$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS49608.roa File: AS49608.roa (raw, json) Hash identifier: N+iqMfpUxkluTNbhog7/hQIInFaZ6G14u26tU2+dqqE= Subject key identifier: 8A:1C:A6:40:A8:40:04:E1:E5:CB:A8:E2:F1:51:98:2A:C4:A2:1E:17 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 03A24ABB583E6D179FD2FDE0AB44B472BA3480BA Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS49608.roa Signing time: Sun 01 Nov 2026 16:15:44 +0000 ROA not before: Sun 01 Nov 2026 16:10:44 +0000 ROA not after: Sun 31 Oct 2027 16:15:44 +0000 asID: 49608 IP address blocks: 109.64.8.0/24 maxlen: 24 109.64.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a2:4a:bb:58:3e:6d:17:9f:d2:fd:e0:ab:44:b4:72:ba:34:80:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 1 16:10:44 2026 GMT Not After : Oct 31 16:15:44 2027 GMT Subject: CN=8A1CA640A84004E1E5CBA8E2F151982AC4A21E17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d3:12:c3:be:3c:c2:00:72:dd:69:05:8b:1d: f6:54:45:d8:4b:9c:f8:44:2c:34:62:a6:e8:8a:ea: bf:86:e0:86:22:18:00:fb:4d:b9:04:98:ee:67:a1: d8:49:2d:d9:6d:c7:05:4e:e3:a9:b5:e6:e6:f4:f8: ee:69:c5:ba:ce:4c:c6:cf:58:ea:f4:86:6c:e3:05: 43:85:89:a9:86:9e:b5:4a:c1:73:4e:1d:ef:f9:43: c1:5a:c3:5d:82:26:57:09:29:27:91:16:48:b7:21: 93:fa:37:c2:f6:78:78:c5:49:a8:5f:ab:f5:bc:79: d4:02:51:3d:b4:e8:fb:91:02:ca:9e:c7:03:79:fb: ac:30:60:3b:81:f3:8c:44:d4:ba:36:11:84:06:12: 7d:c4:77:e0:01:b2:99:aa:43:05:4b:1b:3f:ac:4f: c0:b4:65:d3:11:5d:c7:09:64:81:2a:41:aa:67:d6: 6d:f9:72:c7:46:d9:ef:b4:f6:51:4c:4c:3d:ea:8f: 3c:b7:10:13:5b:48:c7:3e:12:a6:f6:ad:ed:95:e8: 5d:96:ae:45:a1:17:0f:3d:02:b1:4a:2e:a9:d8:ad: 04:fe:b6:83:36:1b:21:ab:30:cf:58:54:a2:05:5e: ec:92:02:79:07:5f:33:8c:09:1a:44:99:4b:77:15: 85:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1C:A6:40:A8:40:04:E1:E5:CB:A8:E2:F1:51:98:2A:C4:A2:1E:17 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS49608.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.64.8.0/24 109.64.25.0/24 Signature Algorithm: sha256WithRSAEncryption 63:55:54:56:52:06:f4:2f:22:bc:3f:c1:c1:11:6a:6a:80:79: c6:e5:2c:7c:4c:44:fa:5e:82:32:0f:25:fa:8d:16:1f:cf:15: 02:34:87:10:4a:fb:19:c8:5c:d7:2e:a6:a8:21:12:4e:05:f6: 31:21:f8:f0:8d:15:ca:59:5d:6e:a0:b6:e1:e7:8e:c5:df:7c: ca:b8:1b:11:f5:4c:fe:e7:dc:7c:49:1f:0e:45:3f:23:4d:d6: 44:85:e5:18:0e:c4:84:7e:d3:e7:02:70:fe:51:17:f5:64:ce: 7f:a1:91:5f:29:c9:95:c8:3c:22:28:23:2c:1d:21:60:23:4e: da:a5:e1:63:82:34:9e:e9:67:99:01:d9:f3:b3:ae:4b:a3:c5: 7e:94:b4:73:9f:bb:05:84:b5:a2:36:1e:1c:0b:be:e7:eb:33: ca:c6:06:21:5d:88:40:00:27:b9:51:9f:9d:c7:71:37:3b:5e: c7:0f:9a:72:91:cb:4d:d4:e9:b5:57:45:44:be:7f:0a:e9:c2: a6:c5:88:af:0b:5e:55:14:f0:ad:88:a2:c3:30:c2:0b:35:b9: 23:fd:31:a9:68:22:09:da:8e:f7:68:2f:8b:62:d5:1e:05:e4: ba:4a:e8:27:ca:1c:fb:aa:12:b2:18:7c:ab:8e:c7:c7:e8:54: 98:72:a1:bb -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUA6JKu1g+bRef0v3gq0S0cro0gLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMDExNjEwNDRaFw0yNzEwMzExNjE1NDRaMDMxMTAvBgNV BAMTKDhBMUNBNjQwQTg0MDA0RTFFNUNCQThFMkYxNTE5ODJBQzRBMjFFMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf0xLDvjzCAHLdaQWLHfZURdhL nPhELDRipuiK6r+G4IYiGAD7TbkEmO5nodhJLdltxwVO46m15ub0+O5pxbrOTMbP WOr0hmzjBUOFiamGnrVKwXNOHe/5Q8Faw12CJlcJKSeRFki3IZP6N8L2eHjFSahf q/W8edQCUT206PuRAsqexwN5+6wwYDuB84xE1Lo2EYQGEn3Ed+ABspmqQwVLGz+s T8C0ZdMRXccJZIEqQapn1m35csdG2e+09lFMTD3qjzy3EBNbSMc+Eqb2re2V6F2W rkWhFw89ArFKLqnYrQT+toM2GyGrMM9YVKIFXuySAnkHXzOMCRpEmUt3FYVxAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUihymQKhABOHly6ji8VGYKsSiHhcwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0OTYwOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQC AAEwDAMEAG1ACAMEAG1AGTANBgkqhkiG9w0BAQsFAAOCAQEAY1VUVlIG9C8ivD/B wRFqaoB5xuUsfExE+l6CMg8l+o0WH88VAjSHEEr7Gchc1y6mqCESTgX2MSH48I0V ylldbqC24eeOxd98yrgbEfVM/ufcfEkfDkU/I03WRIXlGA7EhH7T5wJw/lEX9WTO f6GRXynJlcg8IigjLB0hYCNO2qXhY4I0nulnmQHZ87OuS6PFfpS0c5+7BYS1ojYe HAu+5+szysYGIV2IQAAnuVGfncdxNztexw+acpHLTdTptVdFRL5/CunCpsWIrwte VRTwrYiiwzDCCzW5I/0xqWgiCdqO92gvi2LVHgXkukroJ8oc+6oSshh8q47Hx+hU mHKhuw== -----END CERTIFICATE-----Generated at Sun Nov 15 16:22:53 2026 by rpki-client