$ rpki-client -vvf repo.rpki.space/repo/infiniroute-ratatoskr/0/326131343a3763303a353330303a3a2f34302d3438203d3e20323134373332.roa File: 326131343a3763303a353330303a3a2f34302d3438203d3e20323134373332.roa (raw, json) Hash identifier: 6rWzs7QLbs6SbjiGVvyjLEE++0JIx/can3onvN113x0= Subject key identifier: 45:17:2A:51:AA:8E:7A:99:A5:7A:73:DE:C9:00:03:7B:52:0B:99:8A Certificate issuer: /CN=6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1 Certificate serial: 6F7BAC1A03633BDCA18B004989DB1A544936CAC8 Authority key identifier: 6B:27:5D:9A:12:3F:3D:56:01:2C:5A:06:7E:2B:A2:B5:FE:34:FA:A1 Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.cer Subject info access: rsync://repo.rpki.space/repo/infiniroute-ratatoskr/0/326131343a3763303a353330303a3a2f34302d3438203d3e20323134373332.roa Signing time: Mon 26 May 2025 18:19:27 +0000 ROA not before: Mon 26 May 2025 18:14:27 +0000 ROA not after: Mon 25 May 2026 18:19:27 +0000 asID: 214732 IP address blocks: 2a14:7c0:5300::/40 maxlen: 48 Validation: OK Signature path: rsync://repo.rpki.space/repo/infiniroute-ratatoskr/0/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.crl rsync://repo.rpki.space/repo/infiniroute-ratatoskr/0/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.mft rsync://repo.rpki.space/repo/Infiniroute/1/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.cer rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 07:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:7b:ac:1a:03:63:3b:dc:a1:8b:00:49:89:db:1a:54:49:36:ca:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1 Validity Not Before: May 26 18:14:27 2025 GMT Not After : May 25 18:19:27 2026 GMT Subject: CN=45172A51AA8E7A99A57A73DEC900037B520B998A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:d7:94:fe:80:b1:7d:9f:cb:c6:e0:55:b2: 90:d9:a7:05:ba:be:77:f4:1d:5c:a9:39:9d:83:51: 04:98:66:cf:49:76:88:1e:03:4f:58:19:75:4b:71: 49:ac:90:b2:b9:da:b2:86:88:4c:55:93:fe:4a:6f: 95:ab:00:53:96:59:0d:63:0c:1c:02:1a:18:b3:87: c1:5c:5f:39:ea:c3:cf:65:6d:86:8f:28:5e:c6:8c: 6f:46:bc:b2:53:ae:18:9b:0e:f4:5c:a8:55:3d:a7: 0e:06:a6:01:33:5f:b8:f9:c5:e0:c2:9a:26:b5:67: 4d:b4:03:47:55:d8:94:02:f3:11:c2:4a:be:a4:8c: ad:5a:74:d2:88:e8:02:4f:60:bd:eb:1d:1d:28:ad: ed:96:c3:60:22:80:cd:8d:14:6d:e8:46:16:21:d8: c6:85:a3:8f:5a:f3:d3:47:47:7c:77:f6:aa:48:06: 83:29:6a:7a:dc:b8:95:f5:68:6b:ce:3d:65:e3:65: 0d:9b:84:48:91:6d:9a:a8:26:0a:4d:3b:3b:ba:18: 9b:b4:f6:86:2a:74:d1:f4:1d:89:96:bc:c9:67:2f: c7:d9:78:7d:fc:e7:ea:f8:e1:29:54:3f:d2:ee:fd: 37:de:40:ca:99:98:c6:99:bb:30:b6:17:3e:1a:a0: d0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:17:2A:51:AA:8E:7A:99:A5:7A:73:DE:C9:00:03:7B:52:0B:99:8A X509v3 Authority Key Identifier: keyid:6B:27:5D:9A:12:3F:3D:56:01:2C:5A:06:7E:2B:A2:B5:FE:34:FA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/infiniroute-ratatoskr/0/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.crl Authority Information Access: CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/infiniroute-ratatoskr/0/326131343a3763303a353330303a3a2f34302d3438203d3e20323134373332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7c0:5300::/40 Signature Algorithm: sha256WithRSAEncryption 23:5e:5c:69:6c:23:7a:ac:f6:0d:39:fa:26:59:b5:73:a6:f1: ad:a1:f7:2c:27:e7:84:e5:10:f8:9d:06:a0:05:94:ab:fb:25: 20:23:ce:2b:22:03:1d:f8:1c:77:98:43:2a:2b:02:01:96:f8: 70:4e:fb:55:3f:8f:4f:72:4a:e9:58:23:cb:71:39:ea:08:ca: f1:d8:ce:fe:4c:67:ce:e4:f0:a5:02:f3:4e:d7:42:32:21:cf: b0:bd:bd:c9:bf:4c:e5:5b:e7:d0:24:ac:62:05:63:8a:2d:d7: 85:ca:95:63:3b:86:07:d7:62:bd:64:a4:17:ac:9e:1f:c0:97: 2b:ef:78:ee:25:36:52:b0:35:19:44:bf:e9:e1:7b:94:31:e2: eb:65:2d:52:8e:a0:7d:a6:ca:30:dd:da:fd:00:71:44:6d:1e: c6:61:81:08:1e:ac:60:16:74:70:e8:69:59:7a:cc:3f:81:cf: 4c:64:0f:0b:cc:ad:03:4a:cc:d6:a7:d4:72:63:13:a2:e7:bc: 6a:6c:82:1d:09:d9:40:e6:ba:2d:e3:65:49:ba:6c:c3:0a:4a: 2e:82:06:85:fe:65:c0:97:d0:95:d8:46:c4:31:3b:52:4f:60: a5:ac:93:34:66:9c:d5:4e:98:e0:59:92:fe:fb:fe:c2:89:8b: 2b:f8:a1:c1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIUb3usGgNjO9yhiwBJidsaVEk2ysgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIyNzVEOUExMjNGM0Q1NjAxMkM1QTA2N0UyQkEyQjVG RTM0RkFBMTAeFw0yNTA1MjYxODE0MjdaFw0yNjA1MjUxODE5MjdaMDMxMTAvBgNV BAMTKDQ1MTcyQTUxQUE4RTdBOTlBNTdBNzNERUM5MDAwMzdCNTIwQjk5OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxM9eU/oCxfZ/LxuBVspDZpwW6 vnf0HVypOZ2DUQSYZs9JdogeA09YGXVLcUmskLK52rKGiExVk/5Kb5WrAFOWWQ1j DBwCGhizh8FcXznqw89lbYaPKF7GjG9GvLJTrhibDvRcqFU9pw4GpgEzX7j5xeDC mia1Z020A0dV2JQC8xHCSr6kjK1adNKI6AJPYL3rHR0ore2Ww2AigM2NFG3oRhYh 2MaFo49a89NHR3x39qpIBoMpanrcuJX1aGvOPWXjZQ2bhEiRbZqoJgpNOzu6GJu0 9oYqdNH0HYmWvMlnL8fZeH385+r44SlUP9Lu/TfeQMqZmMaZuzC2Fz4aoNBlAgMB AAGjggITMIICDzAdBgNVHQ4EFgQURRcqUaqOepmlenPeyQADe1ILmYowHwYDVR0j BBgwFoAUayddmhI/PVYBLFoGfiuitf40+qEwDgYDVR0PAQH/BAQDAgeAMHIGA1Ud HwRrMGkwZ6BloGOGYXJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vaW5maW5p cm91dGUtcmF0YXRvc2tyLzAvNkIyNzVEOUExMjNGM0Q1NjAxMkM1QTA2N0UyQkEy QjVGRTM0RkFBMS5jcmwwcwYIKwYBBQUHAQEEZzBlMGMGCCsGAQUFBzAChldyc3lu YzovL3JlcG8ucnBraS5zcGFjZS9yZXBvL0luZmluaXJvdXRlLzEvNkIyNzVEOUEx MjNGM0Q1NjAxMkM1QTA2N0UyQkEyQjVGRTM0RkFBMS5jZXIwgZYGCCsGAQUFBwEL BIGJMIGGMIGDBggrBgEFBQcwC4Z3cnN5bmM6Ly9yZXBvLnJwa2kuc3BhY2UvcmVw by9pbmZpbmlyb3V0ZS1yYXRhdG9za3IvMC8zMjYxMzEzNDNhMzc2MzMwM2EzNTMz MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNDM3MzMzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGACoUB8BTMA0GCSqGSIb3DQEBCwUAA4IBAQAjXlxpbCN6rPYNOfomWbVzpvGt ofcsJ+eE5RD4nQagBZSr+yUgI84rIgMd+Bx3mEMqKwIBlvhwTvtVP49PckrpWCPL cTnqCMrx2M7+TGfO5PClAvNO10IyIc+wvb3Jv0zlW+fQJKxiBWOKLdeFypVjO4YH 12K9ZKQXrJ4fwJcr73juJTZSsDUZRL/p4XuUMeLrZS1SjqB9psow3dr9AHFEbR7G YYEIHqxgFnRw6GlZesw/gc9MZA8LzK0DSszWp9RyYxOi57xqbIIdCdlA5rot42VJ umzDCkouggaF/mXAl9CV2EbEMTtST2ClrJM0ZpzVTpjgWZL++/7CiYsr+KHB -----END CERTIFICATE-----Generated at Tue Sep 9 09:29:23 2025 by rpki-client