This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa File: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (raw, json) Hash identifier: +461HFOd1+OqFF4HxgiLMZU5WmlfmbOlhpC36OHo5OY= Subject key identifier: B6:1D:C9:36:10:D9:D7:B6:35:10:2D:00:CD:71:89:82:64:76:16:A2 Certificate issuer: /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Certificate serial: 4664C7939465E72532B0CF87EC965DAB5B063CB3 Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa Signing time: Mon 22 Dec 2025 17:17:59 +0000 ROA not before: Mon 22 Dec 2025 17:12:59 +0000 ROA not after: Mon 21 Dec 2026 17:17:59 +0000 asID: 211431 IP address blocks: 2a05:dfc1:8000::/40 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 03:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:64:c7:93:94:65:e7:25:32:b0:cf:87:ec:96:5d:ab:5b:06:3c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Validity Not Before: Dec 22 17:12:59 2025 GMT Not After : Dec 21 17:17:59 2026 GMT Subject: CN=B61DC93610D9D7B635102D00CD718982647616A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:f4:4e:f0:f2:2f:96:fd:90:0c:dc:5a:70: 98:7b:b6:02:6a:70:41:e6:4e:75:21:92:29:42:6d: b0:12:62:0f:d4:d9:ec:5f:a6:51:cd:ea:9a:91:f3: 49:a4:8b:de:10:ec:51:cf:7b:a3:5c:68:ab:84:9e: 17:9d:2a:72:65:6d:4e:82:15:13:a2:30:bf:db:f5: 2b:c4:24:68:a6:e5:73:8c:89:22:f0:f6:d8:2c:bf: 68:23:98:50:7b:cb:cc:fe:37:db:ce:89:9c:b2:05: b5:0d:8c:49:e7:2b:23:b4:a4:2d:46:a8:25:ea:f1: c7:02:2c:2a:94:23:67:97:21:48:6d:c5:60:00:05: 92:db:2b:c4:42:75:4e:81:c3:a7:f0:3c:b3:8d:8a: 25:81:d8:11:29:2b:7b:a4:5b:ee:33:8e:1a:61:7b: 89:e9:45:c8:01:32:a5:ea:c4:fb:ec:8d:9a:44:7e: 2b:82:ab:50:f5:a3:78:da:72:5c:7f:a0:56:b0:8c: 94:0b:2d:69:17:16:e2:84:ef:99:82:df:6d:35:8f: 81:48:6d:d9:43:6e:54:c7:80:cd:2a:72:17:0d:d5: 8a:bb:59:ad:ad:ea:09:b5:54:5e:8f:58:5b:17:22: f4:c7:a4:e6:ef:17:0d:88:cc:1d:ba:2b:b5:91:9e: 38:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1D:C9:36:10:D9:D7:B6:35:10:2D:00:CD:71:89:82:64:76:16:A2 X509v3 Authority Key Identifier: keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8000::/40 Signature Algorithm: sha256WithRSAEncryption 09:1d:c2:d0:aa:af:af:66:6d:ef:dd:e6:ee:db:b1:15:36:d2: e0:2d:56:39:64:24:3a:66:b4:d1:ab:c3:20:de:6d:2a:df:87: b0:9d:25:51:ef:a0:97:ef:a9:4a:40:d2:c5:c3:4a:c0:43:0e: e0:1e:84:a7:34:60:bf:87:74:df:f6:28:ed:a3:f2:39:8d:55: 1d:bd:a5:c6:0a:96:96:bb:ba:fa:52:bc:bf:9c:be:b7:49:29: a5:fa:fb:e7:52:c8:b5:e8:ce:61:b7:39:c7:78:00:de:da:5f: a8:1c:c0:e6:de:18:3c:31:48:93:a4:93:12:27:5b:62:85:bd: 78:c6:f6:38:d5:c1:d3:4f:87:ac:a2:07:46:5f:8f:1b:8e:c4: 0d:0c:41:42:89:ca:38:17:fe:ed:27:9a:4f:8a:d4:37:d2:85: 5b:f6:9f:26:e3:41:65:82:03:49:5e:d5:8f:ac:13:e4:4f:27: 42:6d:41:54:cc:7b:a8:57:9a:0e:ba:be:5d:6d:38:0f:c1:32: 61:94:c0:ec:25:73:f4:c6:69:35:56:32:a7:a2:8a:9f:e4:5e: a9:88:3f:13:5c:b6:c4:24:bd:d9:3c:9c:75:9d:45:57:76:58: bf:c5:ad:65:81:53:f4:f9:46:88:ec:47:fd:b1:d4:80:46:3e: 6c:e9:20:13 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIURmTHk5Rl5yUysM+H7JZdq1sGPLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3 NkJCMDI3NzAeFw0yNTEyMjIxNzEyNTlaFw0yNjEyMjExNzE3NTlaMDMxMTAvBgNV BAMTKEI2MURDOTM2MTBEOUQ3QjYzNTEwMkQwMENENzE4OTgyNjQ3NjE2QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82vRO8PIvlv2QDNxacJh7tgJq cEHmTnUhkilCbbASYg/U2exfplHN6pqR80mki94Q7FHPe6NcaKuEnhedKnJlbU6C FROiML/b9SvEJGim5XOMiSLw9tgsv2gjmFB7y8z+N9vOiZyyBbUNjEnnKyO0pC1G qCXq8ccCLCqUI2eXIUhtxWAABZLbK8RCdU6Bw6fwPLONiiWB2BEpK3ukW+4zjhph e4npRcgBMqXqxPvsjZpEfiuCq1D1o3jaclx/oFawjJQLLWkXFuKE75mC3201j4FI bdlDblTHgM0qchcN1Yq7Wa2t6gm1VF6PWFsXIvTHpObvFw2IzB26K7WRnjixAgMB AAGjggJfMIICWzAdBgNVHQ4EFgQUth3JNhDZ17Y1EC0AzXGJgmR2FqIwHwYDVR0j BBgwFoAUPBnZ7l6wIKhlLWhZh/7PKna7AncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzNDMTlEOUVFNUVCMDIw QTg2NTJENjg1OTg3RkVDRjJBNzZCQjAyNzcuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2M5OTI2NWVmLTIyYTktNDEwMC1hMjNkLTUxYTlkOWZlZWI3 ZC81LzMyNjEzMDM1M2E2NDY2NjMzMTNhMzgzMDMwMzAzYTNhMmYzNDMwMmQzNDM0 MjAzZDNlMjAzMjMxMzEzNDMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BgDANBgkqhkiG9w0B AQsFAAOCAQEACR3C0Kqvr2Zt793m7tuxFTbS4C1WOWQkOma00avDIN5tKt+HsJ0l Ue+gl++pSkDSxcNKwEMO4B6EpzRgv4d03/Yo7aPyOY1VHb2lxgqWlru6+lK8v5y+ t0kppfr751LItejOYbc5x3gA3tpfqBzA5t4YPDFIk6STEidbYoW9eMb2ONXB00+H rKIHRl+PG47EDQxBQonKOBf+7SeaT4rUN9KFW/afJuNBZYIDSV7Vj6wT5E8nQm1B VMx7qFeaDrq+XW04D8EyYZTA7CVz9MZpNVYyp6KKn+ReqYg/E1y2xCS92TycdZ1F V3ZYv8WtZYFT9PlGiOxH/bHUgEY+bOkgEw== -----END CERTIFICATE-----Generated at Sat Dec 27 12:35:29 2025 by rpki-client