This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa
File: 326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (raw, json)
Hash identifier: IJWnIfIqrQT/KRXbAy3Xfm9Y9DxNBR6JISgHxbdVPos=
Subject key identifier: 22:05:58:69:47:AC:39:62:E0:27:A0:58:35:64:F5:2C:DE:C4:EC:8B
Certificate issuer: /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
Certificate serial: 25731B08BEBD0B40F23A3AB240D5159187596A46
Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa
Signing time: Mon 22 Dec 2025 17:17:59 +0000
ROA not before: Mon 22 Dec 2025 17:12:59 +0000
ROA not after: Mon 21 Dec 2026 17:17:59 +0000
asID: 211431
IP address blocks: 2a05:dfc1:8100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl
rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Dec 2025 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:73:1b:08:be:bd:0b:40:f2:3a:3a:b2:40:d5:15:91:87:59:6a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
Validity
Not Before: Dec 22 17:12:59 2025 GMT
Not After : Dec 21 17:17:59 2026 GMT
Subject: CN=2205586947AC3962E027A0583564F52CDEC4EC8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:03:a2:c0:aa:ab:85:80:1a:a4:e1:17:fb:c2:
0f:a9:c6:16:03:dc:90:b2:de:2a:75:f8:22:f3:06:
33:17:f8:3b:a7:74:6e:ce:e2:76:ea:54:b7:4c:03:
91:28:da:f8:a1:9d:22:26:f8:8a:94:6f:c0:14:6f:
e5:c8:05:32:68:9e:ed:82:71:80:35:12:72:aa:26:
d5:f4:32:ac:29:cc:4b:53:39:16:3c:4d:6c:ca:36:
95:33:25:f0:54:2e:22:8b:a1:5c:c5:a9:2a:78:06:
e2:dd:1d:f3:e9:fb:bb:13:dc:d5:9c:d4:65:71:87:
06:14:41:6f:c7:b9:3d:73:f9:db:7b:80:2f:48:92:
5e:fb:26:38:71:4f:63:d7:c6:24:1f:e0:d1:e0:54:
44:7d:c0:91:eb:3d:87:d3:5b:b5:51:89:32:8a:3d:
7b:9b:4b:a9:a9:00:a7:cc:ca:b3:d5:bd:38:ba:b9:
22:05:8f:88:39:49:2b:3e:56:74:8d:27:d0:9b:b1:
cf:ef:fc:23:f5:26:79:12:51:44:3d:12:66:6c:ae:
1b:0d:50:18:2d:3d:73:1e:25:a2:ed:53:c9:f0:f9:
21:62:df:7c:00:74:0d:6d:ee:a1:1e:e7:70:15:68:
ce:3d:0a:b1:49:d2:4d:1a:16:99:42:1b:e4:a2:c6:
6b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:05:58:69:47:AC:39:62:E0:27:A0:58:35:64:F5:2C:DE:C4:EC:8B
X509v3 Authority Key Identifier:
keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8100::/40
Signature Algorithm: sha256WithRSAEncryption
44:9c:42:3a:f4:c6:cd:16:b2:2d:ed:a9:41:63:48:f2:a6:c8:
9f:ce:72:17:6d:d5:61:0d:c4:52:c3:e3:d4:65:1d:6a:3d:95:
0f:39:e6:b9:4e:30:9f:35:5c:a2:ea:23:b7:00:7b:ce:0c:d4:
44:2b:8d:53:9b:15:2d:46:f3:85:00:15:99:df:08:4a:3a:96:
c5:da:7d:41:43:86:5c:99:ac:2e:a3:ec:c9:c6:07:b4:5c:e4:
0a:07:12:72:17:af:25:41:72:8a:91:e8:67:8d:8b:d5:48:e2:
b1:de:44:a4:95:2e:c5:bd:ab:05:ea:61:ca:f8:2b:63:a0:a6:
b8:ed:a7:e4:31:9d:96:1b:00:f4:b4:ba:d3:09:7a:a0:87:e8:
3a:1e:6e:32:e8:40:2b:50:cb:14:ad:60:57:e6:fb:a6:91:5a:
49:55:64:d9:9c:f4:9b:a1:aa:d4:44:81:92:5d:a7:73:e0:8a:
63:58:9f:63:39:6e:16:24:00:fb:05:b7:b0:47:c1:6d:ae:49:
6a:90:07:f1:73:d5:a2:8f:c1:ce:6c:46:f3:e9:44:03:ad:ad:
f8:dd:31:c1:56:97:16:16:c0:eb:df:23:89:a8:3e:f5:9b:81:
1b:b0:68:56:7c:4a:7f:13:da:b0:d2:47:79:b9:7b:d0:2f:c3:
c6:99:12:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 12:35:30 2025 by rpki-client