$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323034323131.roa File: 326130663a316363353a666666663a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: RnX4qjJn0pr+1jdghSA5YjYvJH2be8O6u4H2PEBifbo= Subject key identifier: 8C:80:6F:06:7C:5C:2C:8E:9A:6F:FA:D0:52:A7:D2:9B:86:59:3A:18 Certificate issuer: /CN=808DAC70271F8080A22C1AEE42EFAF98E1776954 Certificate serial: 759F8B4294FCB2C88312BF7B6462587C548A8F49 Authority key identifier: 80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer Subject info access: rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323034323131.roa Signing time: Wed 18 Mar 2026 16:45:38 +0000 ROA not before: Wed 18 Mar 2026 16:40:38 +0000 ROA not after: Wed 17 Mar 2027 16:45:38 +0000 asID: 204211 IP address blocks: 2a0f:1cc5:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 08:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:9f:8b:42:94:fc:b2:c8:83:12:bf:7b:64:62:58:7c:54:8a:8f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=808DAC70271F8080A22C1AEE42EFAF98E1776954 Validity Not Before: Mar 18 16:40:38 2026 GMT Not After : Mar 17 16:45:38 2027 GMT Subject: CN=8C806F067C5C2C8E9A6FFAD052A7D29B86593A18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:5d:f6:a4:b1:90:ee:ac:3c:52:a9:5b:f9: b6:b6:53:c8:06:d8:0c:b8:2b:b4:a0:66:9d:c4:62: 0b:f0:96:04:58:ac:60:39:c1:cf:ce:73:31:22:90: fb:36:a6:b1:81:67:a9:d8:5d:82:1c:cb:e4:69:b5: 9f:95:ae:20:72:1a:0b:71:65:4a:8a:f0:70:99:c8: 2e:fc:11:93:3a:af:46:e8:8d:4c:50:93:13:d4:b8: db:11:5e:5a:ad:44:db:3c:f7:f6:27:b5:be:b2:46: 2f:85:78:29:10:12:72:9c:95:f8:5b:f4:cb:cf:b2: 1c:51:f4:fe:5b:9a:d7:0a:27:66:2d:c1:b0:14:aa: 73:c1:df:0f:2f:e5:65:cb:ef:27:59:f2:1e:d7:9e: cc:42:7d:ae:71:c4:bd:85:ec:31:03:56:d4:6c:77: d3:48:c7:95:d9:30:dc:88:40:d3:45:14:0d:a1:cf: 0f:25:96:f4:b9:d2:df:d9:f1:7e:02:fe:9b:8a:ea: f9:25:94:19:82:20:82:e2:ad:10:4c:94:f9:da:ae: 10:ef:9d:f7:55:bf:36:95:5d:3b:88:8c:b3:37:52: 49:9e:9e:93:ba:6d:b7:71:10:ec:c8:8a:47:fc:69: 9f:13:58:12:b5:f2:af:58:60:f5:13:08:1a:ad:62: a2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:80:6F:06:7C:5C:2C:8E:9A:6F:FA:D0:52:A7:D2:9B:86:59:3A:18 X509v3 Authority Key Identifier: keyid:80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer Subject Information Access: Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 80:af:ea:2e:5e:4b:6d:d3:17:bc:e8:16:95:07:cc:38:4e:68: 0b:0e:96:9b:6b:93:9f:ef:74:40:f7:47:8d:a8:3a:c2:ee:5e: 1f:bb:d8:ad:9b:02:eb:a8:8d:1c:a2:47:d2:5b:00:8c:6d:5a: 