This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa File: 326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa (raw, json) Hash identifier: MXahPf9Lj2zVOENVBE4q+FEfvHiUAMJ2dGoOScL1QgA= Subject key identifier: 96:3B:70:F9:4F:54:A5:2F:99:6E:11:49:B8:66:F9:BD:91:76:65:20 Certificate issuer: /CN=AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED Certificate serial: 3487777B09A9E427A69DD2C2780AA03B24BA976A Authority key identifier: AE:EA:EE:FF:1C:1C:26:B1:A0:08:C2:2C:84:3A:B4:5D:CA:D1:57:ED Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa Signing time: Wed 24 Dec 2025 02:33:27 +0000 ROA not before: Wed 24 Dec 2025 02:28:27 +0000 ROA not after: Wed 23 Dec 2026 02:33:27 +0000 asID: 216299 IP address blocks: 2a0f:1cc5:1010::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.crl rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:87:77:7b:09:a9:e4:27:a6:9d:d2:c2:78:0a:a0:3b:24:ba:97:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED Validity Not Before: Dec 24 02:28:27 2025 GMT Not After : Dec 23 02:33:27 2026 GMT Subject: CN=963B70F94F54A52F996E1149B866F9BD91766520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:17:88:22:a3:8a:e5:df:9d:3b:00:ae:e5:ef: 27:3d:d5:e6:74:4f:49:0d:05:a0:46:db:7a:50:3f: 83:06:04:a5:2e:de:5f:85:9b:10:d7:b1:cf:de:57: 11:cf:f1:8a:03:84:66:33:7b:18:23:b3:5f:b3:ae: f4:de:27:12:19:39:5c:b3:d4:32:64:b1:ea:42:46: 09:6d:37:a5:47:fb:82:f4:c8:68:03:b2:60:5f:6f: e8:bc:3c:4b:1c:4f:4f:c9:83:13:99:5e:1e:bd:dd: e5:c6:2b:84:76:c6:b9:5f:c1:cd:8f:4d:56:dc:e1: f9:5c:56:26:79:92:a6:ed:65:d9:4e:29:04:e6:a6: f1:3a:b5:f1:0c:1d:b0:43:e6:a3:c8:ad:d5:5e:d9: 7e:90:80:cb:b1:1a:d5:d9:51:62:1a:3b:18:a7:7a: 32:fa:c8:90:ba:8c:47:6e:0b:6f:f5:83:4e:04:d9: 3d:9d:d7:3b:f3:56:aa:ad:7a:52:c5:60:ae:94:a4: f6:77:36:57:bf:58:76:8e:67:09:f6:95:0d:8e:f3: f7:96:e2:0a:e1:f6:52:05:4b:ae:68:0c:0f:59:f5: d4:a4:62:5f:f9:69:f1:a4:80:16:a6:a5:c2:0d:96: c6:11:6c:37:bf:b7:d3:ca:24:54:b7:ff:fe:f5:d3: 30:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3B:70:F9:4F:54:A5:2F:99:6E:11:49:B8:66:F9:BD:91:76:65:20 X509v3 Authority Key Identifier: keyid:AE:EA:EE:FF:1C:1C:26:B1:A0:08:C2:2C:84:3A:B4:5D:CA:D1:57:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1010::/44 Signature Algorithm: sha256WithRSAEncryption 2d:d4:11:1d:2a:dd:c9:e2:20:1e:36:a9:5a:3c:7c:c2:43:f6: 00:d4:d9:98:8e:68:26:c2:3e:86:72:59:87:1d:26:09:46:44: 36:a1:ea:25:bb:48:4d:31:1d:90:af:aa:76:14:8c:d4:a9:d3: 