This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/1/326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa File: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (raw, json) Hash identifier: FgpfzWcse5IBa7QHvf8bpyGXilzaCiMGWtUP4nJenmo= Subject key identifier: F3:D6:45:ED:F6:B4:8C:9E:AD:10:9E:F5:4F:0B:AC:86:FA:1F:18:70 Certificate issuer: /CN=F968DCAEB06DC8F26E0E5B9735B0022903D73C76 Certificate serial: 6A566733F228AC2B41D8818AAE963905643954C8 Authority key identifier: F9:68:DC:AE:B0:6D:C8:F2:6E:0E:5B:97:35:B0:02:29:03:D7:3C:76 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/F968DCAEB06DC8F26E0E5B9735B0022903D73C76.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/1/326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa Signing time: Sat 13 Dec 2025 07:19:57 +0000 ROA not before: Sat 13 Dec 2025 07:14:57 +0000 ROA not after: Sat 12 Dec 2026 07:19:57 +0000 asID: 210352 IP address blocks: 2a0f:1cc5:f00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/1/F968DCAEB06DC8F26E0E5B9735B0022903D73C76.crl rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/1/F968DCAEB06DC8F26E0E5B9735B0022903D73C76.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/F968DCAEB06DC8F26E0E5B9735B0022903D73C76.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:56:67:33:f2:28:ac:2b:41:d8:81:8a:ae:96:39:05:64:39:54:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F968DCAEB06DC8F26E0E5B9735B0022903D73C76 Validity Not Before: Dec 13 07:14:57 2025 GMT Not After : Dec 12 07:19:57 2026 GMT Subject: CN=F3D645EDF6B48C9EAD109EF54F0BAC86FA1F1870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cc:05:14:79:8d:16:33:12:fa:50:2c:45:e3: 64:80:1a:70:92:bc:6b:c7:eb:6a:57:53:73:68:02: ff:cd:eb:75:4f:cb:00:9f:63:bc:b3:25:c8:2f:8c: 28:50:eb:64:6e:4a:52:5a:90:0f:97:40:ed:fd:16: 63:65:85:b2:dc:82:26:29:63:74:a4:4d:ec:aa:00: 73:62:5c:ab:bd:a8:f0:14:37:08:fc:2c:f3:6a:57: b7:c2:9d:4a:f8:1f:06:d3:38:27:65:80:3d:9d:90: f2:06:4a:1e:2a:db:df:73:df:53:91:9e:be:3a:01: 63:a7:08:8c:c6:57:46:a4:2f:62:74:6e:34:55:5f: f5:e3:52:c4:4b:98:3b:d8:2d:a1:db:aa:6c:f5:0a: 91:22:fa:e1:2f:84:1a:68:43:e3:9c:1f:5a:fb:77: 54:fb:a4:96:0f:79:fe:1c:b7:e5:5f:b0:26:88:f8: 99:ae:91:aa:19:8f:30:7c:ac:e2:68:59:5f:10:09: 58:31:b3:bc:b7:7d:41:a8:93:a7:10:96:48:23:27: 07:83:a0:7a:4f:33:35:63:99:2a:19:c5:53:3c:ec: ba:b5:9f:a9:59:f0:aa:af:6b:1f:8b:35:c1:49:8c: 27:ce:db:36:8c:60:3f:12:b5:83:a2:d7:fb:84:56: 89:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D6:45:ED:F6:B4:8C:9E:AD:10:9E:F5:4F:0B:AC:86:FA:1F:18:70 X509v3 Authority Key Identifier: keyid:F9:68:DC:AE:B0:6D:C8:F2:6E:0E:5B:97:35:B0:02:29:03:D7:3C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/1/F968DCAEB06DC8F26E0E5B9735B0022903D73C76.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/F968DCAEB06DC8F26E0E5B9735B0022903D73C76.