This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/326131343a623430303a34393a3a2f34382d3438203d3e20323133323739.roa File: 326131343a623430303a34393a3a2f34382d3438203d3e20323133323739.roa (raw, json) Hash identifier: riIdsxtRctFPDHrFJWh54sUuVf2OxjI79zxryuANdmE= Subject key identifier: 7E:27:F6:D1:EE:EA:C5:4C:FD:08:FC:B6:39:4F:09:33:FA:8F:5A:52 Certificate issuer: /CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Certificate serial: 58F184624C060FB5C7641A487FB6578E060A0D36 Authority key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/326131343a623430303a34393a3a2f34382d3438203d3e20323133323739.roa Signing time: Wed 17 Dec 2025 16:09:28 +0000 ROA not before: Wed 17 Dec 2025 16:04:28 +0000 ROA not after: Wed 16 Dec 2026 16:09:28 +0000 asID: 213279 IP address blocks: 2a14:b400:49::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 21:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f1:84:62:4c:06:0f:b5:c7:64:1a:48:7f:b6:57:8e:06:0a:0d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Validity Not Before: Dec 17 16:04:28 2025 GMT Not After : Dec 16 16:09:28 2026 GMT Subject: CN=7E27F6D1EEEAC54CFD08FCB6394F0933FA8F5A52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ba:76:a6:32:ae:eb:54:cc:a2:4a:ad:41:a1: 34:fe:27:65:35:cd:5f:61:40:95:f7:1e:27:cb:9e: 9e:28:e4:69:27:5f:c4:31:91:d2:93:2d:d8:48:77: e5:76:39:8f:f9:44:8a:89:ad:55:9a:3b:19:2b:73: e7:83:77:0d:0d:81:96:ef:d5:28:88:38:19:8b:f8: ad:dd:e2:6f:56:1d:b2:6f:06:14:1b:ae:6f:43:9e: 45:88:08:bd:c7:cd:75:5c:2a:13:62:ab:bf:cb:8f: 9e:47:8b:cd:9d:06:73:43:6b:93:d0:f5:9f:1b:bf: 80:9c:f8:61:11:28:2b:13:ac:e5:c3:09:41:fd:df: 87:8a:ea:70:79:f4:c5:1c:2e:dc:f8:bd:12:50:87: 87:00:ac:e6:c3:55:98:f0:7d:03:f6:93:7a:f7:6d: 5f:71:e1:80:67:bb:33:f4:64:ab:98:ce:1e:45:57: 57:18:7c:90:c7:5c:47:8c:9a:62:b4:46:3d:dc:f4: fd:f0:68:eb:95:d4:a4:9c:13:90:d5:59:c9:e6:15: e3:e3:fa:2c:49:56:0f:01:45:ad:81:8e:4b:1a:9f: da:c0:17:b0:f0:5c:94:c1:a8:1c:66:fa:75:d4:c4: 44:b2:73:3a:d9:68:70:2d:c5:5c:01:59:c0:ba:3f: f2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:27:F6:D1:EE:EA:C5:4C:FD:08:FC:B6:39:4F:09:33:FA:8F:5A:52 X509v3 Authority Key Identifier: keyid:2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/326131343a623430303a34393a3a2f34382d3438203d3e20323133323739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:b400:49::/48 Signature Algorithm: sha256WithRSAEncryption a1:80:7c:ff:68:34:0b:f7:54:95:1f:8b:62:4b:24:03:6e:08: e0:cd:58:97:22:d3:8a:2c:7e:b4:cd:55:70:3c:54:d1:cc:6f: