$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS209829.roa File: AS209829.roa (raw, json) Hash identifier: zh7d9VaIeocAt4usL8RKMDyHNzfahI9EnB0q9glYWaY= Subject key identifier: ED:3C:55:CB:C6:C5:72:BE:B2:31:83:44:8D:F1:9D:4E:21:D7:37:3B Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 4865D1DBB588309D00FB869CE8A3DFA65F376410 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS209829.roa Signing time: Fri 25 Sep 2026 10:04:29 +0000 ROA not before: Fri 25 Sep 2026 09:59:29 +0000 ROA not after: Fri 24 Sep 2027 10:04:29 +0000 asID: 209829 IP address blocks: 201.50.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 00:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:65:d1:db:b5:88:30:9d:00:fb:86:9c:e8:a3:df:a6:5f:37:64:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 25 09:59:29 2026 GMT Not After : Sep 24 10:04:29 2027 GMT Subject: CN=ED3C55CBC6C572BEB23183448DF19D4E21D7373B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c1:4e:f1:c5:b3:3c:44:b5:4c:ee:9e:36:b4: 2c:65:64:8a:72:0b:f3:55:2c:0c:93:f5:46:0a:95: ed:d8:3c:4e:34:9a:8d:5a:23:66:43:e7:3b:9e:ee: 1c:54:91:86:98:3b:4f:b2:db:e4:bb:3b:80:4e:80: 79:39:a6:74:c1:42:61:30:fe:b3:d1:31:b6:a4:ed: aa:2d:59:0d:a6:ec:48:09:29:1c:1e:60:dd:aa:65: 15:35:7a:d3:ac:7b:45:c3:2a:b9:67:7e:4c:77:3c: 2a:4f:5f:ff:10:5d:a8:6c:97:d4:a6:93:30:89:15: 93:92:b9:b3:a6:3b:c6:af:b8:4d:9f:8a:d7:f6:08: ba:71:67:38:87:0c:b4:cd:7f:e5:06:8b:cd:d2:4e: 50:a8:71:43:01:da:86:45:51:4e:25:14:0b:4b:49: 18:dd:4b:50:fb:54:7f:ab:ed:04:e8:02:29:6b:fd: 9a:82:1d:78:58:c0:18:bd:49:d9:40:c2:89:1f:8f: 8b:e9:ca:5a:fa:f2:06:99:bd:9b:66:a2:12:ef:3a: 9e:06:81:6f:9b:06:6a:4b:e7:7d:11:4e:1e:fd:27: 14:f1:a1:3c:d7:46:7b:4f:e2:18:e7:c3:f4:c1:93: da:19:ff:67:43:3b:5d:40:c7:a8:fb:5f:8d:0b:fa: d7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3C:55:CB:C6:C5:72:BE:B2:31:83:44:8D:F1:9D:4E:21:D7:37:3B X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS209829.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.50.20.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:c4:76:8d:dc:ec:b1:48:04:6f:00:8d:23:3e:db:82:02:f4: 89:b9:e4:c6:05:a7:6f:37:0e:a6:af:f8:ab:a1:93:44:7f:38: 90:57:d5:c1:ca:7a:d1:75:15:0e:ca:a7:6a:94:6a:23:14:fa: 77:70:3c:9c:ec:f7:c5:e4:ec:42:9c:b3:be:a3:dd:8f:4b:90: 6f:55:a9:30:d2:72:7c:c7:d2:c7:14:fd:37:66:48:d6:d8:58: c9:2c:4f:d5:37:4e:4a:54:c1:03:8b:38:51:64:0d:82:d8:dc: d7:3d:f4:cc:eb:e0:bc:5e:0d:87:30:4b:58:e1:a9:61:38:92: e1:4a:46:d7:45:d0:40:ac:5d:d4:72:ac:68:17:c2:e7:6a:c7: cd:66:5f:00:8a:1a:68:33:43:7f:c0:44:e1:30:e4:33:6e:c0: 96:b6:6c:40:37:03:bc:c4:32:5d:01:5d:fb:db:8c:02:77:4a: 27:16:98:b0:9b:95:d0:bb:63:a6:d0:b4:eb:f7:dc:14:0e:12: 07:19:38:f3:5a:e2:68:e5:72:7d:d1:06:15:2e:ad:2c:09:6d: 61:90:26:d9:56:7d:86:5b:7b:4a:22:dc:05:2c:5e:2a:09:da: 74:34:55:5d:e8:a0:cd:34:4e:42:0b:b5:d4:15:f0:52:e0:d3: 08:4a:96:73 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUSGXR27WIMJ0A+4ac6KPfpl83ZBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MjUwOTU5MjlaFw0yNzA5MjQxMDA0MjlaMDMxMTAvBgNV BAMTKEVEM0M1NUNCQzZDNTcyQkVCMjMxODM0NDhERjE5RDRFMjFENzM3M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPwU7xxbM8RLVM7p42tCxlZIpy C/NVLAyT9UYKle3YPE40mo1aI2ZD5zue7hxUkYaYO0+y2+S7O4BOgHk5pnTBQmEw /rPRMbak7aotWQ2m7EgJKRweYN2qZRU1etOse0XDKrlnfkx3PCpPX/8QXahsl9Sm kzCJFZOSubOmO8avuE2fitf2CLpxZziHDLTNf+UGi83STlCocUMB2oZFUU4lFAtL SRjdS1D7VH+r7QToAilr/ZqCHXhYwBi9SdlAwokfj4vpylr68gaZvZtmohLvOp4G gW+bBmpL530RTh79JxTxoTzXRntP4hjnw/TBk9oZ/2dDO11Ax6j7X40L+teXAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU7TxVy8bFcr6yMYNEjfGdTiHXNzswHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMyMDk4Mjkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADJMhQwDQYJKoZIhvcNAQELBQADggEBAIzEdo3c7LFIBG8AjSM+24IC 9Im55MYFp283Dqav+Kuhk0R/OJBX1cHKetF1FQ7Kp2qUaiMU+ndwPJzs98Xk7EKc s76j3Y9LkG9VqTDScnzH0scU/TdmSNbYWMksT9U3TkpUwQOLOFFkDYLY3Nc99Mzr 4LxeDYcwS1jhqWE4kuFKRtdF0ECsXdRyrGgXwudqx81mXwCKGmgzQ3/AROEw5DNu wJa2bEA3A7zEMl0BXfvbjAJ3SicWmLCbldC7Y6bQtOv33BQOEgcZOPNa4mjlcn3R BhUurSwJbWGQJtlWfYZbe0oi3AUsXioJ2nQ0VV3ooM00TkILtdQV8FLg0whKlnM= -----END CERTIFICATE-----Generated at Sun Oct 4 11:13:43 2026 by rpki-client