$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS834.roa File: AS834.roa (raw, json) Hash identifier: wSACGf3znMmfM3b5KUrNPcJczZnTwJp1cfY89Sb5OXQ= Subject key identifier: 73:C4:AC:E0:E3:40:9A:90:3B:F5:9D:9C:5E:4F:37:43:AD:78:CE:D8 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 70E14860AE0CCB751CF7038ECDC3A716254A7437 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS834.roa Signing time: Sat 26 Sep 2026 20:43:56 +0000 ROA not before: Sat 26 Sep 2026 20:38:56 +0000 ROA not after: Sat 25 Sep 2027 20:43:56 +0000 asID: 834 IP address blocks: 152.237.230.0/24 maxlen: 24 152.237.248.0/24 maxlen: 24 177.177.242.0/24 maxlen: 24 186.241.163.0/24 maxlen: 24 186.241.165.0/24 maxlen: 24 186.241.176.0/24 maxlen: 24 201.4.21.0/24 maxlen: 24 201.50.21.0/24 maxlen: 24 201.50.25.0/24 maxlen: 24 201.50.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 17:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e1:48:60:ae:0c:cb:75:1c:f7:03:8e:cd:c3:a7:16:25:4a:74:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 26 20:38:56 2026 GMT Not After : Sep 25 20:43:56 2027 GMT Subject: CN=73C4ACE0E3409A903BF59D9C5E4F3743AD78CED8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:80:b3:f1:13:ff:a6:f6:12:1a:43:45:7e:7a: 81:b6:de:63:17:e2:91:9a:9b:51:c2:6a:09:56:eb: 03:fc:d6:29:05:94:d1:97:16:45:1b:14:79:2d:1b: bb:87:4a:46:07:f6:36:f9:1e:71:9f:28:45:d0:60: e4:cb:4a:7e:f1:56:7a:0c:80:4d:aa:04:ac:4c:82: f0:43:98:60:c3:65:a3:7f:dc:bf:93:78:d4:aa:23: 06:eb:fe:11:28:da:e6:70:da:ce:b8:d2:eb:e1:19: 57:f9:31:0d:22:57:9e:ea:a3:0d:b9:ee:d0:65:a3: c8:9c:c5:00:0a:a2:1e:d4:54:f1:bb:ab:e5:15:7c: 89:90:d1:0b:2c:11:3e:6b:1d:7c:f0:1a:df:a8:f7: 8b:9e:b8:82:35:f2:1f:5a:3e:48:c7:f1:7f:bd:09: 42:36:79:c4:ef:8e:cc:33:1f:56:67:30:6c:2e:3a: 38:eb:32:0c:49:98:24:cc:77:f4:50:cc:be:8b:1f: 63:00:b7:67:71:40:ea:d3:b4:6f:1d:c0:61:c0:88: b3:d9:9c:a1:a2:72:f2:05:a2:15:fc:19:af:ad:95: d5:b7:95:d7:20:7e:08:8d:50:c8:11:7b:05:fb:3d: 7e:a2:7d:fa:66:33:2c:37:cd:be:fb:ec:b9:78:f1: c2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C4:AC:E0:E3:40:9A:90:3B:F5:9D:9C:5E:4F:37:43:AD:78:CE:D8 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.237.230.0/24 152.237.248.0/24 177.177.242.0/24 186.241.163.0/24 186.241.165.0/24 186.241.176.0/24 201.4.21.0/24 201.50.21.0/24 201.50.25.0/24 201.50.28.0/24 