This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa File: 326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (raw, json) Hash identifier: +8Gtqve25qz7dj6RoaEfhzyMxoqEmhyXwj7/4y6S5ts= Subject key identifier: E2:90:2A:27:DB:55:B3:26:BD:C5:6E:4E:60:4E:C2:37:B1:88:BD:0A Certificate issuer: /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Certificate serial: 6E4DEAB81D811A95DF4064F18B51C9D784933BF5 Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa Signing time: Mon 22 Dec 2025 17:18:00 +0000 ROA not before: Mon 22 Dec 2025 17:13:00 +0000 ROA not after: Mon 21 Dec 2026 17:18:00 +0000 asID: 197814 IP address blocks: 2a05:dfc1:80c0::/42 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 03:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:4d:ea:b8:1d:81:1a:95:df:40:64:f1:8b:51:c9:d7:84:93:3b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Validity Not Before: Dec 22 17:13:00 2025 GMT Not After : Dec 21 17:18:00 2026 GMT Subject: CN=E2902A27DB55B326BDC56E4E604EC237B188BD0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fe:42:3c:f4:e0:e8:34:64:ee:12:17:c9:6e: 36:97:3c:e2:db:f7:32:00:e2:6d:11:08:67:a4:c5: bd:0e:77:c9:50:a0:e3:23:b4:c0:d4:ca:14:a7:95: 3a:3a:f4:51:d8:f7:63:b8:55:b0:bb:5c:c5:5e:1b: 4f:e6:a6:25:e7:11:48:85:c8:ca:17:18:55:31:2b: ec:e3:54:0f:db:c7:66:81:aa:7f:97:e7:b5:e8:f6: 92:57:ae:3d:4d:89:cc:18:20:25:c0:28:cf:db:ea: 7a:ba:3b:38:01:dc:79:91:5c:0a:ce:a9:cf:6e:36: 5a:9f:42:8f:0f:9d:ef:bd:53:05:57:d2:c9:45:9d: 67:05:3f:05:9e:65:3d:17:49:fc:92:40:ad:a1:e6: 0b:5c:7f:33:dd:7a:25:05:fe:7e:cf:bf:c0:9c:5f: d3:14:26:ae:1a:43:d5:d3:85:c8:cc:91:66:57:d7: 53:57:08:f8:45:d7:a9:10:01:3a:f4:53:b8:bd:e8: 7a:a5:a0:e7:64:55:82:71:2e:8a:45:37:67:af:4c: b1:13:d4:db:db:66:80:4f:d6:62:15:c8:cf:7d:04: b4:92:c3:ad:0e:42:bf:00:0b:ed:8f:4c:26:2e:f5: 4b:0b:89:7f:5e:5c:3e:dd:85:4c:4e:bb:6c:85:ea: 67:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:90:2A:27:DB:55:B3:26:BD:C5:6E:4E:60:4E:C2:37:B1:88:BD:0A X509v3 Authority Key Identifier: keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:80c0::/42 Signature Algorithm: sha256WithRSAEncryption 8b:c2:60:2a:fc:6d:ef:bb:58:b6:d6:0a:84:6b:c7:ec:c3:97: a2:07:d0:9e:82:65:72:91:0e:3e:ee:d9:0a:04:ac:fd:69:43: 86:57:bd:de:73:ee:4c:1c:12:52:39:cd:60:4a:43:32:2c:f5: 09:36:fb:e3:ce:00:01:0f:d3:17:e7:b1:82:b9:6c:3c:0a:8d: 8a:a4:2a:a2:55:71:e4:a5:4c:96:fc:80:74:42:59:52:5a:15: 66:28:fb:be:6c:87:5c:92:e5:ee:8a:55:59:c2:c7:ac:75:86: c1:de:0b:80:d8:80:51:23:a4:ad:f0:0f:51:09:23:bc:07:c3: 53:45:d7:01:ac:51:4c:9d:d5:48:d5:4f:30:95:c9:20:28:0c: 78:3f:c7:f5:ec:55:39:02:bb:7d:1a:25:60:a2:50:a7:1f:a1: e0:da:de:e6:60:7c:47:fe:09:96:94:76:2d:8f:ea:a5:a7:10: bb:4d:96:9c:98:7c:73:1f:d1:97:b3:2e:24:d3:c9:ef:4a:67: c8:4f:e1:b3:7f:4e:62:76:7c:21:ad:50:82:33:09:93:aa:81: b6:fc:0c:66:a8:f2:aa:41:cf:03:09:43:5f:b2:da:4c:d1:9b: 9b:28:5e:4e:0d:5d:d4:18:69:48:e3:90:28:ea:fb:a5:ed:d3: e2:5a:d9:6e -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUbk3quB2BGpXfQGTxi1HJ14STO/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3 NkJCMDI3NzAeFw0yNTEyMjIxNzEzMDBaFw0yNjEyMjExNzE4MDBaMDMxMTAvBgNV BAMTKEUyOTAyQTI3REI1NUIzMjZCREM1NkU0RTYwNEVDMjM3QjE4OEJEMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/kI89ODoNGTuEhfJbjaXPOLb 9zIA4m0RCGekxb0Od8lQoOMjtMDUyhSnlTo69FHY92O4VbC7XMVeG0/mpiXnEUiF yMoXGFUxK+zjVA/bx2aBqn+X57Xo9pJXrj1NicwYICXAKM/b6nq6OzgB3HmRXArO qc9uNlqfQo8Pne+9UwVX0slFnWcFPwWeZT0XSfySQK2h5gtcfzPdeiUF/n7Pv8Cc X9MUJq4aQ9XThcjMkWZX11NXCPhF16kQATr0U7i96HqloOdkVYJxLopFN2evTLET 1NvbZoBP1mIVyM99BLSSw60OQr8AC+2PTCYu9UsLiX9eXD7dhUxOu2yF6mf1AgMB AAGjggJgMIICXDAdBgNVHQ4EFgQU4pAqJ9tVsya9xW5OYE7CN7GIvQowHwYDVR0j BBgwFoAUPBnZ7l6wIKhlLWhZh/7PKna7AncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzNDMTlEOUVFNUVCMDIw QTg2NTJENjg1OTg3RkVDRjJBNzZCQjAyNzcuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2M5OTI2NWVmLTIyYTktNDEwMC1hMjNkLTUxYTlkOWZlZWI3 ZC81LzMyNjEzMDM1M2E2NDY2NjMzMTNhMzgzMDYzMzAzYTNhMmYzNDMyMmQzNDM4 MjAzZDNlMjAzMTM5MzczODMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwYqBd/BgMAwDQYJKoZIhvcN AQELBQADggEBAIvCYCr8be+7WLbWCoRrx+zDl6IH0J6CZXKRDj7u2QoErP1pQ4ZX vd5z7kwcElI5zWBKQzIs9Qk2++POAAEP0xfnsYK5bDwKjYqkKqJVceSlTJb8gHRC WVJaFWYo+75sh1yS5e6KVVnCx6x1hsHeC4DYgFEjpK3wD1EJI7wHw1NF1wGsUUyd 1UjVTzCVySAoDHg/x/XsVTkCu30aJWCiUKcfoeDa3uZgfEf+CZaUdi2P6qWnELtN lpyYfHMf0ZezLiTTye9KZ8hP4bN/TmJ2fCGtUIIzCZOqgbb8DGao8qpBzwMJQ1+y 2kzRm5soXk4NXdQYaUjjkCjq+6Xt0+Ja2W4= -----END CERTIFICATE-----Generated at Sat Dec 27 12:35:25 2025 by rpki-client