$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa File: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (raw, json) Hash identifier: SsKZ08+rzpnXlHPVlF1X2ydZv//GE/sZxshtEoPOB40= Subject key identifier: FF:D1:45:7E:E6:E0:3F:62:FE:0B:14:FD:C2:61:58:B9:37:BA:6A:A3 Certificate issuer: /CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Certificate serial: 2C3505FE905E7B49648466F17E5BF583062999E9 Authority key identifier: 2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa Signing time: Sun 01 Mar 2026 11:33:48 +0000 ROA not before: Sun 01 Mar 2026 11:28:48 +0000 ROA not after: Sun 28 Feb 2027 11:33:48 +0000 asID: 214749 IP address blocks: 2a11:f2c0:ffe0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 13:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:35:05:fe:90:5e:7b:49:64:84:66:f1:7e:5b:f5:83:06:29:99:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Validity Not Before: Mar 1 11:28:48 2026 GMT Not After : Feb 28 11:33:48 2027 GMT Subject: CN=FFD1457EE6E03F62FE0B14FDC26158B937BA6AA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3a:44:b5:24:ea:d3:1a:94:b3:ae:a0:5e:85: a0:73:07:53:34:db:2c:1c:63:ad:f8:42:aa:18:5b: 04:e9:db:eb:87:21:1c:4e:98:80:3f:3c:d7:6b:37: c8:43:d0:8f:ef:67:77:b3:35:16:97:c4:52:7c:27: 39:10:aa:70:b6:b0:73:d2:de:92:ea:6c:5d:e2:1a: f0:72:e3:cf:9e:7a:c0:95:9c:66:e0:84:db:b4:05: 1c:2c:9c:e3:82:2d:94:8e:ff:3b:4f:6d:98:71:df: 6d:0c:03:6d:8c:e8:af:9e:63:93:28:dc:36:e8:11: 5b:75:b5:b2:98:cb:bf:3c:05:7d:21:08:ce:db:eb: 3c:24:4c:fa:1f:4f:97:57:96:c3:9e:0b:09:3c:26: e7:ad:96:5d:10:b6:20:9b:62:3d:74:fe:2d:e4:55: b4:86:6d:37:51:85:77:6d:6d:99:d3:44:ae:b2:f3: 37:60:24:30:38:90:af:ba:43:31:5a:aa:86:63:85: e2:19:d6:a6:c4:bb:c2:2f:94:94:82:0e:30:e4:ae: cc:38:13:0f:67:a9:b9:d7:5d:a9:d7:c0:5e:e2:ba: f9:29:72:13:8b:60:c7:39:30:b9:c7:de:26:17:14: 3c:d7:d7:e4:6d:50:59:e1:1b:2a:29:41:21:25:81: b1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D1:45:7E:E6:E0:3F:62:FE:0B:14:FD:C2:61:58:B9:37:BA:6A:A3 X509v3 Authority Key Identifier: keyid:2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:ffe0::/48 Signature Algorithm: sha256WithRSAEncryption 94:1b:bf:93:45:92:c5:18:bb:e0:17:6e:d8:de:9e:da:46:6a: 25:12:56:a5:88:9d:16:1c:eb:48:0c:17:f1:4a:50:23:89:e5: 6e:43:5f:03:8a:4e:ab:e4:82:bd:39:00:93:aa:76:4a:93:f9: 5e:35:f2:43:4c:a2:6b:f2:93:0b:d6:5e:8d:51:16:a9:69:27: 9a:26:dd:20:cf:97:94:aa:ca:52:0c:bd:d1:dc:d7:7a:80:4a: ee:2e:65:c8:25:5a:93:c5:a1:7d:d9:3b:95:c2:d5:6b:5e:ec: ec:3b:fd:a0:26:63:34:8f:aa:a9:2a:fe:22:89:c9:d3:55:c9: 69:a0:b0:30:0a:7a:04:5b:da:1f:4d:82:f8:66:42:88:69:a8: bb:b9:bc:c2:93:29:71:ca:34:de:ca:87:4b:54:6e:be:26:06: b3:6b:6c:93:c3:07:9e:d5:ea:91:5d:be:5d:07:ec:43:75:6d: 50:6c:93:c9:33:a6:1f:6c:de:ab:b1:7d:f0:c8:c8:58:52:95: 1f:96:78:b7:5f:3b:2a:8e:24:4c:0e:6c:a8:5b:03:ea:3d:50: a9:17:40:09:4d:d8:4c:67:1f:d8:e9:ef:04:6a:60:5c:a6:15: 77:c9:9e:90:c2:54:80:0a:db:81:5a:86:b2:95:11:9d:0a:01: 3e:e1:40:1d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIULDUF/pBee0lkhGbxflv1gwYpmekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4 NUU4MjMxRTAeFw0yNjAzMDExMTI4NDhaFw0yNzAyMjgxMTMzNDhaMDMxMTAvBgNV BAMTKEZGRDE0NTdFRTZFMDNGNjJGRTBCMTRGREMyNjE1OEI5MzdCQTZBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkOkS1JOrTGpSzrqBehaBzB1M0 2ywcY634QqoYWwTp2+uHIRxOmIA/PNdrN8hD0I/vZ3ezNRaXxFJ8JzkQqnC2sHPS 3pLqbF3iGvBy48+eesCVnGbghNu0BRwsnOOCLZSO/ztPbZhx320MA22M6K+eY5Mo 3DboEVt1tbKYy788BX0hCM7b6zwkTPofT5dXlsOeCwk8Juetll0QtiCbYj10/i3k VbSGbTdRhXdtbZnTRK6y8zdgJDA4kK+6QzFaqoZjheIZ1qbEu8IvlJSCDjDkrsw4 Ew9nqbnXXanXwF7iuvkpchOLYMc5MLnH3iYXFDzX1+RtUFnhGyopQSElgbHhAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQU/9FFfubgP2L+CxT9wmFYuTe6aqMwHwYDVR0j BBgwFoAUKzuXM02gaXgYXax2ovPqNYXoIx4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAv MkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8yQjNCOTczMzREQTA2OTc4MTg1REFDNzZBMkYzRUEz NTg1RTgyMzFFLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV9mMTE0 YzFlYTc3ODg0NTJjYmYzOGJlODU0ZWE4MzU5ZC8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjY1MzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzQzNzM0Mzku cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqEfLA/+AwDQYJKoZIhvcNAQELBQADggEBAJQbv5NFksUYu+AX btjentpGaiUSVqWInRYc60gMF/FKUCOJ5W5DXwOKTqvkgr05AJOqdkqT+V418kNM omvykwvWXo1RFqlpJ5om3SDPl5SqylIMvdHc13qASu4uZcglWpPFoX3ZO5XC1Wte 7Ow7/aAmYzSPqqkq/iKJydNVyWmgsDAKegRb2h9NgvhmQohpqLu5vMKTKXHKNN7K h0tUbr4mBrNrbJPDB57V6pFdvl0H7EN1bVBsk8kzph9s3quxffDIyFhSlR+WeLdf OyqOJEwObKhbA+o9UKkXQAlN2ExnH9jp7wRqYFymFXfJnpDCVIAK24FahrKVEZ0K AT7hQB0= -----END CERTIFICATE-----Generated at Sat Mar 14 07:02:52 2026 by rpki-client