$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/3/326131313a323963303a336439343a3a2f34382d3438203d3e20323036373838.roa File: 326131313a323963303a336439343a3a2f34382d3438203d3e20323036373838.roa (raw, json) Hash identifier: 1iptMUshwyDP9e7G3qYYwtjknI8WV3ZJt7QBcDGzOy0= Subject key identifier: C6:CD:9E:53:5A:9A:E9:46:A6:88:B8:57:08:C9:AE:BC:F0:E5:F4:DA Certificate issuer: /CN=8770188F7F0D18A86637EF0EE75EE2B70D810A7C Certificate serial: 60DC306B2A3641E490630E5D3681A2028500383D Authority key identifier: 87:70:18:8F:7F:0D:18:A8:66:37:EF:0E:E7:5E:E2:B7:0D:81:0A:7C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer Subject info access: rsync://krill.signalx.cloud/repo/signalx-rpki/3/326131313a323963303a336439343a3a2f34382d3438203d3e20323036373838.roa Signing time: Sat 02 Aug 2025 00:59:29 +0000 ROA not before: Sat 02 Aug 2025 00:54:29 +0000 ROA not after: Sat 01 Aug 2026 00:59:29 +0000 asID: 206788 IP address blocks: 2a11:29c0:3d94::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.signalx.cloud/repo/signalx-rpki/3/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.crl rsync://krill.signalx.cloud/repo/signalx-rpki/3/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.mft rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:dc:30:6b:2a:36:41:e4:90:63:0e:5d:36:81:a2:02:85:00:38:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8770188F7F0D18A86637EF0EE75EE2B70D810A7C Validity Not Before: Aug 2 00:54:29 2025 GMT Not After : Aug 1 00:59:29 2026 GMT Subject: CN=C6CD9E535A9AE946A688B85708C9AEBCF0E5F4DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:40:1e:f4:bc:88:f8:1d:b3:be:60:e3:2d:cc: 58:5f:d4:f1:3b:e7:40:98:9d:11:57:96:a9:40:f2: ff:41:55:de:ff:2c:79:f3:0d:21:9b:9c:47:f5:dc: 5a:fc:2f:59:6c:dc:33:35:de:78:40:1e:b4:cc:d9: aa:8f:a3:aa:4a:a0:c3:3c:12:4f:a0:75:06:91:01: 19:52:d7:3b:ee:21:c8:fd:d0:18:39:1d:91:04:31: 67:68:17:ed:4b:e9:ab:c3:0e:e4:62:69:ee:20:1e: 16:a9:16:00:31:74:74:e1:65:e5:38:74:39:85:57: 1d:f0:87:d3:5c:0f:a3:aa:e2:05:42:96:4c:3a:48: 75:f4:39:76:e1:3c:b3:69:29:58:61:fc:9e:4f:7b: cd:7a:2f:39:78:f1:b1:02:2b:69:1e:fc:7a:13:e5: 93:2a:c5:92:d4:cd:5f:3c:12:95:6c:a7:14:a8:16: 13:b9:6a:0c:dc:4f:b7:39:f3:55:d1:84:04:04:e3: 5d:e5:cd:41:5b:5a:4c:be:e8:1f:28:d3:03:6d:1f: 27:1f:9d:7a:1c:9f:3e:26:09:c8:fd:3c:fe:2e:60: 5e:e9:ec:54:19:c5:29:0a:8b:f2:be:01:2d:0c:f2: a7:e4:38:9a:81:0b:2d:8e:23:95:1c:b6:c1:d1:ac: 76:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CD:9E:53:5A:9A:E9:46:A6:88:B8:57:08:C9:AE:BC:F0:E5:F4:DA X509v3 Authority Key Identifier: keyid:87:70:18:8F:7F:0D:18:A8:66:37:EF:0E:E7:5E:E2:B7:0D:81:0A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.signalx.cloud/repo/signalx-rpki/3/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer Subject Information