
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/326131313a663263303a666666353a3a2f34382d3438203d3e20323037383835.roa
File: 326131313a663263303a666666353a3a2f34382d3438203d3e20323037383835.roa (raw, json)
Hash identifier: Tqs/Uven3D9nCKjW+RiYcVI9RGP1R6iRVeRDkHWBtqs=
Subject key identifier: 9A:AF:CE:EA:69:5B:4D:AE:88:71:FB:16:46:50:EC:EA:1B:2B:C8:7D
Certificate issuer: /CN=B50D92304CA867525C648A07380EA065FD352DEC
Certificate serial: 302DA3D9EA28AA0FC1662F82A769A643725F03B0
Authority key identifier: B5:0D:92:30:4C:A8:67:52:5C:64:8A:07:38:0E:A0:65:FD:35:2D:EC
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B50D92304CA867525C648A07380EA065FD352DEC.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/326131313a663263303a666666353a3a2f34382d3438203d3e20323037383835.roa
Signing time: Sun 10 May 2026 20:13:59 +0000
ROA not before: Sun 10 May 2026 20:08:59 +0000
ROA not after: Sun 09 May 2027 20:13:59 +0000
asID: 207885
IP address blocks: 2a11:f2c0:fff5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B50D92304CA867525C648A07380EA065FD352DEC.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 07:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:2d:a3:d9:ea:28:aa:0f:c1:66:2f:82:a7:69:a6:43:72:5f:03:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B50D92304CA867525C648A07380EA065FD352DEC
Validity
Not Before: May 10 20:08:59 2026 GMT
Not After : May 9 20:13:59 2027 GMT
Subject: CN=9AAFCEEA695B4DAE8871FB164650ECEA1B2BC87D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9d:31:e0:11:e6:79:23:26:1f:80:cf:a0:c8:
88:c6:b8:d5:1f:0b:5d:0c:29:f7:43:f6:6e:ff:29:
6e:bf:78:94:dd:a6:83:d3:7d:2a:9c:00:c9:3e:b8:
16:f8:d1:5d:23:6b:86:b5:68:a6:9c:b3:e5:04:77:
02:96:aa:78:86:b9:5d:9d:e5:9e:55:ec:eb:7c:32:
0d:b9:fd:bc:53:8c:11:fc:2f:fd:62:41:29:35:b4:
8f:2c:60:28:0d:9a:42:18:45:25:42:cf:f1:44:10:
f4:22:2d:41:2c:28:24:7c:4a:56:4c:a7:88:68:72:
bc:60:da:5e:e1:84:df:f8:b5:19:2d:f8:83:1b:a6:
6e:ea:59:2d:3d:4a:0d:f9:49:ed:82:40:f7:1f:07:
d1:47:64:1f:a5:6f:d8:c2:52:d9:68:3e:d5:f3:57:
aa:8a:be:fe:d9:2f:ea:e7:45:26:4e:df:dc:e5:5c:
af:38:4a:b4:11:74:4c:4f:c1:b0:89:31:16:68:27:
86:82:ff:7b:78:b3:cd:e2:b4:48:d7:fa:47:6c:15:
be:35:33:ad:bb:97:a4:3e:5c:f1:12:9a:e2:dc:a3:
86:9d:be:37:63:1e:97:61:99:c5:b4:50:f4:e6:df:
27:bf:e0:ea:53:d6:d2:bd:a7:6b:51:c8:50:47:11:
c2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AF:CE:EA:69:5B:4D:AE:88:71:FB:16:46:50:EC:EA:1B:2B:C8:7D
X509v3 Authority Key Identifier:
keyid:B5:0D:92:30:4C:A8:67:52:5C:64:8A:07:38:0E:A0:65:FD:35:2D:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B50D92304CA867525C648A07380EA065FD352DEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/326131313a663263303a666666353a3a2f34382d3438203d3e20323037383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fff5::/48
Signature Algorithm: sha256WithRSAEncryption
5e:2e:7d:62:09:de:69:80:0b:28:06:c4:11:2c:4a:98:72:be:
db:b0:a7:cf:64:07:e3:5d:73:e8:eb:d9:b0:59:a8:0e:c5:3e:
09:fd:a1:ab:77:57:b8:7d:d3:0a:0f:b1:8e:71:54:77:15:89:
24:13:9c:29:a7:3d:c5:1c:cd:1f:fa:4e:1b:64:94:c6:30:69:
83:44:e4:88:71:4a:1f:e3:19:a6:86:28:fd:3e:3d:5f:da:62:
e0:0f:e1:cd:02:5b:2d:14:ec:67:23:33:23:03:c6:0f:5e:47:
49:09:34:a5:92:c7:8c:3d:33:ac:c4:36:7c:94:5d:85:8e:08:
06:c7:3a:c3:d6:51:21:a9:1f:23:37:38:58:3a:56:7a:f7:7a:
b6:29:66:e2:5b:f8:83:58:60:34:9a:0e:12:c5:62:c2:df:df:
37:3d:f7:82:52:a5:d0:31:ed:3a:4e:69:a1:ac:8a:91:db:69:
79:10:7d:10:17:27:5d:1b:4d:a8:66:91:06:a0:5d:a9:15:82:
cb:6e:ea:e7:0a:0b:0a:5b:42:97:ef:1b:dd:b8:e7:7a:ab:87:
e6:5a:05:5d:50:88:ad:bd:28:09:cd:51:87:79:b9:cf:dc:c7:
ee:41:c0:e4:48:e5:28:1a:33:57:f0:0f:a4:72:0f:da:70:c2:
22:0e:f4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:14:45 2026 by rpki-client