This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa File: 326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa (raw, json) Hash identifier: LLsi5WyK1XwYJWDjn6LXybqAQvMFc3aggLJjCnG0b1I= Subject key identifier: 00:95:4C:B8:83:7E:F3:2F:C8:1B:E2:6E:33:B7:97:24:E1:2E:37:EC Certificate issuer: /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Certificate serial: 265EDD8B7436B5CAF69CABF9341FC40ABC2E7EC7 Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa Signing time: Mon 22 Dec 2025 17:17:59 +0000 ROA not before: Mon 22 Dec 2025 17:12:59 +0000 ROA not after: Mon 21 Dec 2026 17:17:59 +0000 asID: 211431 IP address blocks: 2a05:dfc1:81f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 03:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:5e:dd:8b:74:36:b5:ca:f6:9c:ab:f9:34:1f:c4:0a:bc:2e:7e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Validity Not Before: Dec 22 17:12:59 2025 GMT Not After : Dec 21 17:17:59 2026 GMT Subject: CN=00954CB8837EF32FC81BE26E33B79724E12E37EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:00:2e:b4:c7:f3:3d:64:cd:8f:b1:7d:bf:88: ea:a2:9e:31:1f:bb:2c:96:68:4f:36:9e:91:e6:b2: b3:8d:a5:cf:67:4c:23:a0:a3:d1:ab:44:e6:c7:83: f7:ec:13:e3:f1:c5:81:f3:64:54:06:89:ff:43:52: 7c:28:00:9f:ad:16:80:c6:da:36:0d:a9:a4:d1:91: 59:8c:5e:96:66:4c:4f:76:27:42:33:ee:22:94:21: 7a:41:0b:f3:98:5f:8b:d3:c5:2d:4e:5e:10:93:7b: ea:12:61:8a:63:74:63:35:f5:0f:b8:2e:0d:5a:b1: aa:e7:49:6e:1f:2f:72:3a:b1:4b:ee:68:8b:f9:af: 3b:cf:fd:3d:fc:23:87:eb:fd:5a:86:30:77:78:32: aa:15:b4:5d:14:d1:b8:ae:56:de:bc:85:5d:97:79: 8b:90:8a:12:50:ad:92:fc:27:4a:2e:14:a8:06:52: c2:67:9f:19:5a:e9:63:4e:1f:74:07:9c:3c:9b:bc: 0d:d9:b6:1a:37:59:50:b6:88:37:c9:ba:6c:f2:74: df:c0:03:8b:68:a6:48:5e:9d:8a:a3:63:1f:12:24: 43:7f:5f:57:96:55:27:6f:4e:1e:e0:06:1f:6e:b9: 25:75:1b:a9:d2:87:8a:42:dc:70:d9:83:77:7a:80: 7e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:95:4C:B8:83:7E:F3:2F:C8:1B:E2:6E:33:B7:97:24:E1:2E:37:EC X509v3 Authority Key Identifier: keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:81f0::/44 Signature Algorithm: sha256WithRSAEncryption 80:30:09:58:ea:8e:87:86:ee:03:74:3a:44:ad:2c:0b:91:2a: 50:fc:00:64:3d:4a:b2:f2:67:4d:b5:2a:ed:1f:73:27:72:9f: 4f:5a:43:4b:db:99:0c:c0:ba:8d:33:2d:2e:3c:45:62:03:18: 17:7c:3f:ca:36:de:ea:3c:0c:ae:fd:1d:c4:7e:7b:75:ca:88: 9a:d8:99:02:bb:36:a9:cd:cf:11:e7:af:90:46:6d:80:63:cf: 71:6e:ac:db:4b:06:0b:33:8a:4b:eb:1d:12:7d:32:25:58:c0: 41:01:33:76:d9:82:dd:a3:35:c7:92:87:30:ff:53:ef:b1:a1: d3:a1:55:7e:e6:45:52:44:9d:92:fc:46:d1:18:99:98:6f:88: 3d:8b:5c:6a:e8:dd:ac:0b:c5:36:fa:4a:71:4f:fa:74:a6:dd: bb:3c:da:cb:0a:2f:e4:42:89:dd:d9:90:fe:7b:9d:ad:97:c4: 0a:d7:fb:8c:25:aa:45:69:70:fd:33:c9:e7:71:e4:ce:12:79: 53:02:e6:e5:87:41:11:bb:66:a0:64:53:e5:66:e2:a7:46:1e: cf:e0:62:0c:9c:d4:4b:cc:04:5c:f4:a4:0d:0d:7a:b5:ec:62: 58:67:54:02:56:19:fc:71:cd:1a:c6:93:01:ad:a9:46:1f:bb: 6c:30:0f:98 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUJl7di3Q2tcr2nKv5NB/ECrwufscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3 NkJCMDI3NzAeFw0yNTEyMjIxNzEyNTlaFw0yNjEyMjExNzE3NTlaMDMxMTAvBgNV BAMTKDAwOTU0Q0I4ODM3RUYzMkZDODFCRTI2RTMzQjc5NzI0RTEyRTM3RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpAC60x/M9ZM2PsX2/iOqinjEf uyyWaE82npHmsrONpc9nTCOgo9GrRObHg/fsE+PxxYHzZFQGif9DUnwoAJ+tFoDG 2jYNqaTRkVmMXpZmTE92J0Iz7iKUIXpBC/OYX4vTxS1OXhCTe+oSYYpjdGM19Q+4 Lg1asarnSW4fL3I6sUvuaIv5rzvP/T38I4fr/VqGMHd4MqoVtF0U0biuVt68hV2X eYuQihJQrZL8J0ouFKgGUsJnnxla6WNOH3QHnDybvA3Ztho3WVC2iDfJumzydN/A A4topkhenYqjYx8SJEN/X1eWVSdvTh7gBh9uuSV1G6nSh4pC3HDZg3d6gH6rAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUAJVMuIN+8y/IG+JuM7eXJOEuN+wwHwYDVR0j BBgwFoAUPBnZ7l6wIKhlLWhZh/7PKna7AncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzNDMTlEOUVFNUVCMDIw QTg2NTJENjg1OTg3RkVDRjJBNzZCQjAyNzcuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2M5OTI2NWVmLTIyYTktNDEwMC1hMjNkLTUxYTlkOWZlZWI3 ZC81LzMyNjEzMDM1M2E2NDY2NjMzMTNhMzgzMTY2MzAzYTNhMmYzNDM0MmQzNDM4 MjAzZDNlMjAzMjMxMzEzNDMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqBd/BgfAwDQYJKoZIhvcN AQELBQADggEBAIAwCVjqjoeG7gN0OkStLAuRKlD8AGQ9SrLyZ021Ku0fcydyn09a Q0vbmQzAuo0zLS48RWIDGBd8P8o23uo8DK79HcR+e3XKiJrYmQK7NqnNzxHnr5BG bYBjz3FurNtLBgszikvrHRJ9MiVYwEEBM3bZgt2jNceShzD/U++xodOhVX7mRVJE nZL8RtEYmZhviD2LXGro3awLxTb6SnFP+nSm3bs82ssKL+RCid3ZkP57na2XxArX +4wlqkVpcP0zyedx5M4SeVMC5uWHQRG7ZqBkU+Vm4qdGHs/gYgyc1EvMBFz0pA0N erXsYlhnVAJWGfxxzRrGkwGtqUYfu2wwD5g= -----END CERTIFICATE-----Generated at Sat Dec 27 12:35:29 2025 by rpki-client