This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa
File: 326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa (raw, json)
Hash identifier: TnmWJuZNY0DPgipWjil2ZXNBS0GgRAuBPJ9ypq6d80U=
Subject key identifier: 8A:B0:21:6D:74:00:45:DF:EC:DA:30:36:ED:99:BC:72:7B:9E:D0:2A
Certificate issuer: /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
Certificate serial: 0E5D4F29D3D4DF7C56323A9D09C91141102E9DB7
Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa
Signing time: Mon 22 Dec 2025 17:17:59 +0000
ROA not before: Mon 22 Dec 2025 17:12:59 +0000
ROA not after: Mon 21 Dec 2026 17:17:59 +0000
asID: 204291
IP address blocks: 2a05:dfc1:8000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl
rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Dec 2025 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:5d:4f:29:d3:d4:df:7c:56:32:3a:9d:09:c9:11:41:10:2e:9d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
Validity
Not Before: Dec 22 17:12:59 2025 GMT
Not After : Dec 21 17:17:59 2026 GMT
Subject: CN=8AB0216D740045DFECDA3036ED99BC727B9ED02A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:da:c2:73:7c:c9:6e:bb:d5:a6:fe:ec:37:49:
e6:f6:d8:71:2e:d8:86:ac:1c:ab:3c:fb:c6:65:06:
04:1e:56:fb:f2:a7:cd:f0:1f:c4:71:db:c0:60:44:
98:d7:cd:90:fc:8f:a5:bf:cc:00:d8:1a:32:48:20:
07:22:2e:14:5e:c0:e7:b5:26:42:6d:14:00:10:f0:
4b:77:e0:e6:dc:6b:c6:76:c2:7c:bf:be:9f:91:51:
f6:8e:d1:70:38:91:6a:29:a9:67:7e:38:10:a0:60:
50:85:a4:ee:07:d0:4f:a2:f5:1c:0d:09:5d:00:31:
ba:db:7e:ea:02:0a:ec:0b:a2:2f:99:0c:b7:95:9b:
c2:12:43:53:3c:0a:13:15:7a:a4:db:66:d6:78:ce:
95:0c:f6:a8:da:3c:35:81:95:02:68:82:80:ca:43:
39:50:65:2f:99:87:5d:7d:ce:c4:c5:3e:62:00:7d:
8a:7f:6a:5b:c6:0f:0e:ea:73:09:c6:80:2c:0c:2d:
96:31:36:e1:71:fa:26:c4:ae:87:ae:c7:2f:66:52:
23:68:c7:42:0c:c6:bb:dc:00:91:db:d5:bd:bc:4f:
41:80:67:d8:c2:73:eb:68:03:33:cf:e4:e7:cc:1c:
57:bd:33:e9:13:63:2c:5a:99:b7:4a:f4:42:09:62:
99:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B0:21:6D:74:00:45:DF:EC:DA:30:36:ED:99:BC:72:7B:9E:D0:2A
X509v3 Authority Key Identifier:
keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8000::/44
Signature Algorithm: sha256WithRSAEncryption
3c:43:9a:e4:15:f0:d4:85:03:d1:4e:26:89:ce:67:d3:be:8e:
f9:3f:2e:64:b8:24:fd:93:d2:ee:0c:2a:98:3f:83:82:3a:ae:
32:6a:63:65:e1:18:84:d3:b3:f4:27:a1:f2:b1:95:77:ef:b8:
cd:6e:11:0b:72:39:1e:27:05:18:d4:c4:01:59:ef:01:18:8b:
16:5d:0f:32:6f:6d:f0:ac:87:ce:b9:81:90:7e:86:0e:58:35:
7a:15:15:4a:44:89:7a:d1:ad:9d:b9:2c:44:c3:07:9c:c4:4c:
9b:2b:d1:93:8a:d9:38:bb:1f:f2:a1:84:87:30:68:a8:73:94:
a7:66:80:92:f5:14:4d:5d:0b:17:d1:7e:18:a1:fb:82:d2:ce:
34:99:7d:6e:61:e2:a7:48:3f:be:1b:89:61:e8:ff:b9:96:08:
f8:53:f5:bb:8e:f9:63:4d:5c:75:89:1a:05:4d:cb:05:89:aa:
c4:69:24:f7:98:a5:9a:31:fb:6a:6b:42:f3:9b:07:58:c8:2a:
fa:a4:73:c3:24:3f:3f:86:51:d4:81:a7:f4:71:0d:4b:b8:b3:
a6:9d:fb:63:b1:2a:b0:d6:fd:56:d6:f3:6f:33:85:be:23:2e:
1b:43:84:5b:07:26:72:bc:8e:34:8a:52:49:66:38:1a:e7:b7:
24:a7:40:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 12:30:00 2025 by rpki-client