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/1/326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:f00::/40 Signature Algorithm: sha256WithRSAEncryption 53:57:d0:f2:8d:70:6b:51:35:8f:98:57:eb:e9:4d:81:94:36: b5:af:b0:50:77:40:c1:97:d8:6f:e5:95:ea:56:07:e7:65:79: 95:7d:ff:f0:23:89:1b:a6:4d:68:e3:1f:df:a5:4a:36:f3:10: 4c:bf:7a:6a:c3:b7:ad:0f:fa:ea:d4:f2:07:9f:02:2d:86:ce: 96:80:66:ae:b5:5d:48:0e:85:1d:1f:bc:89:8f:85:f2:35:34: f5:19:7e:95:0f:f0:f6:7a:52:07:f0:eb:e3:49:24:ec:8c:8d: d6:fe:ff:16:91:6c:30:76:9f:af:7b:d6:9f:ff:b4:6c:03:c4: 2d:7a:e5:b5:17:cf:17:d3:3e:f5:ce:9c:27:0e:bc:31:0e:7e: 9a:24:2a:9e:62:97:a3:b5:ce:9b:a9:e8:ee:bb:b4:99:1c:6a: eb:48:0c:eb:9f:56:d6:59:b5:5f:15:41:7c:5c:f2:25:31:e8: a3:fe:6e:d0:ad:7b:fe:47:c2:79:5a:be:6b:e7:0a:c3:30:c0: 34:58:8b:9b:98:33:5b:96:9b:44:f1:3a:1c:f0:48:08:a0:08: 37:0c:14:90:c2:2e:93:39:5c:45:70:95:f3:ed:fb:4c:47:f8: 6e:7f:44:fd:9c:df:92:63:aa:d5:d5:de:1d:b8:43:fe:e2:37: ad:75:75:aa -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUalZnM/IorCtB2IGKrpY5BWQ5VMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2OERDQUVCMDZEQzhGMjZFMEU1Qjk3MzVCMDAyMjkw M0Q3M0M3NjAeFw0yNTEyMTMwNzE0NTdaFw0yNjEyMTIwNzE5NTdaMDMxMTAvBgNV BAMTKEYzRDY0NUVERjZCNDhDOUVBRDEwOUVGNTRGMEJBQzg2RkExRjE4NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/zAUUeY0WMxL6UCxF42SAGnCS vGvH62pXU3NoAv/N63VPywCfY7yzJcgvjChQ62RuSlJakA+XQO39FmNlhbLcgiYp Y3SkTeyqAHNiXKu9qPAUNwj8LPNqV7fCnUr4HwbTOCdlgD2dkPIGSh4q299z31OR nr46AWOnCIzGV0akL2J0bjRVX/XjUsRLmDvYLaHbqmz1CpEi+uEvhBpoQ+OcH1r7 d1T7pJYPef4ct+VfsCaI+JmukaoZjzB8rOJoWV8QCVgxs7y3fUGok6cQlkgjJweD oHpPMzVjmSoZxVM87Lq1n6lZ8Kqvax+LNcFJjCfO2zaMYD8StYOi1/uEVomVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU89ZF7fa0jJ6tEJ71TwushvofGHAwHwYDVR0j BBgwFoAU+WjcrrBtyPJuDluXNbACKQPXPHYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWIyMjc1OWMtZDA5Ny00ZmFhLTlkY2UtZGQ0NmMxZDMw ZWM4LzEvRjk2OERDQUVCMDZEQzhGMjZFMEU1Qjk3MzVCMDAyMjkwM0Q3M0M3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC9GOTY4RENBRUIwNkRDOEYyNkUwRTVCOTcz NUIwMDIyOTAzRDczQzc2LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xYjIyNzU5Yy1kMDk3LTRmYWEtOWRjZS1kZDQ2YzFkMzBlYzgvMS8zMjYxMzA2 NjNhMzE2MzYzMzUzYTY2MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEz MDMzMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoPHMUPMA0GCSqGSIb3DQEBCwUAA4IBAQBTV9Dy jXBrUTWPmFfr6U2BlDa1r7BQd0DBl9hv5ZXqVgfnZXmVff/wI4kbpk1o4x/fpUo2 8xBMv3pqw7etD/rq1PIHnwIths6WgGautV1IDoUdH7yJj4XyNTT1GX6VD/D2elIH 8OvjSSTsjI3W/v8WkWwwdp+ve9af/7RsA8QteuW1F88X0z71zpwnDrwxDn6aJCqe Ypejtc6bqejuu7SZHGrrSAzrn1bWWbVfFUF8XPIlMeij/m7QrXv+R8J5Wr5r5wrD MMA0WIubmDNblptE8Toc8EgIoAg3DBSQwi6TOVxFcJXz7ftMR/huf0T9nN+SY6rV 1d4duEP+4jetdXWq -----END CERTIFICATE-----Generated at Fri Dec 19 18:52:09 2025 by rpki-client