$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa File: 326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa (raw, json) Hash identifier: gUgzdRxmuJNOQsawEIqvnF9DX0YCEOe/wm39FVRE0Uw= Subject key identifier: BC:08:B1:DA:00:23:EA:4F:4B:2D:A9:F9:55:FE:2B:A9:A1:9A:CF:DE Certificate issuer: /CN=4742E76772F118A935D69FD40F69858085C80999 Certificate serial: 0A5C866C052B75AAC11FC4B009E7EFEE0292B455 Authority key identifier: 47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa Signing time: Mon 09 Jun 2025 10:01:35 +0000 ROA not before: Mon 09 Jun 2025 09:56:35 +0000 ROA not after: Mon 08 Jun 2026 10:01:35 +0000 asID: 204017 IP address blocks: 2a11:f2c0:fffa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 20:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:5c:86:6c:05:2b:75:aa:c1:1f:c4:b0:09:e7:ef:ee:02:92:b4:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4742E76772F118A935D69FD40F69858085C80999 Validity Not Before: Jun 9 09:56:35 2025 GMT Not After : Jun 8 10:01:35 2026 GMT Subject: CN=BC08B1DA0023EA4F4B2DA9F955FE2BA9A19ACFDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b2:74:f0:59:df:75:a2:00:ca:cd:6e:28:f8: 82:dd:82:c8:0f:19:2c:0e:7e:d5:91:0c:8a:59:c3: e8:dd:e9:b6:81:ea:53:7d:b5:2e:70:4b:2a:32:a0: e3:56:22:d3:bc:79:79:70:ab:22:e5:34:95:e1:04: 24:f5:02:2b:54:df:1e:8d:10:5c:d1:50:8d:b8:33: a6:95:62:46:b2:d6:2a:8a:2c:25:04:5a:a9:1e:1c: 84:59:ef:0d:a2:24:13:15:95:a5:d9:33:fc:ba:ea: c6:d5:f8:d8:35:6a:6e:2e:47:f2:4c:bc:b0:f2:98: d8:7f:dc:d4:88:e6:37:b1:c3:66:44:37:52:4d:bd: b1:31:83:04:dc:72:ab:8e:cf:e2:8e:1f:2b:de:58: 59:be:18:53:09:22:a5:9b:75:5b:79:76:ab:11:8a: fb:a6:29:b4:eb:ac:a7:c0:b0:97:35:4c:90:36:14: a5:1b:40:68:3a:e8:57:07:93:b2:f5:58:12:a5:7b: 6f:b7:42:0b:54:c4:15:9a:d1:51:1f:08:a0:49:e1: ba:8b:d2:8a:27:0e:5c:ec:e8:4f:30:92:be:1a:a0: 09:ef:5b:4c:36:12:c5:46:87:9b:85:95:4a:aa:ca: 38:16:13:3b:b6:63:48:7b:b4:16:45:a9:b8:51:c0: 8d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:08:B1:DA:00:23:EA:4F:4B:2D:A9:F9:55:FE:2B:A9:A1:9A:CF:DE X509v3 Authority Key Identifier: keyid:47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:fffa::/48 Signature Algorithm: sha256WithRSAEncryption be:54:62:d4:90:00:2c:7d:11:53:97:2d:00:87:58:0c:48:ce: 51:68:33:db:b8:6d:ce:7c:9f:15:7e:81:55:d7:dd:14:bf:a6: e3:34:e8:37:ad:b7:1f:66:25:1c:44:21:e8:b1:a9:a2:ec:f7: 68:e5:21:6d:ce:35:19:ca:42:63:b5:c4:f2:66:8f:7c:6b:b4: 22:40:c2:84:49:95:5e:78:87:f7:a9:dc:49:b1:6c:b0:d2:18: 88:cf:6f:31:5c:94:6c:27:e8:63:bc:27:c9:ff:d0:f7:97:34: 1d:67:21:61:89:0f:3b:fb:65:a5:5c:91:02:e3:35:8f:1e:1b: 3c:39:b2:d4:c0:0f:5d:24:8f:66:55:54:c0:e5:a6:60:4e:e4: f3:f2:de:cc:e2:a2:4c:db:92:75:ee:5b:d4:01:50:6d:e2:a0: 96:db:32:c4:05:a6:63:cc:0c:0d:b7:87:b6:ef:8a:e1:df:a6: 1d:70:ff:03:42:a0:c5:ed:e6:39:80:71:40:84:bc:c8:af:d6: eb:dc:7b:55:93:6a:74:17:ad:f3:75:b5:3b:7a:3e:de:37:89: d7:4f:ba:fd:dc:44:e9:ed:00:67:8e:19:ce:f8:8f:be:b7:b1: 20:1b:7a:04:c6:70:a2:68:5d:39:7d:37:af:52:ac:7d:f2:74: 53:94:73:88 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUClyGbAUrdarBH8SwCefv7gKStFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc0MkU3Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4 NUM4MDk5OTAeFw0yNTA2MDkwOTU2MzVaFw0yNjA2MDgxMDAxMzVaMDMxMTAvBgNV BAMTKEJDMDhCMURBMDAyM0VBNEY0QjJEQTlGOTU1RkUyQkE5QTE5QUNGREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKsnTwWd91ogDKzW4o+ILdgsgP GSwOftWRDIpZw+jd6baB6lN9tS5wSyoyoONWItO8eXlwqyLlNJXhBCT1AitU3x6N EFzRUI24M6aVYkay1iqKLCUEWqkeHIRZ7w2iJBMVlaXZM/y66sbV+Ng1am4uR/JM vLDymNh/3NSI5jexw2ZEN1JNvbExgwTccquOz+KOHyveWFm+GFMJIqWbdVt5dqsR ivumKbTrrKfAsJc1TJA2FKUbQGg66FcHk7L1WBKle2+3QgtUxBWa0VEfCKBJ4bqL 0oonDlzs6E8wkr4aoAnvW0w2EsVGh5uFlUqqyjgWEzu2Y0h7tBZFqbhRwI3pAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUvAix2gAj6k9LLan5Vf4rqaGaz94wHwYDVR0j BBgwFoAUR0LnZ3LxGKk11p/UD2mFgIXICZkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzYwYTA5MGMyN2MwNjRlMDc4YTdmNmU0NDZhNGZiZjcwLzAv NDc0MkU3Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4NUM4MDk5OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80NzQyRTc2NzcyRjExOEE5MzVENjlGRDQwRjY5ODU4 MDg1QzgwOTk5LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV82MGEw OTBjMjdjMDY0ZTA3OGE3ZjZlNDQ2YTRmYmY3MC8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjY2NjEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzQzMDMxMzcu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqEfLA//owDQYJKoZIhvcNAQELBQADggEBAL5UYtSQACx9EVOX LQCHWAxIzlFoM9u4bc58nxV+gVXX3RS/puM06Dettx9mJRxEIeixqaLs92jlIW3O NRnKQmO1xPJmj3xrtCJAwoRJlV54h/ep3EmxbLDSGIjPbzFclGwn6GO8J8n/0PeX NB1nIWGJDzv7ZaVckQLjNY8eGzw5stTAD10kj2ZVVMDlpmBO5PPy3sziokzbknXu W9QBUG3ioJbbMsQFpmPMDA23h7bviuHfph1w/wNCoMXt5jmAcUCEvMiv1uvce1WT anQXrfN1tTt6Pt43iddPuv3cROntAGeOGc74j763sSAbegTGcKJoXTl9N69SrH3y dFOUc4g= -----END CERTIFICATE-----Generated at Mon Jun 16 05:52:30 2025 by rpki-client