$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS402133.roa File: AS402133.roa (raw, json) Hash identifier: y+AOcCCLzpDdpQKHu+darL3fJgXXC9/tVVfZwajqols= Subject key identifier: 67:B1:DC:8B:B1:3A:8F:11:12:58:8F:68:86:09:65:1D:83:4A:51:11 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 5F5C78EAB6F47479BB3B9BFA32769C3C35BD183F Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS402133.roa Signing time: Tue 13 Oct 2026 08:30:19 +0000 ROA not before: Tue 13 Oct 2026 08:25:19 +0000 ROA not after: Tue 12 Oct 2027 08:30:19 +0000 asID: 402133 IP address blocks: 152.237.237.0/24 maxlen: 24 186.241.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Nov 2026 08:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5c:78:ea:b6:f4:74:79:bb:3b:9b:fa:32:76:9c:3c:35:bd:18:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 13 08:25:19 2026 GMT Not After : Oct 12 08:30:19 2027 GMT Subject: CN=67B1DC8BB13A8F1112588F688609651D834A5111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:64:6b:46:ed:d7:38:79:df:5b:c4:03:55:3d: 3d:8b:b5:87:5d:93:4d:41:18:8d:ef:5f:49:49:24: 8c:c1:dd:25:ed:c5:a9:6c:cf:9b:c5:a6:78:b3:7c: 9d:78:f4:c3:bd:a3:2f:17:7e:ab:63:52:ce:0d:db: 42:f7:5a:ea:c4:da:fa:08:82:ab:ed:c7:c9:7f:2c: 55:18:79:f2:7a:1e:d3:b7:79:a6:30:b9:5c:74:cf: 09:af:a8:82:f3:14:22:17:e4:ce:72:09:c7:c9:83: d0:a2:2b:f8:0a:27:0c:ce:38:c6:cd:c0:e6:0b:af: 33:86:7a:f8:52:55:c3:af:ce:e8:0f:9e:99:d1:53: ae:b0:4a:57:56:0a:7d:1f:18:70:8b:63:63:9a:cb: f9:ce:aa:9f:96:f6:a8:8d:bf:b4:cd:27:20:0c:3e: 5e:45:0f:7d:ac:e5:cf:87:0e:2f:10:d3:3d:58:51: 41:60:cc:0a:53:a7:a5:d9:b9:d2:03:04:7c:17:8a: 68:f5:2b:a3:c3:93:ad:95:9a:13:7d:ab:ed:4f:16: 68:01:21:a6:ca:c3:27:01:c1:6e:69:d7:58:7d:7d: f0:e5:5d:f0:a1:eb:67:36:f9:d8:45:7a:19:24:8a: 3a:75:f3:04:e9:24:5c:ee:a9:69:38:47:0c:76:5d: 4f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B1:DC:8B:B1:3A:8F:11:12:58:8F:68:86:09:65:1D:83:4A:51:11 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS402133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.237.0/24 186.241.164.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:89:e4:29:88:62:73:91:e6:07:0e:cb:2c:ea:25:ea:f0:4b: 43:73:8e:d0:45:07:09:61:c8:da:a1:e7:43:00:69:a7:b9:0c: e7:00:bc:de:b4:48:7f:31:42:1c:ff:03:bd:75:fe:17:83:5d: 0b:0e:87:d6:49:b2:03:bd:56:4b:d1:82:5b:11:30:2e:a2:b2: 26:39:87:59:0c:23:8d:35:66:b7:f9:b2:86:02:07:69:2e:f1: bd:b3:8a:1b:08:12:2a:7f:59:fa:9b:5a:ce:9e:70:8e:41:c1: f6:2d:92:aa:9c:db:f2:f8:38:d6:c6:4e:88:d9:eb:39:45:16: 45:20:2d:df:c1:d6:7f:ac:9f:02:db:7d:d5:31:e1:6f:1d:15: ed:eb:42:20:8d:0a:bb:2a:d0:15:1b:f0:75:51:8c:23:ef:8c: 8c:8e:e0:c8:03:10:d0:6b:6b:4b:3b:7c:b7:0a:81:1e:68:8f: 69:70:2d:e8:66:1f:b7:0e:64:08:5b:46:96:42:62:40:e1:da: 70:a2:84:79:2d:ee:07:85:a7:2c:29:09:2e:1c:b3:e1:8f:9e: 90:8f:c0:40:43:09:c5:02:dd:08:56:4a:03:3e:85:8b:e7:8f: 86:df:13:a5:51:e6:49:a1:82:0c:fd:8a:ea:a1:16:55:3a:83: dc:d6:cd:e4 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUX1x46rb0dHm7O5v6MnacPDW9GD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMTMwODI1MTlaFw0yNzEwMTIwODMwMTlaMDMxMTAvBgNV BAMTKDY3QjFEQzhCQjEzQThGMTExMjU4OEY2ODg2MDk2NTFEODM0QTUxMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqZGtG7dc4ed9bxANVPT2LtYdd k01BGI3vX0lJJIzB3SXtxalsz5vFpnizfJ149MO9oy8XfqtjUs4N20L3WurE2voI gqvtx8l/LFUYefJ6HtO3eaYwuVx0zwmvqILzFCIX5M5yCcfJg9CiK/gKJwzOOMbN wOYLrzOGevhSVcOvzugPnpnRU66wSldWCn0fGHCLY2Oay/nOqp+W9qiNv7TNJyAM Pl5FD32s5c+HDi8Q0z1YUUFgzApTp6XZudIDBHwXimj1K6PDk62VmhN9q+1PFmgB IabKwycBwW5p11h9ffDlXfCh62c2+dhFehkkijp18wTpJFzuqWk4Rwx2XU8nAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUZ7Hci7E6jxESWI9ohgllHYNKUREwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVM0MDIxMzMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBACY7e0DBAC68aQwDQYJKoZIhvcNAQELBQADggEBAHyJ5CmIYnOR5gcO yyzqJerwS0NzjtBFBwlhyNqh50MAaae5DOcAvN60SH8xQhz/A711/heDXQsOh9ZJ sgO9VkvRglsRMC6isiY5h1kMI401Zrf5soYCB2ku8b2zihsIEip/WfqbWs6ecI5B wfYtkqqc2/L4ONbGTojZ6zlFFkUgLd/B1n+snwLbfdUx4W8dFe3rQiCNCrsq0BUb 8HVRjCPvjIyO4MgDENBra0s7fLcKgR5oj2lwLehmH7cOZAhbRpZCYkDh2nCihHkt 7geFpywpCS4cs+GPnpCPwEBDCcUC3QhWSgM+hYvnj4bfE6VR5kmhggz9iuqhFlU6 g9zWzeQ= -----END CERTIFICATE-----Generated at Sat Oct 31 20:23:55 2026 by rpki-client