$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS3223.roa File: AS3223.roa (raw, json) Hash identifier: 3GLVm4h2DoClnjOPFgsj6DGBphuVnVyy5bn1YDWJJ6Y= Subject key identifier: 06:60:35:A5:13:16:61:6E:FD:11:44:4D:DA:D2:35:BF:8B:AF:B9:85 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 3E74A4D1F1A42C877310EC037C68F01EB731E4BF Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS3223.roa Signing time: Sat 17 Oct 2026 13:22:01 +0000 ROA not before: Sat 17 Oct 2026 13:17:01 +0000 ROA not after: Sat 16 Oct 2027 13:22:01 +0000 asID: 3223 IP address blocks: 201.50.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 10:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:74:a4:d1:f1:a4:2c:87:73:10:ec:03:7c:68:f0:1e:b7:31:e4:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 17 13:17:01 2026 GMT Not After : Oct 16 13:22:01 2027 GMT Subject: CN=066035A51316616EFD11444DDAD235BF8BAFB985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4e:43:0c:af:54:dd:8e:2b:5a:81:af:a0:2b: d3:62:5f:7a:f2:11:9a:a2:6b:2e:d1:0f:38:53:b9: ab:a2:a7:06:c2:b4:50:44:88:09:5a:3d:80:1f:66: 94:96:aa:ef:0f:29:49:79:d9:e0:09:de:03:8c:36: 21:47:b6:9d:b6:e5:8f:a3:4e:ee:1d:ef:c0:58:9d: 3f:5d:e4:da:b0:c5:ee:7d:f6:2b:c8:ad:97:d4:86: 56:6f:e3:13:c3:08:28:42:bd:a0:f7:27:87:6a:8e: 87:6a:93:8d:42:d8:2e:3e:28:7c:3d:c8:0b:0d:69: 1d:20:7c:51:80:bf:9f:0e:18:f7:0f:a2:11:7c:4e: 98:64:b2:47:c4:0c:b7:2c:81:69:17:49:52:23:16: 64:8e:c5:68:1b:04:4f:93:32:f9:15:45:3c:b0:26: 77:bf:67:75:d2:36:2b:93:dc:53:7b:c3:b5:14:ae: 4b:ef:5c:c2:4d:09:01:5d:b6:23:40:b4:75:88:5e: 13:19:40:a7:d5:7c:00:38:b3:1a:6e:3d:9c:8e:06: 51:37:d1:85:d5:2d:1a:48:d1:8a:e4:30:0a:6e:b6: 90:af:83:d6:85:19:bc:5e:57:35:4b:6f:3a:04:c8: 33:f8:cd:5b:b5:59:21:cb:56:c5:ea:bf:b0:08:04: 5c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:60:35:A5:13:16:61:6E:FD:11:44:4D:DA:D2:35:BF:8B:AF:B9:85 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS3223.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.50.18.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:9e:77:93:81:20:59:c1:85:e5:cb:60:43:c3:a3:2e:6b:c2: d1:4a:20:00:17:ea:c2:45:90:45:85:b5:67:b0:fe:b4:fd:41: 55:16:16:79:a5:58:78:ea:4d:72:53:d7:00:68:44:55:02:2e: 19:85:65:a4:35:1b:f5:70:b3:7c:c6:bc:55:a7:ba:ff:b5:b3: 6b:c2:38:04:6a:18:23:2d:07:86:c1:d2:29:34:87:23:7e:81: 1c:75:21:be:a0:fb:10:7c:6e:67:6c:d4:f8:bf:01:93:69:e6: 45:88:4a:f5:d9:2a:e7:7b:91:9f:c7:4a:82:38:7b:8b:8d:d4: 9a:8a:6e:7d:68:37:6d:c2:8c:4a:db:30:f2:cc:04:f6:92:52: b1:4a:30:30:f1:f0:a6:36:d8:c6:d2:7e:dc:59:a5:14:39:61: 17:87:1b:a6:68:87:4d:7f:49:5f:a6:bb:69:9c:f3:1b:fd:ba: 8f:82:49:65:a9:26:03:45:51:70:ed:92:31:a9:71:4e:5d:63: 6c:9b:76:a5:6c:94:4a:31:60:8a:f8:9c:b7:1b:50:89:cb:a5: b6:e6:f9:71:0c:71:62:ac:48:c1:5a:f6:2e:8a:9d:71:9e:a8: 94:c2:9a:0a:37:b9:3e:80:bf:59:3a:de:e3:94:7e:68:78:75: 77:de:bd:16 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgIUPnSk0fGkLIdzEOwDfGjwHrcx5L8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMTcxMzE3MDFaFw0yNzEwMTYxMzIyMDFaMDMxMTAvBgNV BAMTKDA2NjAzNUE1MTMxNjYxNkVGRDExNDQ0RERBRDIzNUJGOEJBRkI5ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATkMMr1Tdjitaga+gK9NiX3ry EZqiay7RDzhTuauipwbCtFBEiAlaPYAfZpSWqu8PKUl52eAJ3gOMNiFHtp225Y+j Tu4d78BYnT9d5Nqwxe599ivIrZfUhlZv4xPDCChCvaD3J4dqjodqk41C2C4+KHw9 yAsNaR0gfFGAv58OGPcPohF8TphkskfEDLcsgWkXSVIjFmSOxWgbBE+TMvkVRTyw Jne/Z3XSNiuT3FN7w7UUrkvvXMJNCQFdtiNAtHWIXhMZQKfVfAA4sxpuPZyOBlE3 0YXVLRpI0YrkMAputpCvg9aFGbxeVzVLbzoEyDP4zVu1WSHLVsXqv7AIBFy9AgMB AAGjggJDMIICPzAdBgNVHQ4EFgQUBmA1pRMWYW79EURN2tI1v4uvuYUwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMzMjIzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAyTISMA0GCSqGSIb3DQEBCwUAA4IBAQB7nneTgSBZwYXly2BDw6Mua8LR SiAAF+rCRZBFhbVnsP60/UFVFhZ5pVh46k1yU9cAaERVAi4ZhWWkNRv1cLN8xrxV p7r/tbNrwjgEahgjLQeGwdIpNIcjfoEcdSG+oPsQfG5nbNT4vwGTaeZFiEr12Srn e5Gfx0qCOHuLjdSaim59aDdtwoxK2zDyzAT2klKxSjAw8fCmNtjG0n7cWaUUOWEX hxumaIdNf0lfprtpnPMb/bqPgkllqSYDRVFw7ZIxqXFOXWNsm3albJRKMWCK+Jy3 G1CJy6W25vlxDHFirEjBWvYuip1xnqiUwpoKN7k+gL9ZOt7jlH5oeHV33r0W -----END CERTIFICATE-----Generated at Sat Nov 14 21:29:45 2026 by rpki-client