$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS218383.roa File: AS218383.roa (raw, json) Hash identifier: TUqT5+2lKp/RwXMycADz3f1jS2vka+AR/i7NMW4J9QQ= Subject key identifier: D3:07:91:27:F0:38:B7:47:1E:31:CD:E5:CA:F8:E2:D1:81:DE:6D:2B Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 5623813FF4ACF55CB0DD134CE52920CFA64077D1 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS218383.roa Signing time: Thu 12 Nov 2026 08:53:28 +0000 ROA not before: Thu 12 Nov 2026 08:48:28 +0000 ROA not after: Thu 11 Nov 2027 08:53:28 +0000 asID: 218383 IP address blocks: 152.237.238.0/24 maxlen: 24 201.4.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 10:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:23:81:3f:f4:ac:f5:5c:b0:dd:13:4c:e5:29:20:cf:a6:40:77:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Nov 12 08:48:28 2026 GMT Not After : Nov 11 08:53:28 2027 GMT Subject: CN=D3079127F038B7471E31CDE5CAF8E2D181DE6D2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8f:1f:59:64:6c:38:13:1a:b7:46:0a:c5:4c: 0c:93:48:8a:e8:63:b2:e1:62:70:8f:79:af:39:bc: 97:c6:c2:dd:41:34:87:3a:04:19:69:f4:8b:d9:33: 19:b1:0a:8c:94:dd:2e:23:91:ee:e9:0c:75:63:65: 39:0e:ee:a6:50:b4:95:14:91:09:97:52:32:b3:ae: 49:d2:61:2b:00:55:1b:09:6d:8a:c0:92:45:9b:fb: 78:f8:bd:c9:2c:b3:3e:6f:2d:3a:7e:35:53:32:ea: a3:ad:13:8d:30:47:21:42:f6:e7:3f:b4:53:2e:45: 2b:a2:6b:d3:5a:cf:fa:66:b2:9a:02:7e:75:71:21: 3f:26:76:21:cf:69:e2:20:5e:8f:97:68:f4:c0:c1: 2f:63:a5:14:2c:91:cd:9b:76:68:57:b1:d4:db:44: 7f:e2:d0:34:ca:72:f8:67:9d:62:7d:2c:a7:66:8c: e7:8f:7c:81:a1:f6:08:6f:c5:17:b1:4f:30:90:77: e6:ea:f7:d4:ec:6a:0a:ff:cd:52:21:e6:68:cf:cb: 10:f8:3d:da:b2:1a:2b:12:f1:27:8f:94:44:86:38: 3e:18:40:9a:e8:a3:07:04:28:6c:69:3b:d3:90:0d: 76:0b:55:e2:4d:58:84:47:c6:54:3d:32:2d:be:3a: 2c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:07:91:27:F0:38:B7:47:1E:31:CD:E5:CA:F8:E2:D1:81:DE:6D:2B X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS218383.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.238.0/24 201.4.16.0/24 Signature Algorithm: sha256WithRSAEncryption 22:23:d0:0e:5a:08:7e:92:88:f1:1d:f1:ae:4a:42:36:ef:ec: fb:59:63:88:4b:c7:c7:50:05:42:dd:27:e8:b8:f4:2d:1e:a6: fb:17:5b:61:d0:b9:c1:0d:5a:67:62:0d:9b:4c:b9:b3:5d:e2: 7e:0f:62:cd:27:00:9c:d8:2a:1f:d4:f8:7c:fc:66:a0:61:67: ed:06:2d:88:13:9f:ae:3c:87:6b:d4:ac:c0:a5:98:d5:cb:79: 27:d0:3f:f6:17:01:6f:85:d5:b1:b6:5f:81:a7:70:60:bf:55: 4d:7f:17:f9:7c:78:c0:73:c3:74:fe:e1:a5:73:6c:36:7e:4e: b8:f0:8f:7e:b8:f6:34:d3:12:a8:63:d8:e3:51:96:24:65:40: f0:b7:e8:0b:9c:ad:58:44:c5:ff:1a:31:45:9a:9b:3c:65:37: e7:38:bb:78:78:b9:7d:c0:f8:b3:ca:06:0d:19:c8:65:9b:2c: f3:04:51:de:81:fb:40:2e:94:57:63:e3:bd:bc:c6:c1:4b:1b: 97:dc:8a:a3:03:7f:dc:c1:27:79:11:cf:56:49:db:db:30:18: b0:cb:ca:63:81:aa:75:89:ef:bc:73:cc:2c:d5:e7:49:4f:44: 13:8c:a2:f6:19:26:1b:a1:a6:cb:d7:45:e0:c1:e3:9b:a6:3f: f8:1e:63:93 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUViOBP/Ss9Vyw3RNM5Skgz6ZAd9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjExMTIwODQ4MjhaFw0yNzExMTEwODUzMjhaMDMxMTAvBgNV BAMTKEQzMDc5MTI3RjAzOEI3NDcxRTMxQ0RFNUNBRjhFMkQxODFERTZEMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPjx9ZZGw4Exq3RgrFTAyTSIro Y7LhYnCPea85vJfGwt1BNIc6BBlp9IvZMxmxCoyU3S4jke7pDHVjZTkO7qZQtJUU kQmXUjKzrknSYSsAVRsJbYrAkkWb+3j4vckssz5vLTp+NVMy6qOtE40wRyFC9uc/ tFMuRSuia9Naz/pmspoCfnVxIT8mdiHPaeIgXo+XaPTAwS9jpRQskc2bdmhXsdTb RH/i0DTKcvhnnWJ9LKdmjOePfIGh9ghvxRexTzCQd+bq99Tsagr/zVIh5mjPyxD4 PdqyGisS8SePlESGOD4YQJroowcEKGxpO9OQDXYLVeJNWIRHxlQ9Mi2+OiwPAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQU0weRJ/A4t0ceMc3lyvji0YHebSswHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMyMTgzODMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBACY7e4DBADJBBAwDQYJKoZIhvcNAQELBQADggEBACIj0A5aCH6SiPEd 8a5KQjbv7PtZY4hLx8dQBULdJ+i49C0epvsXW2HQucENWmdiDZtMubNd4n4PYs0n AJzYKh/U+Hz8ZqBhZ+0GLYgTn648h2vUrMClmNXLeSfQP/YXAW+F1bG2X4GncGC/ VU1/F/l8eMBzw3T+4aVzbDZ+Trjwj3649jTTEqhj2ONRliRlQPC36AucrVhExf8a MUWamzxlN+c4u3h4uX3A+LPKBg0ZyGWbLPMEUd6B+0AulFdj4728xsFLG5fciqMD f9zBJ3kRz1ZJ29swGLDLymOBqnWJ77xzzCzV50lPRBOMovYZJhuhpsvXReDB45um P/geY5M= -----END CERTIFICATE-----Generated at Sun Nov 15 00:47:20 2026 by rpki-client