$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: 07XzOsE0W7RGUqwHeJDAkPYkr3ZgQzv7Yc95YWrmhnc= Subject key identifier: DB:BA:97:20:75:5D:1F:C0:01:04:F0:12:DD:E4:EF:46:6C:6B:56:7C Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 6857B6F22BDB3F65723104F9A4A02FA3AA3A0C09 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS9304.roa Signing time: Sun 08 Nov 2026 00:09:21 +0000 ROA not before: Sun 08 Nov 2026 00:04:21 +0000 ROA not after: Sun 07 Nov 2027 00:09:21 +0000 asID: 9304 IP address blocks: 152.237.224.0/24 maxlen: 24 152.237.242.0/24 maxlen: 24 186.241.160.0/24 maxlen: 24 186.241.168.0/24 maxlen: 24 186.241.171.0/24 maxlen: 24 186.241.188.0/24 maxlen: 24 201.4.26.0/24 maxlen: 24 201.4.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Nov 2026 02:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:57:b6:f2:2b:db:3f:65:72:31:04:f9:a4:a0:2f:a3:aa:3a:0c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Nov 8 00:04:21 2026 GMT Not After : Nov 7 00:09:21 2027 GMT Subject: CN=DBBA9720755D1FC00104F012DDE4EF466C6B567C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:b9:99:75:56:3d:86:dc:5b:1b:95:ab:66: 96:25:b6:fa:31:3f:d9:20:10:39:47:dc:60:c7:33: 7d:81:9c:67:cf:3e:8c:0f:57:5d:96:73:7b:0a:b5: be:de:be:a1:69:de:0d:95:85:58:a4:5e:7e:c2:49: 17:89:4f:4e:4e:53:89:d4:ba:55:77:f8:db:4e:75: 48:2f:b9:e0:19:fe:66:a1:99:aa:62:09:c0:90:ae: 6e:00:96:de:45:f8:60:a1:52:db:e8:4f:b7:18:63: b3:8b:c0:50:4d:fc:42:c8:f0:e0:ec:fd:27:39:1f: ce:73:fc:a3:46:94:91:6b:27:69:67:26:05:bb:18: a3:08:cc:7d:9e:1d:b5:6f:b5:17:7c:b5:54:2a:5f: 70:5c:f6:11:f8:0c:3e:ae:a4:24:5d:07:29:52:00: 10:61:78:3d:91:ea:2b:cd:88:57:6e:ba:4d:d8:d0: 30:49:4b:4f:dc:74:a0:c9:c1:81:b0:48:d6:b8:c9: 65:9e:e2:ab:3a:1d:08:c4:b8:d8:4c:52:c7:53:c2: 76:42:bc:cc:0c:14:46:36:73:39:7a:5c:31:70:99: 1e:af:5c:60:e0:63:87:aa:ba:b3:45:43:74:4d:f3: 70:55:1b:03:09:df:17:cc:39:53:6b:43:30:fa:ae: 13:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BA:97:20:75:5D:1F:C0:01:04:F0:12:DD:E4:EF:46:6C:6B:56:7C X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.224.0/24 152.237.242.0/24 186.241.160.0/24 186.241.168.0/24 186.241.171.0/24 186.241.188.0/24 201.4.26.0/24 201.4.28.0/24 Signature Algorithm: sha256WithRSAEncryption 35:3b:24:d8:95:ce:8f:86:c8:e0:93:67:f4:3c:e3:e4:80:4a: 2f:fc:4c:71:34:b8:eb:2c:0e:a4:15:54:f5:0e:f9:a0:c4:a9: 54:f5:57:67:f1:a7:ff:44:a3:25:db:27:a0:50:5d:18:c7:fb: fb:b5:df:78:d2:d9:f3:84:de:df:ae:fd:98:e6:5e:75:de:85: 56:27:c1:2b:a6:fe:2a:01:05:66:00:d0:8b:a7:81:64:c1:45: 21:11:13:d4:a4:4e:74:d6:77:d5:fd:dd:62:ba:d0:29:a1:a4: fa:b0:a1:bf:cf:e6:c8:0b:db:ab:ad:91:e9:92:d6:af:60:9f: 41:c2:56:ac:91:7c:90:d4:25:28:ab:71:48:3f:08:93:1a:d1: c4:cb:1f:08:f0:2c:55:1e:2f:12:07:c4:81:df:f8:a6:55:2c: 9e:a5:28:b4:3c:e9:a4:3c:b5:8f:34:39:97:2a:63:b0:14:ce: 20:95:72:81:58:bc:34:79:e1:59:74:38:f6:a7:16:34:4e:07: 81:15:87:d5:4f:8e:52:56:f6:b8:af:35:60:54:de:a7:1c:fa: d1:86:da:13:4e:d0:4f:05:7a:8f:41:4a:d0:dd:e8:e1:ce:d6: ac:a6:fa:25:f6:8a:7e:ee:aa:21:57:c4:77:8d:b9:3b:99:ab: af:d6:4c:8e -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgIUaFe28ivbP2VyMQT5pKAvo6o6DAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjExMDgwMDA0MjFaFw0yNzExMDcwMDA5MjFaMDMxMTAvBgNV BAMTKERCQkE5NzIwNzU1RDFGQzAwMTA0RjAxMkRERTRFRjQ2NkM2QjU2N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiMbmZdVY9htxbG5WrZpYltvox P9kgEDlH3GDHM32BnGfPPowPV12Wc3sKtb7evqFp3g2VhVikXn7CSReJT05OU4nU ulV3+NtOdUgvueAZ/mahmapiCcCQrm4Alt5F+GChUtvoT7cYY7OLwFBN/ELI8ODs /Sc5H85z/KNGlJFrJ2lnJgW7GKMIzH2eHbVvtRd8tVQqX3Bc9hH4DD6upCRdBylS ABBheD2R6ivNiFduuk3Y0DBJS0/cdKDJwYGwSNa4yWWe4qs6HQjEuNhMUsdTwnZC vMwMFEY2czl6XDFwmR6vXGDgY4equrNFQ3RN83BVGwMJ3xfMOVNrQzD6rhO5AgMB AAGjggJtMIICaTAdBgNVHQ4EFgQU27qXIHVdH8ABBPAS3eTvRmxrVnwwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVM5MzA0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIA ATAwAwQAmO3gAwQAmO3yAwQAuvGgAwQAuvGoAwQAuvGrAwQAuvG8AwQAyQQaAwQA yQQcMA0GCSqGSIb3DQEBCwUAA4IBAQA1OyTYlc6Phsjgk2f0POPkgEov/ExxNLjr LA6kFVT1DvmgxKlU9Vdn8af/RKMl2yegUF0Yx/v7td940tnzhN7frv2Y5l513oVW J8Erpv4qAQVmANCLp4FkwUUhERPUpE501nfV/d1iutApoaT6sKG/z+bIC9urrZHp ktavYJ9BwlaskXyQ1CUoq3FIPwiTGtHEyx8I8CxVHi8SB8SB3/imVSyepSi0POmk PLWPNDmXKmOwFM4glXKBWLw0eeFZdDj2pxY0TgeBFYfVT45SVva4rzVgVN6nHPrR htoTTtBPBXqPQUrQ3ejhztaspvol9op+7qohV8R3jbk7mauv1kyO -----END CERTIFICATE-----Generated at Wed Nov 11 20:40:07 2026 by rpki-client