$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS59245.roa File: AS59245.roa (raw, json) Hash identifier: lBiyUgsDKXy3itaXDUz9utq+vOhw6hSkGE1Q1j21PYE= Subject key identifier: 12:5F:59:B0:D2:DC:B7:5C:1F:1B:9B:48:B2:C1:C7:BB:2A:7E:F4:F6 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 66C06785C0520A8206E4E9A2D3E6FF8383AE509B Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS59245.roa Signing time: Wed 23 Sep 2026 12:25:23 +0000 ROA not before: Wed 23 Sep 2026 12:20:23 +0000 ROA not after: Wed 22 Sep 2027 12:25:23 +0000 asID: 59245 IP address blocks: 152.237.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 08:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c0:67:85:c0:52:0a:82:06:e4:e9:a2:d3:e6:ff:83:83:ae:50:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 23 12:20:23 2026 GMT Not After : Sep 22 12:25:23 2027 GMT Subject: CN=125F59B0D2DCB75C1F1B9B48B2C1C7BB2A7EF4F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7c:21:d1:a3:ec:bf:56:0e:c8:83:3b:1e:0e: 8c:35:f9:94:6f:60:f5:68:21:65:d7:e0:d5:d7:c1: ed:a4:77:bc:6b:18:4b:e9:40:06:0e:48:93:f3:85: 21:fb:ff:b8:c8:69:28:cc:58:50:18:19:f1:82:9e: a8:f5:cb:f6:fd:7a:87:d4:30:bc:1a:db:a8:0b:67: 85:2d:d5:cc:d5:6d:64:27:78:74:da:72:03:1f:25: 6d:df:8a:f1:d8:a4:d4:80:86:b1:59:31:69:d5:b5: b4:32:9b:9c:2c:67:25:36:1d:4d:a2:6d:07:bd:2a: c2:0e:28:8b:23:0e:21:1a:43:eb:cb:29:96:96:20: b7:e5:05:df:b8:a2:20:b1:54:d4:68:00:ed:b1:61: ab:69:ab:45:49:f8:1e:86:5c:cc:f1:39:87:51:85: 17:8d:25:e8:45:09:2b:26:6f:cf:54:7e:b7:ef:f6: 0f:54:91:b3:e6:8c:76:6b:cb:f2:80:7d:1e:62:18: 06:f6:2e:77:3c:08:75:77:19:35:45:39:40:75:52: 4e:47:4c:de:40:1a:0b:fd:87:e0:7d:02:0e:40:fd: a7:3c:66:d5:19:cd:60:37:e0:11:7c:5e:78:d8:37: cf:1e:44:c1:f9:dd:82:2a:96:f5:b1:a8:cf:31:ae: 66:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5F:59:B0:D2:DC:B7:5C:1F:1B:9B:48:B2:C1:C7:BB:2A:7E:F4:F6 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS59245.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.246.0/23 Signature Algorithm: sha256WithRSAEncryption b3:31:f5:b6:35:8d:3f:5a:a2:3f:ac:db:10:aa:aa:15:42:b8: ce:5b:1e:8e:ea:08:63:91:8b:95:fd:f7:7d:75:2d:45:23:80: c9:67:1c:d8:4b:6f:69:f7:6e:a6:bf:67:34:55:0d:78:a4:c9: 47:54:24:60:8d:7e:e0:39:ca:b7:1b:5f:ac:a3:96:29:ed:d5: b1:ca:14:a1:c6:bf:78:0d:ae:a4:58:a4:ba:65:6a:df:db:f0: da:9b:98:98:2c:53:ed:de:25:16:79:2f:41:43:e9:fe:d4:00: 6c:06:2b:2e:9a:29:76:1d:62:d1:70:53:49:f6:90:e9:74:cc: 30:12:61:6a:08:3c:2f:7f:28:db:e0:3e:71:b1:63:3d:bc:8a: 46:5a:43:c3:5b:93:16:d1:ff:db:b2:69:b3:61:cb:15:f6:d6: 36:f6:56:f2:e9:a5:df:10:bd:03:85:61:f1:8e:11:b3:5f:91: 58:45:98:66:90:83:fe:51:1f:34:07:3b:ed:85:91:e9:5d:d0: 70:20:7a:b6:77:1c:bf:6a:ee:d2:a8:e5:20:76:93:bc:da:79: 6f:cb:c7:dc:43:54:7f:74:35:98:03:f8:15:02:07:98:77:4a: c9:15:4b:87:34:8d:87:02:19:45:84:2f:98:11:fa:07:41:c0: ea:86:71:02 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUZsBnhcBSCoIG5Omi0+b/g4OuUJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MjMxMjIwMjNaFw0yNzA5MjIxMjI1MjNaMDMxMTAvBgNV BAMTKDEyNUY1OUIwRDJEQ0I3NUMxRjFCOUI0OEIyQzFDN0JCMkE3RUY0RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDefCHRo+y/Vg7IgzseDow1+ZRv YPVoIWXX4NXXwe2kd7xrGEvpQAYOSJPzhSH7/7jIaSjMWFAYGfGCnqj1y/b9eofU MLwa26gLZ4Ut1czVbWQneHTacgMfJW3fivHYpNSAhrFZMWnVtbQym5wsZyU2HU2i bQe9KsIOKIsjDiEaQ+vLKZaWILflBd+4oiCxVNRoAO2xYatpq0VJ+B6GXMzxOYdR hReNJehFCSsmb89Ufrfv9g9UkbPmjHZry/KAfR5iGAb2Lnc8CHV3GTVFOUB1Uk5H TN5AGgv9h+B9Ag5A/ac8ZtUZzWA34BF8XnjYN88eRMH53YIqlvWxqM8xrmZBAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUEl9ZsNLct1wfG5tIssHHuyp+9PYwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVM1OTI0NS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAZjt9jANBgkqhkiG9w0BAQsFAAOCAQEAszH1tjWNP1qiP6zbEKqqFUK4 zlsejuoIY5GLlf33fXUtRSOAyWcc2Etvafdupr9nNFUNeKTJR1QkYI1+4DnKtxtf rKOWKe3VscoUoca/eA2upFikumVq39vw2puYmCxT7d4lFnkvQUPp/tQAbAYrLpop dh1i0XBTSfaQ6XTMMBJhagg8L38o2+A+cbFjPbyKRlpDw1uTFtH/27Jps2HLFfbW NvZW8uml3xC9A4Vh8Y4Rs1+RWEWYZpCD/lEfNAc77YWR6V3QcCB6tnccv2ru0qjl IHaTvNp5b8vH3ENUf3Q1mAP4FQIHmHdKyRVLhzSNhwIZRYQvmBH6B0HA6oZxAg== -----END CERTIFICATE-----Generated at Thu Sep 24 18:44:50 2026 by rpki-client