$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa File: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (raw, json) Hash identifier: qwNG09yUfI2Z1oL7Swg14pL+g0Ex6NYiwi4RBuSwo9s= Subject key identifier: 03:12:A1:25:F0:4D:E8:DB:2A:05:91:B5:74:00:E5:98:AE:47:FD:0E Certificate issuer: /CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Certificate serial: 26349213F59917A432A5AA22D55B0B48A4D33B81 Authority key identifier: 28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 Authority info access: rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa Signing time: Sun 01 Mar 2026 11:33:43 +0000 ROA not before: Sun 01 Mar 2026 11:28:43 +0000 ROA not after: Sun 28 Feb 2027 11:33:43 +0000 asID: 214749 IP address blocks: 2a11:f2c0:ffe0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.mft rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 18:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:34:92:13:f5:99:17:a4:32:a5:aa:22:d5:5b:0b:48:a4:d3:3b:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=281F5D393C912311D00F69CA42CC6D3FD11D7D52 Validity Not Before: Mar 1 11:28:43 2026 GMT Not After : Feb 28 11:33:43 2027 GMT Subject: CN=0312A125F04DE8DB2A0591B57400E598AE47FD0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4b:b9:ab:2f:c9:3e:df:52:61:8f:01:16:eb: 5b:2c:02:5f:74:5a:1d:e1:bc:e6:ff:15:7d:33:a0: c7:5c:78:ae:bb:d3:2b:da:76:c5:12:f4:b1:21:7a: 94:65:c7:f2:fd:8f:a9:71:9c:5f:e7:9f:0a:ca:ff: 64:2b:70:94:bb:5b:8e:ba:c2:52:21:66:3a:75:ee: 73:f3:8f:ab:f9:c6:61:7d:38:e0:1d:09:2f:d8:e8: 7d:9e:0c:d3:db:36:8c:49:da:e8:80:3c:cc:9a:2c: cb:2d:2a:22:51:56:32:4b:f5:f6:e4:d8:f7:3e:43: d1:19:2a:db:5c:78:25:3e:4f:1d:47:9d:08:3b:ea: d8:19:e7:ce:39:fa:3f:d3:6f:8e:af:c2:c8:59:18: a9:3a:c5:5b:fd:fb:b7:4b:52:1c:35:f9:6f:7c:4f: 20:68:b2:47:47:8d:4a:90:16:36:4c:3b:90:9c:3c: 96:ce:00:aa:79:6d:09:48:79:7c:e3:9b:3e:87:82: d2:91:b2:7b:f8:01:fb:6d:44:16:81:52:af:f8:65: 51:f4:50:21:bd:9e:da:06:f6:30:db:43:96:ef:b6: 55:91:e6:b2:94:52:93:55:03:61:0b:6c:9d:0b:35: 51:42:a1:fd:c6:47:74:09:a8:18:2b:ee:98:88:42: 04:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:12:A1:25:F0:4D:E8:DB:2A:05:91:B5:74:00:E5:98:AE:47:FD:0E X509v3 Authority Key Identifier: keyid:28:1F:5D:39:3C:91:23:11:D0:0F:69:CA:42:CC:6D:3F:D1:1D:7D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/281F5D393C912311D00F69CA42CC6D3FD11D7D52.crl Authority Information Access: CA Issuers - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/281F5D393C912311D00F69CA42CC6D3FD11D7D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/2/326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:ffe0::/48 Signature Algorithm: sha256WithRSAEncryption 