
$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/326131313a663263303a666665343a3a2f34382d3438203d3e20313937323435.roa
File: 326131313a663263303a666665343a3a2f34382d3438203d3e20313937323435.roa (raw, json)
Hash identifier: X9IRdYbMNBA8lcLk1xPTqNLh5EyLbXKxd9XO8hLWoDA=
Subject key identifier: 15:EE:42:B7:92:07:92:91:30:9E:FE:56:B6:98:FC:40:79:E6:3F:7F
Certificate issuer: /CN=CD6BF4AFA241230EC583BDDA397EFDCA63284414
Certificate serial: 6E15AB50EE455F76DF6C505BA1A69EFFA1FB5949
Authority key identifier: CD:6B:F4:AF:A2:41:23:0E:C5:83:BD:DA:39:7E:FD:CA:63:28:44:14
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/326131313a663263303a666665343a3a2f34382d3438203d3e20313937323435.roa
Signing time: Fri 21 Aug 2026 00:12:11 +0000
ROA not before: Fri 21 Aug 2026 00:07:11 +0000
ROA not after: Fri 20 Aug 2027 00:12:11 +0000
asID: 197245
IP address blocks: 2a11:f2c0:ffe4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 14:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:15:ab:50:ee:45:5f:76:df:6c:50:5b:a1:a6:9e:ff:a1:fb:59:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6BF4AFA241230EC583BDDA397EFDCA63284414
Validity
Not Before: Aug 21 00:07:11 2026 GMT
Not After : Aug 20 00:12:11 2027 GMT
Subject: CN=15EE42B792079291309EFE56B698FC4079E63F7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:1b:5d:37:e7:42:d6:69:e7:50:2d:ec:89:
2d:1d:a8:dd:09:fb:01:22:16:7c:ad:ae:c4:af:73:
a0:4c:f1:2b:b8:98:7e:53:94:2f:c1:19:ef:37:0d:
c4:94:9e:e4:61:82:c5:06:53:a2:04:d2:1c:7f:ec:
78:89:80:9d:a6:26:df:a1:db:ff:fb:73:f6:f0:aa:
3d:81:1b:06:46:64:f3:92:98:e9:44:fd:f4:9a:c5:
cd:05:69:1d:36:89:2e:ad:6b:84:f9:35:7c:bc:d0:
49:79:6c:75:30:5b:05:f5:db:aa:db:ad:07:5a:0a:
4f:b4:22:aa:40:a9:cd:74:02:9c:48:8c:88:c9:98:
87:0b:75:3d:dc:a8:28:6e:ad:93:dc:28:54:64:f2:
64:74:04:48:c3:fa:64:0e:a4:32:97:d4:94:33:03:
e1:19:63:69:e0:d1:bd:84:11:cd:7e:9e:4f:3b:a4:
27:ae:b7:3a:48:b5:6a:a6:9f:1d:eb:ca:bf:90:cb:
2b:67:f7:f8:a2:2b:63:27:f4:8f:7d:c3:2c:96:f6:
9e:93:09:6c:4c:7c:05:c4:a4:c8:8b:e9:ca:8c:97:
29:bc:e9:b6:39:97:9a:06:6c:26:51:8f:3f:38:1c:
73:b4:2f:f1:ef:a4:d9:d4:06:91:2a:27:35:80:8f:
79:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EE:42:B7:92:07:92:91:30:9E:FE:56:B6:98:FC:40:79:E6:3F:7F
X509v3 Authority Key Identifier:
keyid:CD:6B:F4:AF:A2:41:23:0E:C5:83:BD:DA:39:7E:FD:CA:63:28:44:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/326131313a663263303a666665343a3a2f34382d3438203d3e20313937323435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffe4::/48
Signature Algorithm: sha256WithRSAEncryption
41:c5:e3:75:2d:e2:ae:93:64:38:8d:9a:06:b3:bc:41:2b:ae:
79:7f:c5:0c:5e:bf:56:6d:09:ea:3f:74:7c:8e:62:ea:20:25:
8a:65:38:87:fa:be:a3:05:49:65:75:03:1f:d0:f6:0f:b8:be:
f7:b0:fb:46:a7:eb:a1:02:8a:35:90:37:4b:26:5e:b3:95:29:
d1:7c:23:0d:26:c9:7d:3a:6e:e3:b1:14:25:ce:8e:57:93:52:
c0:53:e7:91:f9:ae:d9:54:3f:e9:d0:0a:f3:9b:a1:c2:49:69:
b2:bc:d7:5b:b1:18:93:1f:6a:af:b2:1e:0e:76:b4:b4:81:78:
6d:12:d3:5d:28:fc:f8:91:c4:d2:1f:a0:b8:a4:9b:e3:73:61:
16:7a:8f:21:fa:96:47:af:f7:9c:5b:ba:ba:7d:cb:67:44:4b:
1a:3f:0c:d5:32:de:0e:ed:e5:a6:cd:53:3f:04:73:66:54:1e:
66:3b:53:6e:f5:3f:b4:de:0a:c5:6e:fd:ee:3c:f8:b5:74:64:
e1:ee:38:c1:c5:b1:26:95:41:90:8c:d7:c9:8a:93:3d:de:fb:
6b:95:17:f8:ee:f4:58:ee:eb:8c:e1:38:52:f5:61:5d:d3:5c:
be:d7:40:f9:6e:f2:08:f4:e0:11:a6:4c:99:8f:37:5d:17:d7:
77:e2:08:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 00:27:38 2026 by rpki-client