$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/326131313a663263303a666663353a3a2f34382d3438203d3e20323136323534.roa File: 326131313a663263303a666663353a3a2f34382d3438203d3e20323136323534.roa (raw, json) Hash identifier: hG/rGAEu7qZDpLo6NztH1q2JrgmXtISMQ8wh/gNWEd0= Subject key identifier: 87:EB:D3:08:A1:47:3F:03:45:69:60:6F:FC:14:FF:C7:50:3D:A1:53 Certificate issuer: /CN=6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F Certificate serial: 1BE3F3546079455CA13D0255846E125A509258A7 Authority key identifier: 6D:0E:F2:AC:1D:23:5D:1B:50:ED:77:6E:6C:E4:C3:CB:36:AF:06:2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/326131313a663263303a666663353a3a2f34382d3438203d3e20323136323534.roa Signing time: Sun 08 Jun 2025 19:42:43 +0000 ROA not before: Sun 08 Jun 2025 19:37:43 +0000 ROA not after: Sun 07 Jun 2026 19:42:43 +0000 asID: 216254 IP address blocks: 2a11:f2c0:ffc5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 05:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e3:f3:54:60:79:45:5c:a1:3d:02:55:84:6e:12:5a:50:92:58:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F Validity Not Before: Jun 8 19:37:43 2025 GMT Not After : Jun 7 19:42:43 2026 GMT Subject: CN=87EBD308A1473F034569606FFC14FFC7503DA153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fc:b3:a4:e0:00:51:d2:e5:e9:0a:f8:8f:02: 6f:b6:a9:b3:67:39:04:33:e5:7a:6e:1c:bf:95:43: 94:8a:0e:8d:88:ed:98:a6:49:0e:96:84:28:04:a8: 7a:74:44:e4:ca:1f:ae:74:b4:cd:41:d9:d2:c3:62: cb:67:74:0c:05:fb:44:75:bf:15:f9:20:55:9d:a8: b6:9d:c1:2b:92:31:9a:5f:e9:13:f0:4f:06:25:0b: 13:aa:fb:73:39:68:c9:d8:11:86:89:98:65:ba:8a: 7e:91:21:18:9b:05:81:cb:df:16:a4:4d:7b:b1:31: 7b:67:c4:c6:65:c3:81:39:30:99:3c:63:e5:ef:77: f1:13:15:7a:4c:22:f9:f9:67:4d:a2:98:f2:8d:f0: 7e:48:fe:c1:65:d5:f0:0d:93:29:ec:16:30:e1:e5: e9:75:fd:78:ba:65:6e:ae:f1:61:7d:3e:41:d4:29: 8f:d5:54:fb:e1:2f:63:f3:82:b0:8c:58:e9:11:b7: b3:46:da:10:99:6e:b9:a5:7a:23:69:cd:10:79:d9: 7e:e3:f5:e8:28:7c:0c:11:63:dc:2a:04:03:59:93: d4:2c:f8:fb:44:3d:bf:42:14:90:9c:8b:9e:02:b5: 47:55:25:9d:8d:0e:8a:30:32:43:b6:e1:f9:da:38: 99:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EB:D3:08:A1:47:3F:03:45:69:60:6F:FC:14:FF:C7:50:3D:A1:53 X509v3 Authority Key Identifier: keyid:6D:0E:F2:AC:1D:23:5D:1B:50:ED:77:6E:6C:E4:C3:CB:36:AF:06:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/326131313a663263303a666663353a3a2f34382d3438203d3e20323136323534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:ffc5::/48 Signature Algorithm: sha256WithRSAEncryption 1c:7b:22:0e:7b:04:86:96:67:07:13:35:59:8b:2e:80:3d:10: 