This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33343a3a2f34382d3438203d3e20323032393831.roa File: 326131313a323963303a33343a3a2f34382d3438203d3e20323032393831.roa (raw, json) Hash identifier: 3fiePvs9122hqaBqAYt2KUMcPeIARTmTmSGtILKLXFw= Subject key identifier: CF:5D:CF:46:94:44:0F:6B:10:3D:B6:5B:39:AE:FF:A4:F8:6F:9E:CF Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873 Certificate serial: 217D6584133B34E8C9EA75FC05D7A299C7F3ACF4 Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33343a3a2f34382d3438203d3e20323032393831.roa Signing time: Thu 11 Dec 2025 18:37:03 +0000 ROA not before: Thu 11 Dec 2025 18:32:03 +0000 ROA not after: Thu 10 Dec 2026 18:37:03 +0000 asID: 202981 IP address blocks: 2a11:29c0:34::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:7d:65:84:13:3b:34:e8:c9:ea:75:fc:05:d7:a2:99:c7:f3:ac:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873 Validity Not Before: Dec 11 18:32:03 2025 GMT Not After : Dec 10 18:37:03 2026 GMT Subject: CN=CF5DCF4694440F6B103DB65B39AEFFA4F86F9ECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9d:04:14:07:1b:75:75:89:73:42:48:0d:1e: 5f:c1:de:5d:23:cd:57:0b:d9:de:32:2d:8d:9a:6d: 46:fe:87:f8:d8:96:6b:f7:96:e0:ea:a2:a7:fc:03: db:35:d3:19:5b:18:30:93:f3:04:93:c5:9f:33:d3: 79:fb:fd:3e:cd:87:f4:de:6a:4b:9a:be:5a:b7:30: cb:ef:e5:c8:06:fc:e1:42:44:37:9c:6f:64:57:e0: f3:d5:ba:93:d6:e9:27:bb:ef:45:93:20:69:78:ad: ef:8b:23:17:42:4d:e7:26:6f:a4:37:0c:c2:bd:3f: a6:ac:df:45:2f:3d:4a:38:bd:ff:2c:a8:d2:89:81: 45:f8:7d:b6:ec:de:d7:48:d1:95:97:06:11:c6:68: ac:a7:e8:0a:a9:cd:39:bf:3d:95:a9:d0:a7:30:8f: 59:03:98:83:5b:de:8f:e2:3d:93:29:9d:47:de:4f: a7:6e:d5:28:05:c1:12:2d:d6:0f:a8:ab:86:df:88: f9:3b:d0:01:72:a9:12:c6:f5:64:7c:93:17:d1:e1: b8:c2:97:b5:59:d5:d8:85:c2:e0:dd:d2:26:d9:c0: 3a:6f:66:a4:80:86:60:23:05:3c:f6:99:cc:18:54: d0:7b:13:b5:48:d6:f1:f1:54:5c:98:52:45:b4:e6: a8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5D:CF:46:94:44:0F:6B:10:3D:B6:5B:39:AE:FF:A4:F8:6F:9E:CF X509v3 Authority Key Identifier: keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33343a3a2f34382d3438203d3e20323032393831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:29c0:34::/48 Signature Algorithm: sha256WithRSAEncryption 2f:ee:ef:13:56:4f:93:29:d8:fe:25:b0:3e:5d:87:28:08:f7: 28:67:f2:89:ff:89:ea:fe:48:0f:50:ea:a7:d1:ec:48:e3:5c: 04:de:41:ab:71:bd:2a:f6:98:a9:3d:3c:4e:39:de:b4:99:57: 57:65:2b:90:42:75:6c:68:88:54:99:e0:4e:35:53:a2:e8:9f: 6a:6c:15:b9:19:a8:93:a7:91:16:79:cb:0e:45:35:17:19:eb: b1:b3:32:97:a6:62:89:04:7a:a6:eb:5f:12:f9:76:a7:41:71: 9d:a1:a0:10:d1:7f:e3:aa:a6:5f:8e:ee:a1:b9:6c:f9:27:56: b2:5b:21:a8:a5:5a:f6:83:e5:d5:f6:3a:38:c8:25:61:74:5d: 08:4f:5e:5e:84:39:37:ad:b9:c8:87:b1:95:42:e5:fc:5c:b7: b0:ff:75:ca:e2:1a:a9:a8:fc:2b:67:65:bf:55:09:49:d2:85: 0f:98:38:b9:f9:07:a4:4e:6a:a0:c3:15:41:c5:8e:0c:e9:6b: 48:45:8e:59:aa:02:3c:7c:68:bf:fd:10:02:e8:02:c1:c2:25: 88:a8:ab:18:18:7d:b6:9d:6c:54:f9:0f:3d:7b:c2:30:dc:f0: e5:fc:30:3d:46:d3:37:82:40:46:11:a8:3c:db:be:37:be:40: 05:82:9c:55 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUIX1lhBM7NOjJ6nX8BdeimcfzrPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm MTA4Mjg3MzAeFw0yNTEyMTExODMyMDNaFw0yNjEyMTAxODM3MDNaMDMxMTAvBgNV BAMTKENGNURDRjQ2OTQ0NDBGNkIxMDNEQjY1QjM5QUVGRkE0Rjg2RjlFQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCunQQUBxt1dYlzQkgNHl/B3l0j zVcL2d4yLY2abUb+h/jYlmv3luDqoqf8A9s10xlbGDCT8wSTxZ8z03n7/T7Nh/Te akuavlq3MMvv5cgG/OFCRDecb2RX4PPVupPW6Se770WTIGl4re+LIxdCTecmb6Q3 DMK9P6as30UvPUo4vf8sqNKJgUX4fbbs3tdI0ZWXBhHGaKyn6AqpzTm/PZWp0Kcw j1kDmINb3o/iPZMpnUfeT6du1SgFwRIt1g+oq4bfiPk70AFyqRLG9WR8kxfR4bjC l7VZ1diFwuDd0ibZwDpvZqSAhmAjBTz2mcwYVNB7E7VI1vHxVFyYUkW05qihAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUz13PRpRED2sQPbZbOa7/pPhvns8wHwYDVR0j BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF SUtITS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw M2EzMzM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDMyMzkzODMxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAKhEpwAA0MA0GCSqGSIb3DQEBCwUAA4IBAQAv7u8TVk+TKdj+JbA+XYco CPcoZ/KJ/4nq/kgPUOqn0exI41wE3kGrcb0q9pipPTxOOd60mVdXZSuQQnVsaIhU meBONVOi6J9qbBW5GaiTp5EWecsORTUXGeuxszKXpmKJBHqm618S+XanQXGdoaAQ 0X/jqqZfju6huWz5J1ayWyGopVr2g+XV9jo4yCVhdF0IT15ehDk3rbnIh7GVQuX8 XLew/3XK4hqpqPwrZ2W/VQlJ0oUPmDi5+QekTmqgwxVBxY4M6WtIRY5ZqgI8fGi/ /RAC6ALBwiWIqKsYGH22nWxU+Q89e8Iw3PDl/DA9RtM3gkBGEag82743vkAFgpxV -----END CERTIFICATE-----Generated at Tue Dec 16 14:15:49 2025 by rpki-client