$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa File: 326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (raw, json) Hash identifier: MpewGrhFOYc7jc70q6ubpOkEuQ0IJ7Wp+DrSPfwP1vQ= Subject key identifier: 87:3D:78:D6:B4:AD:BE:5F:10:4E:04:D3:43:60:86:F1:09:52:F4:2C Certificate issuer: /CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Certificate serial: 5584372AABA6768AD03921207637964529088F9F Authority key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa Signing time: Sun 08 Jun 2025 19:41:36 +0000 ROA not before: Sun 08 Jun 2025 19:36:36 +0000 ROA not after: Sun 07 Jun 2026 19:41:36 +0000 asID: 205589 IP address blocks: 2a11:f2c0:ffc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 23:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:84:37:2a:ab:a6:76:8a:d0:39:21:20:76:37:96:45:29:08:8f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Validity Not Before: Jun 8 19:36:36 2025 GMT Not After : Jun 7 19:41:36 2026 GMT Subject: CN=873D78D6B4ADBE5F104E04D3436086F10952F42C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7f:21:4b:d3:3e:fd:99:e4:47:4f:ae:83:4b: ba:0f:45:e8:45:dd:31:d6:b8:66:7c:c2:2b:12:58: 53:a2:2e:72:10:8f:2e:d5:63:62:38:9c:9d:05:ea: 3d:5a:3b:d2:53:95:b6:74:10:55:72:c7:75:55:6b: e7:6e:6e:97:31:0b:ef:18:b7:32:9b:9a:52:89:5e: a1:52:62:de:ad:8f:d0:1d:f0:d5:2a:58:e2:15:48: 25:02:3d:15:0d:de:0a:f8:d7:fe:69:86:bc:f5:19: c6:ed:b3:8e:30:3a:4f:9a:b5:56:d9:f5:ec:0b:94: 02:8e:fb:a3:31:52:30:e2:aa:a3:56:09:51:ff:b2: 98:e0:b1:02:2c:4f:e7:34:dc:8b:87:67:f1:ce:1f: 0e:a6:73:62:b3:cd:ee:c6:6b:d5:0e:74:49:57:1c: 11:21:b0:dc:40:22:a5:4f:80:7d:b0:2e:2e:28:be: 83:88:c9:a2:90:0e:2f:39:ab:4c:0b:af:bf:b3:f5: 48:7c:25:c2:62:f3:9b:88:85:e7:30:05:f4:41:57: 27:ec:94:c4:a4:03:17:10:3d:fb:72:00:de:3a:26: 20:0a:fc:4b:c1:6e:28:a7:c6:4d:b1:0d:e3:28:33: 8e:4c:86:23:ba:19:a7:cd:41:67:aa:e3:a4:eb:23: 1e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3D:78:D6:B4:AD:BE:5F:10:4E:04:D3:43:60:86:F1:09:52:F4:2C X509v3 Authority Key Identifier: keyid:BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:ffc0::/48 Signature Algorithm: sha256WithRSAEncryption 49:cb:38:a9:57:15:e7:c7:5c:4d:83:2f:0c:69:f2:60:3a:38: 34:7d:cb:6e:4b:73:7f:20:d3:f3:5e:4a:06:40:83:da:81:e3: 52:fc:9c:da:61:83:4a:03:36:d0:51:dd:bd:26:7a:09:13:1a: 38:d9:36:c6:27:f1:d9:51:e4:5c:53:b6:50:7e:01:a9:40:e0: 21:50:3d:4d:32:9b:63:ed:80:63:5b:78:40:b1:75:f3:66:f3: 18:62:26:ef:70:b6:6a:14:3e:86:cf:d4:b8:ee:05:f6:c7:b8: 9e:65:e5:8e:c9:5c:e0:bd:32:d9:65:9c:6f:48:d5:8a:4c:f7: c1:34:61:79:33:ad:15:a2:15:36:6c:98:b6:26:0b:f9:6c:26: 35:6f:b1:7d:bd:97:d4:a7:22:e9:52:e8:8d:b3:93:b6:6e:6d: 79:87:de:df:04:4e:d0:e5:32:5b:32:cd:a5:5d:62:66:83:a5: bf:18:31:22:f4:79:99:d2:9a:b2:e1:47:fe:07:ca:df:27:94: 2f:8f:3c:2e:9b:90:89:e8:80:47:35:d0:93:60:39:d1:b1:7b: cc:b8:ae:93:02:18:da:1e:34:b4:68:a1:57:3a:ae:8a:8c:39: 81:95:97:cd:88:fc:b8:2c:92:0a:ea:df:b4:92:1f:21:eb:34: 1c:13:05:80 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUVYQ3KqumdorQOSEgdjeWRSkIj58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdE NzM3QjExNTAeFw0yNTA2MDgxOTM2MzZaFw0yNjA2MDcxOTQxMzZaMDMxMTAvBgNV BAMTKDg3M0Q3OEQ2QjRBREJFNUYxMDRFMDREMzQzNjA4NkYxMDk1MkY0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKfyFL0z79meRHT66DS7oPRehF 3THWuGZ8wisSWFOiLnIQjy7VY2I4nJ0F6j1aO9JTlbZ0EFVyx3VVa+dubpcxC+8Y tzKbmlKJXqFSYt6tj9Ad8NUqWOIVSCUCPRUN3gr41/5phrz1Gcbts44wOk+atVbZ 9ewLlAKO+6MxUjDiqqNWCVH/spjgsQIsT+c03IuHZ/HOHw6mc2Kzze7Ga9UOdElX HBEhsNxAIqVPgH2wLi4ovoOIyaKQDi85q0wLr7+z9Uh8JcJi85uIhecwBfRBVyfs lMSkAxcQPftyAN46JiAK/EvBbiinxk2xDeMoM45MhiO6GafNQWeq46TrIx4VAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUhz141rStvl8QTgTTQ2CG8QlS9CwwHwYDVR0j BBgwFoAUu+0U6Xk5Bewepc4QqgPEl9c3sRUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNhOTdmNzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAv QkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdENzM3QjExNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CQkVEMTRFOTc5MzkwNUVDMUVBNUNFMTBBQTAzQzQ5 N0Q3MzdCMTE1LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8zYTk3 Zjc2MTgwMzg0ZDIzYTcyMWQ0NmFlMGU1MDY4Zi8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjYzMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzUzNTM4Mzku cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqEfLA/8AwDQYJKoZIhvcNAQELBQADggEBAEnLOKlXFefHXE2D Lwxp8mA6ODR9y25Lc38g0/NeSgZAg9qB41L8nNphg0oDNtBR3b0megkTGjjZNsYn 8dlR5FxTtlB+AalA4CFQPU0ym2PtgGNbeECxdfNm8xhiJu9wtmoUPobP1LjuBfbH uJ5l5Y7JXOC9MtllnG9I1YpM98E0YXkzrRWiFTZsmLYmC/lsJjVvsX29l9SnIulS 6I2zk7ZubXmH3t8ETtDlMlsyzaVdYmaDpb8YMSL0eZnSmrLhR/4Hyt8nlC+PPC6b kInogEc10JNgOdGxe8y4rpMCGNoeNLRooVc6roqMOYGVl82I/Lgskgrq37SSHyHr NBwTBYA= -----END CERTIFICATE-----Generated at Sun Jun 15 13:15:52 2025 by rpki-client