$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS137517.roa File: AS137517.roa (raw, json) Hash identifier: eDtL9vbh5GY1uTnVQC//qVsQabOaYpAwHTVKWN2E7mM= Subject key identifier: 07:6D:9C:06:7E:74:83:4B:25:67:38:ED:41:29:9B:BA:7C:B2:D1:67 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 3D8D4F5FBD6A9288CCAEE7DB80CC350FA88661C2 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS137517.roa Signing time: Mon 19 Oct 2026 07:59:00 +0000 ROA not before: Mon 19 Oct 2026 07:54:00 +0000 ROA not after: Mon 18 Oct 2027 07:59:00 +0000 asID: 137517 IP address blocks: 177.177.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:8d:4f:5f:bd:6a:92:88:cc:ae:e7:db:80:cc:35:0f:a8:86:61:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 19 07:54:00 2026 GMT Not After : Oct 18 07:59:00 2027 GMT Subject: CN=076D9C067E74834B256738ED41299BBA7CB2D167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6b:6f:12:c1:12:46:01:4e:bb:d2:bf:77:14: b8:1a:16:7a:2e:06:9b:28:34:b5:26:c7:a5:4a:72: a1:af:f4:2e:f9:9c:92:d9:8f:f0:e2:55:3e:eb:33: 60:14:98:f4:af:64:85:17:1b:4a:cc:1e:50:f8:8f: 7a:8b:61:fe:58:31:1f:8a:06:09:81:e3:01:04:a5: a1:64:d8:5f:aa:5d:f1:18:8c:5f:51:a2:b8:4e:8e: ec:2f:69:c0:50:05:e7:1e:d4:43:b9:25:17:ed:d1: a4:79:32:91:a7:f5:12:01:05:b5:36:f4:53:80:d1: 4c:8f:32:20:dc:29:fa:38:96:68:fb:3b:62:93:f2: 65:86:c4:16:86:da:a6:77:b3:65:1a:d0:7d:80:8f: d3:25:b6:d1:44:a2:72:b0:8f:d3:b2:73:63:4c:cc: ea:9c:14:9d:b0:3d:dd:e9:07:d4:cc:05:76:95:91: f2:09:4d:9c:f0:4f:a9:a9:1f:bf:37:44:f0:6f:98: bd:f5:b7:02:71:48:66:8b:d0:59:96:db:8b:66:e7: d5:80:97:09:d1:f5:44:bb:22:b4:9a:ba:25:ae:0b: 6b:4d:02:f1:53:9f:0c:1b:0e:78:75:d3:15:f8:15: 5f:69:4d:23:12:e5:40:ed:10:64:c1:43:4e:e0:e2: 77:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6D:9C:06:7E:74:83:4B:25:67:38:ED:41:29:9B:BA:7C:B2:D1:67 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS137517.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.177.229.0/24 Signature Algorithm: sha256WithRSAEncryption b3:d0:4e:d8:16:58:63:48:f4:1f:4f:f6:e9:8d:04:02:ad:b5: 43:2f:9d:ae:e8:68:ca:8b:b0:ca:c5:4f:b2:aa:cf:e9:10:74: 90:16:14:bf:94:26:81:97:a1:9b:0e:5f:b7:f0:07:27:c4:8b: 09:01:18:47:ab:a5:67:74:b2:62:be:1e:32:f2:42:b2:81:ae: 54:43:b2:e4:35:00:c0:95:e0:25:9e:08:22:a5:66:eb:05:13: df:2f:1c:3d:09:3e:67:a6:0f:9f:41:f2:dc:a8:44:23:fa:dc: 05:fe:a8:0f:45:23:90:fb:26:6e:4c:d7:77:8a:b4:c3:71:a9: 19:09:2f:e3:8f:d1:8e:e9:1a:03:67:02:e2:b7:6f:6e:54:6c: 89:72:02:6a:3b:92:45:49:e5:a2:06:72:8e:b7:a9:e9:42:71: 4e:ad:9f:74:29:55:1e:5d:9c:c9:7b:28:29:95:b7:5c:18:c8: b4:00:9c:c7:e6:d2:ff:d9:76:05:fb:8c:ef:8f:90:22:39:70: ea:b6:df:29:5d:cb:22:0b:36:21:ff:ed:af:d4:0a:51:3d:e1: 88:18:9f:c8:4f:dc:30:b3:5a:d1:70:1f:29:0d:7d:37:68:eb: 94:56:08:b1:cf:47:21:ec:92:ff:c9:a7:bf:e9:cd:8b:81:5e: ed:e7:0f:3a -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUPY1PX71qkojMrufbgMw1D6iGYcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMTkwNzU0MDBaFw0yNzEwMTgwNzU5MDBaMDMxMTAvBgNV BAMTKDA3NkQ5QzA2N0U3NDgzNEIyNTY3MzhFRDQxMjk5QkJBN0NCMkQxNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpa28SwRJGAU670r93FLgaFnou BpsoNLUmx6VKcqGv9C75nJLZj/DiVT7rM2AUmPSvZIUXG0rMHlD4j3qLYf5YMR+K BgmB4wEEpaFk2F+qXfEYjF9RorhOjuwvacBQBece1EO5JRft0aR5MpGn9RIBBbU2 9FOA0UyPMiDcKfo4lmj7O2KT8mWGxBaG2qZ3s2Ua0H2Aj9MlttFEonKwj9Oyc2NM zOqcFJ2wPd3pB9TMBXaVkfIJTZzwT6mpH783RPBvmL31twJxSGaL0FmW24tm59WA lwnR9US7IrSauiWuC2tNAvFTnwwbDnh10xX4FV9pTSMS5UDtEGTBQ07g4nfpAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUB22cBn50g0slZzjtQSmbunyy0WcwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxMzc1MTcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACxseUwDQYJKoZIhvcNAQELBQADggEBALPQTtgWWGNI9B9P9umNBAKt tUMvna7oaMqLsMrFT7Kqz+kQdJAWFL+UJoGXoZsOX7fwByfEiwkBGEerpWd0smK+ HjLyQrKBrlRDsuQ1AMCV4CWeCCKlZusFE98vHD0JPmemD59B8tyoRCP63AX+qA9F I5D7Jm5M13eKtMNxqRkJL+OP0Y7pGgNnAuK3b25UbIlyAmo7kkVJ5aIGco63qelC cU6tn3QpVR5dnMl7KCmVt1wYyLQAnMfm0v/ZdgX7jO+PkCI5cOq23yldyyILNiH/ 7a/UClE94YgYn8hP3DCzWtFwHykNfTdo65RWCLHPRyHskv/Jp7/pzYuBXu3nDzo= -----END CERTIFICATE-----Generated at Tue Oct 20 04:18:22 2026 by rpki-client