This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/326130663a316363353a313730303a3a2f34302d3438203d3e20323032393339.roa File: 326130663a316363353a313730303a3a2f34302d3438203d3e20323032393339.roa (raw, json) Hash identifier: UEeOHO3GGvYWxfR4E2Tbh4+FLPM0KvboVmPBm/zMcrM= Subject key identifier: 69:92:F8:29:85:D2:96:A9:98:28:4F:B6:76:16:2B:C6:F7:E4:7F:E8 Certificate issuer: /CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Certificate serial: 2D3B58CA5BE96A75FAEE75392089AC34D0D03A37 Authority key identifier: 8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/326130663a316363353a313730303a3a2f34302d3438203d3e20323032393339.roa Signing time: Fri 12 Dec 2025 11:08:25 +0000 ROA not before: Fri 12 Dec 2025 11:03:25 +0000 ROA not after: Fri 11 Dec 2026 11:08:25 +0000 asID: 202939 IP address blocks: 2a0f:1cc5:1700::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 19:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:3b:58:ca:5b:e9:6a:75:fa:ee:75:39:20:89:ac:34:d0:d0:3a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Validity Not Before: Dec 12 11:03:25 2025 GMT Not After : Dec 11 11:08:25 2026 GMT Subject: CN=6992F82985D296A998284FB676162BC6F7E47FE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:03:95:c3:71:f4:86:3f:94:16:cb:eb:60:12: 53:16:41:9b:2e:f9:81:ef:8c:86:55:b7:b0:45:31: 08:b3:67:2d:f1:b6:2b:7e:76:90:a1:02:9f:b2:a1: 5f:f9:74:f4:74:1b:e4:f2:15:4d:a0:ce:77:01:49: cd:95:a4:36:53:e7:e5:73:cb:09:2b:13:90:f9:d1: f4:19:63:cf:7c:05:05:90:2d:13:26:f0:0b:58:08: b5:1e:f2:42:89:0a:61:87:ae:39:e9:40:1d:58:14: f7:66:27:82:a6:35:8a:d1:b1:55:a0:d7:42:3d:db: 95:b6:0e:e5:7f:95:21:17:6a:2a:af:b3:c7:ea:a9: 27:e5:ce:fd:fd:13:f8:f3:45:ef:db:07:6c:77:1c: fc:ae:51:ca:1d:f0:d9:cc:74:45:c9:c6:97:0a:d8: b9:98:6a:ed:16:da:9e:21:28:9f:1e:9b:5a:98:f5: 05:77:86:95:ec:13:ac:7f:cc:d8:97:2a:91:aa:8b: bd:6b:d1:15:cb:09:b2:e4:3d:e6:78:db:5d:f9:71: 7f:46:58:ed:41:f8:18:f7:74:35:a1:41:f2:e0:64: 0a:50:2a:24:ad:f7:fd:2c:ad:9f:e7:38:d8:41:a4: df:51:4b:a3:00:a2:b8:1f:ec:06:54:81:cf:5d:50: 2b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:92:F8:29:85:D2:96:A9:98:28:4F:B6:76:16:2B:C6:F7:E4:7F:E8 X509v3 Authority Key Identifier: keyid:8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/326130663a316363353a313730303a3a2f34302d3438203d3e20323032393339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1700::/40 Signature Algorithm: sha256WithRSAEncryption 54:ad:01:a8:17:97:7a:cc:01:80:e5:0a:b5:08:e2:dd:9d:bf: 