$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS152179.roa File: AS152179.roa (raw, json) Hash identifier: JqUOueUS2jO0XUxPTdIO+z3zWBGtal98jxL+XaWKIfY= Subject key identifier: 38:EB:57:CB:53:3E:AA:6A:74:C7:42:1F:50:E7:78:D5:7D:9B:7A:B3 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 2E5E56CB08521092F713D96E6C3497914C829F00 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS152179.roa Signing time: Tue 29 Sep 2026 05:55:18 +0000 ROA not before: Tue 29 Sep 2026 05:50:18 +0000 ROA not after: Tue 28 Sep 2027 05:55:18 +0000 asID: 152179 IP address blocks: 152.237.245.0/24 maxlen: 24 201.50.19.0/24 maxlen: 24 201.50.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 15:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:5e:56:cb:08:52:10:92:f7:13:d9:6e:6c:34:97:91:4c:82:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 29 05:50:18 2026 GMT Not After : Sep 28 05:55:18 2027 GMT Subject: CN=38EB57CB533EAA6A74C7421F50E778D57D9B7AB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:06:b9:37:6b:9e:16:65:44:f8:d3:b3:68: a7:de:0c:21:6c:2c:f9:4b:61:82:fc:9c:68:b9:42: d7:17:5a:7b:f9:8d:d7:42:00:07:e0:cf:3e:95:d5: 74:6d:ac:23:f8:fb:95:5e:15:84:5e:f8:75:75:b4: 06:8d:ca:86:6b:ba:3a:93:6f:fd:4d:c4:f9:b1:b5: e8:c9:27:25:57:fb:cc:32:c6:25:95:b0:0d:91:46: 25:fe:82:8e:06:b7:f0:62:f5:74:2c:e9:1b:b4:a1: 7b:cd:f2:47:5e:30:f4:1f:50:82:32:6c:8f:d1:70: f0:9f:45:6e:91:8e:62:87:8f:70:56:55:3a:48:97: 87:4a:12:09:1f:42:03:8e:40:e1:82:01:89:a4:73: 87:02:da:bf:2b:74:13:d3:8a:e5:92:93:56:90:67: c7:2c:e1:a4:8c:c7:7b:3d:27:9c:92:16:80:ad:2b: 84:d9:b1:fc:89:80:d2:fa:7b:f0:20:f6:44:47:d5: 66:35:2a:04:6f:62:5f:f3:ca:da:f3:6c:b9:c1:00: f1:ed:91:5a:b7:11:8e:c9:61:6d:2e:76:7b:d7:1f: 84:be:3d:b8:43:b3:de:fb:e1:b7:29:54:f8:2e:3e: e8:fe:c2:9f:b9:05:ab:47:76:43:2f:3f:30:1a:aa: 36:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:EB:57:CB:53:3E:AA:6A:74:C7:42:1F:50:E7:78:D5:7D:9B:7A:B3 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS152179.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.245.0/24 201.50.19.0/24 201.50.21.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:7a:db:c0:9f:7c:87:44:5c:a6:2b:e5:f1:e3:4d:71:cd:0f: 46:05:5c:b6:55:fa:ff:86:09:b3:af:87:a5:d0:5d:55:c2:cf: 1d:ff:30:70:15:b2:08:43:ed:df:c2:ba:ea:5f:bc:bc:92:05: 90:68:01:b3:1d:77:82:88:42:50:f7:36:ae:69:27:26:64:fb: 2d:fe:c3:1e:10:1d:d6:d4:e3:4e:2a:b0:39:6b:71:e3:65:d7: 90:dc:6c:03:58:86:94:0c:6b:53:bb:13:0b:c7:3f:6d:dd:56: 16:55:e4:59:1f:8a:0c:6b:06:5a:51:44:bb:f0:3c:59:da:89: b6:a8:b0:c2:87:0c:eb:85:10:7b:57:5f:4f:8e:26:49:11:07: a5:70:01:55:35:b2:89:88:66:6c:c9:ab:7d:98:fc:05:3c:45: 79:5c:97:40:92:55:ff:80:00:fd:fd:64:f7:0d:37:dd:b4:c9: 2d:7b:22:6e:5a:61:6f:45:34:ef:a9:50:fc:0d:f7:ed:21:4e: 35:55:ca:6e:2b:50:0e:db:2b:98:34:7e:54:da:f2:a8:b4:c7: dc:ce:cc:75:ba:41:5a:aa:a9:78:77:c1:ab:29:6c:a1:2d:ab: 40:6b:ce:d9:e9:9c:81:9e:eb:7d:8f:07:06:81:99:33:47:f5: d7:34:a5:73 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIULl5WywhSEJL3E9lubDSXkUyCnwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MjkwNTUwMThaFw0yNzA5MjgwNTU1MThaMDMxMTAvBgNV BAMTKDM4RUI1N0NCNTMzRUFBNkE3NEM3NDIxRjUwRTc3OEQ1N0Q5QjdBQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC5Aa5N2ueFmVE+NOzaKfeDCFs LPlLYYL8nGi5QtcXWnv5jddCAAfgzz6V1XRtrCP4+5VeFYRe+HV1tAaNyoZrujqT b/1NxPmxtejJJyVX+8wyxiWVsA2RRiX+go4Gt/Bi9XQs6Ru0oXvN8kdeMPQfUIIy bI/RcPCfRW6RjmKHj3BWVTpIl4dKEgkfQgOOQOGCAYmkc4cC2r8rdBPTiuWSk1aQ Z8cs4aSMx3s9J5ySFoCtK4TZsfyJgNL6e/Ag9kRH1WY1KgRvYl/zytrzbLnBAPHt kVq3EY7JYW0udnvXH4S+PbhDs9774bcpVPguPuj+wp+5BatHdkMvPzAaqjbLAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUOOtXy1M+qmp0x0IfUOd41X2berMwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxNTIxNzkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBACY7fUDBADJMhMDBADJMhUwDQYJKoZIhvcNAQELBQADggEBAAp628Cf fIdEXKYr5fHjTXHND0YFXLZV+v+GCbOvh6XQXVXCzx3/MHAVsghD7d/CuupfvLyS BZBoAbMdd4KIQlD3Nq5pJyZk+y3+wx4QHdbU404qsDlrceNl15DcbANYhpQMa1O7 EwvHP23dVhZV5FkfigxrBlpRRLvwPFnaibaosMKHDOuFEHtXX0+OJkkRB6VwAVU1 somIZmzJq32Y/AU8RXlcl0CSVf+AAP39ZPcNN920yS17Im5aYW9FNO+pUPwN9+0h TjVVym4rUA7bK5g0flTa8qi0x9zOzHW6QVqqqXh3waspbKEtq0BrztnpnIGe632P BwaBmTNH9dc0pXM= -----END CERTIFICATE-----Generated at Sun Oct 4 11:13:37 2026 by rpki-client