$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/326131313a663263303a666666393a3a2f34382d3438203d3e20323034373235.roa File: 326131313a663263303a666666393a3a2f34382d3438203d3e20323034373235.roa (raw, json) Hash identifier: ZxA/Hn/tSvPDU6dgoK9tnDRDtaKIWyI/NXX2fMl3pXc= Subject key identifier: 43:D4:68:EA:B8:47:E9:DF:0E:89:9B:64:18:2D:3F:7C:F1:CF:51:B3 Certificate issuer: /CN=6482EA67DB858D1440DD67B955223E4341BA4E97 Certificate serial: 4A0A85AD02B0E5599414E3E06892F91DCDFBAB74 Authority key identifier: 64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/326131313a663263303a666666393a3a2f34382d3438203d3e20323034373235.roa Signing time: Sun 10 May 2026 20:14:05 +0000 ROA not before: Sun 10 May 2026 20:09:05 +0000 ROA not after: Sun 09 May 2027 20:14:05 +0000 asID: 204725 IP address blocks: 2a11:f2c0:fff9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 00:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:0a:85:ad:02:b0:e5:59:94:14:e3:e0:68:92:f9:1d:cd:fb:ab:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6482EA67DB858D1440DD67B955223E4341BA4E97 Validity Not Before: May 10 20:09:05 2026 GMT Not After : May 9 20:14:05 2027 GMT Subject: CN=43D468EAB847E9DF0E899B64182D3F7CF1CF51B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:76:14:43:6e:3a:f6:69:a6:08:b5:ee:5e:94: c0:14:b3:cd:8d:ee:76:34:81:f9:e8:47:2f:91:4f: 8d:28:7c:8a:36:76:eb:d2:f7:13:97:c4:25:13:38: fb:bf:98:15:d6:91:1e:ba:50:f6:74:35:f0:2b:4b: 57:79:1d:83:16:eb:b1:fe:94:f2:99:14:35:1f:46: 83:36:ac:9f:3f:4d:89:ec:b2:c4:84:b7:fe:79:7e: 94:46:a6:04:0c:c1:f6:56:c9:18:81:97:e6:55:7c: 77:5c:f0:1d:4c:88:ef:35:ad:a5:30:a9:77:f5:2a: 2b:f3:d8:e0:81:d6:81:f2:c1:13:33:f1:e6:55:82: 95:e3:14:84:f4:5c:95:66:56:5b:d2:dd:f3:b9:29: f1:e7:11:03:71:25:c1:bf:55:6e:2e:16:96:16:5b: b6:b1:3e:1d:41:00:3a:f8:40:cb:75:14:da:d4:92: 88:ef:f2:5a:73:c2:a9:f3:25:3a:0e:81:73:51:09: 2e:59:62:6a:ea:3c:21:cb:52:ba:7b:a2:8d:5a:99: a0:cb:c0:64:85:4f:d3:d4:1e:5a:56:4a:06:db:6e: 1b:cc:f4:88:b5:d6:0f:da:5e:8a:8e:dc:d4:90:17: e3:11:95:03:ba:bf:90:04:31:2d:5a:11:62:f1:a3: 94:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D4:68:EA:B8:47:E9:DF:0E:89:9B:64:18:2D:3F:7C:F1:CF:51:B3 X509v3 Authority Key Identifier: keyid:64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/326131313a663263303a666666393a3a2f34382d3438203d3e20323034373235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:fff9::/48 Signature Algorithm: sha256WithRSAEncryption 5a:3c:1d:c3:ad:cc:73:44:ea:51:0b:66:01:d2:25:a9:4b:e3: 27:02:48:56:bd:0a:ce:af:2a:10:8d:3c:c6:3c:ab:96:11:0e: