This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/2/326131343a373538333a663430303a3a2f34342d3438203d3e20323130333532.roa File: 326131343a373538333a663430303a3a2f34342d3438203d3e20323130333532.roa (raw, json) Hash identifier: ekXEHAQEwANLbMF852Ghqg+UVdQoN4/n6Mi8g6Ght3A= Subject key identifier: 3F:95:29:7D:2E:2C:BF:95:FA:F5:77:64:C4:78:08:1E:7D:0F:83:1D Certificate issuer: /CN=6CBB5872C1432E2E2EB073D795852B3C3508301E Certificate serial: 2F7FEEB0E0434AD29C2EDB1EBFF42E30AE46859A Authority key identifier: 6C:BB:58:72:C1:43:2E:2E:2E:B0:73:D7:95:85:2B:3C:35:08:30:1E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/6CBB5872C1432E2E2EB073D795852B3C3508301E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/2/326131343a373538333a663430303a3a2f34342d3438203d3e20323130333532.roa Signing time: Sat 13 Dec 2025 14:52:56 +0000 ROA not before: Sat 13 Dec 2025 14:47:56 +0000 ROA not after: Sat 12 Dec 2026 14:52:56 +0000 asID: 210352 IP address blocks: 2a14:7583:f400::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/2/6CBB5872C1432E2E2EB073D795852B3C3508301E.crl rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/2/6CBB5872C1432E2E2EB073D795852B3C3508301E.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/6CBB5872C1432E2E2EB073D795852B3C3508301E.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:7f:ee:b0:e0:43:4a:d2:9c:2e:db:1e:bf:f4:2e:30:ae:46:85:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CBB5872C1432E2E2EB073D795852B3C3508301E Validity Not Before: Dec 13 14:47:56 2025 GMT Not After : Dec 12 14:52:56 2026 GMT Subject: CN=3F95297D2E2CBF95FAF57764C478081E7D0F831D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0c:ab:ad:33:c2:4c:4d:db:2e:9f:4e:6c:22: b3:68:5e:6a:31:9b:93:de:26:c2:6f:69:01:25:2f: 29:62:51:97:92:5d:37:1c:f8:ba:9f:06:d3:9b:d2: d9:a8:21:10:26:93:0a:8f:43:0a:07:03:bf:66:9c: 54:27:e4:d6:3c:fb:97:24:1f:e0:0c:cd:ec:31:70: d4:c0:ec:45:28:4a:46:16:97:31:e2:24:56:69:76: de:68:08:8a:21:f7:a9:00:68:cb:ff:45:dc:bd:f8: ae:49:d7:76:73:4e:e4:2f:d9:eb:e6:cb:a1:66:08: 4b:52:bb:9b:1a:a1:da:f3:5a:ed:8b:7d:7e:06:c8: 8e:3e:fb:c5:1a:41:a5:50:10:39:78:e8:e5:f4:99: 7d:be:f9:55:e4:b3:35:b4:b3:08:c0:5d:b5:18:fa: 4d:0b:42:94:81:de:26:33:d7:c1:9a:1e:a0:5c:f7: f1:47:2d:17:b1:50:a1:a3:b3:ae:12:a9:66:b7:8e: 21:cf:aa:bd:26:26:63:f6:3a:14:7c:3e:22:90:1d: 02:d7:b3:68:8e:8b:6f:b8:f3:7f:de:75:d0:9d:09: 3d:26:79:c3:bb:e8:09:eb:fc:1f:7d:dd:10:af:76: 78:7c:82:fc:36:85:36:d6:09:92:9e:9a:96:9b:7a: d8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:95:29:7D:2E:2C:BF:95:FA:F5:77:64:C4:78:08:1E:7D:0F:83:1D X509v3 Authority Key Identifier: keyid:6C:BB:58:72:C1:43:2E:2E:2E:B0:73:D7:95:85:2B:3C:35:08:30:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/2/6CBB5872C1432E2E2EB073D795852B3C3508301E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/6CBB5872C1432E2E2EB073D795852B3C3508301E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/2/326131343a373538333a663430303a3a2f34342d3438203d3e20323130333532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f400::/44 