$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS152726.roa File: AS152726.roa (raw, json) Hash identifier: jreDQ5Lku3EOpkteFiExQkxlTpfrs9wt8rMnx174+80= Subject key identifier: 12:E3:A4:60:99:50:1F:58:FA:07:F2:38:AA:7B:D1:B3:FB:B9:68:DE Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 2D22AA2DEC98B4B62B2E3D12368911AF1FC3D66F Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS152726.roa Signing time: Sat 10 Oct 2026 11:32:55 +0000 ROA not before: Sat 10 Oct 2026 11:27:55 +0000 ROA not after: Sat 09 Oct 2027 11:32:55 +0000 asID: 152726 IP address blocks: 152.237.240.0/24 maxlen: 24 201.50.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:22:aa:2d:ec:98:b4:b6:2b:2e:3d:12:36:89:11:af:1f:c3:d6:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 10 11:27:55 2026 GMT Not After : Oct 9 11:32:55 2027 GMT Subject: CN=12E3A46099501F58FA07F238AA7BD1B3FBB968DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:d2:29:5a:cd:6e:e8:2b:df:a1:86:54:7a: ba:d7:fd:0b:d6:b4:82:a3:bc:c6:ce:dc:8b:62:63: b8:79:3f:af:09:be:00:c4:66:bf:f0:ff:e2:0a:aa: d7:21:1e:ad:5d:a0:a5:f4:44:fa:8f:56:6d:8c:29: ad:8c:a8:93:a0:18:5a:4f:fc:76:13:7d:5e:e8:1e: 7f:6e:2e:57:44:1d:82:df:4a:38:da:5e:ed:a0:7a: 3a:3a:61:38:91:55:ed:66:8e:ec:91:d8:13:c1:01: 8c:64:b9:24:9d:6f:4c:f5:a8:31:6e:b1:35:13:7b: 0c:40:7e:71:20:8b:31:40:09:72:84:62:19:71:07: aa:4c:47:68:20:29:4a:84:a4:5f:74:1e:2e:5d:2d: 4b:b7:0d:5b:32:06:e8:31:30:e1:0f:15:1e:55:23: 09:b3:eb:71:0f:c5:4b:90:3e:17:7c:37:8e:ca:df: ba:c3:74:0a:3c:06:7c:db:d5:53:12:92:59:1d:58: 2a:64:6d:51:84:77:d6:ea:ed:39:45:64:24:d3:3a: 76:21:15:e6:72:96:f8:96:c5:3c:7c:1c:1d:2f:b9: 65:90:56:87:d0:66:79:64:c8:42:8f:88:d7:d7:b5: 34:a2:69:48:31:0c:33:f6:01:8b:60:d4:68:d8:61: 59:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E3:A4:60:99:50:1F:58:FA:07:F2:38:AA:7B:D1:B3:FB:B9:68:DE X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS152726.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.240.0/24 201.50.17.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:d4:08:da:0e:73:74:ba:a6:24:73:52:d4:f7:1c:0f:e1:63: fe:27:5f:57:51:cc:e7:42:a9:d4:66:e2:cd:ee:42:b8:1e:9e: 19:70:42:2e:03:2d:29:7c:8e:ac:6e:fc:54:f9:7c:30:3d:9a: 00:98:5b:9b:71:9e:ae:05:15:f5:40:0a:8f:5d:e0:98:15:79: 2d:62:ee:65:af:cb:70:37:07:f2:d8:06:bd:51:77:45:28:91: 88:cb:91:43:a9:01:7a:42:3e:3c:fb:7b:bd:ee:83:d9:21:79: 0c:2d:dd:b2:77:48:66:66:87:fa:ce:d7:e1:6b:13:ce:5a:c6: 1a:36:60:0b:08:6b:2a:e0:e0:63:c2:33:bf:f0:ff:8d:b2:8d: 98:02:be:ba:ac:a4:b3:29:56:86:33:18:8e:8f:6a:83:4d:74: 08:eb:8f:c4:9a:19:79:9e:b2:e8:10:41:cd:c5:b7:1d:d4:92: 7f:47:0f:55:0f:a7:31:a6:07:7c:f9:4b:8a:e6:6d:b2:41:4e: 05:b8:fc:dd:f9:98:26:71:cd:98:e4:42:ca:7f:88:d8:05:85: fd:e3:92:bd:56:16:67:5c:3a:c2:0b:3d:76:12:aa:b5:cb:e6: 6b:40:86:e7:06:be:af:e0:f9:8a:8e:23:29:54:02:3c:a3:d1: ec:4d:d6:31 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIULSKqLeyYtLYrLj0SNokRrx/D1m8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMTAxMTI3NTVaFw0yNzEwMDkxMTMyNTVaMDMxMTAvBgNV BAMTKDEyRTNBNDYwOTk1MDFGNThGQTA3RjIzOEFBN0JEMUIzRkJCOTY4REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+sNIpWs1u6CvfoYZUerrX/QvW tIKjvMbO3ItiY7h5P68JvgDEZr/w/+IKqtchHq1doKX0RPqPVm2MKa2MqJOgGFpP /HYTfV7oHn9uLldEHYLfSjjaXu2gejo6YTiRVe1mjuyR2BPBAYxkuSSdb0z1qDFu sTUTewxAfnEgizFACXKEYhlxB6pMR2ggKUqEpF90Hi5dLUu3DVsyBugxMOEPFR5V Iwmz63EPxUuQPhd8N47K37rDdAo8Bnzb1VMSklkdWCpkbVGEd9bq7TlFZCTTOnYh FeZylviWxTx8HB0vuWWQVofQZnlkyEKPiNfXtTSiaUgxDDP2AYtg1GjYYVmnAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUEuOkYJlQH1j6B/I4qnvRs/u5aN4wHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxNTI3MjYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBACY7fADBADJMhEwDQYJKoZIhvcNAQELBQADggEBAG/UCNoOc3S6piRz UtT3HA/hY/4nX1dRzOdCqdRm4s3uQrgenhlwQi4DLSl8jqxu/FT5fDA9mgCYW5tx nq4FFfVACo9d4JgVeS1i7mWvy3A3B/LYBr1Rd0UokYjLkUOpAXpCPjz7e73ug9kh eQwt3bJ3SGZmh/rO1+FrE85axho2YAsIayrg4GPCM7/w/42yjZgCvrqspLMpVoYz GI6PaoNNdAjrj8SaGXmesugQQc3Ftx3Ukn9HD1UPpzGmB3z5S4rmbbJBTgW4/N35 mCZxzZjkQsp/iNgFhf3jkr1WFmdcOsILPXYSqrXL5mtAhucGvq/g+YqOIylUAjyj 0exN1jE= -----END CERTIFICATE-----Generated at Mon Oct 12 02:19:32 2026 by rpki-client