d8:3f:27:03:07:69:f1:20:eb:f8:d9:57:af:15:2b:47:bb:f7: 3f:ad:24:09:ad:6b:82:0d:77:21:a2:1a:0d:40:d2:88:65:c7: f9:5a:74:51:e9:62:7f:27:88:5c:6c:b8:04:ae:35:5b:54:25: c4:00:ed:aa:4c:87:8e:fa:68:e2:d3:86:09:16:d6:b2:7b:19: c8:4d:41:79:ed:65:c4:8f:91:a8:4e:fe:2f:6c:12:6e:49:7f: 1e:b3:f7:ec:47:a3:17:af:f1:f7:15:39:7b:f7:ea:aa:7e:52: 5d:48:e5:16:7c:cf:69:3d:11:5c:34:00:44:cc:b0:f3:af:a5: e2:4a:46:42:25:72:7b:9a:69:16:c7:a0:4a:21:c4:f2:ec:82: 9a:ed:71:01:be:40:d3:82:47:f5:ee:69:24:5a:c0:30:c5:36: 55:b2:d4:c1:4f:af:d8:b5:f2:23:56:29:d1:24:50:3d:6e:75: c8:8f:83:85:f5:42:8f:1c:7b:70:f7:8c:e1:26:64:11:1d:b4: 2b:15:6e:d8:ae:a0:f3:75:05:11:d3:93:c1:94:a9:b6:ec:76: 04:e5:44:90 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUSgqFrQKw5VmUFOPgaJL5Hc37q3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ4MkVBNjdEQjg1OEQxNDQwREQ2N0I5NTUyMjNFNDM0 MUJBNEU5NzAeFw0yNjA1MTAyMDA5MDVaFw0yNzA1MDkyMDE0MDVaMDMxMTAvBgNV BAMTKDQzRDQ2OEVBQjg0N0U5REYwRTg5OUI2NDE4MkQzRjdDRjFDRjUxQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxdhRDbjr2aaYIte5elMAUs82N 7nY0gfnoRy+RT40ofIo2duvS9xOXxCUTOPu/mBXWkR66UPZ0NfArS1d5HYMW67H+ lPKZFDUfRoM2rJ8/TYnsssSEt/55fpRGpgQMwfZWyRiBl+ZVfHdc8B1MiO81raUw qXf1Kivz2OCB1oHywRMz8eZVgpXjFIT0XJVmVlvS3fO5KfHnEQNxJcG/VW4uFpYW W7axPh1BADr4QMt1FNrUkojv8lpzwqnzJToOgXNRCS5ZYmrqPCHLUrp7oo1amaDL wGSFT9PUHlpWSgbbbhvM9Ii11g/aXoqO3NSQF+MRlQO6v5AEMS1aEWLxo5S1AgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUQ9Ro6rhH6d8OiZtkGC0/fPHPUbMwHwYDVR0j BBgwFoAUZILqZ9uFjRRA3We5VSI+Q0G6TpcwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzU0NDhlNmFhMjYwNjQxYTE5N2I4MjUxYWMwYzNlNjMwLzAv NjQ4MkVBNjdEQjg1OEQxNDQwREQ2N0I5NTUyMjNFNDM0MUJBNEU5Ny5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82NDgyRUE2N0RCODU4RDE0NDBERDY3Qjk1NTIyM0U0 MzQxQkE0RTk3LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV81NDQ4 ZTZhYTI2MDY0MWExOTdiODI1MWFjMGMzZTYzMC8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjY2MzkzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzQzNzMyMzUu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqEfLA//kwDQYJKoZIhvcNAQELBQADggEBAFo8HcOtzHNE6lEL ZgHSJalL4ycCSFa9Cs6vKhCNPMY8q5YRDtg/JwMHafEg6/jZV68VK0e79z+tJAmt a4INdyGiGg1A0ohlx/ladFHpYn8niFxsuASuNVtUJcQA7apMh476aOLThgkW1rJ7 GchNQXntZcSPkahO/i9sEm5Jfx6z9+xHoxev8fcVOXv36qp+Ul1I5RZ8z2k9EVw0 AETMsPOvpeJKRkIlcnuaaRbHoEohxPLsgprtcQG+QNOCR/XuaSRawDDFNlWy1MFP r9i18iNWKdEkUD1udciPg4X1Qo8ce3D3jOEmZBEdtCsVbtiuoPN1BRHTk8GUqbbs dgTlRJA= -----END CERTIFICATE-----Generated at Wed May 13 16:35:54 2026 by rpki-client