$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/326131313a663263303a666665343a3a2f34372d3437203d3e20313937323435.roa File: 326131313a663263303a666665343a3a2f34372d3437203d3e20313937323435.roa (raw, json) Hash identifier: U8HCHH1idotg5sEqWQ7iYfrPuhsaQSp9zz9M5wqrUjY= Subject key identifier: F1:32:59:47:FE:E5:DB:29:EF:C8:E6:11:67:14:AA:7C:82:62:47:7A Certificate issuer: /CN=CD6BF4AFA241230EC583BDDA397EFDCA63284414 Certificate serial: 1A5D1673A281B100BD4FC8CF3069437D2FD4EED4 Authority key identifier: CD:6B:F4:AF:A2:41:23:0E:C5:83:BD:DA:39:7E:FD:CA:63:28:44:14 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/326131313a663263303a666665343a3a2f34372d3437203d3e20313937323435.roa Signing time: Fri 21 Aug 2026 00:09:38 +0000 ROA not before: Fri 21 Aug 2026 00:04:38 +0000 ROA not after: Fri 20 Aug 2027 00:09:38 +0000 asID: 197245 IP address blocks: 2a11:f2c0:ffe4::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 14:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:5d:16:73:a2:81:b1:00:bd:4f:c8:cf:30:69:43:7d:2f:d4:ee:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD6BF4AFA241230EC583BDDA397EFDCA63284414 Validity Not Before: Aug 21 00:04:38 2026 GMT Not After : Aug 20 00:09:38 2027 GMT Subject: CN=F1325947FEE5DB29EFC8E6116714AA7C8262477A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:33:8a:b2:e7:d0:63:7d:a9:76:ca:8b:b8: a8:90:8e:28:ce:19:e0:67:51:00:be:08:a2:2a:40: 39:7a:54:bd:d0:fd:61:5a:ed:15:0a:f5:fd:b2:45: 9d:9e:6e:f9:47:be:a9:57:0a:3a:4e:eb:2a:82:a1: 91:87:3c:1c:4b:10:e7:3a:a7:de:57:fc:c2:8e:2b: 64:58:92:5b:36:b7:79:a3:72:ab:d8:60:b4:e1:81: 29:a0:2c:48:ab:ef:82:75:db:26:9f:3b:97:42:ed: b2:b0:32:de:63:b4:f9:8f:a6:8b:24:52:d3:eb:84: e9:83:0d:58:0b:22:4d:eb:7f:45:39:0e:88:b6:40: f7:65:90:f4:76:24:6d:0f:11:a1:77:70:d1:e4:3f: e1:31:11:92:4a:ff:89:14:9d:b4:5e:6e:f1:71:4a: e4:97:7f:70:01:22:44:78:ed:c6:eb:1a:fd:43:7b: 9e:de:81:d7:9b:5b:f5:62:f6:16:4f:e5:89:0f:68: 9d:fb:58:c0:ab:9f:0c:e5:95:4a:e0:ce:23:a8:61: 01:e9:d7:61:1f:08:c8:1a:2b:f6:3c:24:26:e8:cb: df:4f:56:4c:8b:84:2d:fa:ba:5d:32:83:e5:ee:b9: 48:f3:93:06:71:8c:89:15:5e:e0:03:ff:e6:c9:22: ea:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:32:59:47:FE:E5:DB:29:EF:C8:E6:11:67:14:AA:7C:82:62:47:7A X509v3 Authority Key Identifier: keyid:CD:6B:F4:AF:A2:41:23:0E:C5:83:BD:DA:39:7E:FD:CA:63:28:44:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/326131313a663263303a666665343a3a2f34372d3437203d3e20313937323435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:ffe4::/47 Signature Algorithm: sha256WithRSAEncryption 29:fb:c4:51:b8:17:1e:98:fd:ac:2f:15:8a:ef:cb:66:7e:81: 