$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa File: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (raw, json) Hash identifier: 8j902cWXOhTuCO690tGBwZ7dH1WqGBRJ8B21eNCGG6w= Subject key identifier: 66:6D:2A:45:6E:E7:D1:2E:D9:FD:FC:20:73:D8:77:D8:4F:A0:73:27 Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 4A5340580B4CE3F9E1A00570665C2A0B97CFF515 Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa Signing time: Sun 10 May 2026 20:14:00 +0000 ROA not before: Sun 10 May 2026 20:09:00 +0000 ROA not after: Sun 09 May 2027 20:14:00 +0000 asID: 215069 IP address blocks: 2a11:f2c0:ffd4::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 00:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:53:40:58:0b:4c:e3:f9:e1:a0:05:70:66:5c:2a:0b:97:cf:f5:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: May 10 20:09:00 2026 GMT Not After : May 9 20:14:00 2027 GMT Subject: CN=666D2A456EE7D12ED9FDFC2073D877D84FA07327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3a:9b:c2:98:da:da:28:70:84:c0:23:02:34: d8:2e:88:e6:8c:e1:75:e2:3b:34:a5:3f:d6:f3:c1: 77:c7:9b:06:03:43:56:ba:53:21:a2:11:53:12:23: 4d:99:85:40:44:e9:5e:25:eb:72:ba:e1:e7:99:f1: 5f:97:8a:6d:58:e2:4d:8b:d9:cf:b4:41:de:c3:ea: 34:8d:ef:87:8a:90:73:02:ae:d1:e8:26:d3:f4:a3: c1:06:cc:4c:5c:74:cf:6c:b1:ba:c8:b7:84:c1:53: 88:25:1f:d6:ab:56:f8:8c:e4:40:a8:ea:75:28:11: c4:cf:85:40:33:62:2f:a3:d1:a0:45:41:12:56:0f: 37:81:f6:71:2f:6c:22:ae:57:47:e0:76:8f:23:3f: 25:6a:18:21:81:3c:0a:5a:20:ce:17:df:a3:28:bd: 06:66:16:6d:96:4a:28:ca:c3:61:8d:85:24:6f:0d: 9a:ec:0f:1e:93:c7:58:57:c9:fc:ef:77:8a:72:3c: e0:4f:1f:35:e5:76:9b:bd:e1:e9:6d:a9:b4:9b:42: ab:a9:cd:d1:cb:40:49:0d:64:d7:9c:ab:6f:a5:b4: 1c:80:4a:87:03:a2:26:54:c2:8b:e9:cb:46:67:33: b1:7a:fe:f5:c0:ff:51:cd:95:8b:f0:c1:3d:fe:3e: 0d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6D:2A:45:6E:E7:D1:2E:D9:FD:FC:20:73:D8:77:D8:4F:A0:73:27 X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:ffd4::/46 Signature Algorithm: sha256WithRSAEncryption 16:46:59:e7:ea:46:7f:f2:76:40:17:4c:55:40:41:11:63:8c: 88:c1:2a:d8:66:86:ec:d5:9e:1d:ce:ad:e6:99:c2:37:52:20: 02:a5:9a:25:09:86:af:57:66:f5:d9:f9:e2:0e:42:23:a4:6b: 11:83:57:92:7c:d4:93:87:c1:d4:c9:ec:45:86:74:43:70:e2: bd:be:5c:82:c8:95:80:65:16:d5:96:b4:1a:df:cf:70:cf:8f: 29:b9:39:3c:96:19:43:2f:36:3a:b9:70:53:b4:de:35:11:9b: 53:b9:3a:6c:52:08:8d:fd:ec:ee:9a:87:bc:4a:0d:7a:47:27: d2:32:b1:c1:e8:ad:f1:fb:04:1f:52:e4:5f:50:ef:be:df:2a: 6a:43:71:f0:d6:33:71:47:d3:71:7c:d7:fa:84:62:15:c2:42: 62:09:1f:18:68:3c:e0:bc:0b:a9:90:7b:7f:21:e4:f5:a5:78: 19:83:30:4e:df:ff:65:32:32:54:04:41:dc:27:4d:ee:b6:1e: af:95:14:b3:d3:f9:34:87:ac:a8:84:d1:75:a3:e1:c7:4b:87: 01:4f:21:b3:c6:f8:cb:97:6c:c1:86:6d:f5:4d:cc:9c:75:0e: fa:a0:0c:e9:95:43:ec:e8:62:b6:cb:dd:7a:27:af:8b:93:b4: 42:51:cf:45 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUSlNAWAtM4/nhoAVwZlwqC5fP9RUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNjA1MTAyMDA5MDBaFw0yNzA1MDkyMDE0MDBaMDMxMTAvBgNV BAMTKDY2NkQyQTQ1NkVFN0QxMkVEOUZERkMyMDczRDg3N0Q4NEZBMDczMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOpvCmNraKHCEwCMCNNguiOaM 4XXiOzSlP9bzwXfHmwYDQ1a6UyGiEVMSI02ZhUBE6V4l63K64eeZ8V+Xim1Y4k2L 2c+0Qd7D6jSN74eKkHMCrtHoJtP0o8EGzExcdM9ssbrIt4TBU4glH9arVviM5ECo 6nUoEcTPhUAzYi+j0aBFQRJWDzeB9nEvbCKuV0fgdo8jPyVqGCGBPApaIM4X36Mo vQZmFm2WSijKw2GNhSRvDZrsDx6Tx1hXyfzvd4pyPOBPHzXldpu94eltqbSbQqup zdHLQEkNZNecq2+ltByASocDoiZUwovpy0ZnM7F6/vXA/1HNlYvwwT3+Pg3NAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUZm0qRW7n0S7Z/fwgc9h32E+gcycwHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8yNTQw NWM3NmM3YTA0M2M4OWFjZTE2N2U5ZDJjZjc5Yy8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjY0MzQzYTNhMmYzNDM2MmQzNDM2MjAzZDNlMjAzMjMxMzUzMDM2Mzku cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwIqEfLA/9QwDQYJKoZIhvcNAQELBQADggEBABZGWefqRn/ydkAX TFVAQRFjjIjBKthmhuzVnh3OreaZwjdSIAKlmiUJhq9XZvXZ+eIOQiOkaxGDV5J8 1JOHwdTJ7EWGdENw4r2+XILIlYBlFtWWtBrfz3DPjym5OTyWGUMvNjq5cFO03jUR m1O5OmxSCI397O6ah7xKDXpHJ9IyscHorfH7BB9S5F9Q777fKmpDcfDWM3FH03F8 1/qEYhXCQmIJHxhoPOC8C6mQe38h5PWleBmDME7f/2UyMlQEQdwnTe62Hq+VFLPT +TSHrKiE0XWj4cdLhwFPIbPG+MuXbMGGbfVNzJx1DvqgDOmVQ+zoYrbL3Xonr4uT tEJRz0U= -----END CERTIFICATE-----Generated at Wed May 13 16:45:30 2026 by rpki-client