This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa File: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (raw, json) Hash identifier: V7a7LRqWRSavnh0Ifl2d/PovkOzhE52bZJXDIw2uFaM= Subject key identifier: 31:A3:1C:58:40:8D:D8:89:DA:26:B2:90:FC:ED:CB:48:E8:93:29:6E Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Certificate serial: 70FC9C33C5F071C85078E5EE5245B141D74EB4E4 Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa Signing time: Thu 27 Nov 2025 12:04:04 +0000 ROA not before: Thu 27 Nov 2025 11:59:04 +0000 ROA not after: Thu 26 Nov 2026 12:04:04 +0000 asID: 214513 IP address blocks: 2a11:f2c0:ffa0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:fc:9c:33:c5:f0:71:c8:50:78:e5:ee:52:45:b1:41:d7:4e:b4:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Validity Not Before: Nov 27 11:59:04 2025 GMT Not After : Nov 26 12:04:04 2026 GMT Subject: CN=31A31C58408DD889DA26B290FCEDCB48E893296E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:af:20:34:7f:66:4e:f8:63:fe:a3:7c:8b:de: 52:cf:12:be:b4:13:d1:cc:44:93:13:1f:30:12:19: 9b:7c:81:10:1e:49:c2:68:1c:34:d6:3a:8e:63:10: a2:38:a0:b8:fd:17:c3:e9:b6:b6:23:a9:72:f6:63: d6:3a:ce:c6:80:64:45:0b:4e:2e:e2:46:5d:65:76: 16:d8:af:e7:a2:73:af:97:43:14:19:58:97:2f:89: 02:fe:0f:47:e4:4c:77:19:50:db:be:df:c1:d1:35: e5:4d:58:45:92:e4:34:1f:a4:f9:55:51:74:bf:01: 3e:ac:ed:f4:96:aa:e0:90:8e:c9:d5:78:ee:1f:ac: 89:29:7c:38:f1:f7:8c:2f:84:03:1c:63:d0:f8:49: 9d:d2:13:08:9f:b8:13:c1:e5:be:b5:16:c0:c2:45: 27:0c:e0:1a:e2:bf:61:9b:45:e8:38:d3:e7:2a:86: 3d:7c:fb:0e:df:2c:24:48:55:85:99:f3:49:78:a0: dc:b7:07:b6:f0:a1:d4:bb:4c:43:6c:73:4b:5f:1a: b8:f6:1c:ef:b1:1b:78:e4:c7:f7:18:1b:13:36:29: b5:61:bb:6b:41:23:03:f6:2d:fb:ca:7f:d0:f9:c7: fb:46:9d:d9:4e:11:b1:7f:9b:6f:c9:5e:2c:b5:d8: 3c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A3:1C:58:40:8D:D8:89:DA:26:B2:90:FC:ED:CB:48:E8:93:29:6E X509v3 Authority Key Identifier: keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:ffa0::/44 Signature Algorithm: sha256WithRSAEncryption 4b:ab:ce:cf:ef:3b:a1:6c:a7:da:72:3f:bc:93:52:be:72:8b: a5:c2:4f:fb:b5:f6:d5:3e:64:2d:46:7c:30:87:0e:88:2c:87: 25:df:0e:99:77:da:05:05:f5:54:42:73:63:dc:92:4a:de:30: 16:20:e1:b5:e9:80:9b:4a:3f:10:88:e4:99:05:88:cf:cc:bf: b8:c6:b8:13:a9:db:1c:eb:ce:1c:1c:6d:4d:55:38:3c:be:86: 95:d5:4f:28:0f:1c:de:76:fb:fc:44:ff:21:ae:25:7e:c4:27: 43:64:83:82:c6:f1:1d:1b:c5:d7:d3:28:c9:a1:64:02:6e:ff: 11:24:a5:ca:db:44:d6:7f:d3:7f:01:68:68:eb:b0:ed:15:00: f4:53:65:f5:ff:4a:1c:88:e1:02:81:1d:95:b3:83:3e:23:4d: da:48:c8:3e:41:58:18:a6:67:0a:f5:ae:23:de:09:ed:fb:4b: ad:13:0d:88:fd:23:af:f4:14:a9:e0:dd:43:49:67:ed:66:ee: d1:a7:55:50:d5:84:e5:a9:f6:b6:e6:83:01:b2:a2:cd:1a:86: 79:e4:c4:4e:08:78:c5:c3:33:5f:11:d6:e1:99:21:f7:ed:59: 5c:b8:4a:ec:f7:e7:d3:13:87:82:52:4a:a3:9a:b2:b6:c7:e8: 56:bd:20:30 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUcPycM8XwcchQeOXuUkWxQddOtOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdE NTQ3ODZEMzAeFw0yNTExMjcxMTU5MDRaFw0yNjExMjYxMjA0MDRaMDMxMTAvBgNV BAMTKDMxQTMxQzU4NDA4REQ4ODlEQTI2QjI5MEZDRURDQjQ4RTg5MzI5NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIryA0f2ZO+GP+o3yL3lLPEr60 E9HMRJMTHzASGZt8gRAeScJoHDTWOo5jEKI4oLj9F8PptrYjqXL2Y9Y6zsaAZEUL Ti7iRl1ldhbYr+eic6+XQxQZWJcviQL+D0fkTHcZUNu+38HRNeVNWEWS5DQfpPlV UXS/AT6s7fSWquCQjsnVeO4frIkpfDjx94wvhAMcY9D4SZ3SEwifuBPB5b61FsDC RScM4Briv2GbReg40+cqhj18+w7fLCRIVYWZ80l4oNy3B7bwodS7TENsc0tfGrj2 HO+xG3jkx/cYGxM2KbVhu2tBIwP2LfvKf9D5x/tGndlOEbF/m2/JXiy12DyhAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUMaMcWECN2InaJrKQ/O3LSOiTKW4wHwYDVR0j BBgwFoAUbZS517fBinpJen6fXi4il9VHhtMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzFlYmZkNTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAv NkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82RDk0QjlEN0I3QzE4QTdBNDk3QTdFOUY1RTJFMjI5 N0Q1NDc4NkQzLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8xZWJm ZDUzNjQ5MjA0ZWUzYjQ3YTk1YzEwNDU3ZDU4My8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjYxMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjMxMzQzNTMxMzMu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwQqEfLA/6AwDQYJKoZIhvcNAQELBQADggEBAEurzs/vO6Fsp9py P7yTUr5yi6XCT/u19tU+ZC1GfDCHDogshyXfDpl32gUF9VRCc2PckkreMBYg4bXp gJtKPxCI5JkFiM/Mv7jGuBOp2xzrzhwcbU1VODy+hpXVTygPHN52+/xE/yGuJX7E J0Nkg4LG8R0bxdfTKMmhZAJu/xEkpcrbRNZ/038BaGjrsO0VAPRTZfX/ShyI4QKB HZWzgz4jTdpIyD5BWBimZwr1riPeCe37S60TDYj9I6/0FKng3UNJZ+1m7tGnVVDV hOWp9rbmgwGyos0ahnnkxE4IeMXDM18R1uGZIfftWVy4Suz359MTh4JSSqOasrbH 6Fa9IDA= -----END CERTIFICATE-----Generated at Sat Dec 6 20:04:05 2025 by rpki-client