$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS5650.roa File: AS5650.roa (raw, json) Hash identifier: wFANbTfmoOdMUikRkwZfEhAbY4KmRhoYEzbBjxx3X2s= Subject key identifier: 11:18:16:8A:10:5D:64:D7:2E:85:03:08:8C:6E:08:F3:04:F6:11:7B Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 145EF1337D7E00D5B8E1BB2E4901C37C34DF513B Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS5650.roa Signing time: Mon 05 Oct 2026 06:13:43 +0000 ROA not before: Mon 05 Oct 2026 06:08:43 +0000 ROA not after: Mon 04 Oct 2027 06:13:43 +0000 asID: 5650 IP address blocks: 79.176.28.0/24 maxlen: 24 79.176.35.0/24 maxlen: 24 79.176.40.0/24 maxlen: 24 79.176.83.0/24 maxlen: 24 79.176.150.0/24 maxlen: 24 79.176.153.0/24 maxlen: 24 79.176.156.0/24 maxlen: 24 109.66.37.0/24 maxlen: 24 109.66.39.0/24 maxlen: 24 109.66.45.0/24 maxlen: 24 109.66.47.0/24 maxlen: 24 109.66.50.0/24 maxlen: 24 109.66.61.0/24 maxlen: 24 109.66.183.0/24 maxlen: 24 109.66.185.0/24 maxlen: 24 109.66.187.0/24 maxlen: 24 109.66.189.0/24 maxlen: 24 109.66.191.0/24 maxlen: 24 109.66.193.0/24 maxlen: 24 109.66.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:5e:f1:33:7d:7e:00:d5:b8:e1:bb:2e:49:01:c3:7c:34:df:51:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:43 2026 GMT Not After : Oct 4 06:13:43 2027 GMT Subject: CN=1118168A105D64D72E8503088C6E08F304F6117B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c6:27:64:9b:22:54:1f:c4:d5:f8:c2:0e:08: 08:2c:c6:a4:0f:49:5d:01:8e:50:b1:f2:9d:40:91: 5a:84:07:14:aa:54:a6:09:97:1f:db:7e:a4:a8:2b: b2:12:f7:b9:22:77:93:d9:31:fd:07:8b:a4:fd:63: b6:a7:71:27:68:7e:ee:88:90:00:ad:11:11:37:9a: 88:01:f4:db:bb:88:10:fa:cf:cf:d4:f8:ad:9d:e3: b5:ec:e5:63:49:8c:fb:6f:a0:35:fa:f3:41:48:35: 16:4c:8d:34:c6:b3:31:3c:a5:27:9a:77:fd:6b:6e: ee:ff:e0:cb:53:4a:8b:eb:58:e6:91:56:35:f4:4c: 4d:72:17:2c:1f:f0:e2:d9:42:03:09:54:83:61:a7: 05:d4:5b:50:41:be:6a:1b:2f:54:dc:f5:77:d7:83: 1b:eb:22:ea:6a:5a:f3:38:f7:5c:1e:28:23:76:65: 2d:d7:fd:5c:cc:9a:70:73:27:e7:13:b6:32:42:b1: ff:d3:be:3f:96:07:50:5f:29:23:7b:cc:ac:5d:e7: ba:7a:d6:e4:28:81:15:7d:33:bf:f0:a6:eb:02:2d: 33:cb:b0:57:90:b0:9a:2b:94:3c:a6:4a:f2:9d:25: 04:0d:1c:6a:ec:4f:fc:30:15:c0:af:61:a2:60:1a: a3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:18:16:8A:10:5D:64:D7:2E:85:03:08:8C:6E:08:F3:04:F6:11:7B X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS5650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.28.0/24 79.176.35.0/24 79.176.40.0/24 79.176.83.0/24 79.176.150.0/24 79.176.153.0/24 79.176.156.0/24 109.66.37.0/24 109.66.39.0/24 109.66.45.0/24 109.66.47.0/24 109.66.50.0/24 109.66.61.0/24 109.66.183.0/24 109.66.185.0/24 109.66.187.0/24 109.66.189.0/24 109.66.191.0/24 109.66.193.0/24 109.66.252.