:91:08:ed:c4:b3:49:1f: 51:a7:42:c6:53:93:0b:80:ca:82:10:c6:8a:de:02:e9:1d:d3: ca:62:7f:28:94:a5:12:20:75:7e:52:54:d9:78:7a:b2:d5:13: 75:02:b4:f5:17:0a:58:c4:e5:70:6a:59:b5:12:04:d5:2e:9b: 50:4d:98:43:5c:61:9b:1f:35:52:87:1b:87:7f:ca:ca:28:be: 35:c3:f2:df:74:eb:ff:40:05:0d:e8:e2:be:c6:25:f4:3d:11: dd:2a:fe:59 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIUSNr6khtJyJrbWF22APSkUMwAPicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjExMTQwMTE0MDJaFw0yNzExMTMwMTE5MDJaMDMxMTAvBgNV BAMTKDRGREVGRjRDQkQ5QzhEMzBDNjE0QjNCOUYwN0I4NERCMEM3OEQ1NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZkeMXGWZT07UTWVvuzoe0Y7V KQ3+3aLXjw8aKCsKDjvbylEaJqtfCO+XCxuSSO8tpUIl1fosme7PCM2FNfA81ben kr5GMSDdy+16eONQWdS07BOdkUm5Dwm+8sTPLi2xM+fnDLy3tCB2oqx1xYfkB9Wh OqsDNQDoe3nSA8q/5Bc7TmI7iG9BWO5iZV8Oqu46AB+al5UcD3Ma/ibSzIbnE/Qy +yOIgtWGvybPo1bPtWaZQJvAd1ztN6agkie4QPgns5pszj87M3DrzjB09s8Ln9ce D7tZY0ClfUt1MYDnnrAS9gq0ViUaOeS842hTvzO8Or8/w/IOucRJ2ZHA41H7AgMB AAGjggJXMIICUzAdBgNVHQ4EFgQUT97/TL2cjTDGFLO58HuE2wx41U8wHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxNTI3MjYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4E AgABMBgDBACY7egDBACxsegDBAC68boDBADJBBkwDQYJKoZIhvcNAQELBQADggEB AEGwJt5Hk3nfNfdUfk8LOTDA371rtvf/qOmbwKsBV67/YeqZ+xN+winuihVyO4sz OjLjXB9/ZDxAH2CHd/WM6NYFhx/op66KgBjSgTeNpbi3yhdmh7aY8ZWjPOp1WsEd bDqKQ+VAxa3Nq1a5deKEs/w+VejZ/f2uIFuGu4vx4SXlHg44fCVxAgbIR6u+ZPmA m/Y9k7G1sRFiRth+kQjtxLNJH1GnQsZTkwuAyoIQxoreAukd08pifyiUpRIgdX5S VNl4erLVE3UCtPUXCljE5XBqWbUSBNUum1BNmENcYZsfNVKHG4d/ysoovjXD8t90 6/9ABQ3o4r7GJfQ9Ed0q/lk= -----END CERTIFICATE-----Generated at Sun Nov 15 12:54:13 2026 by rpki-client