$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS30042.roa File: AS30042.roa (raw, json) Hash identifier: JeOiJYmMGNraOIIm54L/w+Ze3eXBXETXatMixf1/LE0= Subject key identifier: 52:6B:39:7E:BA:DB:44:68:14:1A:E5:92:6C:56:83:1B:D7:3D:AE:3D Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 03D5786A48D9BF14F340AB465395D6B75F033121 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS30042.roa Signing time: Sat 26 Sep 2026 20:43:56 +0000 ROA not before: Sat 26 Sep 2026 20:38:56 +0000 ROA not after: Sat 25 Sep 2027 20:43:56 +0000 asID: 30042 IP address blocks: 152.237.252.0/23 maxlen: 24 201.50.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 15:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d5:78:6a:48:d9:bf:14:f3:40:ab:46:53:95:d6:b7:5f:03:31:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 26 20:38:56 2026 GMT Not After : Sep 25 20:43:56 2027 GMT Subject: CN=526B397EBADB4468141AE5926C56831BD73DAE3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:18:d2:5f:a1:42:35:d1:58:e8:f2:f1:af:9f: c4:cc:b4:aa:c1:11:c6:10:b4:d6:06:81:0b:b0:a7: ff:63:01:c6:cc:4d:9d:98:da:f9:7b:20:b8:b4:40: 83:5f:a0:22:a9:e6:40:ba:80:7d:2b:53:c0:17:e5: b5:02:c4:49:65:d1:e2:d1:83:65:1c:ed:35:5d:54: 7d:a6:ce:f6:ca:a9:15:16:0c:4d:14:05:e5:05:e6: c2:4f:56:6f:6b:25:09:ca:71:ad:26:a3:85:5a:3f: bb:a9:7e:69:54:b5:83:ad:72:3e:54:37:7f:06:a1: 3d:85:8f:26:ba:9e:e7:5c:96:3e:c4:72:22:ef:19: 5c:65:8e:1f:3f:7b:2c:21:49:03:ec:b9:61:74:ce: a8:35:7a:9b:bb:d9:bc:21:b2:0b:4d:64:15:87:34: 43:ab:e5:a7:0d:87:f7:40:08:3c:58:5b:00:6d:35: 6e:27:de:51:5e:33:d6:e0:1e:d1:3f:a2:73:50:25: e3:fe:cf:d6:5e:44:3b:ef:6a:8f:5d:22:3d:8c:46: ab:96:d8:80:af:92:4b:e6:98:31:4f:34:4c:06:f0: 79:49:c5:cd:9e:b5:19:7f:16:5c:46:2f:63:ac:e2: 69:f0:cf:fd:db:dc:0e:26:52:0d:a8:4f:29:90:e9: bc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6B:39:7E:BA:DB:44:68:14:1A:E5:92:6C:56:83:1B:D7:3D:AE:3D X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS30042.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.252.0/23 201.50.26.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:ca:db:e9:fd:17:db:47:14:f4:82:fa:e5:a3:57:1a:8e:15: 27:d5:27:3a:44:6a:40:08:ba:52:0a:1b:86:de:51:02:83:e8: 3a:a1:8b:08:59:17:e6:72:f5:66:c6:7f:f4:2a:19:6b:2e:fd: a5:13:43:ba:e1:fb:50:08:e4:be:ff:33:cf:fb:6e:91:a0:7b: 4e:72:6f:0a:c9:cc:b1:c8:3b:46:85:08:f9:92:08:14:fa:22: 68:11:d6:0d:79:c7:46:c5:3c:da:01:08:67:d7:79:6f:6a:09: 61:93:b5:dd:1f:f3:11:64:14:b8:23:aa:5c:f2:49:01:d9:97: f5:f2:a2:77:3f:7f:48:09:25:16:20:9c:45:3e:e1:12:5a:53: ec:44:79:84:af:c7:ca:f1:13:02:9e:4a:c9:74:4b:ac:9d:89: 25:a7:9f:d6:a9:90:2e:8d:eb:dc:89:79:d9:bf:26:72:68:ec: aa:98:5e:80:34:6f:a7:81:94:ae:68:0c:f9:9e:69:b5:f4:3d: a6:29:cf:46:3e:72:10:74:ed:a0:e1:dc:bf:b0:c8:c9:0f:7e: e2:31:d8:87:ea:eb:0e:61:70:76:4f:4c:e4:64:41:59:68:d5: be:3b:91:60:ea:27:19:07:24:ec:07:51:b6:fb:63:13:0c:36: 72:a5:51:dd -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUA9V4akjZvxTzQKtGU5XWt18DMSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MjYyMDM4NTZaFw0yNzA5MjUyMDQzNTZaMDMxMTAvBgNV BAMTKDUyNkIzOTdFQkFEQjQ0NjgxNDFBRTU5MjZDNTY4MzFCRDczREFFM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsGNJfoUI10Vjo8vGvn8TMtKrB EcYQtNYGgQuwp/9jAcbMTZ2Y2vl7ILi0QINfoCKp5kC6gH0rU8AX5bUCxEll0eLR g2Uc7TVdVH2mzvbKqRUWDE0UBeUF5sJPVm9rJQnKca0mo4VaP7upfmlUtYOtcj5U N38GoT2Fjya6nudclj7EciLvGVxljh8/eywhSQPsuWF0zqg1epu72bwhsgtNZBWH NEOr5acNh/dACDxYWwBtNW4n3lFeM9bgHtE/onNQJeP+z9ZeRDvvao9dIj2MRquW 2ICvkkvmmDFPNEwG8HlJxc2etRl/FlxGL2Os4mnwz/3b3A4mUg2oTymQ6bwXAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUUms5frrbRGgUGuWSbFaDG9c9rj0wHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMzMDA0Mi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQC AAEwDAMEAZjt/AMEAckyGjANBgkqhkiG9w0BAQsFAAOCAQEAL8rb6f0X20cU9IL6 5aNXGo4VJ9UnOkRqQAi6Ugobht5RAoPoOqGLCFkX5nL1ZsZ/9CoZay79pRNDuuH7 UAjkvv8zz/tukaB7TnJvCsnMscg7RoUI+ZIIFPoiaBHWDXnHRsU82gEIZ9d5b2oJ YZO13R/zEWQUuCOqXPJJAdmX9fKidz9/SAklFiCcRT7hElpT7ER5hK/HyvETAp5K yXRLrJ2JJaef1qmQLo3r3Il52b8mcmjsqphegDRvp4GUrmgM+Z5ptfQ9pinPRj5y EHTtoOHcv7DIyQ9+4jHYh+rrDmFwdk9M5GRBWWjVvjuRYOonGQck7AdRtvtjEww2 cqVR3Q== -----END CERTIFICATE-----Generated at Sun Oct 4 11:13:42 2026 by rpki-client