$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS10648.roa File: AS10648.roa (raw, json) Hash identifier: QzGDG0Ww/qUGF7mkdsXh5AcoxsQKaochwHm2uLgp8So= Subject key identifier: 4E:62:50:2D:0A:5B:8D:9E:01:FA:3F:26:C6:B4:20:6D:69:40:B1:75 Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 4A25DAD6C6B63CE3CC7CAC66ABA15BAE7876E496 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS10648.roa Signing time: Fri 11 Sep 2026 08:13:10 +0000 ROA not before: Fri 11 Sep 2026 08:08:10 +0000 ROA not after: Fri 10 Sep 2027 08:13:10 +0000 asID: 10648 IP address blocks: 186.241.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 04:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:25:da:d6:c6:b6:3c:e3:cc:7c:ac:66:ab:a1:5b:ae:78:76:e4:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 11 08:08:10 2026 GMT Not After : Sep 10 08:13:10 2027 GMT Subject: CN=4E62502D0A5B8D9E01FA3F26C6B4206D6940B175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:11:ec:45:25:51:22:cb:3b:0f:ba:f2:a5:d4: a8:66:2e:0c:4b:0d:52:44:ca:38:bb:75:35:14:48: ee:48:e6:e3:2b:b3:21:de:28:7f:84:f2:cb:8f:c1: 07:b9:00:68:85:a5:a2:e6:aa:21:54:a5:49:27:51: 9f:25:bb:a6:7a:1a:13:b5:1d:ec:76:e7:a9:20:c4: 1e:f2:16:c4:77:e7:c9:a0:b9:e8:c2:ea:9a:1d:77: c4:d0:c1:a9:83:20:d1:f4:1f:27:aa:34:2c:90:8f: a8:ed:68:12:9e:a9:8f:90:f8:8c:6c:ee:2c:fc:75: 16:8a:ed:64:b2:9a:95:d4:86:6e:20:c6:da:4b:91: 09:30:2a:26:6a:7a:46:3b:67:09:a6:0c:46:6a:be: 99:d7:6c:2d:57:b4:fe:ef:8a:a3:16:ef:3f:07:37: a4:b2:14:96:79:52:2a:b6:07:86:4d:fb:10:05:de: ad:b9:2a:03:31:3c:df:88:a0:7a:f0:f3:80:cc:a6: ad:8e:a5:4b:72:1a:72:a7:01:7e:6c:bc:e9:f5:79: 44:28:61:d0:62:a6:c8:cc:5f:9d:b1:47:9c:b3:b4: b2:7b:bb:c8:0f:61:b7:98:5d:14:7b:09:db:65:e0: b9:74:cd:af:2b:ff:91:a6:d1:a2:10:b0:ad:ec:fa: 15:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:62:50:2D:0A:5B:8D:9E:01:FA:3F:26:C6:B4:20:6D:69:40:B1:75 X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS10648.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.241.167.0/24 Signature Algorithm: sha256WithRSAEncryption 95:7a:2b:28:6e:7a:c7:2a:70:fa:09:71:52:3d:77:75:a1:31: 8f:e4:3f:88:4e:85:02:d0:05:dc:59:e6:b5:30:35:f5:49:fc: f5:4d:e1:e4:23:15:65:80:bf:cf:bf:19:71:e3:e8:dd:33:fa: 05:3c:80:a4:43:8e:04:40:7e:1e:1a:be:b5:fb:12:1e:84:25: f3:64:b1:b0:6d:4d:9b:d4:45:7d:b1:12:78:05:cf:cb:66:cb: 1b:99:09:1c:4f:0b:f3:60:ce:4a:32:8d:3d:5c:9c:1d:bf:d9: d0:d3:24:f1:86:9d:8e:b5:ec:65:14:9c:bb:6b:79:3f:3a:c8: 2c:7c:24:5a:ed:9c:23:ff:e4:f7:c4:1a:31:87:b3:3e:bd:f3: 9b:ff:f5:f7:7a:8b:43:25:c5:77:c0:67:60:9d:af:4d:51:29: a3:fc:94:ad:42:51:b6:6d:d4:31:3d:52:4a:7e:ed:86:f3:8e: 88:0a:58:b3:b1:20:ac:9b:20:6a:b4:5f:e6:59:36:ab:ab:0f: c8:88:7e:b9:f4:b6:40:95:e4:f1:5c:ad:b2:46:33:f6:a1:12: b6:29:62:cd:e8:6f:ed:7d:6b:56:ac:d2:77:16:74:bb:89:fe: fb:94:1b:02:b7:5d:6c:1b:ef:05:bf:67:8b:fe:6f:4e:4a:1d: f9:52:35:74 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUSiXa1sa2POPMfKxmq6Fbrnh25JYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTEwODA4MTBaFw0yNzA5MTAwODEzMTBaMDMxMTAvBgNV BAMTKDRFNjI1MDJEMEE1QjhEOUUwMUZBM0YyNkM2QjQyMDZENjk0MEIxNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXEexFJVEiyzsPuvKl1KhmLgxL DVJEyji7dTUUSO5I5uMrsyHeKH+E8suPwQe5AGiFpaLmqiFUpUknUZ8lu6Z6GhO1 Hex256kgxB7yFsR358mguejC6podd8TQwamDINH0HyeqNCyQj6jtaBKeqY+Q+Ixs 7iz8dRaK7WSympXUhm4gxtpLkQkwKiZqekY7ZwmmDEZqvpnXbC1XtP7viqMW7z8H N6SyFJZ5Uiq2B4ZN+xAF3q25KgMxPN+IoHrw84DMpq2OpUtyGnKnAX5svOn1eUQo YdBipsjMX52xR5yztLJ7u8gPYbeYXRR7Cdtl4Ll0za8r/5Gm0aIQsK3s+hWtAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUTmJQLQpbjZ4B+j8mxrQgbWlAsXUwHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxMDY0OC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALrxpzANBgkqhkiG9w0BAQsFAAOCAQEAlXorKG56xypw+glxUj13daEx j+Q/iE6FAtAF3FnmtTA19Un89U3h5CMVZYC/z78ZcePo3TP6BTyApEOOBEB+Hhq+ tfsSHoQl82SxsG1Nm9RFfbESeAXPy2bLG5kJHE8L82DOSjKNPVycHb/Z0NMk8Yad jrXsZRScu2t5PzrILHwkWu2cI//k98QaMYezPr3zm//193qLQyXFd8BnYJ2vTVEp o/yUrUJRtm3UMT1SSn7thvOOiApYs7EgrJsgarRf5lk2q6sPyIh+ufS2QJXk8Vyt skYz9qEStilizehv7X1rVqzSdxZ0u4n++5QbArddbBvvBb9ni/5vTkod+VI1dA== -----END CERTIFICATE-----Generated at Tue Sep 22 12:23:26 2026 by rpki-client