66:4a:0b:09:64:f4:87:b8:2c:66:71:db:36:2a:04:53:c2:af: 8f:30:87:11:76:da:8f:cd:dc:db:d1:d1:68:3b:d4:3f:a7:af: 14:74:a5:8d:e4:87:a9:ca:bf:97:a9:a2:aa:94:4f:3e:4d:03: b4:4c:f1:54:30:77:ee:0c:84:04:fc:d8:d5:86:76:47:71:45: db:62:e7:4a:a0:1b:e7:0d:6d:21:80:12:c3:c0:b3:c1:1e:4e: 25:1b:27:84:cb:db:a7:e1:03:e2:c5:a0:93:00:08:77:f0:2b: a1:0b:a8:97:f8:ce:dd:62:39:6c:c4:d7:79:fa:8d:ba:44:c8: b3:85:d6:bd:5c:8e:20:2a:7a:eb:32:82:8d:fb:e6:83:59:96: 29:27:db:73:ec:39:7c:03:45:83:c9:12:2d:6e:48:f6:46:c8: 1b:7e:c7:e0:8b:1f:b4:b2:ed:71:07:e0:a8:4c:10:e3:e6:26: 4e:32:7a:1d:b3:b0:23:da:f9:09:ed:57:9f:fc:ac:07:2d:5b: 40:7e:5e:b6:ce:b6:73:53:13:2e:7f:ad:7e:2b:23:3b:f1:28: 85:eb:b0:2a:65:c1:51:57:78:1f:57:6f:3d:5a:45:e9:a4:cb: dd:8b:b9:56 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUG+PzVGB5RVyhPQJVhG4SWlCSWKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQwRUYyQUMxRDIzNUQxQjUwRUQ3NzZFNkNFNEMzQ0Iz NkFGMDYyRjAeFw0yNTA2MDgxOTM3NDNaFw0yNjA2MDcxOTQyNDNaMDMxMTAvBgNV BAMTKDg3RUJEMzA4QTE0NzNGMDM0NTY5NjA2RkZDMTRGRkM3NTAzREExNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX/LOk4ABR0uXpCviPAm+2qbNn OQQz5XpuHL+VQ5SKDo2I7ZimSQ6WhCgEqHp0ROTKH650tM1B2dLDYstndAwF+0R1 vxX5IFWdqLadwSuSMZpf6RPwTwYlCxOq+3M5aMnYEYaJmGW6in6RIRibBYHL3xak TXuxMXtnxMZlw4E5MJk8Y+Xvd/ETFXpMIvn5Z02imPKN8H5I/sFl1fANkynsFjDh 5el1/Xi6ZW6u8WF9PkHUKY/VVPvhL2PzgrCMWOkRt7NG2hCZbrmleiNpzRB52X7j 9egofAwRY9wqBANZk9Qs+PtEPb9CFJCci54CtUdVJZ2NDoowMkO24fnaOJl/AgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUh+vTCKFHPwNFaWBv/BT/x1A9oVMwHwYDVR0j BBgwFoAUbQ7yrB0jXRtQ7XdubOTDyzavBi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzEzNjA5ZWRiNjMwMzRiZTBiY2Y1MzlmMmRlZWZiZjI5LzAv NkQwRUYyQUMxRDIzNUQxQjUwRUQ3NzZFNkNFNEMzQ0IzNkFGMDYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82RDBFRjJBQzFEMjM1RDFCNTBFRDc3NkU2Q0U0QzND QjM2QUYwNjJGLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8xMzYw OWVkYjYzMDM0YmUwYmNmNTM5ZjJkZWVmYmYyOS8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjYzMzUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzYzMjM1MzQu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqEfLA/8UwDQYJKoZIhvcNAQELBQADggEBABx7Ig57BIaWZwcT NVmLLoA9EGZKCwlk9Ie4LGZx2zYqBFPCr48whxF22o/N3NvR0Wg71D+nrxR0pY3k h6nKv5epoqqUTz5NA7RM8VQwd+4MhAT82NWGdkdxRdti50qgG+cNbSGAEsPAs8Ee TiUbJ4TL26fhA+LFoJMACHfwK6ELqJf4zt1iOWzE13n6jbpEyLOF1r1cjiAqeusy go375oNZlikn23PsOXwDRYPJEi1uSPZGyBt+x+CLH7Sy7XEH4KhMEOPmJk4yeh2z sCPa+QntV5/8rActW0B+XrbOtnNTEy5/rX4rIzvxKIXrsCplwVFXeB9Xbz1aRemk y92LuVY= -----END CERTIFICATE-----Generated at Mon Jun 30 17:14:29 2025 by rpki-client