$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS198566.roa File: AS198566.roa (raw, json) Hash identifier: myju84xfPZiU5+2tdUhHxxt7vnjeA/BC4LZ8vZQ0JtM= Subject key identifier: 54:41:C6:B8:FB:77:A7:9E:C8:B2:1F:FD:3C:95:83:17:0A:DE:2E:18 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 0A1C2F6D9A732F010D80EABC8C4118251E86C8B4 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS198566.roa Signing time: Sun 04 Oct 2026 20:20:01 +0000 ROA not before: Sun 04 Oct 2026 20:15:01 +0000 ROA not after: Sun 03 Oct 2027 20:20:01 +0000 asID: 198566 IP address blocks: 152.237.238.0/24 maxlen: 24 152.237.248.0/24 maxlen: 24 186.241.180.0/24 maxlen: 24 201.4.17.0/24 maxlen: 24 201.4.18.0/24 maxlen: 24 201.4.31.0/24 maxlen: 24 201.50.25.0/24 maxlen: 24 201.50.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 11:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:1c:2f:6d:9a:73:2f:01:0d:80:ea:bc:8c:41:18:25:1e:86:c8:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 4 20:15:01 2026 GMT Not After : Oct 3 20:20:01 2027 GMT Subject: CN=5441C6B8FB77A79EC8B21FFD3C9583170ADE2E18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:76:5b:9a:4b:6d:df:97:d5:81:93:c6:0f:63: 8f:de:b3:77:78:3e:87:50:a8:dc:4d:1b:cc:48:c4: 9b:19:b1:b5:0f:9c:0d:f5:0c:1f:44:6d:79:26:ef: a1:87:39:5d:92:b3:91:43:42:3d:16:7a:e7:f3:ff: 33:60:38:9b:9f:db:ce:7b:e5:84:1b:34:f4:a8:50: b6:3a:9c:d7:cb:bb:1c:aa:84:22:d2:fe:30:ad:f5: 31:0a:31:f4:96:d9:c4:2a:c0:57:6e:76:5e:89:bf: 8c:26:a9:13:c8:45:2b:12:20:56:aa:8f:78:14:bc: ce:ef:9b:44:87:b1:c7:89:6a:ff:08:56:6e:29:e2: 91:f3:21:99:c9:58:cc:0d:8f:a7:d5:a0:cc:41:13: 7e:1a:a2:1b:30:ac:79:d9:62:82:41:96:b6:72:f3: 12:5b:50:9e:03:35:45:c7:86:09:a7:4c:fb:45:e6: 52:78:45:e4:42:00:76:4a:16:68:c8:bf:d3:43:aa: 6f:a1:9c:b3:54:d5:3f:85:36:b1:2a:c3:e8:e6:1e: c3:ce:0d:2f:03:48:39:26:a1:3d:b3:e9:9a:4e:07: 64:cf:72:c5:01:54:9d:24:25:f4:b3:30:54:0b:1c: 20:fa:b4:50:90:77:49:63:eb:df:97:fc:e0:48:79: e3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:41:C6:B8:FB:77:A7:9E:C8:B2:1F:FD:3C:95:83:17:0A:DE:2E:18 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS198566.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.238.0/24 152.237.248.0/24 186.241.180.0/24 201.4.17.0-201.4.18.255 201.4.31.0/24 201.50.25.0/24 201.50.28.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:ed:6c:c6:55:63:13:86:63:75:85:0e:0b:9e:79:a7:89:df: f7:89:c6:95:cc:01:22:e6:14:5f:ab:2f:f0:7b:61:37:4d:ea: 86:54:1a:63:13:5e:20:c9:53:d7:10:26:6a:c7:a4:8d:44:73: 77:8a:d4:b2:ff:a0:44:0a:05:a7:bd:66:87:55:42:1e:3e:4f: d9:2a:86:9f:d1:59:4f:80:6e:48:c2:61:b9:d3:53:1a:b8:ea: 67:c9:ad:ea:76:be:06:fe:f7:71:1c:70:fd:2a:2f:e8:dc:5b: f8:62:66:82:fc:2b:70:7b:08:2a:be:c4:78:21:ca:df:38:0f: 2a:09:69:3b:09:c2:e2:ba:0a:1a:a1:a9:54:dd:2e:f6:88:2a: 6b:e2:d4:62:cd:ec:60:fd:41:34:71:82:f2:56:dd:27:82:5c: ab:c4:bc:99:9b:b0:c2:c8:0c:b2:34:d8:40:d6:8e:5b:85:0f: 0c:ef:af:b3:48:3d:15:32:d4:b6:f4:b5:77:98:d4:df:7a:49: 01:68:ca:77:2f:af:5b:82:37:74:a7:ba:e7:2a:05:07:46:86: 20:39:14:28:d0:af:d6:77:15:2e:87:4b:98:4c:33:bd:63:8c: 34:7e:d3:eb:bd:22:1e:aa:80:d2:73:fe:85:4b:57:dd:39:ef: a9:97:f6:47 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgIUChwvbZpzLwENgOq8jEEYJR6GyLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMDQyMDE1MDFaFw0yNzEwMDMyMDIwMDFaMDMxMTAvBgNV BAMTKDU0NDFDNkI4RkI3N0E3OUVDOEIyMUZGRDNDOTU4MzE3MEFERTJFMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLdluaS23fl9WBk8YPY4/es3d4 PodQqNxNG8xIxJsZsbUPnA31DB9EbXkm76GHOV2Ss5FDQj0Weufz/zNgOJuf2857 5YQbNPSoULY6nNfLuxyqhCLS/jCt9TEKMfSW2cQqwFdudl6Jv4wmqRPIRSsSIFaq j3gUvM7vm0SHsceJav8IVm4p4pHzIZnJWMwNj6fVoMxBE34aohswrHnZYoJBlrZy 8xJbUJ4DNUXHhgmnTPtF5lJ4ReRCAHZKFmjIv9NDqm+hnLNU1T+FNrEqw+jmHsPO DS8DSDkmoT2z6ZpOB2TPcsUBVJ0kJfSzMFQLHCD6tFCQd0lj69+X/OBIeeM3AgMB AAGjggJxMIICbTAdBgNVHQ4EFgQUVEHGuPt3p57Ish/9PJWDFwreLhgwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxOTg1NjYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSwYIKwYBBQUHAQcBAf8EPDA6MDgE AgABMDIDBACY7e4DBACY7fgDBAC68bQwDAMEAMkEEQMEAMkEEgMEAMkEHwMEAMky GQMEAMkyHDANBgkqhkiG9w0BAQsFAAOCAQEAK+1sxlVjE4ZjdYUOC555p4nf94nG lcwBIuYUX6sv8HthN03qhlQaYxNeIMlT1xAmasekjURzd4rUsv+gRAoFp71mh1VC Hj5P2SqGn9FZT4BuSMJhudNTGrjqZ8mt6na+Bv73cRxw/Sov6Nxb+GJmgvwrcHsI Kr7EeCHK3zgPKglpOwnC4roKGqGpVN0u9ogqa+LUYs3sYP1BNHGC8lbdJ4Jcq8S8 mZuwwsgMsjTYQNaOW4UPDO+vs0g9FTLUtvS1d5jU33pJAWjKdy+vW4I3dKe65yoF B0aGIDkUKNCv1ncVLodLmEwzvWOMNH7T670iHqqA0nP+hUtX3TnvqZf2Rw== -----END CERTIFICATE-----Generated at Mon Oct 26 00:48:43 2026 by rpki-client