Signature Algorithm: sha256WithRSAEncryption 6e:30:95:86:0a:2e:59:5c:19:0c:b9:71:5e:35:1e:5a:c4:2d: 5d:60:bb:96:3f:f0:af:7a:c7:d1:a8:0a:7d:d0:ff:41:49:2f: 46:d9:37:98:77:9a:d7:a8:66:6e:df:fe:b1:b4:50:50:65:a5: 35:15:49:83:e6:59:95:3d:98:7b:16:ee:af:c9:58:8a:fc:e7: 53:2d:7f:51:53:ec:3e:46:3b:2e:5a:8a:f9:47:1b:d3:96:17: 03:cf:e3:03:43:42:12:14:3f:fb:99:6c:b1:d0:6b:46:ed:1e: 85:da:50:a7:b8:fc:ba:51:81:df:f9:3b:e1:1e:7a:20:79:3f: 8d:d1:a8:db:e0:2e:e4:aa:68:bd:94:c8:51:4b:ef:22:a0:9f: 67:8d:45:54:74:43:ba:2d:3d:d1:ec:4a:2e:fd:f7:c3:41:35: d4:66:39:10:c6:5f:69:4a:34:ab:b0:df:29:39:bc:49:43:50: ad:40:18:e7:d5:38:66:78:e9:b7:95:88:e4:47:25:57:4b:65: 9d:62:0c:a6:ff:0e:1e:83:4b:bd:51:0d:7a:d4:cc:89:94:ec: ef:0f:96:3d:4b:bc:00:39:a6:cd:5e:f0:8b:9e:d9:19:f9:59: 65:67:9d:f4:c1:31:20:8f:29:dc:e8:8c:3f:3b:d6:41:51:43: be:09:3f:a1 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUL3/usOBDStKcLtsev/QuMK5GhZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNCQjU4NzJDMTQzMkUyRTJFQjA3M0Q3OTU4NTJCM0Mz NTA4MzAxRTAeFw0yNTEyMTMxNDQ3NTZaFw0yNjEyMTIxNDUyNTZaMDMxMTAvBgNV BAMTKDNGOTUyOTdEMkUyQ0JGOTVGQUY1Nzc2NEM0NzgwODFFN0QwRjgzMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUDKutM8JMTdsun05sIrNoXmox m5PeJsJvaQElLyliUZeSXTcc+LqfBtOb0tmoIRAmkwqPQwoHA79mnFQn5NY8+5ck H+AMzewxcNTA7EUoSkYWlzHiJFZpdt5oCIoh96kAaMv/Rdy9+K5J13ZzTuQv2evm y6FmCEtSu5saodrzWu2LfX4GyI4++8UaQaVQEDl46OX0mX2++VXkszW0swjAXbUY +k0LQpSB3iYz18GaHqBc9/FHLRexUKGjs64SqWa3jiHPqr0mJmP2OhR8PiKQHQLX s2iOi2+483/eddCdCT0mecO76Anr/B993RCvdnh8gvw2hTbWCZKempabetgFAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUP5UpfS4sv5X69XdkxHgIHn0Pgx0wHwYDVR0j BBgwFoAUbLtYcsFDLi4usHPXlYUrPDUIMB4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWIyMjc1OWMtZDA5Ny00ZmFhLTlkY2UtZGQ0NmMxZDMw ZWM4LzIvNkNCQjU4NzJDMTQzMkUyRTJFQjA3M0Q3OTU4NTJCM0MzNTA4MzAxRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi82Q0JCNTg3MkMxNDMyRTJFMkVCMDczRDc5 NTg1MkIzQzM1MDgzMDFFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xYjIyNzU5Yy1kMDk3LTRmYWEtOWRjZS1kZDQ2YzFkMzBlYzgvMi8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzQzMDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTMwMzMzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1g/QAMA0GCSqGSIb3DQEBCwUAA4IBAQBu MJWGCi5ZXBkMuXFeNR5axC1dYLuWP/CvesfRqAp90P9BSS9G2TeYd5rXqGZu3/6x tFBQZaU1FUmD5lmVPZh7Fu6vyViK/OdTLX9RU+w+RjsuWor5RxvTlhcDz+MDQ0IS FD/7mWyx0GtG7R6F2lCnuPy6UYHf+TvhHnogeT+N0ajb4C7kqmi9lMhRS+8ioJ9n jUVUdEO6LT3R7Eou/ffDQTXUZjkQxl9pSjSrsN8pObxJQ1CtQBjn1ThmeOm3lYjk RyVXS2WdYgym/w4eg0u9UQ161MyJlOzvD5Y9S7wAOabNXvCLntkZ+VllZ530wTEg jync6Iw/O9ZBUUO+CT+h -----END CERTIFICATE-----Generated at Fri Dec 19 18:43:49 2025 by rpki-client