$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa File: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (raw, json) Hash identifier: oR5xdewUw9CCHlEGMS0Z24xgtiBxrNN/CytrFhUuC90= Subject key identifier: 9D:75:19:E8:D3:27:12:A1:CF:6D:65:F2:28:56:3B:DA:0F:8C:DD:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 47DB738367E41629FFD6632DB1B70DA20F24000C Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa Signing time: Sun 08 Jun 2025 19:46:46 +0000 ROA not before: Sun 08 Jun 2025 19:41:46 +0000 ROA not after: Sun 07 Jun 2026 19:46:46 +0000 asID: 203105 IP address blocks: 2a11:f2c0:fffb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 14:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:db:73:83:67:e4:16:29:ff:d6:63:2d:b1:b7:0d:a2:0f:24:00:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Jun 8 19:41:46 2025 GMT Not After : Jun 7 19:46:46 2026 GMT Subject: CN=9D7519E8D32712A1CF6D65F228563BDA0F8CDD56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:42:50:0c:10:13:a0:4f:ff:6d:86:fd:d4:ff: df:8c:fa:e9:21:0b:2b:d6:8f:3c:c0:11:b3:72:7c: c9:4c:a9:1d:ab:c0:73:f3:75:7f:cf:63:c4:e9:0d: 97:f6:c9:cb:79:03:c1:7a:d4:1c:57:3c:f0:56:49: 07:75:1c:bb:d7:c3:b1:9e:68:e9:5f:2f:86:0a:ca: 48:e3:08:44:0c:23:0f:d2:c0:b5:09:24:2d:52:56: 2f:93:73:b7:5c:1f:67:91:9d:88:d3:eb:84:61:75: 2e:ac:d9:4c:36:7e:1a:71:96:84:e2:f2:0d:06:9e: 39:41:4f:17:d1:ab:2c:48:2e:ab:db:89:31:b8:0e: 98:ba:a8:6c:8c:e2:59:37:dc:fa:5e:29:39:2a:e5: cf:4c:bf:61:ba:db:e4:cf:0d:02:3b:8d:87:82:53: e6:e4:90:13:50:ac:3d:89:1c:3f:a3:b8:18:90:1d: aa:e8:07:6f:0b:3c:8b:28:1e:01:ca:6a:44:a8:c9: af:4a:13:42:2a:7d:ae:41:60:4b:c1:41:38:b9:43: 13:98:83:ab:bf:e3:7a:85:bc:f4:24:c9:38:cd:a2: b7:2c:e0:a0:7a:82:6c:df:a3:a2:ce:b7:29:3f:f2: 01:69:12:7f:1d:12:e0:49:0b:a9:af:84:c4:f1:2d: 24:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:75:19:E8:D3:27:12:A1:CF:6D:65:F2:28:56:3B:DA:0F:8C:DD:56 X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:fffb::/48 Signature Algorithm: sha256WithRSAEncryption 3c:37:f1:f9:80:0d:76:ef:46:3e:08:08:af:b1:7c:46:62:82: a8:c9:99:ef:24:24:ba:98:48:87:39:d4:26:af:22:dc:9d:a8: 61:eb:d8:bf:14:b0:02:c2:96:5b:98:5d:03:df:1d:b8:1f:4c: 31:33:7f:1b:69:cc:0d:fb:2a:c1:46:f3:3c:77:a8:f3:b6:55: 19:0c:3c:fc:ca:5d:ec:ac:a7:24:b5:48:9f:fa:33:83:ad:01: b5:da:a8:8b:bd:29:75:7d:64:7e:02:a5:5e:7c:5b:9b:cb:e8: 01:f4:69:48:33:e5:38:b8:a9:c8:fe:80:4c:1f:ec:25:25:01: f0:64:77:0a:5a:91:8e:6d:d3:13:22:84:ef:7d:85:70:77:35: c0:96:fd:5f:7d:dd:bd:a5:37:a9:24:38:fb:42:68:45:db:a8: 1f:d4:6c:b8:51:f5:8d:2e:e7:77:56:7b:97:57:09:2c:d5:80: d6:38:50:21:76:55:5a:3c:ed:c3:d2:1a:34:20:6c:81:c4:c2: 60:40:9d:9e:39:03:ce:ef:2a:8a:81:24:f3:43:ad:dd:d1:93: 62:18:26:9e:fd:14:56:5c:57:b5:b2:e5:d8:b2:48:4d:08:d8: 71:b9:b7:6d:a8:92:a6:37:28:25:d9:e1:b8:da:5e:96:a3:51: 10:96:fc:2e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUR9tzg2fkFin/1mMtsbcNog8kAAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNTA2MDgxOTQxNDZaFw0yNjA2MDcxOTQ2NDZaMDMxMTAvBgNV BAMTKDlENzUxOUU4RDMyNzEyQTFDRjZENjVGMjI4NTYzQkRBMEY4Q0RENTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJQlAMEBOgT/9thv3U/9+M+ukh CyvWjzzAEbNyfMlMqR2rwHPzdX/PY8TpDZf2yct5A8F61BxXPPBWSQd1HLvXw7Ge aOlfL4YKykjjCEQMIw/SwLUJJC1SVi+Tc7dcH2eRnYjT64RhdS6s2Uw2fhpxloTi 8g0GnjlBTxfRqyxILqvbiTG4Dpi6qGyM4lk33PpeKTkq5c9Mv2G62+TPDQI7jYeC U+bkkBNQrD2JHD+juBiQHaroB28LPIsoHgHKakSoya9KE0Iqfa5BYEvBQTi5QxOY g6u/43qFvPQkyTjNorcs4KB6gmzfo6LOtyk/8gFpEn8dEuBJC6mvhMTxLSRnAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUnXUZ6NMnEqHPbWXyKFY72g+M3VYwHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8zZGI4 MTYzZjY5MjI0Nzk4YWMyYzQ2M2MwYmNhNGQ2Yi8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjY2NjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzMzMTMwMzUu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqEfLA//swDQYJKoZIhvcNAQELBQADggEBADw38fmADXbvRj4I CK+xfEZigqjJme8kJLqYSIc51CavItydqGHr2L8UsALClluYXQPfHbgfTDEzfxtp zA37KsFG8zx3qPO2VRkMPPzKXeyspyS1SJ/6M4OtAbXaqIu9KXV9ZH4CpV58W5vL 6AH0aUgz5Ti4qcj+gEwf7CUlAfBkdwpakY5t0xMihO99hXB3NcCW/V993b2lN6kk OPtCaEXbqB/UbLhR9Y0u53dWe5dXCSzVgNY4UCF2VVo87cPSGjQgbIHEwmBAnZ45 A87vKoqBJPNDrd3Rk2IYJp79FFZcV7Wy5diySE0I2HG5t22okqY3KCXZ4bjaXpaj URCW/C4= -----END CERTIFICATE-----Generated at Tue Jun 17 00:32:52 2025 by rpki-client