1c:fd:7a:b4:07:65:bc:21:90:bd:e0:47:63:4a:64:95:06:94: b6:19:cb:ad:73:88:a3:52:77:07:62:10:28:91:7f:39:be:ba: 23:10:24:7e:a5:a8:76:3a:38:cf:2c:43:e8:59:d0:8f:d3:36: e9:17:ce:ab:a8:f5:0a:ec:39:02:19:33:41:87:2d:4b:05:b7: d9:f9:56:33:f3:2f:aa:f1:cc:0d:3e:4e:ae:ec:41:05:34:d9: 39:6b:d4:fc:19:60:f4:15:e3:a7:c7:19:f4:fe:8a:ce:0e:7d: 5c:86:67:20:15:d2:c4:18:6e:91:b5:b7:b7:4b:95:e8:0b:0c: ff:c0:18:54:fe:92:75:c9:63:55:9e:83:99:b8:b1:0c:ad:fb: 05:6b:9c:40:68:b5:e1:12:f0:49:67:7d:f7:bd:72:46:54:63: 4a:be:a5:4e:e0:b9:fd:67:96:71:6d:79:fa:53:6e:20:9c:ee: 69:46:50:b2:33:1c:bb:af:99:62:c8:62:87:9b:34:e7:b3:e7: d5:67:cc:58 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUNId3ewmp5CemndLCeAqgOyS6l2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVFQUVFRkYxQzFDMjZCMUEwMDhDMjJDODQzQUI0NURD QUQxNTdFRDAeFw0yNTEyMjQwMjI4MjdaFw0yNjEyMjMwMjMzMjdaMDMxMTAvBgNV BAMTKDk2M0I3MEY5NEY1NEE1MkY5OTZFMTE0OUI4NjZGOUJEOTE3NjY1MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGF4gio4rl3507AK7l7yc91eZ0 T0kNBaBG23pQP4MGBKUu3l+FmxDXsc/eVxHP8YoDhGYzexgjs1+zrvTeJxIZOVyz 1DJksepCRgltN6VH+4L0yGgDsmBfb+i8PEscT0/JgxOZXh693eXGK4R2xrlfwc2P TVbc4flcViZ5kqbtZdlOKQTmpvE6tfEMHbBD5qPIrdVe2X6QgMuxGtXZUWIaOxin ejL6yJC6jEduC2/1g04E2T2d1zvzVqqtelLFYK6UpPZ3Nle/WHaOZwn2lQ2O8/eW 4grh9lIFS65oDA9Z9dSkYl/5afGkgBampcINlsYRbDe/t9PKJFS3//710zBpAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUljtw+U9UpS+ZbhFJuGb5vZF2ZSAwHwYDVR0j BBgwFoAUruru/xwcJrGgCMIshDq0XcrRV+0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzIvQUVFQUVFRkYxQzFDMjZCMUEwMDhDMjJDODQzQUI0NURDQUQxNTdFRC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC9BRUVBRUVGRjFDMUMyNkIxQTAwOEMyMkM4 NDNBQjQ1RENBRDE1N0VELmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81MmI4NDE1Ni05NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMi8zMjYxMzA2 NjNhMzE2MzYzMzUzYTMxMzAzMTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM2MzIzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKg8cxRAQMA0GCSqGSIb3DQEBCwUAA4IBAQAt 1BEdKt3J4iAeNqlaPHzCQ/YA1NmYjmgmwj6GclmHHSYJRkQ2oeolu0hNMR2Qr6p2 FIzUqdMc/Xq0B2W8IZC94EdjSmSVBpS2Gcutc4ijUncHYhAokX85vrojECR+pah2 OjjPLEPoWdCP0zbpF86rqPUK7DkCGTNBhy1LBbfZ+VYz8y+q8cwNPk6u7EEFNNk5 a9T8GWD0FeOnxxn0/orODn1chmcgFdLEGG6Rtbe3S5XoCwz/wBhU/pJ1yWNVnoOZ uLEMrfsFa5xAaLXhEvBJZ333vXJGVGNKvqVO4Ln9Z5ZxbXn6U24gnO5pRlCyMxy7 r5liyGKHmzTns+fVZ8xY -----END CERTIFICATE-----Generated at Wed Dec 24 12:31:23 2025 by rpki-client