3c:85:91:c0:c4:bd:3c:0b:a4:4f:a4:e0:5e:70:d7:85:32:99: 39:94:ee:08:3b:7b:6f:d8:81:93:6b:42:e3:6b:78:5a:3b:6e: 05:a4:00:b4:e3:44:bc:91:89:9f:97:55:9f:f9:b2:5b:92:bf: fc:c6:a9:f7:00:73:f4:e0:03:16:e2:3d:dc:ec:22:69:9a:39: 9e:1d:1c:ac:83:bb:88:cf:af:89:2c:90:01:12:f6:45:9c:6e: 6d:03:fa:52:5b:34:59:73:8d:41:95:5f:c7:54:68:75:3b:1c: fb:0c:e9:f6:27:1c:06:89:b3:98:45:6e:a5:00:0e:6c:9a:5d: 87:82:f7:a3:cb:cb:57:f2:25:7f:b0:d2:65:7f:e1:5f:11:4c: 3a:1a:37:bc:7f:86:d5:03:bc:c0:af:d4:be:2a:7d:84:70:0b: 99:3c:5e:04:f5:24:32:4b:1d:06:85:ad:52:39:0f:38:bf:c2: 69:a6:d4:10:10:4e:30:2b:82:68:4c:de:32:84:a3:0c:62:ea: 1a:64:20:5b:e0:60:e8:cd:43:2c:aa:cc:41:58:db:be:e1:3f: 06:15:e0:9f:fe:51:eb:3f:6c:13:fa:6c:9c:78:24:45:f5:4d: 25:d9:16:6a -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIULTtYylvpanX67nU5IImsNNDQOjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFC RjNBQTI4RTAeFw0yNTEyMTIxMTAzMjVaFw0yNjEyMTExMTA4MjVaMDMxMTAvBgNV BAMTKDY5OTJGODI5ODVEMjk2QTk5ODI4NEZCNjc2MTYyQkM2RjdFNDdGRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDA5XDcfSGP5QWy+tgElMWQZsu +YHvjIZVt7BFMQizZy3xtit+dpChAp+yoV/5dPR0G+TyFU2gzncBSc2VpDZT5+Vz ywkrE5D50fQZY898BQWQLRMm8AtYCLUe8kKJCmGHrjnpQB1YFPdmJ4KmNYrRsVWg 10I925W2DuV/lSEXaiqvs8fqqSflzv39E/jzRe/bB2x3HPyuUcod8NnMdEXJxpcK 2LmYau0W2p4hKJ8em1qY9QV3hpXsE6x/zNiXKpGqi71r0RXLCbLkPeZ42135cX9G WO1B+Bj3dDWhQfLgZApQKiSt9/0srZ/nONhBpN9RS6MAorgf7AZUgc9dUCsbAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUaZL4KYXSlqmYKE+2dhYrxvfkf+gwHwYDVR0j BBgwFoAUi85+cqu7rQBTY5OghAu6Cr86oo4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5 YTA0LzEvOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFCRjNBQTI4RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC84QkNFN0U3MkFCQkJBRDAwNTM2MzkzQTA4 NDBCQkEwQUJGM0FBMjhFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zMDhmOGIzZS0wNTFlLTRjNDQtOWNiNS03YjgzMzFlZjlhMDQvMS8zMjYxMzA2 NjNhMzE2MzYzMzUzYTMxMzczMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MDMyMzkzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKg8cxRcwDQYJKoZIhvcNAQELBQADggEBAFSt AagXl3rMAYDlCrUI4t2dvzyFkcDEvTwLpE+k4F5w14UymTmU7gg7e2/YgZNrQuNr eFo7bgWkALTjRLyRiZ+XVZ/5sluSv/zGqfcAc/TgAxbiPdzsImmaOZ4dHKyDu4jP r4kskAES9kWcbm0D+lJbNFlzjUGVX8dUaHU7HPsM6fYnHAaJs5hFbqUADmyaXYeC 96PLy1fyJX+w0mV/4V8RTDoaN7x/htUDvMCv1L4qfYRwC5k8XgT1JDJLHQaFrVI5 Dzi/wmmm1BAQTjArgmhM3jKEowxi6hpkIFvgYOjNQyyqzEFY277hPwYV4J/+Ues/ bBP6bJx4JEX1TSXZFmo= -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:40 2025 by rpki-client