This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa File: 326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa (raw, json) Hash identifier: pBdcJZvRMeh4xUlwHoVjZ2H6JoMj65McebqGPnPWn5I= Subject key identifier: FD:CD:7E:A8:78:49:44:9E:7F:A8:8A:4A:FF:98:C6:80:0A:B2:1A:06 Certificate issuer: /CN=AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED Certificate serial: 041F604532C5388B9D7741AB4E9C7821C0F9B59A Authority key identifier: AE:EA:EE:FF:1C:1C:26:B1:A0:08:C2:2C:84:3A:B4:5D:CA:D1:57:ED Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa Signing time: Wed 24 Dec 2025 02:29:40 +0000 ROA not before: Wed 24 Dec 2025 02:24:40 +0000 ROA not after: Wed 23 Dec 2026 02:29:40 +0000 asID: 201386 IP address blocks: 2a0f:1cc5:2f10::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.crl rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:1f:60:45:32:c5:38:8b:9d:77:41:ab:4e:9c:78:21:c0:f9:b5:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED Validity Not Before: Dec 24 02:24:40 2025 GMT Not After : Dec 23 02:29:40 2026 GMT Subject: CN=FDCD7EA87849449E7FA88A4AFF98C6800AB21A06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6e:aa:0a:28:6c:d4:7a:e4:1c:71:7a:63:d7: 65:53:dc:cf:5c:b7:85:5a:47:06:6b:89:b5:7b:20: 3e:a2:ea:33:8a:4f:62:52:df:35:5a:e9:fc:14:23: 12:fa:b7:f6:c2:dc:8f:fb:86:0f:73:f2:2d:74:7d: 57:5b:f9:17:ea:7e:ff:00:7a:c9:2e:70:ce:5d:9a: 11:bd:67:80:4c:40:8c:a3:bc:c3:29:91:fa:6f:00: 5f:bf:de:9e:9d:79:f9:2e:7c:ed:d3:db:42:99:c4: bb:60:6c:90:d5:5f:77:bc:ce:a6:e8:0a:ba:ee:ec: b9:35:19:66:53:43:e2:b4:a2:f8:bd:92:b6:9f:8a: 90:41:6f:5d:b1:8e:b0:a1:f8:67:34:5f:bb:3a:20: 2a:13:a8:39:5b:9a:79:d1:b1:5a:b6:34:f6:d5:70: a5:14:4d:29:d7:42:12:84:5e:3e:b4:46:87:a4:38: 11:32:2c:64:3b:31:ec:17:34:c3:8d:c2:f7:cc:c9: 54:84:e7:df:4c:25:9c:a4:7d:1b:3f:e4:f2:23:7f: 48:64:87:f6:df:1d:75:95:d1:f7:91:dc:79:eb:3a: e6:17:af:cd:e8:21:14:05:1f:0a:a8:d9:e3:52:27: ad:88:e2:74:7c:3b:0e:59:0f:23:6b:a5:eb:bc:fd: 06:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CD:7E:A8:78:49:44:9E:7F:A8:8A:4A:FF:98:C6:80:0A:B2:1A:06 X509v3 Authority Key Identifier: keyid:AE:EA:EE:FF:1C:1C:26:B1:A0:08:C2:2C:84:3A:B4:5D:CA:D1:57:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:2f10::/44 Signature Algorithm: sha256WithRSAEncryption 95:c9:45:37:bb:3a:8d:8f:1d:87:38:a5:7d:6c:84:01:ff:f6: e1:48:35:89:4d:b3:bb:a3:91:55:f3:8f:2b:af:9a:8a:fd:1a: a1:17:5b:5d:0c:c5:1c:01:58:63:78:82:30:8c:04:bc:9f:78: 