Access: Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/3/326131313a323963303a336439343a3a2f34382d3438203d3e20323036373838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:29c0:3d94::/48 Signature Algorithm: sha256WithRSAEncryption 15:a0:17:89:eb:ad:59:64:52:c4:01:fb:6f:97:45:dd:c3:3d: 92:6e:4c:a8:9a:ae:87:d9:e8:7a:28:f8:c0:b4:f3:3a:a8:e5: b5:d7:ac:31:91:6d:ad:ab:25:5b:ab:e2:e7:f2:52:05:61:d5: 1a:44:4b:54:a3:56:20:a7:bb:de:a1:ac:b8:38:f2:a5:14:90: a7:2e:b8:d8:d5:ba:1d:b9:e4:19:3d:96:17:08:ea:c8:85:f3: 28:c3:84:b7:11:78:5f:df:bc:32:fb:d8:88:17:07:cb:be:b7: 7d:2a:86:fc:6e:c2:bf:8a:f7:8e:47:fa:11:6e:0b:e2:8b:bb: 1c:52:bd:68:c0:ce:45:60:27:e7:aa:95:ef:a7:b4:d1:a6:e1: 5e:a3:b6:15:a3:22:cf:16:e0:e3:b7:5a:b1:ae:03:9a:99:39: df:77:7e:85:2b:85:6f:54:eb:6d:bb:92:16:a4:10:9b:19:56: 39:13:91:24:48:56:f3:cf:a8:b2:4a:1d:7d:16:17:77:d5:f0: a1:0f:4b:8e:de:2b:bc:b6:25:ae:53:15:bc:b7:a9:58:81:a3: be:ea:0f:be:9a:0e:33:04:42:67:cb:c7:ef:da:5a:f6:72:fb: 02:a1:f1:f5:09:e6:c7:d0:b2:fa:78:34:bc:5c:4e:9d:ad:0b: 9a:39:81:fb -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgIUYNwwayo2QeSQYw5dNoGiAoUAOD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc3MDE4OEY3RjBEMThBODY2MzdFRjBFRTc1RUUyQjcw RDgxMEE3QzAeFw0yNTA4MDIwMDU0MjlaFw0yNjA4MDEwMDU5MjlaMDMxMTAvBgNV BAMTKEM2Q0Q5RTUzNUE5QUU5NDZBNjg4Qjg1NzA4QzlBRUJDRjBFNUY0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8QB70vIj4HbO+YOMtzFhf1PE7 50CYnRFXlqlA8v9BVd7/LHnzDSGbnEf13Fr8L1ls3DM13nhAHrTM2aqPo6pKoMM8 Ek+gdQaRARlS1zvuIcj90Bg5HZEEMWdoF+1L6avDDuRiae4gHhapFgAxdHThZeU4 dDmFVx3wh9NcD6Oq4gVClkw6SHX0OXbhPLNpKVhh/J5Pe816Lzl48bECK2ke/HoT 5ZMqxZLUzV88EpVspxSoFhO5agzcT7c581XRhAQE413lzUFbWky+6B8o0wNtHycf nXocnz4mCcj9PP4uYF7p7FQZxSkKi/K+AS0M8qfkOJqBCy2OI5UctsHRrHbrAgMB AAGjggI4MIICNDAdBgNVHQ4EFgQUxs2eU1qa6UamiLhXCMmuvPDl9NowHwYDVR0j BBgwFoAUh3AYj38NGKhmN+8O517itw2BCnwwDgYDVR0PAQH/BAQDAgeAMG0GA1Ud HwRmMGQwYqBgoF6GXHJzeW5jOi8va3JpbGwuc2lnbmFseC5jbG91ZC9yZXBvL3Np Z25hbHgtcnBraS8zLzg3NzAxODhGN0YwRDE4QTg2NjM3RUYwRUU3NUVFMkI3MEQ4 MTBBN0MuY3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvODc3MDE4OEY3RjBEMThBODY2 MzdFRjBFRTc1RUUyQjcwRDgxMEE3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGA BggrBgEFBQcwC4Z0cnN5bmM6Ly9rcmlsbC5zaWduYWx4LmNsb3VkL3JlcG8vc2ln bmFseC1ycGtpLzMvMzI2MTMxMzEzYTMyMzk2MzMwM2EzMzY0MzkzNDNhM2EyZjM0 MzgyZDM0MzgyMDNkM2UyMDMyMzAzNjM3MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoRKcA9lDAN BgkqhkiG9w0BAQsFAAOCAQEAFaAXieutWWRSxAH7b5dF3cM9km5MqJquh9noeij4 wLTzOqjltdesMZFtraslW6vi5/JSBWHVGkRLVKNWIKe73qGsuDjypRSQpy642NW6 HbnkGT2WFwjqyIXzKMOEtxF4X9+8MvvYiBcHy763fSqG/G7Cv4r3jkf6EW4L4ou7 HFK9aMDORWAn56qV76e00abhXqO2FaMizxbg47dasa4Dmpk533d+hSuFb1TrbbuS FqQQmxlWORORJEhW88+oskodfRYXd9XwoQ9Ljt4rvLYlrlMVvLepWIGjvuoPvpoO MwRCZ8vH79pa9nL7AqHx9Qnmx9Cy+ng0vFxOna0LmjmB+w== -----END CERTIFICATE-----Generated at Wed Nov 5 15:10:21 2025 by rpki-client