$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS23061.roa File: AS23061.roa (raw, json) Hash identifier: DdP694BbJndrKF6tLKmvEc5O7YYi4tziH51quU5ZjRo= Subject key identifier: 67:F9:96:E3:80:A6:53:99:45:3E:E0:AB:C4:A2:1A:22:74:4B:7E:4D Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 4C458397EA946693DF30131ADA389C986ACA052D Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS23061.roa Signing time: Fri 16 Oct 2026 22:56:30 +0000 ROA not before: Fri 16 Oct 2026 22:51:30 +0000 ROA not after: Fri 15 Oct 2027 22:56:30 +0000 asID: 23061 IP address blocks: 186.241.187.0/24 maxlen: 24 201.4.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:45:83:97:ea:94:66:93:df:30:13:1a:da:38:9c:98:6a:ca:05:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 16 22:51:30 2026 GMT Not After : Oct 15 22:56:30 2027 GMT Subject: CN=67F996E380A65399453EE0ABC4A21A22744B7E4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:02:75:69:08:8d:70:5b:44:8e:95:5c:16:2f: 3a:a4:ea:03:4c:38:33:ab:2a:00:32:b5:6b:22:8c: 85:9c:41:42:13:a5:c0:2c:3c:72:91:25:1b:5f:70: 46:dc:7e:b1:78:6e:c6:17:a6:f9:25:72:01:c3:33: 47:cf:5c:5e:78:00:3e:67:40:df:32:75:80:4f:dc: 1c:be:eb:20:e1:28:fe:63:e5:11:cb:74:d3:ec:56: fb:28:a5:90:35:e4:0b:57:9c:ed:3b:e0:9e:5c:05: 74:b1:d0:4a:d8:13:05:98:8d:17:06:48:f9:88:3e: 5e:8d:7e:82:a9:03:55:96:a1:0d:97:9e:5a:67:a9: 86:1d:71:ef:43:e8:bf:7f:95:a7:58:ce:69:cf:41: 7b:69:22:97:fa:00:e1:e0:d5:6d:73:c2:e5:02:72: 51:bf:50:39:65:79:8d:50:c9:2a:d7:0c:3e:70:02: 11:c2:c2:8b:e7:c6:1e:77:8c:ad:3e:98:f8:8e:cd: f2:27:c7:7d:ae:bb:e2:1d:1f:63:df:be:98:50:72: d8:05:1c:93:4c:10:40:d6:ce:2d:71:68:8d:3c:2b: fe:be:1b:f7:0a:70:e5:82:99:95:2b:83:ce:70:af: 53:54:31:2c:ee:35:be:77:bd:ad:17:26:aa:44:37: 90:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F9:96:E3:80:A6:53:99:45:3E:E0:AB:C4:A2:1A:22:74:4B:7E:4D X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS23061.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.241.187.0/24 201.4.24.0/24 Signature Algorithm: sha256WithRSAEncryption 04:4f:b4:47:fd:f2:8a:0c:7f:f3:2d:dc:25:eb:28:70:8a:6d: 7a:3a:b7:17:a6:0a:48:35:a6:fe:e4:ad:5f:a7:b7:3c:34:03: ff:4f:7a:b8:d6:0a:49:8c:91:6f:c5:a0:c1:3a:f8:8d:8f:3a: 0a:08:b9:32:65:18:9d:e2:50:a5:e8:b4:3c:d9:24:c5:69:52: dc:b4:03:df:c0:7d:c1:cc:78:b2:76:40:61:05:c0:09:7e:82: 7c:ab:73:b5:76:ce:12:cd:66:03:ba:38:70:b1:b9:9e:ce:f4: fb:a0:c9:dd:21:26:57:3c:05:56:75:28:75:4e:25:44:dc:58: 3b:67:a4:fd:24:64:d0:f3:00:2d:58:41:e3:b3:98:c2:2c:7c: e1:10:c7:23:db:4a:52:34:4e:d7:cf:e1:0d:3b:b6:26:02:6b: ce:5c:c6:db:0e:43:31:8d:9f:7c:cb:d4:35:17:ae:dd:72:77: 54:5a:85:f5:1f:9f:bb:42:ed:b7:ed:2c:1b:c7:81:11:94:3e: 98:a6:95:b7:d2:c9:e5:f0:c3:28:90:4f:66:88:fc:56:4e:d6: e5:f3:9e:ff:5f:95:bb:e4:f4:f8:f4:35:54:ec:ea:3e:cf:dc: 57:77:6a:a3:bf:0a:d4:d9:de:1d:6c:bf:96:3e:38:b8:dd:89: b9:b5:62:78 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUTEWDl+qUZpPfMBMa2jicmGrKBS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMTYyMjUxMzBaFw0yNzEwMTUyMjU2MzBaMDMxMTAvBgNV BAMTKDY3Rjk5NkUzODBBNjUzOTk0NTNFRTBBQkM0QTIxQTIyNzQ0QjdFNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZAnVpCI1wW0SOlVwWLzqk6gNM ODOrKgAytWsijIWcQUITpcAsPHKRJRtfcEbcfrF4bsYXpvklcgHDM0fPXF54AD5n QN8ydYBP3By+6yDhKP5j5RHLdNPsVvsopZA15AtXnO074J5cBXSx0ErYEwWYjRcG SPmIPl6NfoKpA1WWoQ2XnlpnqYYdce9D6L9/ladYzmnPQXtpIpf6AOHg1W1zwuUC clG/UDlleY1QySrXDD5wAhHCwovnxh53jK0+mPiOzfInx32uu+IdH2PfvphQctgF HJNMEEDWzi1xaI08K/6+G/cKcOWCmZUrg85wr1NUMSzuNb53va0XJqpEN5BnAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUZ/mW44CmU5lFPuCrxKIaInRLfk0wHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMyMzA2MS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQC AAEwDAMEALrxuwMEAMkEGDANBgkqhkiG9w0BAQsFAAOCAQEABE+0R/3yigx/8y3c JesocIptejq3F6YKSDWm/uStX6e3PDQD/096uNYKSYyRb8WgwTr4jY86Cgi5MmUY neJQpei0PNkkxWlS3LQD38B9wcx4snZAYQXACX6CfKtztXbOEs1mA7o4cLG5ns70 +6DJ3SEmVzwFVnUodU4lRNxYO2ek/SRk0PMALVhB47OYwix84RDHI9tKUjRO18/h DTu2JgJrzlzG2w5DMY2ffMvUNReu3XJ3VFqF9R+fu0Ltt+0sG8eBEZQ+mKaVt9LJ 5fDDKJBPZoj8Vk7W5fOe/1+Vu+T0+PQ1VOzqPs/cV3dqo78K1NneHWy/lj44uN2J ubVieA== -----END CERTIFICATE-----Generated at Wed Oct 28 00:45:05 2026 by rpki-client