Signature Algorithm: sha256WithRSAEncryption 19:1e:54:b3:93:ca:88:2e:ad:7f:91:62:1f:e3:d4:15:9c:51: 15:51:f2:59:85:d6:cc:d2:ef:8d:a6:ac:ce:cc:ff:cd:8f:5c: 81:40:75:fa:b3:ac:82:e8:7f:61:6b:42:75:97:7d:1c:88:87: b7:83:5c:04:9a:5d:e8:bf:84:69:6a:1b:e7:56:c6:41:35:dd: 0f:bb:aa:6a:9a:01:57:bc:36:00:a7:2d:82:04:28:e1:28:5d: e5:61:18:34:86:11:bb:b3:e8:f1:6f:7d:c9:ff:90:d2:c4:fe: 1c:19:ba:5e:fc:0b:47:63:e2:fb:b1:6d:44:5e:95:6f:1d:90: 46:e1:44:d0:e1:f6:9d:d1:0b:b8:bc:28:3e:93:cf:03:00:27: a3:42:b3:84:3b:6e:ad:87:4e:46:98:4d:b4:52:a6:28:85:82: e8:6e:76:4a:9b:1a:11:34:f2:82:42:41:01:ce:a2:01:6e:01: ec:a4:3e:53:1a:9b:2d:26:07:61:f8:66:03:09:ea:8f:5d:1b: 1b:50:98:5a:f0:7d:d5:8a:6a:e6:54:b2:7a:d7:e7:1c:25:ea: 6c:95:5f:b6:ae:8f:d5:d2:e2:82:79:00:49:ce:cf:6c:a3:b9: 08:88:41:0c:94:9a:c8:8a:24:02:c2:c7:8b:28:a1:b4:e3:b4: c5:f9:72:25 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUcOFIYK4My3Uc9wOOzcOnFiVKdDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MjYyMDM4NTZaFw0yNzA5MjUyMDQzNTZaMDMxMTAvBgNV BAMTKDczQzRBQ0UwRTM0MDlBOTAzQkY1OUQ5QzVFNEYzNzQzQUQ3OENFRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIgLPxE/+m9hIaQ0V+eoG23mMX 4pGam1HCaglW6wP81ikFlNGXFkUbFHktG7uHSkYH9jb5HnGfKEXQYOTLSn7xVnoM gE2qBKxMgvBDmGDDZaN/3L+TeNSqIwbr/hEo2uZw2s640uvhGVf5MQ0iV57qow25 7tBlo8icxQAKoh7UVPG7q+UVfImQ0QssET5rHXzwGt+o94ueuII18h9aPkjH8X+9 CUI2ecTvjswzH1ZnMGwuOjjrMgxJmCTMd/RQzL6LH2MAt2dxQOrTtG8dwGHAiLPZ nKGicvIFohX8Ga+tldW3ldcgfgiNUMgRewX7PX6iffpmMyw3zb777Ll48cJ3AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUc8Ss4ONAmpA79Z2cXk83Q614ztgwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuG XHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVM4MzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwVQYIKwYBBQUHAQcBAf8ERjBEMEIEAgAB MDwDBACY7eYDBACY7fgDBACxsfIDBAC68aMDBAC68aUDBAC68bADBADJBBUDBADJ MhUDBADJMhkDBADJMhwwDQYJKoZIhvcNAQELBQADggEBABkeVLOTyogurX+RYh/j 1BWcURVR8lmF1szS742mrM7M/82PXIFAdfqzrILof2FrQnWXfRyIh7eDXASaXei/ hGlqG+dWxkE13Q+7qmqaAVe8NgCnLYIEKOEoXeVhGDSGEbuz6PFvfcn/kNLE/hwZ ul78C0dj4vuxbURelW8dkEbhRNDh9p3RC7i8KD6TzwMAJ6NCs4Q7bq2HTkaYTbRS piiFguhudkqbGhE08oJCQQHOogFuAeykPlMamy0mB2H4ZgMJ6o9dGxtQmFrwfdWK auZUsnrX5xwl6myVX7auj9XS4oJ5AEnOz2yjuQiIQQyUmsiKJALCx4soobTjtMX5 ciU= -----END CERTIFICATE-----Generated at Sun Sep 27 06:33:55 2026 by rpki-client