$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa File: 326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa (raw, json) Hash identifier: 2TFm2UKUiImd5ddtfKHx4X2Oi1RoBd6GAC8eYGyaUUM= Subject key identifier: B4:85:74:2C:14:F5:E3:E7:C4:47:3F:17:C8:C7:00:62:41:EB:33:A8 Certificate issuer: /CN=4742E76772F118A935D69FD40F69858085C80999 Certificate serial: 21D67708FEF53A1A32DCA860F78E5174071BDBA6 Authority key identifier: 47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa Signing time: Mon 11 May 2026 10:14:16 +0000 ROA not before: Mon 11 May 2026 10:09:16 +0000 ROA not after: Mon 10 May 2027 10:14:16 +0000 asID: 204017 IP address blocks: 2a11:f2c0:fffa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 00:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d6:77:08:fe:f5:3a:1a:32:dc:a8:60:f7:8e:51:74:07:1b:db:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4742E76772F118A935D69FD40F69858085C80999 Validity Not Before: May 11 10:09:16 2026 GMT Not After : May 10 10:14:16 2027 GMT Subject: CN=B485742C14F5E3E7C4473F17C8C7006241EB33A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:3a:8e:cb:65:31:f8:70:63:20:05:7f:9c:7e: e6:a7:47:8a:1f:79:3e:73:1c:65:92:16:4e:df:13: 09:a3:ec:44:8c:fc:5b:cb:f0:14:75:11:7d:e4:be: d0:94:a9:8a:4d:65:b4:27:51:e5:b3:39:2e:45:88: 6f:fe:a1:6b:d9:50:5b:8c:bc:01:d9:c6:32:3a:7e: f9:7d:e6:63:48:85:5e:69:20:a6:ee:be:6a:0a:a4: 5d:b1:c3:41:65:42:df:56:58:4b:0e:4a:ad:f2:f4: 83:51:e8:d5:d4:69:b4:7b:ab:c4:e0:00:b2:69:52: 27:f7:35:80:75:c6:8f:69:20:4a:31:9b:01:69:bf: 6c:82:a9:02:d2:a3:79:bc:f9:35:f0:fc:73:b2:7b: c5:50:3f:fa:0b:eb:75:e2:63:15:b8:32:56:42:fa: 14:e2:1c:83:9c:0b:c5:33:d6:b8:c6:3c:97:8e:03: c8:e2:3f:19:7c:01:f6:d8:54:59:3b:1d:47:1c:5d: b1:91:3b:4e:39:9b:3e:c7:8a:39:b5:b4:d6:73:f6: 33:3f:a8:69:f3:8e:e7:c8:f2:cb:14:a3:34:ea:71: 8a:30:63:dd:ec:e9:17:8c:a4:df:c8:84:3c:89:cd: 49:c5:db:0c:ea:5c:58:fd:68:73:f3:c5:20:90:45: 91:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:85:74:2C:14:F5:E3:E7:C4:47:3F:17:C8:C7:00:62:41:EB:33:A8 X509v3 Authority Key Identifier: keyid:47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:fffa::/48 Signature Algorithm: sha256WithRSAEncryption 8a:14:38:07:03:4d:ec:fd:84:fd:e9:25:29:c1:7f:38:10:86: 93:c3:c8:d3:7a:fc:d9:c4:b8:c9:d7:c5:91:af:c5:14:6c:b8: 88:1a:d7:0c:d9:87:c6:cd:a5:28:d6:bd:cd:e9:f8:a0:31:36: ae:a6:50:01:c2:92:ed:e5:c5:8e:d8:d5:f8:83:c1:a3:fd:ef: 83:68:7f:bf:93:b3:d0:03:4d:b7:66:25:8d:ce:7d:f2:5c:ce: 44:fe:da:b7:37:e0:01:c0:4b:66:97:a8:d8:c3:1a:72:d4:43: a3:1c:82:b1:d7:ba:a6:b0:e9:1a:38:34:11:69:94:b5:41:b7: 01:dd:71:73:7c:e5:56:2e:f4:3a:bd:16:b4:cd:75:64:07:60: 23:0b:76:f1:21:39:42:bc:22:55:0e:01:28:06:1a:e9:83:d5: e1:5d:85:9e:81:fd:8c:e3:e0:8f:f2:12:60:ff:84:ed:46:bc: cc:bf:77:4a:63:2d:55:88:19:89:50:4a:4f:4e:3e:13:66:97: 63:79:c4:94:7d:d8:13:38:09:07:68:88:e0:02:ad:38:19:ad: de:13:bb:02:19:7b:4b:9d:3d:7a:f6:2d:5d:60:93:7f:99:68: 0c:4b:e9:b0:cb:c2:00:0a:7f:56:f9:da:2b:cc:b7:89:37:7a: 03:8d:b6:69 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUIdZ3CP71Ohoy3Khg945RdAcb26YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc0MkU3Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4 NUM4MDk5OTAeFw0yNjA1MTExMDA5MTZaFw0yNzA1MTAxMDE0MTZaMDMxMTAvBgNV BAMTKEI0ODU3NDJDMTRGNUUzRTdDNDQ3M0YxN0M4QzcwMDYyNDFFQjMzQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyOo7LZTH4cGMgBX+cfuanR4of eT5zHGWSFk7fEwmj7ESM/FvL8BR1EX3kvtCUqYpNZbQnUeWzOS5FiG/+oWvZUFuM vAHZxjI6fvl95mNIhV5pIKbuvmoKpF2xw0FlQt9WWEsOSq3y9INR6NXUabR7q8Tg ALJpUif3NYB1xo9pIEoxmwFpv2yCqQLSo3m8+TXw/HOye8VQP/oL63XiYxW4MlZC +hTiHIOcC8Uz1rjGPJeOA8jiPxl8AfbYVFk7HUccXbGRO045mz7Hijm1tNZz9jM/ qGnzjufI8ssUozTqcYowY93s6ReMpN/IhDyJzUnF2wzqXFj9aHPzxSCQRZFtAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUtIV0LBT14+fERz8XyMcAYkHrM6gwHwYDVR0j BBgwFoAUR0LnZ3LxGKk11p/UD2mFgIXICZkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzYwYTA5MGMyN2MwNjRlMDc4YTdmNmU0NDZhNGZiZjcwLzAv NDc0MkU3Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4NUM4MDk5OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80NzQyRTc2NzcyRjExOEE5MzVENjlGRDQwRjY5ODU4 MDg1QzgwOTk5LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV82MGEw OTBjMjdjMDY0ZTA3OGE3ZjZlNDQ2YTRmYmY3MC8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjY2NjEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzQzMDMxMzcu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqEfLA//owDQYJKoZIhvcNAQELBQADggEBAIoUOAcDTez9hP3p JSnBfzgQhpPDyNN6/NnEuMnXxZGvxRRsuIga1wzZh8bNpSjWvc3p+KAxNq6mUAHC ku3lxY7Y1fiDwaP974Nof7+Ts9ADTbdmJY3OffJczkT+2rc34AHAS2aXqNjDGnLU Q6McgrHXuqaw6Ro4NBFplLVBtwHdcXN85VYu9Dq9FrTNdWQHYCMLdvEhOUK8IlUO ASgGGumD1eFdhZ6B/Yzj4I/yEmD/hO1GvMy/d0pjLVWIGYlQSk9OPhNml2N5xJR9 2BM4CQdoiOACrTgZrd4TuwIZe0udPXr2LV1gk3+ZaAxL6bDLwgAKf1b52ivMt4k3 egONtmk= -----END CERTIFICATE-----Generated at Wed May 13 16:50:55 2026 by rpki-client