ba:f1:63:1d:e4:ab:af:c8:e5:23:05:23:f4:5a:5f:d2:e0:25: fe:b4:d7:c5:6c:e8:a5:17:3e:1c:83:1e:22:bf:5f:9a:aa:31: fb:e5:ef:1c:0b:87:43:31:f8:e9:b2:82:dd:a3:f0:74:2c:85: f4:29:5c:31:4d:88:ad:eb:96:79:62:86:aa:cb:17:8a:ae:2b: 5a:b5:92:4a:13:d8:61:81:bd:20:23:66:bd:ef:b1:6b:28:bd: d0:4b:93:08:4e:80:f5:1e:5b:09:1f:17:a4:5e:44:1a:40:97: c0:92:33:b7:b4:77:97:69:95:37:06:92:b9:75:82:c7:5e:1e: e6:7a:36:d4:92:70:65:f5:8a:88:6c:e4:7a:be:07:c9:75:7d: 3e:ee:bd:90:db:e7:23:21:ef:6f:d6:00:b5:2d:95:0a:eb:6c: a6:9a:fa:af:f7:0d:9f:ac:f9:3a:0e:6f:c5:b9:39:d7:39:24: 9f:9b:1d:3f:f8:e2:20:cc:92:77:0d:f5:2a:d8:9e:ab:0e:5d: 02:bc:a3:14:d4:76:55:2c:eb:df:d0:e9:55:a8:ee:9b:b4:53: ab:bc:b4:53 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUWPGEYkwGD7XHZBpIf7ZXjgYKDTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmMxMmYwYTA4MGYwMjFmMmJhMjViYzBjNmVhN2UwNmI2 N2FhZDA1ZTAeFw0yNTEyMTcxNjA0MjhaFw0yNjEyMTYxNjA5MjhaMDMxMTAvBgNV BAMTKDdFMjdGNkQxRUVFQUM1NENGRDA4RkNCNjM5NEYwOTMzRkE4RjVBNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeunamMq7rVMyiSq1BoTT+J2U1 zV9hQJX3HifLnp4o5GknX8QxkdKTLdhId+V2OY/5RIqJrVWaOxkrc+eDdw0NgZbv 1SiIOBmL+K3d4m9WHbJvBhQbrm9DnkWICL3HzXVcKhNiq7/Lj55Hi82dBnNDa5PQ 9Z8bv4Cc+GERKCsTrOXDCUH934eK6nB59MUcLtz4vRJQh4cArObDVZjwfQP2k3r3 bV9x4YBnuzP0ZKuYzh5FV1cYfJDHXEeMmmK0Rj3c9P3waOuV1KScE5DVWcnmFePj +ixJVg8BRa2Bjksan9rAF7DwXJTBqBxm+nXUxESyczrZaHAtxVwBWcC6P/JdAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUfif20e7qxUz9CPy2OU8JM/qPWlIwHwYDVR0j BBgwFoAULBLwoIDwIfK6JbwMbqfga2eq0F4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODA3MDYxNWYtZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJi NjRlLzAvMkMxMkYwQTA4MEYwMjFGMkJBMjVCQzBDNkVBN0UwNkI2N0FBRDA1RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xCTHdvSUR3SWZLNkpid01icWZnYTJl cTBGNC5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODA3MDYxNWYt ZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJiNjRlLzAvMzI2MTMxMzQzYTYyMzQzMDMw M2EzNDM5M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTMzMzIzNzM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAKhS0AABJMA0GCSqGSIb3DQEBCwUAA4IBAQChgHz/aDQL91SVH4tiSyQD bgjgzViXItOKLH60zVVwPFTRzG+68WMd5KuvyOUjBSP0Wl/S4CX+tNfFbOilFz4c gx4iv1+aqjH75e8cC4dDMfjpsoLdo/B0LIX0KVwxTYit65Z5YoaqyxeKritatZJK E9hhgb0gI2a977FrKL3QS5MIToD1HlsJHxekXkQaQJfAkjO3tHeXaZU3BpK5dYLH Xh7mejbUknBl9YqIbOR6vgfJdX0+7r2Q2+cjIe9v1gC1LZUK62ymmvqv9w2frPk6 Dm/FuTnXOSSfmx0/+OIgzJJ3DfUq2J6rDl0CvKMU1HZVLOvf0OlVqO6btFOrvLRT -----END CERTIFICATE-----Generated at Sat Dec 20 05:09:26 2025 by rpki-client