$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS59692.roa File: AS59692.roa (raw, json) Hash identifier: Ig62MxTjrAC7lB8diO/kYBfwWjtc6ozmYPZ6wBXQKTw= Subject key identifier: 91:D5:65:08:5D:33:B6:89:92:C2:A1:BD:AA:05:91:7D:A4:BD:C6:75 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 789654DF719D5372D2180AD09B6A0698E34AE179 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS59692.roa Signing time: Fri 09 Oct 2026 17:16:29 +0000 ROA not before: Fri 09 Oct 2026 17:11:29 +0000 ROA not after: Fri 08 Oct 2027 17:16:29 +0000 asID: 59692 IP address blocks: 152.237.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:96:54:df:71:9d:53:72:d2:18:0a:d0:9b:6a:06:98:e3:4a:e1:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 9 17:11:29 2026 GMT Not After : Oct 8 17:16:29 2027 GMT Subject: CN=91D565085D33B68992C2A1BDAA05917DA4BDC675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:06:e8:e1:5d:ab:9c:43:37:58:89:0d:64: 10:2d:02:94:e1:ff:df:3b:c1:18:db:1f:70:f8:c1: de:71:e2:a0:7e:18:fc:d9:a8:fc:e2:0c:5b:dc:10: 59:cb:84:16:16:e1:cc:c8:e8:51:bc:37:46:b7:9c: be:19:e5:49:20:f6:64:32:45:40:b7:e8:68:34:82: ca:d4:06:e0:d7:ff:5c:aa:6a:07:72:17:df:c2:20: 69:69:09:a6:c4:0c:d6:0c:f7:fc:56:20:62:be:31: 0e:92:cd:db:46:ba:ac:12:c2:bb:14:24:2d:08:fb: 51:1b:de:cc:42:fa:de:37:01:13:96:e6:aa:59:cd: 53:0e:e5:66:7b:b7:38:1d:18:7f:8e:32:3d:cf:9d: a8:80:39:c2:f5:06:22:04:e9:d0:04:83:76:02:14: 9f:16:41:68:92:76:60:ae:93:e2:af:11:e5:10:f4: 75:68:9e:fb:bb:3e:76:34:09:e5:53:b5:e9:ff:7b: d3:94:e6:92:b6:e8:df:d9:ac:cc:31:82:28:f7:0a: b2:7d:8f:5d:77:ee:76:ff:08:e5:35:fb:60:48:c3: 5c:61:4c:7a:68:5f:9f:40:1c:9e:f9:71:d2:97:7d: 0f:5e:c9:77:aa:2f:6d:12:81:a1:13:1d:e7:df:14: 5f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D5:65:08:5D:33:B6:89:92:C2:A1:BD:AA:05:91:7D:A4:BD:C6:75 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS59692.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.231.0/24 Signature Algorithm: sha256WithRSAEncryption 96:16:fd:d8:28:7b:11:a0:6e:e6:cd:56:5b:7a:5c:8d:4d:4e: 26:19:30:2d:34:aa:26:a9:78:a2:bd:2f:b5:42:48:f3:dd:d2: 84:46:70:cf:bd:cd:cb:2a:e2:79:78:29:97:18:5a:da:01:a9: c3:6a:0e:5f:23:b3:cc:f4:9a:7c:1d:56:c5:92:55:00:ac:27: 99:1a:89:1e:71:87:b8:d6:08:1e:98:2f:14:45:dc:1f:53:97: 8e:31:31:07:9d:ec:53:ab:56:8c:96:04:e5:a6:65:80:9b:5a: 29:cb:f3:f4:cd:d6:03:5e:c4:3d:97:a2:75:d9:fd:7f:f1:d6: db:9c:38:ce:24:e8:7a:64:ef:c0:55:05:0a:95:b1:8a:7e:d9: 99:30:48:1b:f7:e4:f4:23:d9:35:09:57:26:03:0e:44:99:67: 62:6b:c4:0b:88:39:a6:67:5b:03:7a:da:49:35:6e:ae:d6:fa: 61:4c:a7:f1:df:93:10:9b:0c:dc:5a:bd:b2:60:66:e0:cc:9a: af:bd:42:90:46:ae:18:24:48:33:64:da:ea:bf:5a:8f:20:08: f6:30:39:b6:32:bb:2e:af:d4:df:07:15:35:e6:35:5b:d8:a3: 14:03:b4:fa:67:5d:57:65:22:dd:17:fb:0c:0f:99:51:89:42: 40:b7:53:36 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUeJZU33GdU3LSGArQm2oGmONK4XkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMDkxNzExMjlaFw0yNzEwMDgxNzE2MjlaMDMxMTAvBgNV BAMTKDkxRDU2NTA4NUQzM0I2ODk5MkMyQTFCREFBMDU5MTdEQTRCREM2NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5eQbo4V2rnEM3WIkNZBAtApTh /987wRjbH3D4wd5x4qB+GPzZqPziDFvcEFnLhBYW4czI6FG8N0a3nL4Z5Ukg9mQy RUC36Gg0gsrUBuDX/1yqagdyF9/CIGlpCabEDNYM9/xWIGK+MQ6SzdtGuqwSwrsU JC0I+1Eb3sxC+t43AROW5qpZzVMO5WZ7tzgdGH+OMj3PnaiAOcL1BiIE6dAEg3YC FJ8WQWiSdmCuk+KvEeUQ9HVonvu7PnY0CeVTten/e9OU5pK26N/ZrMwxgij3CrJ9 j1137nb/COU1+2BIw1xhTHpoX59AHJ75cdKXfQ9eyXeqL20SgaETHeffFF/hAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUkdVlCF0ztomSwqG9qgWRfaS9xnUwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVM1OTY5Mi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAJjt5zANBgkqhkiG9w0BAQsFAAOCAQEAlhb92Ch7EaBu5s1WW3pcjU1O JhkwLTSqJql4or0vtUJI893ShEZwz73NyyrieXgplxha2gGpw2oOXyOzzPSafB1W xZJVAKwnmRqJHnGHuNYIHpgvFEXcH1OXjjExB53sU6tWjJYE5aZlgJtaKcvz9M3W A17EPZeiddn9f/HW25w4ziToemTvwFUFCpWxin7ZmTBIG/fk9CPZNQlXJgMORJln YmvEC4g5pmdbA3raSTVurtb6YUyn8d+TEJsM3Fq9smBm4Myar71CkEauGCRIM2Ta 6r9ajyAI9jA5tjK7Lq/U3wcVNeY1W9ijFAO0+mddV2Ui3Rf7DA+ZUYlCQLdTNg== -----END CERTIFICATE-----Generated at Wed Oct 28 00:45:07 2026 by rpki-client