$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS36530.roa File: AS36530.roa (raw, json) Hash identifier: c5oyfNpSaLAs1++vuJ/bwf616yaSJHvllt9e4SVMKNQ= Subject key identifier: 68:97:B1:C1:36:C8:FE:1A:70:1A:6A:22:C9:07:E9:C2:07:6D:F1:C9 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 61B4406C331380F719B74C3650F3DFB6B191BEEC Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS36530.roa Signing time: Tue 22 Sep 2026 08:47:06 +0000 ROA not before: Tue 22 Sep 2026 08:42:06 +0000 ROA not after: Tue 21 Sep 2027 08:47:06 +0000 asID: 36530 IP address blocks: 187.5.0.0/23 maxlen: 24 187.5.2.0/23 maxlen: 24 187.5.4.0/23 maxlen: 24 200.180.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b4:40:6c:33:13:80:f7:19:b7:4c:36:50:f3:df:b6:b1:91:be:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:06 2026 GMT Not After : Sep 21 08:47:06 2027 GMT Subject: CN=6897B1C136C8FE1A701A6A22C907E9C2076DF1C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c1:1d:b4:8d:28:a0:4b:af:e2:74:e0:41:4c: 0e:97:0f:d0:10:ca:fa:7d:06:fe:22:c3:77:5a:bf: d8:30:30:fa:7d:09:58:5a:8b:fe:35:b6:d2:e4:9d: 9e:48:be:a2:7b:e7:ee:5a:59:ab:48:10:8a:14:71: c7:d9:18:ae:2d:8d:ba:e4:8e:f7:90:d8:e3:c9:6d: 72:64:f5:68:52:6c:8e:00:8d:87:92:e7:06:97:7f: 58:1c:fc:33:d7:e5:66:d3:d9:40:32:ab:28:8a:15: 91:d3:f9:db:d6:49:10:ed:5d:ff:b2:cf:74:39:15: ca:80:4b:52:6d:fc:6c:f4:c9:bb:83:c6:0c:a8:65: 41:f4:47:19:db:43:b8:13:9c:e4:a9:3f:be:9f:2b: 4b:24:00:88:71:0f:81:e8:fd:68:bd:09:8e:94:03: ce:8d:22:78:19:ee:58:19:aa:9e:53:28:c3:34:f9: 65:e7:47:e0:f1:98:de:eb:7a:86:a6:da:d0:ff:03: 57:c1:cb:36:4f:70:9a:c9:ea:e2:f3:d3:9a:d5:4c: 4e:a7:26:bd:b6:08:1e:d1:75:2d:37:cc:0f:f1:13: 02:92:04:fc:f4:4e:78:4a:16:07:35:ad:3b:0f:2e: 29:d1:67:93:7d:7f:6a:00:cf:66:c5:bd:f6:e8:4c: 0c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:97:B1:C1:36:C8:FE:1A:70:1A:6A:22:C9:07:E9:C2:07:6D:F1:C9 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS36530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.5.0.0-187.5.5.255 200.180.160.0/21 Signature Algorithm: sha256WithRSAEncryption 4b:98:f5:50:b2:91:cb:53:d8:13:4e:66:16:8f:80:78:4e:88: 4f:69:f1:13:de:aa:be:80:c1:40:33:97:63:e8:9b:50:70:1c: 98:12:95:8e:92:5d:54:ae:65:56:6b:f7:9c:ea:96:82:28:8a: 41:de:37:f1:a7:82:48:e6:9a:c5:5c:4e:19:e2:e8:a5:61:71: 16:36:9b:a4:7b:ca:b9:61:a4:fa:0b:fe:68:a5:9d:41:22:81: 79:b6:e9:35:6b:d3:7d:f2:ed:09:eb:c4:c7:64:4c:c9:bf:4d: d1:20:55:d6:4a:da:6f:6e:37:4e:fe:82:e3:3f:8f:29:b7:2b: 73:d3:84:f1:ee:21:f7:a4:c5:cb:a5:1c:8b:3a:ed:ff:c7:7f: 0f:76:dd:bc:9e:08:ae:e2:42:1b:c0:a9:ab:b9:6d:21:8c:d3: 4a:7f:a4:76:f1:5d:27:8a:22:5f:a0:2b:4f:95:59:be:1e:a6: 0c:a9:5f:d5:25:f1:21:30:16:34:8b:9e:62:5a:2a:83:f1:c9: 2a:23:7d:8f:0b:9e:21:d2:0e:81:a4:f6:25:7e:35:0b:8e:d2: 21:63:d5:15:9e:43:c4:31:b8:09:b2:11:b8:2f:24:19:23:83: 16:50:49:2a:f9:67:4e:c4:37:20:77:e2:5e:12:69:ce:3e:b2: 01:e0:d7:93 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUYbRAbDMTgPcZt0w2UPPftrGRvuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDZaFw0yNzA5MjEwODQ3MDZaMDMxMTAvBgNV BAMTKDY4OTdCMUMxMzZDOEZFMUE3MDFBNkEyMkM5MDdFOUMyMDc2REYxQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkwR20jSigS6/idOBBTA6XD9AQ yvp9Bv4iw3dav9gwMPp9CVhai/41ttLknZ5IvqJ75+5aWatIEIoUccfZGK4tjbrk jveQ2OPJbXJk9WhSbI4AjYeS5waXf1gc/DPX5WbT2UAyqyiKFZHT+dvWSRDtXf+y z3Q5FcqAS1Jt/Gz0ybuDxgyoZUH0RxnbQ7gTnOSpP76fK0skAIhxD4Ho/Wi9CY6U A86NIngZ7lgZqp5TKMM0+WXnR+DxmN7reoam2tD/A1fByzZPcJrJ6uLz05rVTE6n Jr22CB7RdS03zA/xEwKSBPz0TnhKFgc1rTsPLinRZ5N9f2oAz2bFvfboTAwpAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUaJexwTbI/hpwGmoiyQfpwgdt8ckwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMzNjUzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAsBggrBgEFBQcBBwEB/wQdMBswGQQC AAEwEzALAwMAuwUDBAG7BQQDBAPItKAwDQYJKoZIhvcNAQELBQADggEBAEuY9VCy kctT2BNOZhaPgHhOiE9p8RPeqr6AwUAzl2Pom1BwHJgSlY6SXVSuZVZr95zqloIo ikHeN/GngkjmmsVcThni6KVhcRY2m6R7yrlhpPoL/milnUEigXm26TVr033y7Qnr xMdkTMm/TdEgVdZK2m9uN07+guM/jym3K3PThPHuIfekxculHIs67f/Hfw923bye CK7iQhvAqau5bSGM00p/pHbxXSeKIl+gK0+VWb4epgypX9Ul8SEwFjSLnmJaKoPx ySojfY8LniHSDoGk9iV+NQuO0iFj1RWeQ8QxuAmyEbgvJBkjgxZQSSr5Z07ENyB3 4l4Sac4+sgHg15M= -----END CERTIFICATE-----Generated at Thu Sep 24 10:31:59 2026 by rpki-client