78:42:03:13:5e:5b:56:96:66:a6:53:e1:c0:51:a7:8e:62:ef: e8:3d:fc:fe:82:cc:e1:20:0c:a2:4f:c6:dc:38:da:87:f6:d5: 57:a3:fc:64:4f:af:e7:95:1d:fe:80:41:67:c6:01:bc:90:36: 08:1a:87:78:78:b1:d3:22:fa:f8:b5:80:45:fb:b5:54:6f:09: da:f7:92:d2:68:ab:4f:81:08:5e:55:24:6f:47:f8:fa:9f:3d: bb:7f:90:32:d9:e3:ce:b4:6a:8c:eb:11:ef:46:c9:17:b9:92: 01:9d:84:3d:6c:57:c4:1f:a3:87:c8:d6:d5:0b:c3:83:8a:bc: 16:84:c6:86:91:e7:b5:55:e9:3f:25:97:c7:87:a6:c3:c4:fd: 45:53:ea:03:de:0b:92:65:8b:e7:6e:39:38:30:33:37:c7:15: 30:66:6f:a8:a5:8c:d4:fd:f3:b6:17:c4:de:be:b9:fd:84:a4: c0:8f:f5:c0:27:4a:28:7a:4e:a4:14:52:94:ff:60:14:37:06: 19:ab:72:18 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUdZ+LQpT8ssiDEr97ZGJYfFSKj0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA4REFDNzAyNzFGODA4MEEyMkMxQUVFNDJFRkFGOThF MTc3Njk1NDAeFw0yNjAzMTgxNjQwMzhaFw0yNzAzMTcxNjQ1MzhaMDMxMTAvBgNV BAMTKDhDODA2RjA2N0M1QzJDOEU5QTZGRkFEMDUyQTdEMjlCODY1OTNBMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHOl32pLGQ7qw8Uqlb+ba2U8gG 2Ay4K7SgZp3EYgvwlgRYrGA5wc/OczEikPs2prGBZ6nYXYIcy+RptZ+VriByGgtx ZUqK8HCZyC78EZM6r0bojUxQkxPUuNsRXlqtRNs89/Yntb6yRi+FeCkQEnKclfhb 9MvPshxR9P5bmtcKJ2YtwbAUqnPB3w8v5WXL7ydZ8h7XnsxCfa5xxL2F7DEDVtRs d9NIx5XZMNyIQNNFFA2hzw8llvS50t/Z8X4C/puK6vkllBmCIILirRBMlPnarhDv nfdVvzaVXTuIjLM3UkmenpO6bbdxEOzIikf8aZ8TWBK18q9YYPUTCBqtYqKDAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUjIBvBnxcLI6ab/rQUqfSm4ZZOhgwHwYDVR0j BBgwFoAUgI2scCcfgICiLBruQu+vmOF3aVQwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8vcnBraS5heGl2b3JhLm5ldC9yZXBvL0F4aXZv cmEtTmV0LzMvODA4REFDNzAyNzFGODA4MEEyMkMxQUVFNDJFRkFGOThFMTc3Njk1 NC5jcmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJh LTQ5MzktOTVlOS0wMDc3YjgwYjRmMGUvMC84MDhEQUM3MDI3MUY4MDgwQTIyQzFB RUU0MkVGQUY5OEUxNzc2OTU0LmNlcjCBjQYIKwYBBQUHAQsEgYAwfjB8BggrBgEF BQcwC4ZwcnN5bmM6Ly9ycGtpLmF4aXZvcmEubmV0L3JlcG8vQXhpdm9yYS1OZXQv My8zMjYxMzA2NjNhMzE2MzYzMzUzYTY2NjY2NjY2M2EzYTJmMzQzODJkMzQzODIw M2QzZTIwMzIzMDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg8cxf//MA0GCSqGSIb3DQEB CwUAA4IBAQCAr+ouXktt0xe86BaVB8w4TmgLDpaba5Of73RA90eNqDrC7l4fu9it mwLrqI0cokfSWwCMbVp4QgMTXltWlmamU+HAUaeOYu/oPfz+gszhIAyiT8bcONqH 9tVXo/xkT6/nlR3+gEFnxgG8kDYIGod4eLHTIvr4tYBF+7VUbwna95LSaKtPgQhe VSRvR/j6nz27f5Ay2ePOtGqM6xHvRskXuZIBnYQ9bFfEH6OHyNbVC8ODirwWhMaG kee1Vek/JZfHh6bDxP1FU+oD3guSZYvnbjk4MDM3xxUwZm+opYzU/fO2F8Tevrn9 hKTAj/XAJ0ooek6kFFKU/2AUNwYZq3IY -----END CERTIFICATE-----Generated at Wed Mar 25 22:55:21 2026 by rpki-client