$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa File: 326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa (raw, json) Hash identifier: 97DFsajVBa0EqLsX0/dV54HSIKbk5ZSaY4ztBppt1cY= Subject key identifier: 19:90:14:22:28:FF:98:59:C8:7C:71:EC:FC:C2:34:35:4B:FC:A2:3F Certificate issuer: /CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42 Certificate serial: 7C320D7044C8BE9D0A716BD46AF30FBB7FDDDB01 Authority key identifier: 10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa Signing time: Sun 08 Jun 2025 19:45:06 +0000 ROA not before: Sun 08 Jun 2025 19:40:06 +0000 ROA not after: Sun 07 Jun 2026 19:45:06 +0000 asID: 203024 IP address blocks: 2a11:f2c0:fff0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 22:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:32:0d:70:44:c8:be:9d:0a:71:6b:d4:6a:f3:0f:bb:7f:dd:db:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42 Validity Not Before: Jun 8 19:40:06 2025 GMT Not After : Jun 7 19:45:06 2026 GMT Subject: CN=1990142228FF9859C87C71ECFCC234354BFCA23F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9d:09:10:7f:c9:e3:0a:df:43:bf:f2:90:b2: bc:94:db:70:f6:b6:64:ee:ce:27:96:82:fd:97:63: 3f:87:e1:96:7b:34:61:74:4f:6e:fa:7e:b0:39:5a: 5a:ba:fa:95:19:cc:ef:96:3e:38:0d:cc:fe:df:5b: b4:9f:b3:1d:eb:fd:d9:38:11:cc:c6:48:cb:cf:b2: fc:b7:a4:5f:fd:25:fa:9a:45:e1:aa:ee:1e:ee:9e: 5b:7e:25:19:44:39:27:ae:fc:9e:65:20:de:e5:f3: 63:ad:b7:45:b4:58:66:9c:d8:bf:58:e3:d7:cd:36: ea:86:ca:49:31:31:71:2c:15:b6:c3:c5:54:0b:4e: ef:5f:d2:4b:95:d8:a1:20:52:19:49:f9:bb:24:51: 12:fb:b3:82:22:11:39:90:66:ed:eb:bb:06:7c:2f: cb:39:8b:16:fd:c2:17:ad:c6:c2:b8:37:ee:1f:44: 17:ec:8a:9e:49:de:70:0a:6c:f7:30:4f:54:ca:53: 34:71:f6:dc:ac:bd:d0:40:f5:8a:7f:45:49:7d:5a: 13:50:a0:72:45:c6:4b:c7:ca:44:06:3d:39:ae:3d: 3a:9f:25:f9:91:fb:6f:41:15:d3:62:60:f5:5d:40: b0:8e:1a:43:30:6b:a5:a4:a2:d0:55:f0:1b:d3:50: 75:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:90:14:22:28:FF:98:59:C8:7C:71:EC:FC:C2:34:35:4B:FC:A2:3F X509v3 Authority Key Identifier: keyid:10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:fff0::/48 Signature Algorithm: sha256WithRSAEncryption 40:2a:ce:f1:06:3d:d9:0a:30:54:24:fa:6f:48:2c:0d:5e:84: cd:3f:ac:10:0c:ff:22:71:33:fb:29:78:96:03:78:1d:e8:c9: 2b:34:39:55:1a:b5:64:b4:8c:36:79:d0:dd:d9:39:e9:74:0d: 80:d0:10:d1:9e:77:e4:ef:c4:7d:d1:6c:ef:05:10:ce:74:cf: 1c:15:40:81:7a:03:a0:ee:62:e8:60:22:23:19:7a:15:e0:d2: 5d:a8:b5:39:42:6d:b1:71:6f:ec:9d:d5:23:ff:79:94:09:41: a6:3a:cc:0d:9a:be:88:89:17:7d:3c:55:18:dd:d3:cf:26:f4: a0:90:4b:c7:ce:1f:5d:a3:2e:68:52:95:f0:75:da:6f:b6:01: 47:ba:fa:67:4e:f5:11:b8:53:ba:a6:12:4c:67:c8:ce:f8:94: 56:57:24:78:26:74:4f:a6:ae:72:56:6a:c4:57:85:6c:81:25: 68:c0:77:aa:a5:c1:9e:26:f2:7e:0e:d9:17:a9:bc:32:83:69: 28:66:7f:23:35:74:27:e8:63:18:27:b2:8a:9f:ea:42:ea:83: 32:45:7e:24:2d:28:7d:46:c6:01:39:d0:70:d2:f4:b2:8b:e9: 52:0e:87:c7:56:d6:31:d7:3a:78:58:14:63:53:da:d5:2b:8d: 03:c6:39:68 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUfDINcETIvp0KcWvUavMPu3/d2wEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCNTEzMzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRD NkJBNkE0MjAeFw0yNTA2MDgxOTQwMDZaFw0yNjA2MDcxOTQ1MDZaMDMxMTAvBgNV BAMTKDE5OTAxNDIyMjhGRjk4NTlDODdDNzFFQ0ZDQzIzNDM1NEJGQ0EyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqnQkQf8njCt9Dv/KQsryU23D2 tmTuzieWgv2XYz+H4ZZ7NGF0T276frA5Wlq6+pUZzO+WPjgNzP7fW7Sfsx3r/dk4 EczGSMvPsvy3pF/9JfqaReGq7h7unlt+JRlEOSeu/J5lIN7l82Ott0W0WGac2L9Y 49fNNuqGykkxMXEsFbbDxVQLTu9f0kuV2KEgUhlJ+bskURL7s4IiETmQZu3ruwZ8 L8s5ixb9whetxsK4N+4fRBfsip5J3nAKbPcwT1TKUzRx9tysvdBA9Yp/RUl9WhNQ oHJFxkvHykQGPTmuPTqfJfmR+29BFdNiYPVdQLCOGkMwa6WkotBV8BvTUHUFAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUGZAUIij/mFnIfHHs/MI0NUv8oj8wHwYDVR0j BBgwFoAUELUTOcW8znCcttahSSGq9Ma6akIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2VjYjM0YjA0NjkxZTQ5OTVhNjA2OTUyZTgzNmI0ZWNjLzAv MTBCNTEzMzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRDNkJBNkE0Mi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xMEI1MTMzOUM1QkNDRTcwOUNCNkQ2QTE0OTIxQUFG NEM2QkE2QTQyLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV9lY2Iz NGIwNDY5MWU0OTk1YTYwNjk1MmU4MzZiNGVjYy8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjY2MzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzMzMDMyMzQu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqEfLA//AwDQYJKoZIhvcNAQELBQADggEBAEAqzvEGPdkKMFQk +m9ILA1ehM0/rBAM/yJxM/speJYDeB3oySs0OVUatWS0jDZ50N3ZOel0DYDQENGe d+TvxH3RbO8FEM50zxwVQIF6A6DuYuhgIiMZehXg0l2otTlCbbFxb+yd1SP/eZQJ QaY6zA2avoiJF308VRjd088m9KCQS8fOH12jLmhSlfB12m+2AUe6+mdO9RG4U7qm EkxnyM74lFZXJHgmdE+mrnJWasRXhWyBJWjAd6qlwZ4m8n4O2RepvDKDaShmfyM1 dCfoYxgnsoqf6kLqgzJFfiQtKH1GxgE50HDS9LKL6VIOh8dW1jHXOnhYFGNT2tUr jQPGOWg= -----END CERTIFICATE-----Generated at Mon Jun 30 16:02:08 2025 by rpki-client