$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS23061.roa File: AS23061.roa (raw, json) Hash identifier: g0QZGWEGo4kd5zQPNYvAj+S7Y2QWAhs0HtIeGlze8Q8= Subject key identifier: 37:A4:F9:4C:5D:34:27:36:CA:8C:CA:8B:80:5F:80:E5:D1:C3:59:25 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 2BC65490793C6B9EDFC4D03486DCC18F6CEB429B Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS23061.roa Signing time: Fri 16 Oct 2026 22:56:37 +0000 ROA not before: Fri 16 Oct 2026 22:51:37 +0000 ROA not after: Fri 15 Oct 2027 22:56:37 +0000 asID: 23061 IP address blocks: 189.12.138.0/24 maxlen: 24 189.12.159.0/24 maxlen: 24 200.138.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c6:54:90:79:3c:6b:9e:df:c4:d0:34:86:dc:c1:8f:6c:eb:42:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 16 22:51:37 2026 GMT Not After : Oct 15 22:56:37 2027 GMT Subject: CN=37A4F94C5D342736CA8CCA8B805F80E5D1C35925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1c:f1:b1:c1:57:c7:4d:c9:18:3c:df:06:02: ff:1b:fb:78:eb:b7:c3:ae:2f:2d:15:69:2c:23:90: 02:6f:85:ff:85:98:ce:c5:eb:d1:15:d0:cb:ad:39: c4:75:40:9d:b2:e3:81:90:4f:97:4b:6a:30:21:e4: f4:75:d4:a0:0d:c5:f9:ef:ed:6e:cf:7f:2c:f3:7c: c7:3d:87:e1:c0:4b:33:84:ce:59:d6:86:c1:0d:97: 4b:36:5d:c7:71:19:10:10:5e:c2:fd:3f:a5:8c:a4: 23:45:3c:a3:a6:7b:c2:2e:e4:92:56:e3:80:be:e5: 07:6c:44:e3:19:2d:98:22:e6:11:57:f4:b0:05:61: 75:d2:6b:c8:74:9e:d3:3f:d3:f9:86:82:02:7a:9b: bc:4d:fd:32:5c:c8:c1:f4:7f:7f:41:79:f1:8c:3a: 11:2a:52:1a:7f:ef:27:6f:c9:82:23:21:b3:fc:2b: 97:08:83:e8:f4:db:78:da:85:43:16:4f:46:95:50: ce:ed:51:c3:37:6a:f5:c2:7c:6c:52:57:86:59:2c: 06:ce:37:85:57:b5:b8:25:b0:e0:5d:96:82:2a:46: 30:ed:05:80:de:dc:ec:d4:ff:f9:fc:cd:71:f2:3e: 0c:75:fe:66:b6:27:97:4b:79:76:96:62:51:e6:89: a7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A4:F9:4C:5D:34:27:36:CA:8C:CA:8B:80:5F:80:E5:D1:C3:59:25 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS23061.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.12.138.0/24 189.12.159.0/24 200.138.29.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:d8:0a:25:9f:68:c7:1c:e3:3e:28:c4:a4:a9:0c:a2:94:55: cf:01:e7:2d:86:aa:23:3e:c2:39:10:9b:75:b7:d7:6c:47:1a: fc:43:e6:92:cb:2d:92:04:ae:30:55:1c:3c:ff:37:d4:7f:da: 53:fe:96:16:5b:30:f3:20:a6:f2:5a:9e:c6:f2:24:8e:99:7d: 3b:7f:ef:1a:83:15:17:f4:35:1c:f0:72:26:c6:67:a3:12:23: 8c:48:61:22:4b:f6:de:fc:7e:f3:c5:a5:8e:91:15:f5:c7:5f: 88:00:05:2b:96:b9:71:91:e6:e5:c1:28:47:a1:a3:11:a3:00: d7:7b:b0:4c:af:d9:18:a8:39:e3:26:f2:02:10:27:c3:81:de: d3:4b:8b:32:0c:4c:a8:1e:fc:bf:b1:e0:26:40:8e:7a:b4:eb: 9c:99:f2:93:b4:dd:47:2c:33:6c:b9:cd:37:12:a6:1d:61:40: 78:c6:f3:28:39:5a:7f:e2:76:db:75:37:10:4f:6b:9a:58:f4: ca:cc:25:c6:28:3d:3a:4c:e9:3b:f8:b8:42:c3:c0:a6:fb:7a: 30:8b:72:3c:cb:cd:76:68:6a:0d:8d:23:38:f3:6f:f8:11:60: 6e:5f:59:48:3f:4e:89:97:38:fd:c8:15:b0:52:59:0c:66:80: 43:71:5d:11 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUK8ZUkHk8a57fxNA0htzBj2zrQpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMTYyMjUxMzdaFw0yNzEwMTUyMjU2MzdaMDMxMTAvBgNV BAMTKDM3QTRGOTRDNUQzNDI3MzZDQThDQ0E4QjgwNUY4MEU1RDFDMzU5MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWHPGxwVfHTckYPN8GAv8b+3jr t8OuLy0VaSwjkAJvhf+FmM7F69EV0MutOcR1QJ2y44GQT5dLajAh5PR11KANxfnv 7W7PfyzzfMc9h+HASzOEzlnWhsENl0s2XcdxGRAQXsL9P6WMpCNFPKOme8Iu5JJW 44C+5QdsROMZLZgi5hFX9LAFYXXSa8h0ntM/0/mGggJ6m7xN/TJcyMH0f39BefGM OhEqUhp/7ydvyYIjIbP8K5cIg+j023jahUMWT0aVUM7tUcM3avXCfGxSV4ZZLAbO N4VXtbglsOBdloIqRjDtBYDe3OzU//n8zXHyPgx1/ma2J5dLeXaWYlHmiaf3AgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUN6T5TF00JzbKjMqLgF+A5dHDWSUwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMzA2MS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQC AAEwEgMEAL0MigMEAL0MnwMEAMiKHTANBgkqhkiG9w0BAQsFAAOCAQEAL9gKJZ9o xxzjPijEpKkMopRVzwHnLYaqIz7CORCbdbfXbEca/EPmksstkgSuMFUcPP831H/a U/6WFlsw8yCm8lqexvIkjpl9O3/vGoMVF/Q1HPByJsZnoxIjjEhhIkv23vx+88Wl jpEV9cdfiAAFK5a5cZHm5cEoR6GjEaMA13uwTK/ZGKg54ybyAhAnw4He00uLMgxM qB78v7HgJkCOerTrnJnyk7TdRywzbLnNNxKmHWFAeMbzKDlaf+J223U3EE9rmlj0 yswlxig9OkzpO/i4QsPApvt6MItyPMvNdmhqDY0jOPNv+BFgbl9ZSD9OiZc4/cgV sFJZDGaAQ3FdEQ== -----END CERTIFICATE-----Generated at Tue Oct 27 22:45:54 2026 by rpki-client