$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa File: 326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa (raw, json) Hash identifier: Ck9ZZ0tiSTG41w0m3od8Zz6h1DTJUjOEieFp2NJMOpw= Subject key identifier: 99:5D:A3:8F:FF:B4:66:9B:72:AD:89:5E:20:10:66:F9:8F:4A:FA:0E Certificate issuer: /CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87 Certificate serial: 437ED9CCB6E9184ACF3BA0133E7D251B2CBA1C74 Authority key identifier: 1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa Signing time: Sun 08 Jun 2025 20:48:25 +0000 ROA not before: Sun 08 Jun 2025 20:43:25 +0000 ROA not after: Sun 07 Jun 2026 20:48:25 +0000 asID: 215500 IP address blocks: 2a11:f2c0:ffcd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 08:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7e:d9:cc:b6:e9:18:4a:cf:3b:a0:13:3e:7d:25:1b:2c:ba:1c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87 Validity Not Before: Jun 8 20:43:25 2025 GMT Not After : Jun 7 20:48:25 2026 GMT Subject: CN=995DA38FFFB4669B72AD895E201066F98F4AFA0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ea:54:c9:f8:5f:be:93:72:87:61:f7:81:46: 1f:7c:8b:73:a1:22:47:85:7e:66:22:eb:b5:d1:b1: 1f:6f:85:2f:f8:76:20:15:7e:3c:59:fe:e1:11:0f: a6:4b:c8:e2:48:ab:46:12:06:a6:1a:1c:c2:1d:cc: b4:e0:93:3e:bf:45:bf:7c:b5:5b:e3:60:74:79:50: a2:c6:12:61:7e:fe:24:a8:0a:4c:b7:50:d6:54:03: ca:0f:c3:e1:36:d1:3e:fd:30:70:66:08:69:32:24: cc:ca:a5:00:36:9a:2d:ce:d9:cf:58:e1:b8:77:bf: da:1f:ef:ca:4f:72:a3:68:e0:72:4b:cb:73:f1:1b: 2a:e0:f8:80:9e:35:7e:32:46:ba:2a:91:bb:39:07: 2d:65:37:0e:78:60:44:92:98:f3:69:ee:bb:1a:d9: c3:06:13:cc:db:a7:f5:75:cc:f7:7d:4d:63:72:42: 84:4a:e5:75:ca:bf:71:3e:9d:ff:96:26:dd:35:d9: 70:34:0c:f6:e1:91:2b:c6:f1:23:24:88:07:d8:06: 5c:3a:a0:cf:06:76:5c:42:06:27:ed:e4:1d:4b:b4: fc:c5:61:34:2f:f2:a9:3f:6e:12:a9:3a:f4:96:7a: d6:8a:c4:d4:51:79:43:fa:29:c7:c5:9b:5e:bd:9b: ae:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5D:A3:8F:FF:B4:66:9B:72:AD:89:5E:20:10:66:F9:8F:4A:FA:0E X509v3 Authority Key Identifier: keyid:1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:ffcd::/48 Signature Algorithm: sha256WithRSAEncryption 09:d7:ef:53:d1:b5:b3:f1:80:38:56:87:55:cf:38:d1:de:0e: 98:00:a0:b1:8d:dd:95:ac:cd:66:65:88:ac:14:a3:21:b2:e8: 6b:cf:75:3c:a8:a9:22:66:7f:fd:9f:a1:4b:1e:42:aa:51:9d: 22:6e:dd:74:df:c9:55:6c:a1:c4:d8:22:64:0e:8f:e2:5b:96: b6:11:4c:cc:4c:03:37:a2:6b:99:61:01:e0:11:ef:1b:c2:3b: aa:89:20:32:c4:05:eb:89:1d:41:f3:51:31:84:92:b6:c2:4e: 25:16:58:3b:50:5a:60:fc:4e:6d:b0:60:03:66:95:3d:27:78: c0:75:fc:26:de:a7:16:76:b0:14:0d:d4:bb:f7:9c:3e:ee:3d: 41:82:4a:be:b8:e6:cd:c6:be:31:52:5c:0d:49:22:18:37:a9: 95:8b:93:98:20:6c:f7:f6:d8:21:37:3a:65:47:43:f1:c8:1f: ba:af:19:e7:7d:a4:3d:c5:b0:f9:e4:f6:37:d4:63:ab:bf:64: f4:68:d3:8b:e7:08:54:47:69:13:f3:bb:1c:1e:a6:8a:5a:b5: 4a:d0:d8:c9:82:53:a9:0b:12:07:61:dc:85:1b:ad:b5:5e:59: f3:d4:b8:67:1d:85:a0:47:c1:60:1f:66:29:15:8a:65:92:b4: 51:e2:91:ff -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUQ37ZzLbpGErPO6ATPn0lGyy6HHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZCOUM4NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3 MDFCMEY4NzAeFw0yNTA2MDgyMDQzMjVaFw0yNjA2MDcyMDQ4MjVaMDMxMTAvBgNV BAMTKDk5NURBMzhGRkZCNDY2OUI3MkFEODk1RTIwMTA2NkY5OEY0QUZBMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6lTJ+F++k3KHYfeBRh98i3Oh IkeFfmYi67XRsR9vhS/4diAVfjxZ/uERD6ZLyOJIq0YSBqYaHMIdzLTgkz6/Rb98 tVvjYHR5UKLGEmF+/iSoCky3UNZUA8oPw+E20T79MHBmCGkyJMzKpQA2mi3O2c9Y 4bh3v9of78pPcqNo4HJLy3PxGyrg+ICeNX4yRroqkbs5By1lNw54YESSmPNp7rsa 2cMGE8zbp/V1zPd9TWNyQoRK5XXKv3E+nf+WJt012XA0DPbhkSvG8SMkiAfYBlw6 oM8GdlxCBift5B1LtPzFYTQv8qk/bhKpOvSWetaKxNRReUP6KcfFm169m66fAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUmV2jj/+0ZptyrYleIBBm+Y9K+g4wHwYDVR0j BBgwFoAUH7nIUPkT1sCad22Ls4MnvnAbD4cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2NjNmMwZDBmNGMwNzQyNDM5MmQ4MjM4NzIwY2M2YTgyLzAv MUZCOUM4NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3MDFCMEY4Ny5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRkI5Qzg1MEY5MTNENkMwOUE3NzZEOEJCMzgzMjdC RTcwMUIwRjg3LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV9jYzZj MGQwZjRjMDc0MjQzOTJkODIzODcyMGNjNmE4Mi8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjYzNjQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzNTMwMzAu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqEfLA/80wDQYJKoZIhvcNAQELBQADggEBAAnX71PRtbPxgDhW h1XPONHeDpgAoLGN3ZWszWZliKwUoyGy6GvPdTyoqSJmf/2foUseQqpRnSJu3XTf yVVsocTYImQOj+JblrYRTMxMAzeia5lhAeAR7xvCO6qJIDLEBeuJHUHzUTGEkrbC TiUWWDtQWmD8Tm2wYANmlT0neMB1/CbepxZ2sBQN1Lv3nD7uPUGCSr645s3GvjFS XA1JIhg3qZWLk5ggbPf22CE3OmVHQ/HIH7qvGed9pD3FsPnk9jfUY6u/ZPRo04vn CFRHaRPzuxwepopatUrQ2MmCU6kLEgdh3IUbrbVeWfPUuGcdhaBHwWAfZikVimWS tFHikf8= -----END CERTIFICATE-----Generated at Sun Jun 15 20:37:59 2025 by rpki-client