This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/326131343a373538303a3737303a3a2f34342d3438203d3e20323133383931.roa File: 326131343a373538303a3737303a3a2f34342d3438203d3e20323133383931.roa (raw, json) Hash identifier: woLwL0VEJzWnepdsx0zvpMFwwJXef1WYeYkaz1KcaHg= Subject key identifier: C8:1C:65:45:10:2B:DA:3C:D8:44:76:50:81:7B:E9:49:F8:BE:94:7C Certificate issuer: /CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Certificate serial: 6479FCBD0CF958F718E72E90E104AA1D5C443680 Authority key identifier: 25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A Authority info access: rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/326131343a373538303a3737303a3a2f34342d3438203d3e20323133383931.roa Signing time: Tue 25 Nov 2025 20:09:37 +0000 ROA not before: Tue 25 Nov 2025 20:04:37 +0000 ROA not after: Tue 24 Nov 2026 20:09:37 +0000 asID: 213891 IP address blocks: 2a14:7580:770::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:79:fc:bd:0c:f9:58:f7:18:e7:2e:90:e1:04:aa:1d:5c:44:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Validity Not Before: Nov 25 20:04:37 2025 GMT Not After : Nov 24 20:09:37 2026 GMT Subject: CN=C81C6545102BDA3CD8447650817BE949F8BE947C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ae:42:66:c6:58:33:2d:f9:7a:ea:99:1b:86: b7:3b:8c:77:ac:7a:bd:ea:e8:61:f9:63:55:d2:fc: 45:8f:c4:a6:d6:3c:7c:71:9b:f2:7d:67:3f:ed:02: a3:6b:cd:b4:b9:12:99:94:2a:5a:18:d1:91:eb:ba: 3c:9a:cf:46:87:19:04:18:69:40:cc:63:99:10:81: 4e:fb:f4:cb:72:50:58:dc:ca:c7:f4:04:6a:02:3b: 6d:fe:b5:11:27:48:60:e0:df:9b:84:e4:7e:ea:3f: ea:45:78:36:5d:10:19:3c:50:7a:8c:6c:2a:6d:54: e2:18:87:82:81:44:be:5c:e6:e5:3e:3f:6f:cc:cf: a4:35:75:b7:a4:ac:da:d2:0d:6f:e2:e2:dd:30:17: 48:56:df:5f:97:d6:95:d5:f7:8b:3c:6f:9a:15:7d: 62:8d:a3:87:da:71:78:67:f1:3c:4d:cd:ac:3e:eb: c1:6d:26:92:55:91:0f:b3:b5:78:e1:13:29:57:77: 1c:9e:35:ba:8e:54:e1:54:45:af:1e:eb:48:a8:41: 9b:5c:29:df:85:11:29:fb:8b:82:cc:27:79:cb:7a: 07:37:26:af:b9:37:94:76:09:f6:54:8f:54:34:9b: 91:c7:7b:7d:ee:03:06:d7:fa:f7:8c:35:ab:f1:e7: 34:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1C:65:45:10:2B:DA:3C:D8:44:76:50:81:7B:E9:49:F8:BE:94:7C X509v3 Authority Key Identifier: keyid:25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/326131343a373538303a3737303a3a2f34342d3438203d3e20323133383931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:770::/44 Signature Algorithm: sha256WithRSAEncryption 47:30:f4:b8:fc:7f:fb:43:1a:de:f0:1b:11:1d:bb:7d:a1:cc: 32:b1:52:e5:dc:06:5f:c7:35:7c:76:8f:b3:ec:e9:73:29:df: 