$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS49453.roa File: AS49453.roa (raw, json) Hash identifier: W8lRy6zmh81POyCKmWhhJWgKPQtIlsPX+pD0drabnPI= Subject key identifier: CD:6E:6D:8E:3E:1B:D5:D2:1F:50:33:B8:E4:B3:0D:E3:65:D4:0E:63 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 53325C7E70CCF4F717D694092CEF760CF9A6E06C Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS49453.roa Signing time: Wed 14 Oct 2026 19:06:21 +0000 ROA not before: Wed 14 Oct 2026 19:01:21 +0000 ROA not after: Wed 13 Oct 2027 19:06:21 +0000 asID: 49453 IP address blocks: 201.4.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:32:5c:7e:70:cc:f4:f7:17:d6:94:09:2c:ef:76:0c:f9:a6:e0:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 14 19:01:21 2026 GMT Not After : Oct 13 19:06:21 2027 GMT Subject: CN=CD6E6D8E3E1BD5D21F5033B8E4B30DE365D40E63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:0b:b3:4f:de:4e:42:bd:9d:36:a5:77:b0: 55:6a:0d:a3:15:17:02:9d:74:ec:e9:d5:df:b8:b1: 66:38:a4:be:5c:a2:cd:4c:27:2c:30:91:7a:b2:38: fc:98:62:a4:16:77:96:53:be:4c:3a:3f:d9:42:46: 71:7d:13:3c:bd:c7:38:22:8b:9d:e6:ce:e9:6c:c9: ba:ea:ff:65:04:5b:0e:04:62:b6:30:1b:a0:fd:14: 50:50:6a:94:2e:aa:82:0f:bc:55:a7:72:5c:4b:e5: a2:67:23:1f:a8:40:11:c6:71:63:ff:cb:7b:bd:8e: 82:a1:ae:38:3e:c3:50:0f:52:cd:fe:c8:5e:3d:ae: 25:24:7b:29:10:9e:4d:96:8a:43:ea:39:a7:a1:79: 08:b7:29:d7:a0:93:4d:7c:85:8d:91:b7:24:a6:2a: e0:0d:d6:68:d3:62:f9:fa:3e:0f:41:67:21:07:41: d4:ab:95:b4:a0:4f:35:cc:cb:01:45:9c:0e:b2:d3: ab:ac:ec:e3:18:9a:2c:f4:49:ec:a4:f8:48:4d:ed: c9:de:40:24:e7:12:f0:c7:be:6c:7e:22:91:54:66: d7:69:bd:d1:5d:5b:55:18:d2:b0:eb:a8:76:90:b9: d6:ec:f7:63:4f:30:6f:dc:a8:d1:14:bd:93:b3:2b: 0c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:6E:6D:8E:3E:1B:D5:D2:1F:50:33:B8:E4:B3:0D:E3:65:D4:0E:63 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS49453.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.4.27.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:7d:01:3e:92:0b:b3:34:42:46:64:77:02:14:0f:76:f7:eb: cf:1a:61:68:fd:84:74:bc:7f:32:58:fa:59:aa:b2:7e:9f:d4: a1:88:e1:ed:71:c7:27:27:60:6b:c0:a2:4f:4e:27:89:30:a9: 28:47:2f:b2:31:7f:ce:74:c1:28:2e:a2:17:ce:b5:91:7f:bf: c2:6a:3b:74:76:1f:43:d1:22:46:0a:c9:0f:f5:04:4d:6d:61: c8:9d:93:eb:da:e1:fb:0a:98:9b:ab:08:ad:96:34:84:2c:62: fc:43:c7:99:45:90:37:61:95:19:49:97:d0:0d:d3:fa:7a:03: e0:a7:ec:40:28:62:00:da:dd:30:8e:2f:7e:8e:ce:6e:d6:97: fe:d3:d1:90:aa:8d:a5:57:f7:0f:a3:2e:4a:77:dd:2c:a3:6c: be:12:02:ef:98:e6:58:35:75:2a:12:17:64:a7:02:c3:6e:e0: 0d:0e:4d:22:ef:de:b6:2f:53:f1:08:a2:9a:0b:14:6f:e8:ed: f1:61:e5:c6:06:8f:ef:f1:2a:88:8c:41:b7:ab:03:e8:b0:65: f0:2e:c3:da:01:c5:f9:43:87:49:c6:93:56:af:99:bc:f3:65: bd:b2:eb:76:ec:e7:8a:18:18:d6:98:ac:5b:63:c7:b8:29:d0: 32:e5:35:1d -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUUzJcfnDM9PcX1pQJLO92DPmm4GwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMTQxOTAxMjFaFw0yNzEwMTMxOTA2MjFaMDMxMTAvBgNV BAMTKENENkU2RDhFM0UxQkQ1RDIxRjUwMzNCOEU0QjMwREUzNjVENDBFNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1OAuzT95OQr2dNqV3sFVqDaMV FwKddOzp1d+4sWY4pL5cos1MJywwkXqyOPyYYqQWd5ZTvkw6P9lCRnF9Ezy9xzgi i53mzulsybrq/2UEWw4EYrYwG6D9FFBQapQuqoIPvFWnclxL5aJnIx+oQBHGcWP/ y3u9joKhrjg+w1APUs3+yF49riUkeykQnk2WikPqOaeheQi3Kdegk018hY2RtySm KuAN1mjTYvn6Pg9BZyEHQdSrlbSgTzXMywFFnA6y06us7OMYmiz0Seyk+EhN7cne QCTnEvDHvmx+IpFUZtdpvdFdW1UY0rDrqHaQudbs92NPMG/cqNEUvZOzKwzBAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUzW5tjj4b1dIfUDO45LMN42XUDmMwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVM0OTQ1My5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMkEGzANBgkqhkiG9w0BAQsFAAOCAQEAO30BPpILszRCRmR3AhQPdvfr zxphaP2EdLx/Mlj6Waqyfp/UoYjh7XHHJydga8CiT04niTCpKEcvsjF/znTBKC6i F861kX+/wmo7dHYfQ9EiRgrJD/UETW1hyJ2T69rh+wqYm6sIrZY0hCxi/EPHmUWQ N2GVGUmX0A3T+noD4KfsQChiANrdMI4vfo7ObtaX/tPRkKqNpVf3D6MuSnfdLKNs vhIC75jmWDV1KhIXZKcCw27gDQ5NIu/eti9T8QiimgsUb+jt8WHlxgaP7/EqiIxB t6sD6LBl8C7D2gHF+UOHScaTVq+ZvPNlvbLrduznihgY1pisW2PHuCnQMuU1HQ== -----END CERTIFICATE-----Generated at Wed Oct 28 00:45:04 2026 by rpki-client