$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/326131313a663263303a666663393a3a2f34382d3438203d3e20323135393633.roa File: 326131313a663263303a666663393a3a2f34382d3438203d3e20323135393633.roa (raw, json) Hash identifier: k5yeErh8vVQsAVt76lriuWR6JEKz957tvtd3VJa25ws= Subject key identifier: B8:64:72:3A:8E:46:01:7E:EA:AC:C2:82:02:EB:72:5F:95:AD:8B:92 Certificate issuer: /CN=E02C2B37910DB974089166C0D244DE386B5762C2 Certificate serial: 05C622AC6EE8C2EFD998F4479DDF91EFE5F03B99 Authority key identifier: E0:2C:2B:37:91:0D:B9:74:08:91:66:C0:D2:44:DE:38:6B:57:62:C2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/E02C2B37910DB974089166C0D244DE386B5762C2.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/326131313a663263303a666663393a3a2f34382d3438203d3e20323135393633.roa Signing time: Sun 08 Jun 2025 19:43:38 +0000 ROA not before: Sun 08 Jun 2025 19:38:38 +0000 ROA not after: Sun 07 Jun 2026 19:43:38 +0000 asID: 215963 IP address blocks: 2a11:f2c0:ffc9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/E02C2B37910DB974089166C0D244DE386B5762C2.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/E02C2B37910DB974089166C0D244DE386B5762C2.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/E02C2B37910DB974089166C0D244DE386B5762C2.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 01:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c6:22:ac:6e:e8:c2:ef:d9:98:f4:47:9d:df:91:ef:e5:f0:3b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E02C2B37910DB974089166C0D244DE386B5762C2 Validity Not Before: Jun 8 19:38:38 2025 GMT Not After : Jun 7 19:43:38 2026 GMT Subject: CN=B864723A8E46017EEAACC28202EB725F95AD8B92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c7:fe:d8:d7:0c:b2:e3:85:c1:6f:42:ff:33: ed:38:ec:a1:2e:df:32:90:db:63:22:2c:be:28:b5: 6b:22:44:c2:ef:71:a4:27:b3:93:86:97:5b:d1:3a: a8:03:9e:38:1f:29:52:1b:63:14:1b:46:39:f4:ec: e9:0d:4b:dc:c8:d8:3e:71:a1:ec:bc:51:b5:88:b5: 19:74:88:51:42:85:01:40:5f:11:59:e9:a8:73:35: b4:f1:39:3b:11:a4:7f:2a:e5:6b:87:be:74:16:4e: c7:40:02:4b:b8:ba:24:d1:e7:02:d2:ca:36:d7:ae: 8a:0b:58:54:6a:a6:66:18:89:06:a2:11:a0:d8:d3: 60:76:c0:45:f2:3f:ed:38:85:b2:53:39:61:19:3d: 29:f6:c0:35:23:30:e5:d4:82:62:b9:c0:80:aa:b1: 6b:e1:7f:33:e9:d7:9b:c9:55:3a:9c:35:25:9a:7e: 9d:94:9d:11:e8:0b:51:3a:c0:41:fd:2e:ff:dc:d9: 2a:42:96:ff:e6:38:59:bf:bb:f8:af:ad:eb:96:fd: eb:11:0b:e4:14:08:8f:5a:fb:e5:db:9d:4d:ce:2f: 2c:bc:e3:fa:64:5e:de:16:09:84:e0:44:bc:5b:96: 3c:aa:c2:0e:37:de:62:13:07:b8:e9:e1:0c:0e:a2: dd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:64:72:3A:8E:46:01:7E:EA:AC:C2:82:02:EB:72:5F:95:AD:8B:92 X509v3 Authority Key Identifier: keyid:E0:2C:2B:37:91:0D:B9:74:08:91:66:C0:D2:44:DE:38:6B:57:62:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/E02C2B37910DB974089166C0D244DE386B5762C2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/E02C2B37910DB974089166C0D244DE386B5762C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/326131313a663263303a666663393a3a2f34382d3438203d3e20323135393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:ffc9::/48 