68:e0:fb:32:e7:91:b0:40:3a:70:f5:bc:72:94:50:e3:4e:e7: 78:cf:5a:33:35:ab:5f:20:bb:da:91:d5:15:b2:9f:12:5b:89: 61:f8:4e:a3:d6:dc:d8:fc:47:41:c6:71:35:0f:8a:9a:8b:9e: 4d:07:d0:bc:56:ae:f1:df:e4:a1:6d:d0:30:b3:d9:72:f4:1e: 9d:88:1b:2f:a8:2c:10:1b:7b:4b:ce:da:02:19:53:1a:c2:a7: 15:50:62:1d:c0:09:28:02:b9:d9:d4:06:70:c2:e3:20:ea:74: 0f:5e:c4:f8:df:d7:57:21:6d:f7:ad:f6:56:0b:86:e3:8c:8c: 7c:54:73:17:9f:42:53:38:14:03:18:bf:85:2f:2c:14:59:59: a2:36:af:10:02:d6:1d:ee:24:1e:9e:05:b8:30:ad:08:13:19: 48:b8:ee:b1:bd:58:28:8f:14:fb:2b:9c:e0:c0:78:f5:48:98: dc:51:81:69:dc:2c:3e:a3:4f:5f:0b:1f:fd:7c:67:9d:f1:dd: 8b:28:65:82:19:ce:a0:cf:e9:50:8b:f3:3e:df:c8:5c:0d:e5: 42:ce:b9:55 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIUZHn8vQz5WPcY5y6Q4QSqHVxENoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3 MkY1OTUyQTAeFw0yNTExMjUyMDA0MzdaFw0yNjExMjQyMDA5MzdaMDMxMTAvBgNV BAMTKEM4MUM2NTQ1MTAyQkRBM0NEODQ0NzY1MDgxN0JFOTQ5RjhCRTk0N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJrkJmxlgzLfl66pkbhrc7jHes er3q6GH5Y1XS/EWPxKbWPHxxm/J9Zz/tAqNrzbS5EpmUKloY0ZHrujyaz0aHGQQY aUDMY5kQgU779MtyUFjcysf0BGoCO23+tREnSGDg35uE5H7qP+pFeDZdEBk8UHqM bCptVOIYh4KBRL5c5uU+P2/Mz6Q1dbekrNrSDW/i4t0wF0hW31+X1pXV94s8b5oV fWKNo4facXhn8TxNzaw+68FtJpJVkQ+ztXjhEylXdxyeNbqOVOFURa8e60ioQZtc Kd+FESn7i4LMJ3nLegc3Jq+5N5R2CfZUj1Q0m5HHe33uAwbX+veMNavx5zSNAgMB AAGjggJYMIICVDAdBgNVHQ4EFgQUyBxlRRAr2jzYRHZQgXvpSfi+lHwwHwYDVR0j BBgwFoAUJY0c4Mt2qYblbHqQpmun3HL1lSowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJm ZTIzLzEvMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5j cmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3Jwa2kuYXhp dm9yYS5uZXQvcmVwby9BeGl2b3JhLU5ldC8yLzI1OEQxQ0UwQ0I3NkE5ODZFNTZD N0E5MEE2NkJBN0RDNzJGNTk1MkEuY2VyMIG1BggrBgEFBQcBCwSBqDCBpTCBogYI KwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5LzAzZmQwYjc2LTcyNDMtNGIyNi05NzYwLWNjMDdiOTRiZmUyMy8xLzMy NjEzMTM0M2EzNzM1MzgzMDNhMzczNzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIw MzIzMTMzMzgzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gAdwMA0GCSqGSIb3DQEBCwUAA4IB AQBHMPS4/H/7Qxre8BsRHbt9ocwysVLl3AZfxzV8do+z7OlzKd9o4Psy55GwQDpw 9bxylFDjTud4z1ozNatfILvakdUVsp8SW4lh+E6j1tzY/EdBxnE1D4qai55NB9C8 Vq7x3+ShbdAws9ly9B6diBsvqCwQG3tLztoCGVMawqcVUGIdwAkoArnZ1AZwwuMg 6nQPXsT439dXIW33rfZWC4bjjIx8VHMXn0JTOBQDGL+FLywUWVmiNq8QAtYd7iQe ngW4MK0IExlIuO6xvVgojxT7K5zgwHj1SJjcUYFp3Cw+o09fCx/9fGed8d2LKGWC Gc6gz+lQi/M+38hcDeVCzrlV -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:52 2025 by rpki-client