This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: nGLAdkRiCVIQwTrXrRH2GZTJEYm4l5K5Qg4h/njNDzU= Subject key identifier: C6:3C:19:71:8A:66:DE:2D:7A:2C:CD:F9:69:08:AB:57:D0:87:C7:BA Certificate issuer: /CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Certificate serial: 2A360B212661364A9B32842456EDA60D2255220E Authority key identifier: 64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa Signing time: Fri 19 Dec 2025 07:02:42 +0000 ROA not before: Fri 19 Dec 2025 06:57:42 +0000 ROA not after: Fri 18 Dec 2026 07:02:42 +0000 asID: 204211 IP address blocks: 2a14:7581:3090::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 19:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:36:0b:21:26:61:36:4a:9b:32:84:24:56:ed:a6:0d:22:55:22:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Validity Not Before: Dec 19 06:57:42 2025 GMT Not After : Dec 18 07:02:42 2026 GMT Subject: CN=C63C19718A66DE2D7A2CCDF96908AB57D087C7BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:80:5a:82:9b:d3:29:15:21:79:67:81:31:41: 05:52:07:f2:ba:d7:cc:76:fd:c7:46:e7:c2:b8:19: 75:b6:62:a8:c5:a3:03:d1:61:b5:ad:a8:2e:f1:30: 7a:e5:1e:23:72:fe:9a:da:d8:cf:3c:aa:b1:b9:06: 51:da:58:ee:c5:47:b1:bd:af:ba:89:e0:61:2b:7e: 3e:4f:5c:ca:ef:7a:c1:b2:70:8e:12:29:ca:97:80: c8:cc:e8:98:d0:3a:b6:0c:ca:58:db:93:67:b4:25: a4:0f:70:55:4e:45:72:49:43:95:87:8e:31:a9:81: 7b:31:6d:c0:b0:10:c8:6a:67:f8:5b:e6:89:d9:a4: 07:fe:db:71:50:e9:d1:7c:32:bc:12:de:09:e8:0a: 93:4c:ed:54:6c:f1:de:2f:b2:ab:36:04:75:82:ae: 6d:8f:64:12:b8:a9:f6:66:81:6f:31:e1:62:50:e1: b6:f0:52:6e:d5:3c:37:9a:1e:dd:ac:9e:a7:82:c6: ec:9c:62:b8:5b:e8:91:ba:c7:72:7a:38:0d:f6:eb: a8:c6:6d:65:ab:18:dc:78:c0:6b:c2:ce:27:d6:59: e6:66:df:23:f6:69:0a:cc:9e:20:82:b9:ce:fd:e7: a2:4a:11:9f:df:7e:93:0f:9c:85:bd:dd:de:02:6e: 9f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3C:19:71:8A:66:DE:2D:7A:2C:CD:F9:69:08:AB:57:D0:87:C7:BA X509v3 Authority Key Identifier: keyid:64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:3090::/48 Signature Algorithm: sha256WithRSAEncryption b7:33:10:f8:7f:c6:01:4b:a0:43:03:97:00:20:f4:80:a6:79: f8:56:fe:86:83:6d:bb:c0:6d:82:f5:82:62:2f:c3:95:22:d9: a9:36:ae:b8:57:89:0a:b7:80:5b:58:ba:9a:ba:33:9a:31:cb: c9:b1:fa:aa:37:6a:11:b8:6c:51:41:48:ea:82:c5:d0:4c:aa: 6c:6a:8b:14:de:7b:c7:47:dd:7a:28:5d:f3:fb:ff:ce:e5:33: d9:30:61:96:f8:ac:dd:25:7e:84:51:c8:02:ad:3b:27:2a:1e: 72:89:45:bc:21:08:4b:f3:3d:c9:57:bd:b6:33:c1:85:49:25: b1:0d:58:26:a4:ef:5d:05:45:ff:a2:ce:96:3e:a4:b3:db:10: 16:02:ab:95:86:4d:2b:5f:db:61:62:d6:76:db:81:ae:67:7f: a4:63:ee:b9:c8:fd:63:96:6e:4f:f0:4f:d2:29:fe:47:69:5a: 39:76:7c:3a:86:fe:26:52:9a:8e:f7:ab:24:31:08:dc:e8:cd: d1:00:3f:ac:69:3c:74:92:2e:81:db:08:bd:a0:06:3d:f0:22: c4:a1:2c:7e:53:2d:92:34:36:61:f6:ff:15:1f:d3:5a:fd:d4: 06:e3:5d:9f:fd:8f:9d:5e:51:99:c6:a6:18:d4:8c:ce:9b:f7: 4a:c6:24:18 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUKjYLISZhNkqbMoQkVu2mDSJVIg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQw QjhDREUwNTAeFw0yNTEyMTkwNjU3NDJaFw0yNjEyMTgwNzAyNDJaMDMxMTAvBgNV BAMTKEM2M0MxOTcxOEE2NkRFMkQ3QTJDQ0RGOTY5MDhBQjU3RDA4N0M3QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBgFqCm9MpFSF5Z4ExQQVSB/K6 18x2/cdG58K4GXW2YqjFowPRYbWtqC7xMHrlHiNy/pra2M88qrG5BlHaWO7FR7G9 r7qJ4GErfj5PXMrvesGycI4SKcqXgMjM6JjQOrYMyljbk2e0JaQPcFVORXJJQ5WH jjGpgXsxbcCwEMhqZ/hb5onZpAf+23FQ6dF8MrwS3gnoCpNM7VRs8d4vsqs2BHWC rm2PZBK4qfZmgW8x4WJQ4bbwUm7VPDeaHt2snqeCxuycYrhb6JG6x3J6OA3266jG bWWrGNx4wGvCzifWWeZm3yP2aQrMniCCuc7956JKEZ/ffpMPnIW93d4Cbp9LAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUxjwZcYpm3i16LM35aQirV9CHx7owHwYDVR0j BBgwFoAUZNYpqjzzj593Ctu7IMbevQuM3gUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzIvNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQwQjhDREUwNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS82NEQ2MjlBQTNDRjM4RjlGNzcwQURCQkIy MEM2REVCRDBCOENERTA1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMi8zMjYxMzEz NDNhMzczNTM4MzEzYTMzMzAzOTMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gTCQMA0GCSqGSIb3DQEBCwUAA4IBAQC3 MxD4f8YBS6BDA5cAIPSApnn4Vv6Gg227wG2C9YJiL8OVItmpNq64V4kKt4BbWLqa ujOaMcvJsfqqN2oRuGxRQUjqgsXQTKpsaosU3nvHR916KF3z+//O5TPZMGGW+Kzd JX6EUcgCrTsnKh5yiUW8IQhL8z3JV722M8GFSSWxDVgmpO9dBUX/os6WPqSz2xAW AquVhk0rX9thYtZ224GuZ3+kY+65yP1jlm5P8E/SKf5HaVo5dnw6hv4mUpqO96sk MQjc6M3RAD+saTx0ki6B2wi9oAY98CLEoSx+Uy2SNDZh9v8VH9Na/dQG412f/Y+d XlGZxqYY1IzOm/dKxiQY -----END CERTIFICATE-----Generated at Sat Dec 20 07:43:06 2025 by rpki-client