$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa File: 326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa (raw, json) Hash identifier: K6ERbHzYMOmGY8zVjajZjctj/rooDOMsKI1zpR886Vs= Subject key identifier: 05:D0:E5:90:96:50:90:21:EA:6F:DA:4B:EA:E0:21:F2:95:E7:33:77 Certificate issuer: /CN=31586760843F668A816117EA02F6F30FE8F9C359 Certificate serial: 3F9B3127CD9F3029E7E2DD6CA563D5C9ADC5F75F Authority key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa Signing time: Sun 08 Jun 2025 19:41:23 +0000 ROA not before: Sun 08 Jun 2025 19:36:23 +0000 ROA not after: Sun 07 Jun 2026 19:41:23 +0000 asID: 214578 IP address blocks: 2a11:f2c0:ff80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 10:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:9b:31:27:cd:9f:30:29:e7:e2:dd:6c:a5:63:d5:c9:ad:c5:f7:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31586760843F668A816117EA02F6F30FE8F9C359 Validity Not Before: Jun 8 19:36:23 2025 GMT Not After : Jun 7 19:41:23 2026 GMT Subject: CN=05D0E59096509021EA6FDA4BEAE021F295E73377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a0:ae:6d:5c:39:1a:e0:05:b5:89:fd:8d:c6: 93:fe:4c:50:b9:f5:d5:4b:88:e3:f1:f2:46:72:fe: c5:b7:ba:43:c9:65:34:e6:bb:a9:89:ef:46:ea:cb: 76:98:a2:88:e3:8d:6a:af:b3:b3:f8:b7:6f:b1:39: 0c:61:32:4f:37:b7:14:bd:63:a9:16:49:21:71:5f: 1f:01:8b:6d:8c:19:77:a8:47:8a:f4:07:53:13:8a: 35:83:d0:30:06:c3:34:63:e9:cc:2d:47:f4:30:67: 51:9f:65:1f:ea:c8:2f:49:87:71:8d:94:35:30:50: 0e:bc:53:8b:cd:0a:c9:d6:0f:8e:e6:a2:7a:f3:a6: f9:74:0c:4c:bf:f0:a5:5f:8f:a0:4c:81:e7:c8:f6: ec:e4:c5:00:c2:b0:75:f2:9f:57:1b:64:56:36:35: 30:0b:0b:71:63:dc:eb:e4:2f:41:2a:27:05:b6:d6: 5f:e4:06:11:0b:0d:eb:4a:a4:df:97:bd:43:2e:e6: 27:b9:9d:a0:6e:74:e7:53:81:12:f8:4f:01:98:49: f2:ed:f6:6e:a7:71:c1:37:f4:0f:38:ad:cd:62:21: 7b:6c:78:cd:a4:35:a0:f5:6a:0a:82:a9:cc:a6:da: a8:fc:7f:54:87:fe:76:7e:5f:25:bb:fb:18:aa:94: ca:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D0:E5:90:96:50:90:21:EA:6F:DA:4B:EA:E0:21:F2:95:E7:33:77 X509v3 Authority Key Identifier: keyid:31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:ff80::/48 Signature Algorithm: sha256WithRSAEncryption 84:10:5d:aa:75:19:91:54:5f:26:85:d8:bd:d2:1e:5c:c2:37: 21:c4:9c:b8:b2:a3:92:fe:aa:ab:d2:6e:a6:43:c8:27:42:89: 2d:52:67:f5:08:a1:6b:e5:51:e0:29:a3:3e:02:d4:9b:04:65: 43:aa:58:79:7b:02:0a:9d:3a:bb:07:3b:2d:51:e2:d2:8b:02: 34:a4:1e:f1:3d:13:c0:ed:f2:d4:6a:76:ed:c8:80:85:7f:ef: b2:b0:59:04:8a:1b:3c:cf:41:2f:ec:a5:9d:dc:3b:63:f6:92: f9:47:29:e1:a1:67:9a:87:09:fd:4c:5e:1d:3f:a4:05:35:97: ce:2b:e5:c1:80:b4:a5:9a:9c:bb:bb:b7:05:d4:9e:54:7e:7b: 98:89:b2:54:94:40:ef:86:9b:66:16:e3:07:4e:a2:98:a3:02: 3b:f7:9c:68:58:40:2a:7d:a0:e6:e5:2f:68:3a:18:56:0c:28: aa:b3:e3:3b:6e:83:4a:d0:0b:70:a0:8a:d5:65:75:83:69:4f: 30:ca:d4:0d:dd:7d:ad:35:34:23:ad:2b:38:b1:0c:e5:b2:0d: 60:7d:81:e1:28:ff:47:87:42:fb:f8:44:9e:e3:b6:b8:ef:44: 09:fd:1e:fb:1d:3a:6d:81:e1:46:3d:0d:20:27:cf:ae:6e:0e: 7d:7c:69:47 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUP5sxJ82fMCnn4t1spWPVya3F918wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZF OEY5QzM1OTAeFw0yNTA2MDgxOTM2MjNaFw0yNjA2MDcxOTQxMjNaMDMxMTAvBgNV BAMTKDA1RDBFNTkwOTY1MDkwMjFFQTZGREE0QkVBRTAyMUYyOTVFNzMzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4oK5tXDka4AW1if2NxpP+TFC5 9dVLiOPx8kZy/sW3ukPJZTTmu6mJ70bqy3aYoojjjWqvs7P4t2+xOQxhMk83txS9 Y6kWSSFxXx8Bi22MGXeoR4r0B1MTijWD0DAGwzRj6cwtR/QwZ1GfZR/qyC9Jh3GN lDUwUA68U4vNCsnWD47monrzpvl0DEy/8KVfj6BMgefI9uzkxQDCsHXyn1cbZFY2 NTALC3Fj3OvkL0EqJwW21l/kBhELDetKpN+XvUMu5ie5naBudOdTgRL4TwGYSfLt 9m6nccE39A84rc1iIXtseM2kNaD1agqCqcym2qj8f1SH/nZ+XyW7+xiqlMojAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUBdDlkJZQkCHqb9pL6uAh8pXnM3cwHwYDVR0j BBgwFoAUMVhnYIQ/ZoqBYRfqAvbzD+j5w1kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3YzVkNGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAv MzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZFOEY5QzM1OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zMTU4Njc2MDg0M0Y2NjhBODE2MTE3RUEwMkY2RjMw RkU4RjlDMzU5LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV82N2M1 ZDRhZDQzM2U0Y2ZjOTA4NmVhMWYzM2YyZDI3Ni8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjM4MzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzQzNTM3Mzgu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqEfLA/4AwDQYJKoZIhvcNAQELBQADggEBAIQQXap1GZFUXyaF 2L3SHlzCNyHEnLiyo5L+qqvSbqZDyCdCiS1SZ/UIoWvlUeApoz4C1JsEZUOqWHl7 AgqdOrsHOy1R4tKLAjSkHvE9E8Dt8tRqdu3IgIV/77KwWQSKGzzPQS/spZ3cO2P2 kvlHKeGhZ5qHCf1MXh0/pAU1l84r5cGAtKWanLu7twXUnlR+e5iJslSUQO+Gm2YW 4wdOopijAjv3nGhYQCp9oOblL2g6GFYMKKqz4ztug0rQC3CgitVldYNpTzDK1A3d fa01NCOtKzixDOWyDWB9geEo/0eHQvv4RJ7jtrjvRAn9HvsdOm2B4UY9DSAnz65u Dn18aUc= -----END CERTIFICATE-----Generated at Mon Jun 16 16:13:36 2025 by rpki-client