2b:0d:88:f8:85:d7:72:2c:f6:ea:a8:de:88:8d:be:0a:26:07: 54:83:b1:a0:ac:9e:10:65:0d:a7:84:6e:74:8c:72:18:99:a7: 15:02:20:8d:04:c1:38:fa:40:17:cc:a1:b3:a0:8c:9b:35:93: 81:57:93:bd:d2:61:70:d3:55:6f:f7:68:ad:1f:81:f2:61:c3: 12:d2:82:46:b5:75:b9:ba:63:61:9e:dc:eb:79:fa:a0:76:e8: 94:6d:4a:b6:60:c8:02:f8:f0:a2:68:0f:3b:fe:36:d3:a9:b9: aa:b0:b1:e8:41:09:6e:58:81:cf:e9:c5:da:b5:73:07:5d:c8: 44:36:aa:dd:1f:33:ba:7f:8b:88:59:23:4f:7f:ef:3c:29:a4: 77:1c:99:ff:83:99:a3:2c:fa:8a:e6:3e:b2:73:ba:e4:64:a4: 4a:e3:d6:4d:5b:d0:dd:44:29:f1:88:16:cc:d9:ff:db:35:5f: cc:6c:f2:c6:52:f3:bc:48:3a:b6:6f:89:05:91:d2:c7:08:41: 3f:60:47:a0:88:20:b9:c0:d2:60:af:41:25:74:b3:2e:af:86: 48:08:b7:8b:16:eb:9c:eb:f3:8c:48:fc:b9:83:5e:4f:b7:eb: 2e:29:f0:7a:82:76:45:98:42:af:b7:73:45:ae:cd:fb:70:c5: 39:22:31:8b -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUJjSSE/WZF6Qypaoi1VsLSKTTO4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZE MTFEN0Q1MjAeFw0yNjAzMDExMTI4NDNaFw0yNzAyMjgxMTMzNDNaMDMxMTAvBgNV BAMTKDAzMTJBMTI1RjA0REU4REIyQTA1OTFCNTc0MDBFNTk4QUU0N0ZEMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPS7mrL8k+31JhjwEW61ssAl90 Wh3hvOb/FX0zoMdceK670yvadsUS9LEhepRlx/L9j6lxnF/nnwrK/2QrcJS7W466 wlIhZjp17nPzj6v5xmF9OOAdCS/Y6H2eDNPbNoxJ2uiAPMyaLMstKiJRVjJL9fbk 2Pc+Q9EZKttceCU+Tx1HnQg76tgZ5845+j/Tb46vwshZGKk6xVv9+7dLUhw1+W98 TyBoskdHjUqQFjZMO5CcPJbOAKp5bQlIeXzjmz6HgtKRsnv4AfttRBaBUq/4ZVH0 UCG9ntoG9jDbQ5bvtlWR5rKUUpNVA2ELbJ0LNVFCof3GR3QJqBgr7piIQgSJAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUAxKhJfBN6NsqBZG1dADlmK5H/Q4wHwYDVR0j BBgwFoAUKB9dOTyRIxHQD2nKQsxtP9EdfVIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzIv MjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNBNDJDQzZEM0ZEMTFEN0Q1Mi5jcmwwdgYI KwYBBQUHAQEEajBoMGYGCCsGAQUFBzAChlpyc3luYzovL3JyZHAuYXMyMTQ3NDku bmV0L3JlcG8vYXMyMTQ3NDktcGF3LzEvMjgxRjVEMzkzQzkxMjMxMUQwMEY2OUNB NDJDQzZEM0ZEMTFEN0Q1Mi5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEF BQcwC4aBk3JzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBvL3Jwa2lf Y2FfZjExNGMxZWE3Nzg4NDUyY2JmMzhiZTg1NGVhODM1OWQvMi8zMjYxMzEzMTNh NjYzMjYzMzAzYTY2NjY2NTMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTM0 MzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH AQH/BBMwETAPBAIAAjAJAwcAKhHywP/gMA0GCSqGSIb3DQEBCwUAA4IBAQArDYj4 hddyLPbqqN6Ijb4KJgdUg7GgrJ4QZQ2nhG50jHIYmacVAiCNBME4+kAXzKGzoIyb NZOBV5O90mFw01Vv92itH4HyYcMS0oJGtXW5umNhntzrefqgduiUbUq2YMgC+PCi aA87/jbTqbmqsLHoQQluWIHP6cXatXMHXchENqrdHzO6f4uIWSNPf+88KaR3HJn/ g5mjLPqK5j6yc7rkZKRK49ZNW9DdRCnxiBbM2f/bNV/MbPLGUvO8SDq2b4kFkdLH CEE/YEegiCC5wNJgr0EldLMur4ZICLeLFuuc6/OMSPy5g15Pt+suKfB6gnZFmEKv t3NFrs37cMU5IjGL -----END CERTIFICATE-----Generated at Sat Mar 14 09:15:14 2026 by rpki-client