This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa
File: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (raw, json)
Hash identifier: vZabrxyGvueVve0UIFCKkMx6oLP4C5qFMGRoAro/NOA=
Subject key identifier: 64:7E:34:8E:30:EC:76:C4:41:81:73:7C:DB:9D:6B:37:A9:17:A2:E7
Certificate issuer: /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
Certificate serial: 1045FABE55511AECB26B59F9FE40CFAC40F09E35
Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa
Signing time: Mon 22 Dec 2025 17:17:59 +0000
ROA not before: Mon 22 Dec 2025 17:12:59 +0000
ROA not after: Mon 21 Dec 2026 17:17:59 +0000
asID: 212154
IP address blocks: 2a05:dfc1:8010::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl
rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:45:fa:be:55:51:1a:ec:b2:6b:59:f9:fe:40:cf:ac:40:f0:9e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
Validity
Not Before: Dec 22 17:12:59 2025 GMT
Not After : Dec 21 17:17:59 2026 GMT
Subject: CN=647E348E30EC76C44181737CDB9D6B37A917A2E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5d:c5:ea:28:cb:b4:e0:80:5a:4b:07:ef:67:
e3:36:9a:f8:7b:54:c3:b3:c1:0b:83:8f:76:35:0e:
98:fa:9c:26:d7:cf:c6:aa:1c:dc:2b:16:b3:1f:31:
5a:04:eb:69:3a:2c:50:b4:31:1f:f3:a7:4d:ca:d1:
fe:dd:d3:6a:93:82:78:6d:dd:18:1b:38:d3:29:fa:
bc:eb:02:0f:1e:e0:e9:91:56:a5:a7:51:39:39:49:
63:b9:fe:54:85:89:b1:1d:87:ef:49:0d:8c:c9:5a:
fc:92:75:16:dc:0d:53:eb:9d:9a:85:69:1e:90:c2:
69:a6:ef:97:36:06:26:57:21:36:81:4f:9b:19:19:
05:3f:c5:d9:76:89:62:20:ee:d1:81:94:8c:8b:15:
12:47:c7:f3:5b:3c:ec:79:60:84:10:43:52:de:53:
86:fe:34:8d:5f:39:05:5b:30:10:63:df:0e:b6:c4:
59:ea:36:a9:fe:54:22:e8:20:8f:e2:16:f2:6b:11:
f0:5c:93:58:ec:a5:22:82:e5:75:9a:5e:43:32:fb:
6f:c5:07:ca:72:06:a4:19:d5:86:55:5a:5f:2c:b7:
5a:4d:84:36:7d:f3:3e:c4:57:a4:61:c1:b9:b4:ae:
ed:c0:8d:10:ac:11:71:7f:a9:22:47:42:13:90:ec:
29:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7E:34:8E:30:EC:76:C4:41:81:73:7C:DB:9D:6B:37:A9:17:A2:E7
X509v3 Authority Key Identifier:
keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8010::/44
Signature Algorithm: sha256WithRSAEncryption
64:d3:13:9c:a6:ce:53:9d:1f:56:3a:7d:d3:0f:7d:c2:e9:b6:
4c:84:75:6b:08:3b:a5:d2:d1:e7:20:a3:d4:36:9b:29:10:f2:
b5:ba:ee:ae:bc:20:49:3a:19:fd:2f:81:4d:ee:df:42:41:9c:
48:b3:99:59:32:3f:ba:ce:46:f8:9a:f2:dd:fd:b2:ff:74:05:
b8:f5:47:a0:70:73:72:ba:9b:a5:dd:3a:37:b9:15:af:46:1c:
e6:be:8d:41:60:b8:ef:b9:04:63:cb:59:5f:f8:4a:7a:2c:36:
36:b2:97:95:c1:07:5c:87:3e:34:a5:26:ea:de:ed:ae:8c:7c:
ec:5f:97:b3:dd:db:d7:9b:ae:5e:28:d4:7f:c2:10:64:23:20:
7f:f7:27:6c:36:e2:f5:62:48:53:23:01:10:b4:e1:90:ae:4a:
ff:d0:b4:06:ef:ab:21:21:e3:92:93:15:2f:5d:fc:35:8a:ae:
00:37:e7:61:ea:b2:82:29:7a:c4:55:51:86:e1:38:df:38:40:
26:05:a0:c8:5c:c2:ef:ff:c8:07:74:a0:c4:d6:29:50:88:ee:
f7:1c:0b:4c:ba:4a:cb:6f:5e:9b:aa:3b:f7:2b:4a:ec:02:63:
f6:b6:59:5b:53:e3:c7:01:22:9b:a9:c5:1c:d0:2f:84:5b:ec:
bc:f1:88:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 09:01:40 2025 by rpki-client