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:15:72:06:39:d5:c4:9a:a9:d2:8e:a1:d8:d0:ff:49:dc:aa: f7:83:bd:35:0d:e0:b6:9a:98:6e:19:1e:79:39:6a:f4:70:70: 9b:24:b9:cf:0d:d6:4f:f6:5c:f7:55:9f:18:ff:87:95:9e:6c: 08:c4:7f:b9:8b:ed:cc:81:a3:04:fc:25:a0:8d:6a:f0:7d:4e: 0a:ac:05:72:94:97:fb:5f:c0:8e:6b:c4:67:e4:c9:5d:aa:42: 63:6d:0e:38:85:28:5f:7a:d8:04:5f:0a:f1:59:92:b0:6e:15: 33:b2:79:83:61:5d:53:c0:28:7b:5f:8a:0d:06:95:28:ed:c4: 6a:48:24:ed:a8:18:44:c4:41:10:95:dc:77:fc:fe:d7:b9:d3: a8:94:cb:8d:3a:ec:d5:0f:d4:20:5f:fc:e5:64:ac:b9:42:a8: 8a:be:80:ab:a8:26:cb:e3:f2:30:b2:f1:b2:39:01:a9:3d:41: 23:b3:9b:b5:c5:de:88:c4:6e:2f:92:37:0d:c9:56:6b:4e:6c: 40:1d:ec:96:05:44:6d:27:e7:43:c7:be:29:22:ad:88:bd:4f: ca:d7:f5:6b:33:3c:21:00:dd:22:f0:c7:73:d4:2d:7a:54:fc: 8a:a3:36:46:5f:63:c6:2b:ba:8c:e9:d7:37:27:1e:a5:8c:8f: 78:8b:da:c8 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgIUFF7xM31+ANW44bsuSQHDfDTfUTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDNaFw0yNzEwMDQwNjEzNDNaMDMxMTAvBgNV BAMTKDExMTgxNjhBMTA1RDY0RDcyRTg1MDMwODhDNkUwOEYzMDRGNjExN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDxidkmyJUH8TV+MIOCAgsxqQP SV0BjlCx8p1AkVqEBxSqVKYJlx/bfqSoK7IS97kid5PZMf0Hi6T9Y7ancSdofu6I kACtERE3mogB9Nu7iBD6z8/U+K2d47Xs5WNJjPtvoDX680FINRZMjTTGszE8pSea d/1rbu7/4MtTSovrWOaRVjX0TE1yFywf8OLZQgMJVINhpwXUW1BBvmobL1Tc9XfX gxvrIupqWvM491weKCN2ZS3X/VzMmnBzJ+cTtjJCsf/Tvj+WB1BfKSN7zKxd57p6 1uQogRV9M7/wpusCLTPLsFeQsJorlDymSvKdJQQNHGrsT/wwFcCvYaJgGqPhAgMB AAGjggK4MIICtDAdBgNVHQ4EFgQUERgWihBdZNcuhQMIjG4I8wT2EXswHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM1NjUwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+ BAIAATB4AwQAT7AcAwQAT7AjAwQAT7AoAwQAT7BTAwQAT7CWAwQAT7CZAwQAT7Cc AwQAbUIlAwQAbUInAwQAbUItAwQAbUIvAwQAbUIyAwQAbUI9AwQAbUK3AwQAbUK5 AwQAbUK7AwQAbUK9AwQAbUK/AwQAbULBAwQCbUL8MA0GCSqGSIb3DQEBCwUAA4IB AQCKFXIGOdXEmqnSjqHY0P9J3Kr3g701DeC2mphuGR55OWr0cHCbJLnPDdZP9lz3 VZ8Y/4eVnmwIxH+5i+3MgaME/CWgjWrwfU4KrAVylJf7X8COa8Rn5MldqkJjbQ44 hShfetgEXwrxWZKwbhUzsnmDYV1TwCh7X4oNBpUo7cRqSCTtqBhExEEQldx3/P7X udOolMuNOuzVD9QgX/zlZKy5QqiKvoCrqCbL4/IwsvGyOQGpPUEjs5u1xd6IxG4v kjcNyVZrTmxAHeyWBURtJ+dDx74pIq2IvU/K1/VrMzwhAN0i8Mdz1C16VPyKozZG X2PGK7qM6dc3Jx6ljI94i9rI -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:55 2026 by rpki-client