$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa File: 326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa (raw, json) Hash identifier: S4AvxWBeW9N6hxjfs+wg8xJFVH4YZkZcqcYTTWaj6x8= Subject key identifier: 6C:12:FF:20:55:A1:05:84:D3:7D:05:62:18:39:96:0F:34:9D:C0:96 Certificate issuer: /CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42 Certificate serial: 1FAC92992560308423F1DF0479A9887F39F73E42 Authority key identifier: 10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa Signing time: Sun 10 May 2026 20:13:58 +0000 ROA not before: Sun 10 May 2026 20:08:58 +0000 ROA not after: Sun 09 May 2027 20:13:58 +0000 asID: 203024 IP address blocks: 2a11:f2c0:fff0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 00:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ac:92:99:25:60:30:84:23:f1:df:04:79:a9:88:7f:39:f7:3e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42 Validity Not Before: May 10 20:08:58 2026 GMT Not After : May 9 20:13:58 2027 GMT Subject: CN=6C12FF2055A10584D37D05621839960F349DC096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:08:30:78:c4:82:2c:f7:65:46:a5:bf:53:87: 36:ea:31:ba:08:bd:6a:16:4a:24:45:17:8c:db:8b: 46:81:e2:f2:79:44:89:67:42:0b:51:70:a1:07:7a: 2c:5c:aa:36:9b:77:53:9e:69:c8:37:af:12:bf:fe: 67:11:01:ba:8b:96:85:08:bf:a8:89:42:47:18:8b: 42:29:ef:2a:98:fb:c5:79:70:f1:46:f1:8a:be:75: 22:f4:15:07:7b:4d:e8:1a:31:76:c4:c8:a0:6c:43: 05:18:33:61:3b:50:e7:6c:b5:9a:ff:d9:e4:53:97: bf:86:e9:7a:fd:d0:5d:42:d2:15:f7:f8:b8:82:a1: dd:c4:51:18:f5:c2:9a:fa:49:8e:2e:87:fa:dc:4a: 22:1d:d2:c3:fa:6d:a4:7b:8f:b0:1e:6e:1d:d5:1d: 1f:68:3f:4f:97:bf:aa:b1:33:e6:50:73:90:90:74: cb:41:95:98:14:90:ab:51:b8:af:51:7c:08:a4:14: 0d:f8:3f:8b:9f:ee:11:22:e1:41:e8:ce:f1:fa:c2: 6b:d5:2a:7f:c5:bd:71:58:9c:97:e4:b0:9a:39:fe: 44:f1:cc:0b:f5:65:98:e6:90:96:cf:68:7f:f7:d8: 0f:31:c7:ca:3b:38:d2:8b:82:31:8f:bc:d7:2e:8c: a1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:12:FF:20:55:A1:05:84:D3:7D:05:62:18:39:96:0F:34:9D:C0:96 X509v3 Authority Key Identifier: keyid:10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:fff0::/48 Signature Algorithm: sha256WithRSAEncryption 4b:3e:bc:0a:b0:3a:2a:cc:ba:41:f0:c2:26:a6:93:1d:87:aa: b8:ab:3c:14:b8:17:ba:79:80:e4:d4:d7:8d:6b:20:f9:a2:d9: 58:31:74:af:30:7b:98:2c:34:11:da:93:48:0b:a0:78:08:e6: 32:86:0e:36:d5:95:aa:3b:8b:38:7f:2b:8a:3d:fc:fa:ab:d6: db:2f:9b:1d:c8:97:0b:ea:d0:cb:22:cd:34:81:7a:4b:56:28: 59:9d:ff:a4:6c:75:51:77:0e:8c:40:75:73:1b:64:41:89:df: cd:ab:7a:04:d5:a4:b5:02:8c:b1:9a:ad:7e:0c:85:ef:d8:e0: b3:db:c7:b2:2c:c3:79:39:94:51:e5:1c:f3:26:0f:64:e3:0b: 21:dc:b6:e7:28:ce:05:51:44:c9:1b:d3:a2:97:52:67:15:4d: 3c:25:d3:c1:5d:af:b5:35:b7:c1:0d:0a:6f:3c:07:3e:a8:61: 78:84:14:91:e3:6a:c8:2b:50:b8:ec:61:d9:38:cf:e7:09:d8: 51:31:eb:7d:17:fd:41:e9:4a:6d:9f:96:58:0f:a0:24:20:3d: 36:3a:c5:b0:bb:e7:36:3e:08:97:20:e3:db:31:b7:c0:39:2c: 4a:37:56:17:ad:09:a5:a6:7c:40:81:0c:12:b5:bd:ab:12:62: 9b:4b:7a:9a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUH6ySmSVgMIQj8d8EeamIfzn3PkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCNTEzMzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRD NkJBNkE0MjAeFw0yNjA1MTAyMDA4NThaFw0yNzA1MDkyMDEzNThaMDMxMTAvBgNV BAMTKDZDMTJGRjIwNTVBMTA1ODREMzdEMDU2MjE4Mzk5NjBGMzQ5REMwOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOCDB4xIIs92VGpb9ThzbqMboI vWoWSiRFF4zbi0aB4vJ5RIlnQgtRcKEHeixcqjabd1Oeacg3rxK//mcRAbqLloUI v6iJQkcYi0Ip7yqY+8V5cPFG8Yq+dSL0FQd7TegaMXbEyKBsQwUYM2E7UOdstZr/ 2eRTl7+G6Xr90F1C0hX3+LiCod3EURj1wpr6SY4uh/rcSiId0sP6baR7j7Aebh3V HR9oP0+Xv6qxM+ZQc5CQdMtBlZgUkKtRuK9RfAikFA34P4uf7hEi4UHozvH6wmvV Kn/FvXFYnJfksJo5/kTxzAv1ZZjmkJbPaH/32A8xx8o7ONKLgjGPvNcujKEzAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUbBL/IFWhBYTTfQViGDmWDzSdwJYwHwYDVR0j BBgwFoAUELUTOcW8znCcttahSSGq9Ma6akIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2VjYjM0YjA0NjkxZTQ5OTVhNjA2OTUyZTgzNmI0ZWNjLzAv MTBCNTEzMzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRDNkJBNkE0Mi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xMEI1MTMzOUM1QkNDRTcwOUNCNkQ2QTE0OTIxQUFG NEM2QkE2QTQyLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV9lY2Iz NGIwNDY5MWU0OTk1YTYwNjk1MmU4MzZiNGVjYy8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjY2MzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzMzMDMyMzQu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqEfLA//AwDQYJKoZIhvcNAQELBQADggEBAEs+vAqwOirMukHw wiamkx2HqrirPBS4F7p5gOTU141rIPmi2VgxdK8we5gsNBHak0gLoHgI5jKGDjbV lao7izh/K4o9/Pqr1tsvmx3Ilwvq0MsizTSBektWKFmd/6RsdVF3DoxAdXMbZEGJ 382regTVpLUCjLGarX4Mhe/Y4LPbx7Isw3k5lFHlHPMmD2TjCyHctucozgVRRMkb 06KXUmcVTTwl08Fdr7U1t8ENCm88Bz6oYXiEFJHjasgrULjsYdk4z+cJ2FEx630X /UHpSm2fllgPoCQgPTY6xbC75zY+CJcg49sxt8A5LEo3VhetCaWmfECBDBK1vasS YptLepo= -----END CERTIFICATE-----Generated at Wed May 13 16:50:24 2026 by rpki-client