3a:94:6e:ee:a0:aa:7d:dd:ee:f9:b2:21:61:05:b6:99:57:4e: 13:b5:48:49:3f:81:07:6c:90:7e:87:c9:de:eb:00:b0:af:95: 07:d5:77:87:fa:91:86:36:52:12:b2:44:ed:78:f7:6f:0a:4e: 15:da:ef:82:0a:00:91:bb:a9:53:f6:a1:d5:79:1a:2a:70:f6: 7c:6e:96:70:8c:b2:22:9b:8c:4b:e5:50:59:41:ee:2b:f0:a2: 2d:e0:71:b6:f7:21:55:3f:51:ca:7c:54:4f:43:68:13:59:b3: a7:cb:ab:69:19:c0:5f:55:80:3e:04:c3:c5:7f:98:06:8f:ac: 35:9e:46:90:8a:90:97:5c:7d:26:19:2f:7b:1e:77:19:91:df: 67:26:b7:17:6e:ae:5e:70:2f:3e:8b:73:b2:68:6d:38:74:7b: 81:65:d7:c1:f5:d0:06:8e:8e:1a:30:63:7c:b2:9e:2b:f9:1f: da:a7:01:43:8f:8c:6f:86:29:d1:95:b3:03:76:ac:f4:31:96: 60:d7:87:80:19:83:b7:70:cf:b5:27:c0:2a:14:f0:f9:03:81: d8:98:46:4b:87:c7:d4:1a:a3:2a:56:9e:4d:d3:4e:ed:fd:41: ac:04:9d:74 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUGl0Wc6KBsQC9T8jPMGlDfS/U7tQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2QkY0QUZBMjQxMjMwRUM1ODNCRERBMzk3RUZEQ0E2 MzI4NDQxNDAeFw0yNjA4MjEwMDA0MzhaFw0yNzA4MjAwMDA5MzhaMDMxMTAvBgNV BAMTKEYxMzI1OTQ3RkVFNURCMjlFRkM4RTYxMTY3MTRBQTdDODI2MjQ3N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqPjOKsufQY32pdsqLuKiQjijO GeBnUQC+CKIqQDl6VL3Q/WFa7RUK9f2yRZ2ebvlHvqlXCjpO6yqCoZGHPBxLEOc6 p95X/MKOK2RYkls2t3mjcqvYYLThgSmgLEir74J12yafO5dC7bKwMt5jtPmPposk UtPrhOmDDVgLIk3rf0U5Doi2QPdlkPR2JG0PEaF3cNHkP+ExEZJK/4kUnbRebvFx SuSXf3ABIkR47cbrGv1De57egdebW/Vi9hZP5YkPaJ37WMCrnwzllUrgziOoYQHp 12EfCMgaK/Y8JCboy99PVkyLhC36ul0yg+XuuUjzkwZxjIkVXuAD/+bJIurrAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQU8TJZR/7l2ynvyOYRZxSqfIJiR3owHwYDVR0j BBgwFoAUzWv0r6JBIw7Fg73aOX79ymMoRBQwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzgyZDVmMzg0NDllOTQyYTlhOWFiMjgxODAwNTZhYmZjLzAv Q0Q2QkY0QUZBMjQxMjMwRUM1ODNCRERBMzk3RUZEQ0E2MzI4NDQxNC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9DRDZCRjRBRkEyNDEyMzBFQzU4M0JEREEzOTdFRkRD QTYzMjg0NDE0LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV84MmQ1 ZjM4NDQ5ZTk0MmE5YTlhYjI4MTgwMDU2YWJmYy8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjY1MzQzYTNhMmYzNDM3MmQzNDM3MjAzZDNlMjAzMTM5MzczMjM0MzUu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwEqEfLA/+QwDQYJKoZIhvcNAQELBQADggEBACn7xFG4Fx6Y/awv FYrvy2Z+gTqUbu6gqn3d7vmyIWEFtplXThO1SEk/gQdskH6Hyd7rALCvlQfVd4f6 kYY2UhKyRO14928KThXa74IKAJG7qVP2odV5Gipw9nxulnCMsiKbjEvlUFlB7ivw oi3gcbb3IVU/Ucp8VE9DaBNZs6fLq2kZwF9VgD4Ew8V/mAaPrDWeRpCKkJdcfSYZ L3sedxmR32cmtxdurl5wLz6Lc7JobTh0e4Fl18H10AaOjhowY3yyniv5H9qnAUOP jG+GKdGVswN2rPQxlmDXh4AZg7dwz7UnwCoU8PkDgdiYRkuHx9QaoypWnk3TTu39 QawEnXQ= -----END CERTIFICATE-----Generated at Fri Sep 18 00:27:37 2026 by rpki-client