Signature Algorithm: sha256WithRSAEncryption b0:20:40:79:31:25:51:4f:49:9a:1b:2f:09:ad:63:3d:df:d6: de:cf:4e:4c:00:e8:3c:75:5a:25:aa:da:3f:df:95:db:91:5b: 7d:83:7d:16:56:ff:b0:61:9a:13:8c:41:ec:ea:22:04:9e:41: f4:64:9b:dc:05:7c:12:6e:ce:c8:00:51:98:21:4c:0c:be:47: b2:2f:cc:bb:a9:fa:46:f2:23:59:16:83:0f:36:67:64:4d:e5: dd:7b:7a:ab:c6:ce:b3:bd:1d:61:5b:a7:7b:7f:87:17:d8:09: 2b:27:25:a9:6f:08:fc:5e:2f:ef:db:70:21:69:d1:d4:4e:cb: 9c:22:aa:85:81:3b:dd:c7:03:25:ac:61:6f:3f:5e:0b:fb:de: 23:f1:3e:1a:44:eb:b0:88:82:9d:16:a0:3f:5d:21:69:45:14: c7:75:7f:6d:31:11:2c:9d:18:9f:f2:2a:2c:8d:0f:62:d7:e4: e9:15:c0:7f:a8:e0:f6:d6:ef:27:bd:2c:a9:23:ea:6b:64:8b: ad:03:a5:0f:6e:96:97:2c:9e:7c:6a:80:79:e6:de:52:b7:c1: 42:be:48:dd:2f:af:0b:7f:f4:06:8c:57:81:73:f2:2b:7f:c1: fa:c8:e7:1d:1a:50:1b:fc:be:ae:6b:4d:d5:91:6b:f2:91:d0: 90:fc:3a:bd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUBcYirG7owu/ZmPRHnd+R7+XwO5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAyQzJCMzc5MTBEQjk3NDA4OTE2NkMwRDI0NERFMzg2 QjU3NjJDMjAeFw0yNTA2MDgxOTM4MzhaFw0yNjA2MDcxOTQzMzhaMDMxMTAvBgNV BAMTKEI4NjQ3MjNBOEU0NjAxN0VFQUFDQzI4MjAyRUI3MjVGOTVBRDhCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkx/7Y1wyy44XBb0L/M+047KEu 3zKQ22MiLL4otWsiRMLvcaQns5OGl1vROqgDnjgfKVIbYxQbRjn07OkNS9zI2D5x oey8UbWItRl0iFFChQFAXxFZ6ahzNbTxOTsRpH8q5WuHvnQWTsdAAku4uiTR5wLS yjbXrooLWFRqpmYYiQaiEaDY02B2wEXyP+04hbJTOWEZPSn2wDUjMOXUgmK5wICq sWvhfzPp15vJVTqcNSWafp2UnRHoC1E6wEH9Lv/c2SpClv/mOFm/u/ivreuW/esR C+QUCI9a++XbnU3OLyy84/pkXt4WCYTgRLxbljyqwg433mITB7jp4QwOot35AgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUuGRyOo5GAX7qrMKCAutyX5Wti5IwHwYDVR0j BBgwFoAU4CwrN5ENuXQIkWbA0kTeOGtXYsIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E3OTJiZjI0MTY4MjQ3NDhhY2U4NTMwZmIzMmQ5MWM5LzAv RTAyQzJCMzc5MTBEQjk3NDA4OTE2NkMwRDI0NERFMzg2QjU3NjJDMi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9FMDJDMkIzNzkxMERCOTc0MDg5MTY2QzBEMjQ0REUz ODZCNTc2MkMyLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV9hNzky YmYyNDE2ODI0NzQ4YWNlODUzMGZiMzJkOTFjOS8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjYzMzkzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzOTM2MzMu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqEfLA/8kwDQYJKoZIhvcNAQELBQADggEBALAgQHkxJVFPSZob LwmtYz3f1t7PTkwA6Dx1WiWq2j/flduRW32DfRZW/7BhmhOMQezqIgSeQfRkm9wF fBJuzsgAUZghTAy+R7IvzLup+kbyI1kWgw82Z2RN5d17eqvGzrO9HWFbp3t/hxfY CSsnJalvCPxeL+/bcCFp0dROy5wiqoWBO93HAyWsYW8/Xgv73iPxPhpE67CIgp0W oD9dIWlFFMd1f20xESydGJ/yKiyND2LX5OkVwH+o4PbW7ye9LKkj6mtki60DpQ9u lpcsnnxqgHnm3lK3wUK+SN0vrwt/9AaMV4Fz8it/wfrI5x0aUBv8vq5rTdWRa/KR 0JD8Or0= -----END CERTIFICATE-----Generated at Mon Jun 16 09:33:36 2025 by rpki-client