$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS200489.roa File: AS200489.roa (raw, json) Hash identifier: 4dpNPASsILocwQJ+90XN63sFopcOhG3MWLuwH+nPBZ8= Subject key identifier: 0A:F2:F6:DF:46:58:22:E0:EE:83:A7:26:76:CF:A7:F9:85:7E:D4:D2 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 5BA6E817D335655399A0BF397B5223BBC379104C Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS200489.roa Signing time: Fri 13 Nov 2026 23:21:03 +0000 ROA not before: Fri 13 Nov 2026 23:16:03 +0000 ROA not after: Fri 12 Nov 2027 23:21:03 +0000 asID: 200489 IP address blocks: 177.177.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 10:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a6:e8:17:d3:35:65:53:99:a0:bf:39:7b:52:23:bb:c3:79:10:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Nov 13 23:16:03 2026 GMT Not After : Nov 12 23:21:03 2027 GMT Subject: CN=0AF2F6DF465822E0EE83A72676CFA7F9857ED4D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e3:8a:fc:b3:6a:bb:4e:48:c6:e5:06:43:a1: c3:e1:98:fd:5f:b8:f3:7f:ac:b8:4f:44:37:9b:63: ee:f5:ed:0c:b1:b0:80:fc:52:d9:16:0f:03:7f:1a: 99:97:37:29:c1:8b:38:6b:10:03:20:c4:27:5f:73: 4a:55:a9:8b:25:20:32:60:47:ba:49:cb:1e:a4:ba: 01:d7:ff:f2:46:bc:71:66:bc:76:79:74:95:46:ec: 05:88:2d:71:2b:7c:ce:cf:48:9e:91:6a:6f:1a:8b: 41:f0:fc:20:a2:bc:24:71:51:21:ee:13:af:ab:91: 3b:be:6a:af:f4:56:7e:24:8f:8a:49:c8:11:7c:df: 3e:a9:fa:21:c0:5d:b9:b2:30:10:74:ae:41:cc:0c: aa:fe:52:75:4f:7b:f1:ba:7b:e3:ea:52:f3:b7:cc: 77:dd:84:ad:ee:82:e8:6a:70:f1:19:bb:31:cf:fc: 17:c3:2c:35:75:18:e7:1b:65:59:e5:85:7a:6e:cf: 7f:f8:8c:2d:86:21:65:18:64:a6:dd:38:5d:4f:87: 45:5e:c3:84:fe:97:e5:4f:1a:be:01:a7:ae:27:ed: 76:1f:1d:b2:8d:df:3a:58:84:67:04:70:e4:12:17: 7d:f6:6f:df:28:7c:c4:40:58:ac:7e:be:6b:b8:71: 04:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F2:F6:DF:46:58:22:E0:EE:83:A7:26:76:CF:A7:F9:85:7E:D4:D2 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS200489.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.177.255.0/24 Signature Algorithm: sha256WithRSAEncryption 01:ac:9f:9c:61:7d:33:df:2f:13:77:5f:66:a3:55:d0:f4:a7: ec:6c:71:a5:e1:48:ae:4b:8a:65:9e:7e:52:69:21:df:55:de: f3:b9:17:ef:99:23:01:b3:1d:d9:5a:d7:ec:40:a6:f4:61:04: 8a:e5:c5:4a:14:10:06:86:97:22:c9:94:88:c4:0a:11:0a:44: 1a:02:37:fd:f0:fb:55:7a:1a:cd:54:4e:9a:f8:ae:be:1b:8e: 98:51:df:8c:f0:f5:9b:c6:50:75:4b:79:cd:13:75:2f:80:0a: 84:ee:c3:73:d1:78:69:c0:ab:e2:a2:39:61:34:f3:72:5e:eb: db:d8:7a:45:cd:c9:eb:87:c8:f6:9d:de:cf:d2:ca:60:c2:7d: 49:42:c6:f2:fb:68:6e:ec:1e:1f:d5:09:03:75:3f:d8:fe:a1: ce:03:d0:f4:33:07:5b:d5:4e:d4:66:5f:5e:33:b7:eb:a7:5e: a5:cb:c9:80:1b:f5:43:cc:19:6e:f3:6c:03:32:28:1a:f2:d5: 97:25:9e:4b:36:87:21:7c:f7:a5:36:5a:d2:3e:52:0e:a2:b5: 84:c2:14:71:23:a5:ce:d0:b4:97:7a:bb:4a:e5:71:ff:9a:b2: a0:e9:5d:54:2a:87:c9:19:27:2c:9c:d3:94:8d:67:1a:0f:58: d2:51:c1:80 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUW6boF9M1ZVOZoL85e1Iju8N5EEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjExMTMyMzE2MDNaFw0yNzExMTIyMzIxMDNaMDMxMTAvBgNV BAMTKDBBRjJGNkRGNDY1ODIyRTBFRTgzQTcyNjc2Q0ZBN0Y5ODU3RUQ0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP44r8s2q7TkjG5QZDocPhmP1f uPN/rLhPRDebY+717QyxsID8UtkWDwN/GpmXNynBizhrEAMgxCdfc0pVqYslIDJg R7pJyx6kugHX//JGvHFmvHZ5dJVG7AWILXErfM7PSJ6Ram8ai0Hw/CCivCRxUSHu E6+rkTu+aq/0Vn4kj4pJyBF83z6p+iHAXbmyMBB0rkHMDKr+UnVPe/G6e+PqUvO3 zHfdhK3uguhqcPEZuzHP/BfDLDV1GOcbZVnlhXpuz3/4jC2GIWUYZKbdOF1Ph0Ve w4T+l+VPGr4Bp64n7XYfHbKN3zpYhGcEcOQSF332b98ofMRAWKx+vmu4cQTnAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUCvL230ZYIuDug6cmds+n+YV+1NIwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMyMDA0ODkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACxsf8wDQYJKoZIhvcNAQELBQADggEBAAGsn5xhfTPfLxN3X2ajVdD0 p+xscaXhSK5LimWeflJpId9V3vO5F++ZIwGzHdla1+xApvRhBIrlxUoUEAaGlyLJ lIjEChEKRBoCN/3w+1V6Gs1UTpr4rr4bjphR34zw9ZvGUHVLec0TdS+ACoTuw3PR eGnAq+KiOWE083Je69vYekXNyeuHyPad3s/SymDCfUlCxvL7aG7sHh/VCQN1P9j+ oc4D0PQzB1vVTtRmX14zt+unXqXLyYAb9UPMGW7zbAMyKBry1Zclnks2hyF896U2 WtI+Ug6itYTCFHEjpc7QtJd6u0rlcf+asqDpXVQqh8kZJyyc05SNZxoPWNJRwYA= -----END CERTIFICATE-----Generated at Sat Nov 14 22:07:01 2026 by rpki-client