$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS64457.roa File: AS64457.roa (raw, json) Hash identifier: BROCB/p7goVJ/cYW66oeYajqCplSFP9xyEgaPHqCs5o= Subject key identifier: 92:60:22:2D:AB:C7:98:B9:23:A5:07:12:CB:BB:81:54:51:74:70:B2 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 538BF7663A174457EAB1D86648C327F2CFF5B093 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS64457.roa Signing time: Mon 12 Oct 2026 17:44:18 +0000 ROA not before: Mon 12 Oct 2026 17:39:18 +0000 ROA not after: Mon 11 Oct 2027 17:44:18 +0000 asID: 64457 IP address blocks: 152.237.241.0/24 maxlen: 24 186.241.186.0/24 maxlen: 24 201.4.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 09:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:8b:f7:66:3a:17:44:57:ea:b1:d8:66:48:c3:27:f2:cf:f5:b0:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Oct 12 17:39:18 2026 GMT Not After : Oct 11 17:44:18 2027 GMT Subject: CN=9260222DABC798B923A50712CBBB8154517470B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:58:c7:55:44:10:19:49:c2:61:a2:84:df:5f: ee:7b:5c:10:f2:3b:09:3c:70:e3:fb:a1:c3:f3:b9: 63:de:4f:ae:6d:e9:c5:ff:8c:58:61:0e:d6:1a:ae: d3:bc:0e:8e:c6:f0:d2:94:0e:47:34:53:62:3b:89: cd:1e:8b:b5:e8:8a:9b:9f:29:e4:16:82:c3:29:80: 95:6c:88:e0:36:93:22:a6:51:42:18:f1:e5:8b:19: e6:a1:bd:dc:ac:bb:58:29:08:ca:d3:bb:57:b1:45: f1:19:26:da:22:1c:a3:82:30:04:98:7e:e2:be:90: d4:93:48:17:2a:d9:13:d4:d5:2c:7f:a9:6b:f4:e0: 1e:82:4a:58:c4:a7:e4:6d:90:81:80:f9:00:39:f3: be:d7:69:4d:99:b7:65:68:a2:2b:1b:a1:42:17:fc: e6:2b:f0:59:14:74:82:01:fb:d7:f8:ab:37:e1:d2: 38:72:72:27:18:9e:69:94:f1:93:76:8e:54:3d:86: a6:0e:70:c1:60:15:88:b6:00:65:37:d3:0f:d3:cc: 26:89:29:c6:68:4a:67:a7:16:74:7d:78:0b:34:f2: 31:4c:9c:93:e5:8b:3b:2a:62:64:a8:d1:4e:64:8d: 17:9c:97:6d:16:3e:21:4d:8b:d7:f9:1e:8f:6b:76: bd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:60:22:2D:AB:C7:98:B9:23:A5:07:12:CB:BB:81:54:51:74:70:B2 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS64457.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.241.0/24 186.241.186.0/24 201.4.25.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:21:f8:c0:3a:81:42:ca:f1:52:d3:39:a0:36:c4:9e:85:3e: 5b:cc:31:26:3c:91:49:6f:8c:96:74:b3:66:f3:46:2f:fd:b6: ed:50:0a:0b:85:9c:e6:32:6e:6e:07:e0:2f:b6:69:f3:50:b7: ac:d9:54:4e:25:aa:89:b1:07:16:8b:a0:da:83:3c:f3:4b:00: 16:ed:6e:3f:1f:e4:14:91:46:42:25:9a:c0:7c:23:77:aa:6d: d5:41:38:9f:9b:cf:f5:c0:2e:ea:6a:e7:a6:23:8b:11:e5:bc: 0e:fc:05:f1:8e:d5:84:ef:3b:5f:5f:32:74:10:43:ba:3a:2b: eb:2f:e0:ce:a5:ea:2e:e5:52:a7:46:15:9b:b7:4e:ed:05:e6: 14:c2:65:f3:12:8a:ee:dc:a7:ec:7d:bd:ec:fb:41:50:42:b3: 2f:7a:53:45:f9:1c:c8:54:3c:23:34:7d:fd:92:50:9d:1f:4b: 87:27:6e:26:b8:bf:d3:30:2e:98:3e:0a:7c:35:c0:2e:29:69: 51:e5:7c:b1:f2:69:9b:69:ea:a4:34:75:ef:91:e9:70:49:72: c4:d1:62:3a:94:c5:c5:34:f7:f5:7e:b1:8f:0b:77:3e:35:31: a9:93:40:14:7f:50:2d:d3:3d:89:9c:65:d0:8d:15:8d:04:7d: 6c:b4:ae:96 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUU4v3ZjoXRFfqsdhmSMMn8s/1sJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjEwMTIxNzM5MThaFw0yNzEwMTExNzQ0MThaMDMxMTAvBgNV BAMTKDkyNjAyMjJEQUJDNzk4QjkyM0E1MDcxMkNCQkI4MTU0NTE3NDcwQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtWMdVRBAZScJhooTfX+57XBDy Owk8cOP7ocPzuWPeT65t6cX/jFhhDtYartO8Do7G8NKUDkc0U2I7ic0ei7Xoipuf KeQWgsMpgJVsiOA2kyKmUUIY8eWLGeahvdysu1gpCMrTu1exRfEZJtoiHKOCMASY fuK+kNSTSBcq2RPU1Sx/qWv04B6CSljEp+RtkIGA+QA5877XaU2Zt2VooisboUIX /OYr8FkUdIIB+9f4qzfh0jhycicYnmmU8ZN2jlQ9hqYOcMFgFYi2AGU30w/TzCaJ KcZoSmenFnR9eAs08jFMnJPlizsqYmSo0U5kjRecl20WPiFNi9f5Ho9rdr3fAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUkmAiLavHmLkjpQcSy7uBVFF0cLIwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVM2NDQ1Ny5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQC AAEwEgMEAJjt8QMEALrxugMEAMkEGTANBgkqhkiG9w0BAQsFAAOCAQEASyH4wDqB QsrxUtM5oDbEnoU+W8wxJjyRSW+MlnSzZvNGL/227VAKC4Wc5jJubgfgL7Zp81C3 rNlUTiWqibEHFoug2oM880sAFu1uPx/kFJFGQiWawHwjd6pt1UE4n5vP9cAu6mrn piOLEeW8DvwF8Y7VhO87X18ydBBDujor6y/gzqXqLuVSp0YVm7dO7QXmFMJl8xKK 7tyn7H297PtBUEKzL3pTRfkcyFQ8IzR9/ZJQnR9LhyduJri/0zAumD4KfDXALilp UeV8sfJpm2nqpDR175HpcElyxNFiOpTFxTT39X6xjwt3PjUxqZNAFH9QLdM9iZxl 0I0VjQR9bLSulg== -----END CERTIFICATE-----Generated at Tue Oct 20 04:25:21 2026 by rpki-client