$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS399275.roa File: AS399275.roa (raw, json) Hash identifier: Mwsg3ICUFtt2PxCl8Epn/Oa95fx5681GepSChdzt2f4= Subject key identifier: 27:E9:F6:A9:27:AE:31:18:EA:29:1B:EE:D2:DC:B1:0E:9C:65:70:D0 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 4A8FBE3D67BE9DC6E2DA6F9C574C96368B4F4AF4 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS399275.roa Signing time: Wed 23 Sep 2026 08:24:17 +0000 ROA not before: Wed 23 Sep 2026 08:19:17 +0000 ROA not after: Wed 22 Sep 2027 08:24:17 +0000 asID: 399275 IP address blocks: 152.237.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:8f:be:3d:67:be:9d:c6:e2:da:6f:9c:57:4c:96:36:8b:4f:4a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 23 08:19:17 2026 GMT Not After : Sep 22 08:24:17 2027 GMT Subject: CN=27E9F6A927AE3118EA291BEED2DCB10E9C6570D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c8:b0:92:ce:c2:ab:15:2f:4f:25:76:f2:0c: 05:04:3c:4d:16:4e:67:12:68:dd:c7:13:11:4c:af: 38:9e:9e:ff:30:e5:9d:d1:67:e1:2f:8f:b6:f4:c3: 00:17:75:e0:7c:8f:29:75:c1:85:5a:30:a3:b4:f7: 39:3c:49:03:9a:53:23:12:2c:6c:d1:6d:19:de:66: 7c:06:f8:aa:93:d5:40:64:47:0d:f5:01:7f:e7:26: 70:bd:5f:43:2d:59:b2:11:39:e6:53:f9:e6:da:47: 96:34:76:15:78:42:56:a7:0f:51:cd:ac:62:8a:ec: 6d:53:9e:d4:b4:8c:e2:2b:63:79:f7:ca:46:62:02: 6a:4a:53:be:73:50:9d:93:42:9e:09:ae:05:27:b1: 8b:cf:bc:d4:06:7e:26:52:c6:8b:41:ed:f0:9f:40: 0f:7e:5a:4f:6a:0e:a9:f0:3b:28:69:52:62:f4:22: ae:92:d2:87:d8:82:78:5c:2a:4a:ec:e8:e7:e3:14: b0:27:db:0b:a1:cf:0c:db:90:ed:ab:7f:0f:46:1a: d7:4a:d6:82:c4:d9:b9:31:30:26:06:c1:0a:07:e2: 99:20:bf:23:f2:6e:3a:e7:ea:af:6d:00:e5:8c:19: 38:aa:00:4f:4b:c7:f1:43:90:67:0d:2b:9d:61:9b: 9c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E9:F6:A9:27:AE:31:18:EA:29:1B:EE:D2:DC:B1:0E:9C:65:70:D0 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS399275.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.254.0/23 Signature Algorithm: sha256WithRSAEncryption 57:34:87:67:5a:07:57:36:50:35:a5:25:28:8b:fb:e0:af:1f: 81:98:89:98:b3:a7:d0:30:81:92:b2:46:56:03:e0:d5:29:7e: 2c:c9:32:43:8a:d6:1a:e2:69:a0:c6:05:1a:f9:4c:ea:7a:8c: 3d:10:66:10:64:79:ad:8f:05:61:38:68:d6:f5:32:d3:a2:4f: d1:99:28:cc:55:99:04:1a:2e:ab:3b:07:e6:d2:12:e8:eb:a0: 79:f3:b1:89:36:32:71:b6:77:56:a4:56:7f:d7:c2:62:ed:4f: 21:91:97:b4:c7:f0:99:9b:52:9a:15:16:90:ff:7a:58:f3:cb: f7:e7:ef:d8:32:6f:d3:19:c1:da:9c:d6:4a:df:cf:56:94:0f: 8a:ef:68:ae:e8:7f:70:42:a8:b2:b5:ce:c2:9a:4d:c9:00:8a: f5:5d:6d:5b:1c:71:40:8c:c2:0a:97:a7:93:9f:c0:92:c2:52: 38:82:6e:92:f2:de:5c:64:d7:22:48:bc:d6:4e:8f:5f:12:e5: bc:44:d8:98:af:43:54:4b:12:c3:10:e6:10:bd:19:2d:7c:1c: 89:ad:90:e5:de:db:70:7a:cc:ad:ff:d9:4a:35:6e:53:f4:ab: 19:c9:5c:2d:1c:fd:09:fd:0f:df:83:f5:37:9c:b8:b7:d5:b2: 50:7c:4a:63 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUSo++PWe+ncbi2m+cV0yWNotPSvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MjMwODE5MTdaFw0yNzA5MjIwODI0MTdaMDMxMTAvBgNV BAMTKDI3RTlGNkE5MjdBRTMxMThFQTI5MUJFRUQyRENCMTBFOUM2NTcwRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUyLCSzsKrFS9PJXbyDAUEPE0W TmcSaN3HExFMrzienv8w5Z3RZ+Evj7b0wwAXdeB8jyl1wYVaMKO09zk8SQOaUyMS LGzRbRneZnwG+KqT1UBkRw31AX/nJnC9X0MtWbIROeZT+ebaR5Y0dhV4QlanD1HN rGKK7G1TntS0jOIrY3n3ykZiAmpKU75zUJ2TQp4JrgUnsYvPvNQGfiZSxotB7fCf QA9+Wk9qDqnwOyhpUmL0Iq6S0ofYgnhcKkrs6OfjFLAn2wuhzwzbkO2rfw9GGtdK 1oLE2bkxMCYGwQoH4pkgvyPybjrn6q9tAOWMGTiqAE9Lx/FDkGcNK51hm5zzAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUJ+n2qSeuMRjqKRvu0tyxDpxlcNAwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMzOTkyNzUucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGY7f4wDQYJKoZIhvcNAQELBQADggEBAFc0h2daB1c2UDWlJSiL++Cv H4GYiZizp9AwgZKyRlYD4NUpfizJMkOK1hriaaDGBRr5TOp6jD0QZhBkea2PBWE4 aNb1MtOiT9GZKMxVmQQaLqs7B+bSEujroHnzsYk2MnG2d1akVn/XwmLtTyGRl7TH 8JmbUpoVFpD/eljzy/fn79gyb9MZwdqc1krfz1aUD4rvaK7of3BCqLK1zsKaTckA ivVdbVsccUCMwgqXp5OfwJLCUjiCbpLy3lxk1yJIvNZOj18S5bxE2JivQ1RLEsMQ 5hC9GS18HImtkOXe23B6zK3/2Uo1blP0qxnJXC0c/Qn9D9+D9TecuLfVslB8SmM= -----END CERTIFICATE-----Generated at Thu Sep 24 02:59:16 2026 by rpki-client