$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS152698.roa File: AS152698.roa (raw, json) Hash identifier: hnsIW1R3GFzp2EWEOUmjGWCBLpq1unIz3Ae+n7dX/9I= Subject key identifier: E2:A3:C3:79:62:E1:90:B3:BC:7D:01:EF:85:E3:3E:83:93:AC:B0:88 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 547949F443B33E5B61A3C8A88A0970097FECE11D Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS152698.roa Signing time: Mon 28 Sep 2026 13:18:53 +0000 ROA not before: Mon 28 Sep 2026 13:13:53 +0000 ROA not after: Mon 27 Sep 2027 13:18:53 +0000 asID: 152698 IP address blocks: 186.241.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 10:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:79:49:f4:43:b3:3e:5b:61:a3:c8:a8:8a:09:70:09:7f:ec:e1:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 28 13:13:53 2026 GMT Not After : Sep 27 13:18:53 2027 GMT Subject: CN=E2A3C37962E190B3BC7D01EF85E33E8393ACB088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:75:c4:81:aa:4e:27:d6:f5:18:91:54:fc:64: f7:a1:b1:2e:15:c3:92:31:37:38:db:05:2e:7b:0b: 10:28:2b:98:02:54:80:4f:c7:0c:3d:3d:a7:e0:11: 25:72:61:35:a6:dd:5b:8c:3a:12:5b:30:2b:34:17: ae:48:a5:c9:71:35:11:cd:46:36:f0:47:f3:b3:81: bc:11:8b:7f:46:1d:4b:d4:68:71:d3:c5:cc:f8:72: 41:a4:a1:1a:ac:4f:f6:a6:02:d2:01:dc:91:31:5b: 8a:fe:00:9c:91:1e:2b:52:f1:66:23:77:6f:ed:b7: 59:ea:24:9a:25:83:54:4c:ba:61:e6:7f:32:74:f3: f4:63:86:fa:c2:1b:3e:5a:04:7d:34:55:d4:7b:38: c4:13:16:f2:21:21:4c:2e:ad:b7:03:d5:6d:96:ab: 22:a6:81:d6:ff:c4:e7:de:02:68:08:bc:f7:48:5d: 09:91:a9:64:7b:8a:46:a8:2e:b6:09:76:e2:31:c0: 75:5c:d7:76:2e:58:a2:82:6a:73:3b:59:6f:6e:00: f2:c1:07:0c:70:52:9a:4b:81:a7:91:69:0d:43:43: 14:6f:76:03:ec:39:5a:ff:45:56:6e:e1:b8:86:3c: 5d:52:46:04:0b:f8:5c:55:7b:47:0a:9a:a0:c0:5b: 26:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A3:C3:79:62:E1:90:B3:BC:7D:01:EF:85:E3:3E:83:93:AC:B0:88 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS152698.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.241.182.0/24 Signature Algorithm: sha256WithRSAEncryption a9:16:8d:05:b9:6d:df:97:6b:cc:b3:96:d4:9a:9b:9c:42:0e: 29:ad:b9:3a:85:5e:2b:d9:0d:bc:3a:1f:8f:cc:bd:3e:2e:ed: 55:bd:28:5b:fa:d8:07:5d:33:87:6d:39:2e:8d:7d:28:30:1e: fe:6f:93:98:50:98:05:00:75:67:3a:1c:83:33:3f:ff:ff:f3: 40:3f:73:3a:a1:d0:5e:05:18:c5:86:ed:88:26:33:e9:60:f6: 84:cd:69:6c:a4:f3:fc:6c:b5:1b:39:25:a2:05:92:d6:6a:13: af:c0:b1:c0:64:53:85:c5:c7:27:d6:a0:83:86:fb:6a:30:aa: 6f:18:17:cd:39:32:f6:f4:80:bb:03:e9:a0:9c:7a:30:ef:34: f8:67:0d:e4:56:5e:80:7e:9b:4f:a3:96:27:32:4f:11:78:7d: 77:da:42:f0:1a:85:84:00:aa:d9:fb:ce:fc:e9:63:54:7c:7f: aa:34:8a:53:af:7e:44:b7:1b:52:7f:ac:3d:2a:2d:75:18:e8: 6d:89:9b:bd:6c:be:40:c8:2f:f5:14:ad:4e:ba:6c:b5:0d:ba: 5a:f9:c3:a5:d9:18:bc:2c:ed:7a:65:00:45:cb:30:df:60:e6: 59:bb:e7:35:2f:50:13:4b:3a:ed:eb:2b:54:be:10:e9:5d:31: 9e:82:63:2a -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUVHlJ9EOzPltho8ioiglwCX/s4R0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MjgxMzEzNTNaFw0yNzA5MjcxMzE4NTNaMDMxMTAvBgNV BAMTKEUyQTNDMzc5NjJFMTkwQjNCQzdEMDFFRjg1RTMzRTgzOTNBQ0IwODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRdcSBqk4n1vUYkVT8ZPehsS4V w5IxNzjbBS57CxAoK5gCVIBPxww9PafgESVyYTWm3VuMOhJbMCs0F65IpclxNRHN RjbwR/OzgbwRi39GHUvUaHHTxcz4ckGkoRqsT/amAtIB3JExW4r+AJyRHitS8WYj d2/tt1nqJJolg1RMumHmfzJ08/RjhvrCGz5aBH00VdR7OMQTFvIhIUwurbcD1W2W qyKmgdb/xOfeAmgIvPdIXQmRqWR7ikaoLrYJduIxwHVc13YuWKKCanM7WW9uAPLB BwxwUppLgaeRaQ1DQxRvdgPsOVr/RVZu4biGPF1SRgQL+FxVe0cKmqDAWyahAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU4qPDeWLhkLO8fQHvheM+g5OssIgwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxNTI2OTgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAC68bYwDQYJKoZIhvcNAQELBQADggEBAKkWjQW5bd+Xa8yzltSam5xC DimtuTqFXivZDbw6H4/MvT4u7VW9KFv62AddM4dtOS6NfSgwHv5vk5hQmAUAdWc6 HIMzP///80A/czqh0F4FGMWG7YgmM+lg9oTNaWyk8/xstRs5JaIFktZqE6/AscBk U4XFxyfWoIOG+2owqm8YF805Mvb0gLsD6aCcejDvNPhnDeRWXoB+m0+jlicyTxF4 fXfaQvAahYQAqtn7zvzpY1R8f6o0ilOvfkS3G1J/rD0qLXUY6G2Jm71svkDIL/UU rU66bLUNulr5w6XZGLws7XplAEXLMN9g5lm75zUvUBNLOu3rK1S+EOldMZ6CYyo= -----END CERTIFICATE-----Generated at Sat Oct 3 18:26:27 2026 by rpki-client