$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa File: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (raw, json) Hash identifier: nO1YT0HdU2m72ueMZYtU7pGui3eQWYc9n6VJnhvZh24= Subject key identifier: 1A:ED:09:5C:3D:DF:8C:24:E9:7B:3C:5B:A6:E7:82:89:C1:2C:C7:B5 Certificate issuer: /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Certificate serial: 3B631F1DA09058ED4091574C0E0836EBB7107200 Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa Signing time: Sun 10 May 2026 20:14:06 +0000 ROA not before: Sun 10 May 2026 20:09:06 +0000 ROA not after: Sun 09 May 2027 20:14:06 +0000 asID: 205789 IP address blocks: 2a11:f2c0:fffd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 14:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:63:1f:1d:a0:90:58:ed:40:91:57:4c:0e:08:36:eb:b7:10:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Validity Not Before: May 10 20:09:06 2026 GMT Not After : May 9 20:14:06 2027 GMT Subject: CN=1AED095C3DDF8C24E97B3C5BA6E78289C12CC7B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:f7:75:c5:22:f6:bc:bc:93:29:18:71:b6: dd:40:35:bb:65:40:f2:1a:e3:e2:28:16:5e:ae:f8: 6d:d6:5f:24:79:b7:99:f7:d9:a7:81:65:f4:2f:fa: e4:0f:ad:c2:4e:0f:35:56:38:4a:52:3e:a5:4a:ca: 05:5a:89:ef:e3:42:6a:63:66:09:cd:26:af:c7:1e: ef:a7:a5:99:72:2d:be:7c:28:86:3e:44:5e:3f:2c: 0d:90:65:81:93:20:e4:f4:0c:10:c8:14:b4:67:14: 34:51:c9:88:1e:fc:05:67:22:c6:86:37:8b:2c:00: 9e:44:4b:5c:d3:78:ea:4c:95:d9:a1:75:bd:51:26: 89:34:03:7c:8b:f8:2c:fe:d0:2f:c6:64:1c:a1:a8: bf:76:80:e7:aa:af:2b:f1:7a:5c:7b:16:29:19:2f: 40:62:75:04:1e:d6:d5:ce:ac:e1:ee:70:cd:e4:b7: 67:c5:da:fa:9f:17:9f:8e:2d:59:a1:e4:3c:2b:dd: c1:f2:fe:30:14:d6:82:1d:ed:e1:9b:6e:bf:51:db: d7:a8:8f:8e:12:a7:a6:02:5b:5b:f7:42:37:b0:a0: 6f:a5:e4:53:3b:a5:fd:67:1f:62:aa:16:2f:78:75: 31:8a:77:f5:aa:60:0e:d6:21:c0:b7:d4:d7:65:f5: 4e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:ED:09:5C:3D:DF:8C:24:E9:7B:3C:5B:A6:E7:82:89:C1:2C:C7:B5 X509v3 Authority Key Identifier: keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:fffd::/48 Signature Algorithm: sha256WithRSAEncryption 63:69:14:19:ab:66:df:dd:74:cb:3a:7c:c1:36:17:16:86:dc: 22:9f:31:90:ae:dd:00:8b:c5:66:a5:cb:82:f2:a4:eb:71:de: bf:20:f3:50:72:02:0a:d2:42:da:11:30:63:ba:6f:a6:14:dd: e3:34:bb:be:4c:d6:ec:b7:f3:7c:ee:93:b4:8b:b5:02:76:8c: 31:f7:41:a8:12:69:9b:d8:a9:89:4f:d5:1a:c8:60:16:88:e1: e1:8d:c6:90:ee:e2:49:71:a4:dc:ba:68:ef:59:ba:50:ac:4e: 1c:09:65:dd:88:7d:18:26:38:42:37:7d:ca:7e:d9:52:b4:8f: a8:2e:eb:d8:83:06:b1:bf:22:e3:7d:78:5c:ed:b2:95:ca:8d: 71:57:23:1a:63:b2:66:83:8e:4a:20:f1:dd:a9:83:65:77:00: 5e:1d:8b:b5:ef:20:74:33:d9:5a:b3:65:f6:d6:05:22:96:c2: 95:d4:42:df:f4:b7:56:d3:21:1a:fc:77:5a:c4:19:2b:28:f8: 6e:34:c9:7a:6d:9c:0a:0b:41:39:dd:d8:89:bc:34:a6:d1:ee: ad:63:86:bc:4c:6f:93:4b:0f:18:b0:a2:43:8a:98:d1:97:e6: fc:7d:2c:02:b6:88:92:dd:f7:1c:f2:28:47:e3:c7:14:aa:49: 08:86:ad:96 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUO2MfHaCQWO1AkVdMDgg267cQcgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG MjFFMDUxODAeFw0yNjA1MTAyMDA5MDZaFw0yNzA1MDkyMDE0MDZaMDMxMTAvBgNV BAMTKDFBRUQwOTVDM0RERjhDMjRFOTdCM0M1QkE2RTc4Mjg5QzEyQ0M3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYGfd1xSL2vLyTKRhxtt1ANbtl QPIa4+IoFl6u+G3WXyR5t5n32aeBZfQv+uQPrcJODzVWOEpSPqVKygVaie/jQmpj ZgnNJq/HHu+npZlyLb58KIY+RF4/LA2QZYGTIOT0DBDIFLRnFDRRyYge/AVnIsaG N4ssAJ5ES1zTeOpMldmhdb1RJok0A3yL+Cz+0C/GZByhqL92gOeqryvxelx7FikZ L0BidQQe1tXOrOHucM3kt2fF2vqfF5+OLVmh5Dwr3cHy/jAU1oId7eGbbr9R29eo j44Sp6YCW1v3QjewoG+l5FM7pf1nH2KqFi94dTGKd/WqYA7WIcC31Ndl9U4FAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUGu0JXD3fjCTpezxbpueCicEsx7UwHwYDVR0j BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD OEYyMUUwNTE4LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8wYTQ2 MzdkZjViYTc0M2ZlYTFiNDgyYmU4MjM1ODE4Zi8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjY2NjQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzUzNzM4Mzku cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqEfLA//0wDQYJKoZIhvcNAQELBQADggEBAGNpFBmrZt/ddMs6 fME2FxaG3CKfMZCu3QCLxWaly4LypOtx3r8g81ByAgrSQtoRMGO6b6YU3eM0u75M 1uy383zuk7SLtQJ2jDH3QagSaZvYqYlP1RrIYBaI4eGNxpDu4klxpNy6aO9ZulCs ThwJZd2IfRgmOEI3fcp+2VK0j6gu69iDBrG/IuN9eFztspXKjXFXIxpjsmaDjkog 8d2pg2V3AF4di7XvIHQz2VqzZfbWBSKWwpXUQt/0t1bTIRr8d1rEGSso+G40yXpt nAoLQTnd2Im8NKbR7q1jhrxMb5NLDxiwokOKmNGX5vx9LAK2iJLd9xzyKEfjxxSq SQiGrZY= -----END CERTIFICATE-----Generated at Wed May 13 20:27:06 2026 by rpki-client