2d:5b:9f:4e:52:e6:11:38:f4:46:44:01:4e:7c:b1:79:fa:02: 7c:6f:b2:d0:6e:ef:dc:c2:7f:9e:2d:06:36:60:e6:87:2e:be: 12:b1:60:79:13:39:ad:9a:3a:86:11:8f:24:af:fd:3b:ab:d4: 04:c0:97:74:29:48:a5:08:1d:52:b5:3a:a0:7f:bf:42:e6:ce: e2:d1:40:c4:7f:08:51:2d:8a:90:22:28:14:76:95:03:e8:a9: 46:83:e8:fa:92:d0:64:19:91:1a:99:8a:5b:3d:b5:f7:30:ea: f9:97:8d:28:48:61:11:38:55:e1:98:04:8f:eb:79:a5:f0:43: 7e:b3:ed:d9:07:e2:04:63:62:55:42:aa:3f:b7:5d:44:5e:a1: 17:47:31:86:96:04:f3:e3:be:f8:44:b0:8e:c1:d7:8f:75:7d: 90:2d:2b:5e:6e:c3:a4:40:4e:87:dc:ed:f9:fe:16:38:b5:bf: ec:84:cd:03:76:b9:ca:57:da:62:d0:3d:d3:4b:ae:a7:82:54: 5f:d4:e3:ce -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUBB9gRTLFOIudd0GrTpx4IcD5tZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVFQUVFRkYxQzFDMjZCMUEwMDhDMjJDODQzQUI0NURD QUQxNTdFRDAeFw0yNTEyMjQwMjI0NDBaFw0yNjEyMjMwMjI5NDBaMDMxMTAvBgNV BAMTKEZEQ0Q3RUE4Nzg0OTQ0OUU3RkE4OEE0QUZGOThDNjgwMEFCMjFBMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbqoKKGzUeuQccXpj12VT3M9c t4VaRwZribV7ID6i6jOKT2JS3zVa6fwUIxL6t/bC3I/7hg9z8i10fVdb+Rfqfv8A eskucM5dmhG9Z4BMQIyjvMMpkfpvAF+/3p6defkufO3T20KZxLtgbJDVX3e8zqbo Crru7Lk1GWZTQ+K0ovi9krafipBBb12xjrCh+Gc0X7s6ICoTqDlbmnnRsVq2NPbV cKUUTSnXQhKEXj60RoekOBEyLGQ7MewXNMONwvfMyVSE599MJZykfRs/5PIjf0hk h/bfHXWV0feR3HnrOuYXr83oIRQFHwqo2eNSJ62I4nR8Ow5ZDyNrpeu8/QYVAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU/c1+qHhJRJ5/qIpK/5jGgAqyGgYwHwYDVR0j BBgwFoAUruru/xwcJrGgCMIshDq0XcrRV+0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzIvQUVFQUVFRkYxQzFDMjZCMUEwMDhDMjJDODQzQUI0NURDQUQxNTdFRC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC9BRUVBRUVGRjFDMUMyNkIxQTAwOEMyMkM4 NDNBQjQ1RENBRDE1N0VELmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81MmI4NDE1Ni05NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMi8zMjYxMzA2 NjNhMzE2MzYzMzUzYTMyNjYzMTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MDMxMzMzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKg8cxS8QMA0GCSqGSIb3DQEBCwUAA4IBAQCV yUU3uzqNjx2HOKV9bIQB//bhSDWJTbO7o5FV848rr5qK/RqhF1tdDMUcAVhjeIIw jAS8n3gtW59OUuYROPRGRAFOfLF5+gJ8b7LQbu/cwn+eLQY2YOaHLr4SsWB5Ezmt mjqGEY8kr/07q9QEwJd0KUilCB1StTqgf79C5s7i0UDEfwhRLYqQIigUdpUD6KlG g+j6ktBkGZEamYpbPbX3MOr5l40oSGEROFXhmASP63ml8EN+s+3ZB+IEY2JVQqo/ t11EXqEXRzGGlgTz4774RLCOwdePdX2QLStebsOkQE6H3O35/hY4tb/shM0DdrnK V9pi0D3TS66nglRf1OPO -----END CERTIFICATE-----Generated at Wed Dec 24 09:15:06 2025 by rpki-client