$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa File: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (raw, json) Hash identifier: b4lO7qQITmIuTe+1DZpcfLD2H0yGfI8Xz4qwvBeBNzo= Subject key identifier: 24:34:62:CF:9E:F6:66:86:3E:D5:6F:04:9F:C3:99:86:78:F0:39:2B Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 3514367A6B75404A99292AFF1DDC5E527B6CEBA0 Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa Signing time: Sun 08 Jun 2025 19:44:23 +0000 ROA not before: Sun 08 Jun 2025 19:39:23 +0000 ROA not after: Sun 07 Jun 2026 19:44:23 +0000 asID: 215069 IP address blocks: 2a11:f2c0:ffd4::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 08:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:14:36:7a:6b:75:40:4a:99:29:2a:ff:1d:dc:5e:52:7b:6c:eb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: Jun 8 19:39:23 2025 GMT Not After : Jun 7 19:44:23 2026 GMT Subject: CN=243462CF9EF666863ED56F049FC3998678F0392B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f9:9e:9a:5e:4d:a7:f8:c4:f4:1a:83:50:19: f4:9c:0d:71:07:60:5b:a7:de:d7:91:45:12:43:b3: d2:72:76:df:11:0f:aa:2f:4f:f7:48:41:23:8d:50: 81:d1:cc:84:4c:ee:2a:42:70:58:83:bf:c7:6a:ff: 40:b3:d7:cd:99:e9:c8:d3:cf:e6:ce:d8:0f:30:18: c2:44:dd:e8:db:e5:97:82:54:4a:b5:50:9b:ac:66: 64:05:2a:28:27:fb:c2:51:e6:81:a7:e4:60:cc:12: 2e:17:7e:1f:07:b1:94:18:8e:c0:cd:d3:c0:3a:4e: 20:bf:99:2a:93:b7:c8:3f:29:22:ec:35:c8:78:ee: cb:75:b9:b4:34:cf:4f:db:7b:39:69:9f:57:24:d2: 6d:2f:a3:2b:65:97:0d:34:94:86:b7:3b:24:1b:95: 7a:36:e7:31:4f:18:1c:17:86:6b:de:45:50:a6:e0: 98:8c:f8:4e:4a:4b:19:b1:94:98:4d:8f:09:48:ee: 27:a3:ce:29:10:38:68:65:9f:ed:57:67:93:b8:92: 99:24:20:7c:24:cb:39:17:e1:b3:ee:93:4a:2c:9d: 8a:ef:95:08:44:0d:a5:5c:20:88:bc:2f:27:e6:7c: ae:98:ea:67:b2:99:fd:0a:84:c6:84:4e:47:04:e1: 89:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:34:62:CF:9E:F6:66:86:3E:D5:6F:04:9F:C3:99:86:78:F0:39:2B X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:ffd4::/46 Signature Algorithm: sha256WithRSAEncryption 73:5e:ce:f9:99:1b:cc:84:8b:ba:00:e0:38:fd:f9:05:c9:92: f3:ac:4a:d5:47:c4:44:e8:33:03:52:4f:45:f4:f4:a8:0f:36: ff:be:a3:a8:a5:6f:22:04:d9:df:1f:ad:cc:e5:41:7e:c6:91: e1:53:9e:e0:6b:4e:c3:ab:4b:fa:56:8f:b9:46:17:c6:60:6b: 7b:5d:5f:7c:f6:30:b2:d1:20:cf:d7:b8:92:8d:43:ad:64:81: 31:65:17:54:37:5c:07:85:97:ee:57:e7:b8:e5:4f:ba:70:c5: 19:aa:ea:89:5f:23:56:64:bf:4c:12:b9:e1:6a:62:c1:54:9f: 7d:2b:da:4e:74:7b:95:7c:a0:b0:2c:40:79:38:bc:cc:41:7b: 68:e5:b3:c8:13:a3:0f:ab:9d:b7:47:07:bf:c3:a3:66:5d:d3: 30:41:ce:02:0d:77:d0:c9:7e:6f:d5:3e:7d:da:c9:13:b9:a8: 76:18:67:cc:34:1b:cf:5a:c9:7c:99:a7:28:13:e5:24:23:f2: ed:64:91:c7:fe:ae:27:d6:82:e4:88:05:63:fb:bc:71:a2:b9: 55:2d:b6:db:35:b0:56:8f:15:ed:f6:51:4e:61:8d:14:ac:08: 14:9b:0d:5e:5c:d1:8b:36:a6:3f:7e:c8:d8:f7:74:fe:78:c8: f4:48:0c:16 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUNRQ2emt1QEqZKSr/HdxeUnts66AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNTA2MDgxOTM5MjNaFw0yNjA2MDcxOTQ0MjNaMDMxMTAvBgNV BAMTKDI0MzQ2MkNGOUVGNjY2ODYzRUQ1NkYwNDlGQzM5OTg2NzhGMDM5MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY+Z6aXk2n+MT0GoNQGfScDXEH YFun3teRRRJDs9Jydt8RD6ovT/dIQSONUIHRzIRM7ipCcFiDv8dq/0Cz182Z6cjT z+bO2A8wGMJE3ejb5ZeCVEq1UJusZmQFKign+8JR5oGn5GDMEi4Xfh8HsZQYjsDN 08A6TiC/mSqTt8g/KSLsNch47st1ubQ0z0/bezlpn1ck0m0voytllw00lIa3OyQb lXo25zFPGBwXhmveRVCm4JiM+E5KSxmxlJhNjwlI7iejzikQOGhln+1XZ5O4kpkk IHwkyzkX4bPuk0osnYrvlQhEDaVcIIi8LyfmfK6Y6meymf0KhMaETkcE4YnXAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUJDRiz572ZoY+1W8En8OZhnjwOSswHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8yNTQw NWM3NmM3YTA0M2M4OWFjZTE2N2U5ZDJjZjc5Yy8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjY0MzQzYTNhMmYzNDM2MmQzNDM2MjAzZDNlMjAzMjMxMzUzMDM2Mzku cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwIqEfLA/9QwDQYJKoZIhvcNAQELBQADggEBAHNezvmZG8yEi7oA 4Dj9+QXJkvOsStVHxEToMwNST0X09KgPNv++o6ilbyIE2d8frczlQX7GkeFTnuBr TsOrS/pWj7lGF8Zga3tdX3z2MLLRIM/XuJKNQ61kgTFlF1Q3XAeFl+5X57jlT7pw xRmq6olfI1Zkv0wSueFqYsFUn30r2k50e5V8oLAsQHk4vMxBe2jls8gTow+rnbdH B7/Do2Zd0zBBzgINd9DJfm/VPn3ayRO5qHYYZ8w0G89ayXyZpygT5SQj8u1kkcf+ rifWguSIBWP7vHGiuVUttts1sFaPFe32UU5hjRSsCBSbDV5c0Ys2pj9+yNj3dP54 yPRIDBY= -----END CERTIFICATE-----Generated at Sun Jun 15 17:25:37 2025 by rpki-client