$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa File: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (raw, json) Hash identifier: 3wo4yWYqUm70prj7oF5pGF3zOR0/7RB8Epa8stuidcg= Subject key identifier: 68:3E:8E:31:BE:1A:BF:43:85:BC:5C:DB:E5:E4:7E:61:B5:B1:20:D0 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 2303656028E872E147DE3F584B4B0C759CA7D5D3 Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa Signing time: Sun 08 Jun 2025 19:41:54 +0000 ROA not before: Sun 08 Jun 2025 19:36:54 +0000 ROA not after: Sun 07 Jun 2026 19:41:54 +0000 asID: 199337 IP address blocks: 2a11:f2c0:ffc1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 08:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:03:65:60:28:e8:72:e1:47:de:3f:58:4b:4b:0c:75:9c:a7:d5:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Jun 8 19:36:54 2025 GMT Not After : Jun 7 19:41:54 2026 GMT Subject: CN=683E8E31BE1ABF4385BC5CDBE5E47E61B5B120D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:80:b9:1d:8e:4d:77:1e:4a:0e:3f:9e:3f:45: 5f:f3:b1:16:f4:7f:62:3e:14:86:0d:19:f3:09:ea: 0a:db:00:e5:b1:e0:7c:f8:6e:71:a1:05:44:60:25: bd:29:e3:2c:95:b4:56:6e:47:58:b8:d5:97:75:68: 00:40:19:a6:d1:ea:b6:f5:fb:44:0d:00:52:a9:a9: 2f:c6:46:16:88:c2:68:5e:25:88:da:e2:08:d4:b7: fb:39:2f:83:8d:58:f2:4b:6d:06:4b:67:76:54:76: d9:6a:b3:4f:ff:59:e6:b8:a5:a8:74:26:48:00:d1: 0a:83:e2:ae:ce:dc:c9:53:1e:5c:c8:78:f9:84:fb: 94:c5:c7:3a:86:6d:32:dd:d0:80:2d:d1:46:6a:c5: 5b:14:f5:de:e9:1e:85:af:22:c6:36:78:31:6b:48: 25:ef:67:33:1c:4d:d7:b7:88:80:3d:53:09:de:15: 8a:c2:f4:1d:02:ad:bd:05:d7:80:da:3a:77:b9:ef: 73:31:83:af:9b:b9:2d:c4:47:f5:2d:c7:b0:b4:5d: 1e:b9:ff:c4:54:c7:33:e0:b1:05:b3:00:3b:83:27: 95:d8:4f:3f:71:2a:11:2f:f6:50:64:d5:d9:16:76: 79:e3:f1:df:19:38:c1:4d:a4:d8:2e:24:03:3e:50: 4f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3E:8E:31:BE:1A:BF:43:85:BC:5C:DB:E5:E4:7E:61:B5:B1:20:D0 X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:ffc1::/48 Signature Algorithm: sha256WithRSAEncryption a8:c6:3f:c4:c8:f8:11:08:e1:5d:10:89:49:01:01:c6:1f:b7: d8:39:22:b4:bd:56:bb:04:a0:43:81:c4:54:f3:e4:61:7d:61: ff:67:ad:82:25:c6:80:49:da:c4:1d:97:29:f5:80:10:23:99: ba:b3:fc:d2:8f:4e:6a:a6:af:74:10:a9:5e:e5:3a:64:71:79: e9:49:96:b7:06:6c:18:88:29:34:92:15:55:ed:b3:47:7a:db: d4:bf:8f:e3:78:ad:91:7d:2b:86:28:fc:86:38:9f:be:ef:20: dd:e3:9d:28:1f:66:cc:47:4d:e5:bf:bb:4b:b8:c9:ec:d2:a8: 86:ca:b4:4a:ab:28:6e:53:4d:b0:a2:3b:03:d7:ba:2b:a6:77: 20:f8:8b:8e:18:a1:d6:df:dc:1c:99:c4:f8:0f:2b:f0:03:40: f4:30:47:a7:bb:13:e4:12:e3:2c:11:97:5b:63:bb:9c:0b:3c: 24:42:8d:df:f5:bd:72:cc:32:ad:0d:34:8d:5f:e1:9b:82:46: 9c:87:c3:ee:83:d8:fd:3b:84:a4:03:3b:8e:b1:15:85:76:92: f1:9f:79:24:f1:ba:84:06:79:a3:86:29:e9:b8:62:2e:66:c5: de:5f:8d:94:3a:e4:7e:13:a3:f8:96:40:08:8a:eb:51:ee:df: 5d:e0:94:d5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUIwNlYCjocuFH3j9YS0sMdZyn1dMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNTA2MDgxOTM2NTRaFw0yNjA2MDcxOTQxNTRaMDMxMTAvBgNV BAMTKDY4M0U4RTMxQkUxQUJGNDM4NUJDNUNEQkU1RTQ3RTYxQjVCMTIwRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDogLkdjk13HkoOP54/RV/zsRb0 f2I+FIYNGfMJ6grbAOWx4Hz4bnGhBURgJb0p4yyVtFZuR1i41Zd1aABAGabR6rb1 +0QNAFKpqS/GRhaIwmheJYja4gjUt/s5L4ONWPJLbQZLZ3ZUdtlqs0//Wea4pah0 JkgA0QqD4q7O3MlTHlzIePmE+5TFxzqGbTLd0IAt0UZqxVsU9d7pHoWvIsY2eDFr SCXvZzMcTde3iIA9UwneFYrC9B0Crb0F14DaOne573Mxg6+buS3ER/Utx7C0XR65 /8RUxzPgsQWzADuDJ5XYTz9xKhEv9lBk1dkWdnnj8d8ZOMFNpNguJAM+UE/FAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUaD6OMb4av0OFvFzb5eR+YbWxINAwHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV9hNTBk NzE3OGJhZGY0M2JlYjk4MTFjN2VjMjdiNDg5Yy8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjYzMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM5MzkzMzMzMzcu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqEfLA/8EwDQYJKoZIhvcNAQELBQADggEBAKjGP8TI+BEI4V0Q iUkBAcYft9g5IrS9VrsEoEOBxFTz5GF9Yf9nrYIlxoBJ2sQdlyn1gBAjmbqz/NKP Tmqmr3QQqV7lOmRxeelJlrcGbBiIKTSSFVXts0d629S/j+N4rZF9K4Yo/IY4n77v IN3jnSgfZsxHTeW/u0u4yezSqIbKtEqrKG5TTbCiOwPXuiumdyD4i44Yodbf3ByZ xPgPK/ADQPQwR6e7E+QS4ywRl1tju5wLPCRCjd/1vXLMMq0NNI1f4ZuCRpyHw+6D 2P07hKQDO46xFYV2kvGfeSTxuoQGeaOGKem4Yi5mxd5fjZQ65H4To/iWQAiK61Hu 313glNU= -----END CERTIFICATE-----Generated at Sun Jun 15 18:51:23 2025 by rpki-client