$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa File: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (raw, json) Hash identifier: dc7aFvZsFxdINUzmo03viwCzNgQ2HUK3QhleWk4YGzY= Subject key identifier: 3C:11:CC:68:75:6B:BD:42:E2:99:EA:90:CA:A0:77:87:0A:DD:9B:AF Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 404C38805255EE4C26A1A8175060E10CADF85E2C Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa Signing time: Sun 10 May 2026 20:14:08 +0000 ROA not before: Sun 10 May 2026 20:09:08 +0000 ROA not after: Sun 09 May 2027 20:14:08 +0000 asID: 199337 IP address blocks: 2a11:f2c0:ffc1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 00:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:4c:38:80:52:55:ee:4c:26:a1:a8:17:50:60:e1:0c:ad:f8:5e:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: May 10 20:09:08 2026 GMT Not After : May 9 20:14:08 2027 GMT Subject: CN=3C11CC68756BBD42E299EA90CAA077870ADD9BAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6d:ad:ad:b3:05:f1:63:9b:6b:b5:bd:6c:57: 8f:d7:52:4d:19:ab:0c:57:bd:16:56:64:c5:aa:2b: 43:cd:18:ef:a2:fd:d4:5d:2c:1c:28:b7:86:c3:5b: 4f:e6:ac:b0:60:1f:49:5d:52:5d:8b:74:1d:36:63: bf:41:cb:bb:5c:cc:bd:c4:04:89:4a:fd:c5:5a:32: f8:ee:cc:f7:1e:1c:62:f0:92:ba:0f:b1:3b:74:fc: a6:dd:be:3b:ac:7e:47:43:b5:d1:f7:00:c8:9b:bc: 75:a6:de:e3:59:15:4f:2b:82:92:bc:ec:ef:f8:00: 2a:59:58:c2:3a:9a:3d:32:28:46:59:3f:7d:01:33: ef:e9:49:b9:69:ab:ca:1e:49:ec:52:e6:55:0a:c3: 09:2e:3c:36:91:52:77:1d:f3:20:61:ee:3a:90:8d: 7b:0e:ac:05:e1:5d:ed:79:b0:70:b0:6e:86:20:9c: b6:90:04:16:45:6b:24:bf:be:5f:b9:4b:3f:c0:cb: 7a:ee:f0:d2:b6:7f:2d:10:fb:60:2a:8c:65:9c:a5: 19:c5:88:20:e4:02:8c:f5:1d:f7:20:64:42:22:20: ad:21:a7:6a:e4:76:38:33:c4:04:cb:85:f4:ff:bb: 03:29:51:92:91:f7:fb:22:a4:f8:20:d7:29:62:1b: 32:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:11:CC:68:75:6B:BD:42:E2:99:EA:90:CA:A0:77:87:0A:DD:9B:AF X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:ffc1::/48 Signature Algorithm: sha256WithRSAEncryption 63:6a:32:fb:70:04:23:65:0e:8c:49:ff:2a:1b:2c:92:81:d6: c3:3f:43:7e:66:9b:fb:c9:3a:79:09:d4:5e:73:f0:eb:77:3d: 3c:f4:5e:1e:f6:41:47:8f:99:f2:3e:29:a1:bb:29:ae:50:1e: 58:70:ae:01:eb:4e:d8:2b:1d:a9:ee:a1:8f:8a:57:5d:41:a4: 6a:f0:51:a8:b1:57:92:47:22:d6:b7:6b:f8:68:6d:dc:0a:33: 28:0a:d0:e7:d2:11:a6:34:e5:b8:55:8e:9b:c7:24:2d:6a:c8: b1:3d:35:68:27:d4:94:92:7e:82:b6:54:19:4e:d7:2c:7c:48: f4:24:3e:9a:45:d2:39:71:ba:7d:27:7c:31:70:35:2e:a2:88: d6:b8:f8:d0:aa:16:38:33:82:0d:bd:f6:a6:34:ad:03:ce:77: 78:fc:d4:1c:92:f1:2f:b2:1b:53:31:34:02:6a:83:21:a9:7b: f1:cc:e4:dd:8e:73:cc:35:19:17:6b:07:78:e0:74:08:c3:57: 36:81:8f:46:28:9f:57:38:57:78:57:59:61:cf:ad:91:90:22: 8c:fc:d2:58:a4:0b:91:4e:b0:da:f9:47:5a:ca:7f:3e:2a:89: 74:73:9e:21:af:fb:e0:67:74:40:2a:6d:f2:d4:c3:4a:a7:87: 51:77:13:c3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUQEw4gFJV7kwmoagXUGDhDK34XiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNjA1MTAyMDA5MDhaFw0yNzA1MDkyMDE0MDhaMDMxMTAvBgNV BAMTKDNDMTFDQzY4NzU2QkJENDJFMjk5RUE5MENBQTA3Nzg3MEFERDlCQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvba2tswXxY5trtb1sV4/XUk0Z qwxXvRZWZMWqK0PNGO+i/dRdLBwot4bDW0/mrLBgH0ldUl2LdB02Y79By7tczL3E BIlK/cVaMvjuzPceHGLwkroPsTt0/KbdvjusfkdDtdH3AMibvHWm3uNZFU8rgpK8 7O/4ACpZWMI6mj0yKEZZP30BM+/pSblpq8oeSexS5lUKwwkuPDaRUncd8yBh7jqQ jXsOrAXhXe15sHCwboYgnLaQBBZFayS/vl+5Sz/Ay3ru8NK2fy0Q+2AqjGWcpRnF iCDkAoz1HfcgZEIiIK0hp2rkdjgzxATLhfT/uwMpUZKR9/sipPgg1yliGzIdAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUPBHMaHVrvULimeqQyqB3hwrdm68wHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV9hNTBk NzE3OGJhZGY0M2JlYjk4MTFjN2VjMjdiNDg5Yy8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjYzMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM5MzkzMzMzMzcu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqEfLA/8EwDQYJKoZIhvcNAQELBQADggEBAGNqMvtwBCNlDoxJ /yobLJKB1sM/Q35mm/vJOnkJ1F5z8Ot3PTz0Xh72QUePmfI+KaG7Ka5QHlhwrgHr TtgrHanuoY+KV11BpGrwUaixV5JHIta3a/hobdwKMygK0OfSEaY05bhVjpvHJC1q yLE9NWgn1JSSfoK2VBlO1yx8SPQkPppF0jlxun0nfDFwNS6iiNa4+NCqFjgzgg29 9qY0rQPOd3j81ByS8S+yG1MxNAJqgyGpe/HM5N2Oc8w1GRdrB3jgdAjDVzaBj0Yo n1c4V3hXWWHPrZGQIoz80likC5FOsNr5R1rKfz4qiXRzniGv++BndEAqbfLUw0qn h1F3E8M= -----END CERTIFICATE-----Generated at Wed May 13 17:21:29 2026 by rpki-client