$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS214432.roa File: AS214432.roa (raw, json) Hash identifier: ykxcofrGCgn06ZhP1mzxOlzc/yOxziW/E7ErCwlpAlc= Subject key identifier: DC:FD:86:52:A6:E0:98:CE:B2:6A:4A:A7:77:D5:53:AB:4E:BD:5F:CF Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 4F99757B686FDD64CC1B9C4E82D4A5D2AD95E55D Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS214432.roa Signing time: Tue 20 Oct 2026 04:46:07 +0000 ROA not before: Tue 20 Oct 2026 04:41:07 +0000 ROA not after: Tue 19 Oct 2027 04:46:07 +0000 asID: 214432 IP address blocks: 186.241.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 17:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:99:75:7b:68:6f:dd:64:cc:1b:9c:4e:82:d4:a5:d2:ad:95:e5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 20 04:41:07 2026 GMT Not After : Oct 19 04:46:07 2027 GMT Subject: CN=DCFD8652A6E098CEB26A4AA777D553AB4EBD5FCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:4f:73:93:47:bf:4b:35:44:a4:35:4b:c0: ab:70:fa:2a:7e:ae:75:77:01:0b:f5:cd:90:88:4a: 6e:6d:34:58:9c:9e:80:5e:9d:63:9d:36:6b:f0:c6: 5b:0b:4d:62:9b:69:c7:66:d0:ba:36:a5:e4:e5:1b: 15:91:e7:9f:bd:3d:4f:3a:79:d2:53:77:ed:a6:6b: b4:27:7c:05:99:79:6a:d8:9c:43:d9:ec:29:2e:8c: 30:75:93:3d:9b:a8:c9:a6:4b:e6:9e:ea:4b:63:58: 07:6d:2c:0b:ef:25:ef:2d:f6:60:89:f2:13:bb:4a: 5d:79:83:23:83:4b:89:54:fb:73:b1:56:06:49:fe: 3a:d9:5b:e4:3a:0d:86:79:ff:19:7d:ac:f9:3d:de: 22:20:e1:31:f0:c9:6c:23:39:8d:40:46:c9:8a:6f: db:1b:11:be:c4:00:7a:ea:d6:0b:a8:f4:c2:7e:23: 01:9c:f8:c9:b1:27:b2:d8:c4:04:bf:fd:22:5c:9d: 97:0b:16:7d:51:79:0d:84:5b:67:ed:df:6c:db:8c: f5:4f:5c:24:c4:84:84:ee:cc:8a:da:64:61:3e:94: a9:04:fe:09:1e:5b:bc:15:18:de:60:b7:e6:20:41: 04:34:14:c2:64:ec:53:d6:75:0a:aa:f8:03:fb:93: 80:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FD:86:52:A6:E0:98:CE:B2:6A:4A:A7:77:D5:53:AB:4E:BD:5F:CF X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS214432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.241.175.0/24 Signature Algorithm: sha256WithRSAEncryption 99:69:a1:af:02:ab:02:75:e5:de:31:9a:52:5f:c3:21:67:e4: da:3b:64:57:d5:2d:82:32:39:9d:d7:92:6c:dc:89:4f:84:6c: 91:84:86:34:a6:dc:57:0c:05:ee:36:9e:9a:0d:d4:f0:7f:8b: 79:f9:ae:64:12:27:0b:98:6b:2a:ef:c4:de:07:2d:40:0f:19: 8b:d8:b7:1b:d3:ce:d2:34:fd:19:c5:0c:b2:6b:f4:ee:71:b7: c7:d5:e8:ba:c6:c7:aa:0a:77:2b:bd:0a:bb:58:ee:0c:23:b2: 45:40:e9:ee:83:ca:33:11:23:e7:2f:98:8d:99:05:04:3e:d6: bf:49:b0:dd:91:c2:c4:52:10:87:58:8a:2a:95:98:a2:d5:3d: e4:95:0d:8c:c6:f8:f7:11:5e:51:22:80:f5:a3:74:3a:03:71: 34:2c:f9:38:72:c4:4b:40:41:17:63:46:ce:a5:8c:92:df:d1: de:f8:d4:34:37:b9:c6:b7:1d:f3:e2:0c:20:64:1c:8b:e5:56: 30:f8:80:f4:a8:ec:ba:ad:62:06:2a:4e:1c:81:ad:74:10:11: 94:8f:36:22:1c:07:aa:12:c6:ba:74:54:5f:a1:b2:e9:0e:e1: b9:7e:cf:d3:42:75:6c:50:bf:b2:46:1d:c7:c9:df:ce:eb:31: ff:13:5b:14 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUT5l1e2hv3WTMG5xOgtSl0q2V5V0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMjAwNDQxMDdaFw0yNzEwMTkwNDQ2MDdaMDMxMTAvBgNV BAMTKERDRkQ4NjUyQTZFMDk4Q0VCMjZBNEFBNzc3RDU1M0FCNEVCRDVGQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6vU9zk0e/SzVEpDVLwKtw+ip+ rnV3AQv1zZCISm5tNFicnoBenWOdNmvwxlsLTWKbacdm0Lo2peTlGxWR55+9PU86 edJTd+2ma7QnfAWZeWrYnEPZ7CkujDB1kz2bqMmmS+ae6ktjWAdtLAvvJe8t9mCJ 8hO7Sl15gyODS4lU+3OxVgZJ/jrZW+Q6DYZ5/xl9rPk93iIg4THwyWwjOY1ARsmK b9sbEb7EAHrq1guo9MJ+IwGc+MmxJ7LYxAS//SJcnZcLFn1ReQ2EW2ft32zbjPVP XCTEhITuzIraZGE+lKkE/gkeW7wVGN5gt+YgQQQ0FMJk7FPWdQqq+AP7k4AbAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU3P2GUqbgmM6yakqnd9VTq069X88wHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMyMTQ0MzIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAC68a8wDQYJKoZIhvcNAQELBQADggEBAJlpoa8CqwJ15d4xmlJfwyFn 5No7ZFfVLYIyOZ3XkmzciU+EbJGEhjSm3FcMBe42npoN1PB/i3n5rmQSJwuYayrv xN4HLUAPGYvYtxvTztI0/RnFDLJr9O5xt8fV6LrGx6oKdyu9CrtY7gwjskVA6e6D yjMRI+cvmI2ZBQQ+1r9JsN2RwsRSEIdYiiqVmKLVPeSVDYzG+PcRXlEigPWjdDoD cTQs+ThyxEtAQRdjRs6ljJLf0d741DQ3uca3HfPiDCBkHIvlVjD4gPSo7LqtYgYq ThyBrXQQEZSPNiIcB6oSxrp0VF+hsukO4bl+z9NCdWxQv7JGHcfJ387rMf8TWxQ= -----END CERTIFICATE-----Generated at Sun Oct 25 12:45:49 2026 by rpki-client