$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS31898.roa File: AS31898.roa (raw, json) Hash identifier: eW2nCDIgSQry9oHTaZgnkLZlJVHlJkG5HI/lGPnCPb0= Subject key identifier: 59:23:DF:80:02:D9:9E:82:82:CE:89:E3:3A:43:DB:0B:9D:20:FB:77 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 4C923D462689A7CAF0B06C7A49388297E8A71935 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS31898.roa Signing time: Thu 05 Nov 2026 07:04:29 +0000 ROA not before: Thu 05 Nov 2026 06:59:29 +0000 ROA not after: Thu 04 Nov 2027 07:04:29 +0000 asID: 31898 IP address blocks: 152.237.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Nov 2026 21:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:92:3d:46:26:89:a7:ca:f0:b0:6c:7a:49:38:82:97:e8:a7:19:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Nov 5 06:59:29 2026 GMT Not After : Nov 4 07:04:29 2027 GMT Subject: CN=5923DF8002D99E8282CE89E33A43DB0B9D20FB77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1b:06:d9:01:33:10:90:90:32:a9:d0:1a:34: ab:c5:b5:11:ce:5b:13:10:3f:c5:2e:e3:5c:a8:5b: c8:d1:80:c2:6b:cd:b1:0d:20:4b:65:3b:52:71:b7: cc:09:53:7e:71:c5:15:83:0f:2c:66:b0:77:54:2a: 97:62:91:b1:1a:e1:f1:ec:c8:62:83:66:ab:72:0b: d5:fe:c8:d7:ef:75:ee:36:8f:dc:05:cb:da:e4:f3: a6:f1:e9:63:f4:1e:1b:0f:d1:2a:28:7a:90:63:17: b0:f8:97:b1:f6:61:56:ad:bb:cf:d8:f2:7c:1c:6e: 59:84:00:26:bb:b6:07:2a:ea:1f:79:10:70:2f:30: f2:17:2c:6b:ce:ad:9e:5a:67:93:b2:c8:31:e7:34: fe:34:c5:eb:f6:14:25:ea:68:ac:15:78:98:67:03: 1b:5b:eb:c9:23:3d:4e:fe:e3:c7:68:f3:12:29:4d: ae:d5:57:10:f9:3e:1e:8e:4b:a2:14:cc:f8:2a:14: 30:8e:44:79:09:77:93:3b:c4:6d:e3:9f:70:d8:da: fe:93:9d:b2:70:72:6b:9b:3f:8e:3e:9b:81:61:47: c2:98:4e:fb:39:a2:cc:12:d9:02:cb:5c:ee:f3:3f: 81:dc:5b:4d:6b:29:9a:d2:2a:8f:b5:ed:b5:b7:c2: ff:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:23:DF:80:02:D9:9E:82:82:CE:89:E3:3A:43:DB:0B:9D:20:FB:77 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS31898.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.228.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:45:8d:ab:6c:a8:c6:c3:6d:25:9a:22:f5:5f:48:c7:7b:23: ef:c3:52:cc:99:36:47:ae:52:63:d8:0b:90:e9:c3:c3:12:4c: 5b:a0:bc:0a:3f:c2:3e:f3:d3:3f:3d:92:52:d2:c9:10:f3:fe: 47:21:d2:e9:de:d1:73:8d:e7:0b:fa:54:ef:bd:85:1b:61:b9: 84:bf:d4:75:be:6a:bf:c0:82:e6:0f:e5:20:e9:96:4d:b0:77: e4:5d:a8:47:82:e6:9d:62:42:b3:be:7e:6e:b0:b7:11:2d:17: 4a:dd:fb:25:1a:e8:a2:72:8e:10:f6:ba:8c:f6:4a:fc:d7:4f: ac:f1:ab:d1:24:9e:69:24:9a:28:61:d9:68:d5:cb:7d:83:1b: 1b:99:41:1c:1d:28:84:be:41:d7:60:0c:df:4c:d6:c8:ad:07: c9:87:95:f6:e5:2c:f7:bf:5a:77:a0:c9:9d:4a:6b:0c:ae:71: 97:44:a8:1b:49:b1:a7:dc:1d:8c:25:38:3b:d9:c1:97:73:d3: c1:0d:e6:0e:da:35:35:50:93:49:8a:51:9c:2f:97:06:bc:c6: 3a:67:bc:00:bb:aa:52:a2:65:2e:3b:f4:b3:86:44:9d:c7:e6: 80:e1:c7:ba:34:2b:8d:c0:75:55:db:46:19:d3:e1:b7:d6:23: 09:6e:65:05 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUTJI9RiaJp8rwsGx6STiCl+inGTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjExMDUwNjU5MjlaFw0yNzExMDQwNzA0MjlaMDMxMTAvBgNV BAMTKDU5MjNERjgwMDJEOTlFODI4MkNFODlFMzNBNDNEQjBCOUQyMEZCNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTGwbZATMQkJAyqdAaNKvFtRHO WxMQP8Uu41yoW8jRgMJrzbENIEtlO1Jxt8wJU35xxRWDDyxmsHdUKpdikbEa4fHs yGKDZqtyC9X+yNfvde42j9wFy9rk86bx6WP0HhsP0SooepBjF7D4l7H2YVatu8/Y 8nwcblmEACa7tgcq6h95EHAvMPIXLGvOrZ5aZ5OyyDHnNP40xev2FCXqaKwVeJhn Axtb68kjPU7+48do8xIpTa7VVxD5Ph6OS6IUzPgqFDCORHkJd5M7xG3jn3DY2v6T nbJwcmubP44+m4FhR8KYTvs5oswS2QLLXO7zP4HcW01rKZrSKo+17bW3wv8fAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUWSPfgALZnoKCzonjOkPbC50g+3cwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMzMTg5OC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAJjt5DANBgkqhkiG9w0BAQsFAAOCAQEASkWNq2yoxsNtJZoi9V9Ix3sj 78NSzJk2R65SY9gLkOnDwxJMW6C8Cj/CPvPTPz2SUtLJEPP+RyHS6d7Rc43nC/pU 772FG2G5hL/Udb5qv8CC5g/lIOmWTbB35F2oR4LmnWJCs75+brC3ES0XSt37JRro onKOEPa6jPZK/NdPrPGr0SSeaSSaKGHZaNXLfYMbG5lBHB0ohL5B12AM30zWyK0H yYeV9uUs979ad6DJnUprDK5xl0SoG0mxp9wdjCU4O9nBl3PTwQ3mDto1NVCTSYpR nC+XBrzGOme8ALuqUqJlLjv0s4ZEncfmgOHHujQrjcB1VdtGGdPht9YjCW5lBQ== -----END CERTIFICATE-----Generated at Wed Nov 11 09:18:14 2026 by rpki-client