$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS199550.roa File: AS199550.roa (raw, json) Hash identifier: 93lR+e17F2b//nT0JcqgZSW9QP81DFI1cTiED3pkEbg= Subject key identifier: DD:15:DA:CE:B6:40:8D:26:BC:95:08:6F:58:60:A8:D5:C6:AC:DA:40 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 2A70415D3BAE39132861DBE257B37EFBD75A4C14 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS199550.roa Signing time: Tue 13 Oct 2026 19:02:29 +0000 ROA not before: Tue 13 Oct 2026 18:57:29 +0000 ROA not after: Tue 12 Oct 2027 19:02:29 +0000 asID: 199550 IP address blocks: 152.237.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 09:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:70:41:5d:3b:ae:39:13:28:61:db:e2:57:b3:7e:fb:d7:5a:4c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 13 18:57:29 2026 GMT Not After : Oct 12 19:02:29 2027 GMT Subject: CN=DD15DACEB6408D26BC95086F5860A8D5C6ACDA40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:54:17:fd:16:d6:12:51:e3:c6:16:66:89:5d: 7e:92:cb:d4:b8:63:4a:c0:69:0a:08:b4:21:d6:96: 15:c5:76:1f:97:53:1e:d8:fc:f5:c0:8e:6b:b9:b7: 79:fb:2d:4f:8c:21:19:14:76:3d:fa:19:d6:42:0b: 00:b2:d0:25:c5:4b:49:29:c4:56:1f:db:1d:45:ff: 79:93:37:c6:cb:db:ce:4c:9f:ab:c1:2a:0d:56:98: 2e:88:56:3f:83:04:59:12:0d:c8:3a:88:56:6a:d6: ce:a8:35:2d:44:df:d8:83:ba:2c:d1:5b:a9:8c:5a: b1:33:ee:92:ba:2b:44:69:7d:a0:0f:89:91:0a:e5: 28:a4:b6:d2:ea:bc:9e:31:95:c0:18:47:86:d4:1c: 0c:97:e7:99:94:12:41:b7:5d:42:5e:03:81:a1:44: cf:31:6c:95:c6:57:c9:7f:95:4a:58:10:bb:23:56: b0:52:35:af:bb:15:54:94:6f:5f:8c:93:34:e5:e8: 80:f9:b7:70:4f:06:2f:88:1b:71:47:9a:c5:65:87: 56:50:68:f7:94:8e:27:eb:80:58:74:48:b6:ff:87: 93:e4:d7:cd:74:60:6c:f2:b1:59:7c:ab:28:92:5f: e1:4a:f7:8a:a6:e4:1e:ea:ca:da:92:2d:70:71:bd: b1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:15:DA:CE:B6:40:8D:26:BC:95:08:6F:58:60:A8:D5:C6:AC:DA:40 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS199550.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.232.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:e5:8d:0a:44:55:63:af:36:a9:3c:4c:e0:d3:8e:a9:3e:96: 82:82:38:59:0a:fa:2b:76:23:e3:d3:3f:f7:c6:05:08:67:ec: 0e:d2:6e:85:2c:5c:71:e8:77:9a:a5:ec:2c:36:02:59:ae:5f: e2:4a:bf:d1:a1:30:7b:46:78:5e:f0:e3:a1:92:cc:c3:1e:e0: 37:5b:26:68:de:de:e2:78:62:3f:5e:99:d2:c2:7a:81:4e:d5: 33:bc:4c:47:dd:fc:0d:33:b2:9d:a6:a5:d2:3b:6b:f5:0c:0d: 21:19:d2:5c:b8:05:93:0c:23:ec:c3:ba:49:ab:b7:8c:69:15: 4e:d4:48:61:58:20:18:38:ee:42:9e:60:b7:36:af:70:b9:5d: a1:01:97:24:33:7a:c3:ed:57:40:75:05:16:c0:e4:d7:14:30: dd:dd:18:05:a2:de:c2:c8:46:19:e7:e7:3f:9f:2a:63:f2:68: aa:31:97:9e:e3:34:c6:1e:53:69:00:47:12:e2:75:2f:76:94: 81:1b:58:c4:2e:de:d0:b0:2a:d7:73:47:ca:e4:92:d4:dd:6b: e2:94:95:08:09:6a:87:40:b9:72:59:29:01:ca:5e:a1:de:cf: 80:d3:97:f7:1f:da:3f:d3:f3:6b:1c:88:ea:7d:e5:f9:ff:35: 3c:63:41:15 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUKnBBXTuuORMoYdviV7N++9daTBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMTMxODU3MjlaFw0yNzEwMTIxOTAyMjlaMDMxMTAvBgNV BAMTKEREMTVEQUNFQjY0MDhEMjZCQzk1MDg2RjU4NjBBOEQ1QzZBQ0RBNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvVBf9FtYSUePGFmaJXX6Sy9S4 Y0rAaQoItCHWlhXFdh+XUx7Y/PXAjmu5t3n7LU+MIRkUdj36GdZCCwCy0CXFS0kp xFYf2x1F/3mTN8bL285Mn6vBKg1WmC6IVj+DBFkSDcg6iFZq1s6oNS1E39iDuizR W6mMWrEz7pK6K0RpfaAPiZEK5SikttLqvJ4xlcAYR4bUHAyX55mUEkG3XUJeA4Gh RM8xbJXGV8l/lUpYELsjVrBSNa+7FVSUb1+MkzTl6ID5t3BPBi+IG3FHmsVlh1ZQ aPeUjifrgFh0SLb/h5Pk1810YGzysVl8qyiSX+FK94qm5B7qytqSLXBxvbH1AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU3RXazrZAjSa8lQhvWGCo1cas2kAwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxOTk1NTAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACY7egwDQYJKoZIhvcNAQELBQADggEBAIvljQpEVWOvNqk8TODTjqk+ loKCOFkK+it2I+PTP/fGBQhn7A7SboUsXHHod5ql7Cw2AlmuX+JKv9GhMHtGeF7w 46GSzMMe4DdbJmje3uJ4Yj9emdLCeoFO1TO8TEfd/A0zsp2mpdI7a/UMDSEZ0ly4 BZMMI+zDukmrt4xpFU7USGFYIBg47kKeYLc2r3C5XaEBlyQzesPtV0B1BRbA5NcU MN3dGAWi3sLIRhnn5z+fKmPyaKoxl57jNMYeU2kARxLidS92lIEbWMQu3tCwKtdz R8rkktTda+KUlQgJaodAuXJZKQHKXqHez4DTl/cf2j/T82sciOp95fn/NTxjQRU= -----END CERTIFICATE-----Generated at Tue Oct 20 04:25:14 2026 by rpki-client