This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/326131343a373538303a3737353a3a2f34382d3438203d3e203134363138.roa File: 326131343a373538303a3737353a3a2f34382d3438203d3e203134363138.roa (raw, json) Hash identifier: MfUF2laHihcgibdMapv7JAFGkNEIH6JIdDfIW/lhqFE= Subject key identifier: 59:52:58:FC:1B:49:95:1E:DA:20:85:01:C7:9A:FB:4C:DA:B2:7B:26 Certificate issuer: /CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Certificate serial: 75D6474088B0CD1AE535A5B3914BB4E4DEB72EF8 Authority key identifier: 25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A Authority info access: rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/326131343a373538303a3737353a3a2f34382d3438203d3e203134363138.roa Signing time: Tue 25 Nov 2025 17:48:18 +0000 ROA not before: Tue 25 Nov 2025 17:43:18 +0000 ROA not after: Tue 24 Nov 2026 17:48:18 +0000 asID: 14618 IP address blocks: 2a14:7580:775::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d6:47:40:88:b0:cd:1a:e5:35:a5:b3:91:4b:b4:e4:de:b7:2e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Validity Not Before: Nov 25 17:43:18 2025 GMT Not After : Nov 24 17:48:18 2026 GMT Subject: CN=595258FC1B49951EDA208501C79AFB4CDAB27B26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9f:1b:62:7c:a6:28:4e:ad:75:ad:43:8d:6a: 53:7a:78:e0:27:8d:5a:83:b4:fe:b2:7f:d9:a0:42: 97:3b:c2:a6:6a:43:6b:a9:03:94:13:f5:39:57:4b: ab:30:42:13:10:26:2c:48:7c:fa:47:aa:8e:7c:6f: b9:96:c4:48:43:bf:3d:8a:c0:6e:99:14:6e:91:dd: fc:35:3d:fa:6d:4c:40:e1:fa:e2:44:6e:b5:8f:05: 77:5e:75:ab:f3:a0:7b:91:fe:96:8c:de:31:e5:11: 9f:7a:4a:fe:4b:30:ed:b8:68:c0:0e:a6:c4:22:2b: b6:ec:c6:c8:73:90:ea:68:45:55:b3:c6:99:8a:a5: 80:16:96:ba:a0:dd:56:f3:3f:53:16:6b:b0:33:e5: 32:27:bf:f2:14:6e:9c:43:39:0d:66:33:32:87:3e: ba:53:bb:d6:a4:d1:df:3f:8a:72:0e:62:f1:e2:34: f9:35:f6:2b:18:e8:2f:2d:bc:3d:67:4b:33:9d:e3: 1a:aa:1c:78:52:91:78:4f:e3:bd:f3:87:95:63:84: 94:87:f0:5d:85:46:bd:cc:48:fe:a8:93:9b:25:6d: b0:b3:c9:b3:3f:06:aa:41:95:54:48:41:4a:3f:de: 6f:4f:d3:f4:0b:6c:96:ec:93:b5:86:e1:47:d1:cd: b4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:52:58:FC:1B:49:95:1E:DA:20:85:01:C7:9A:FB:4C:DA:B2:7B:26 X509v3 Authority Key Identifier: keyid:25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/326131343a373538303a3737353a3a2f34382d3438203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:775::/48 Signature Algorithm: sha256WithRSAEncryption 14:83:88:d3:04:b9:5a:d9:af:f3:a7:c5:9d:e6:51:b6:ab:42: 8d:a5:15:78:29:21:b3:22:92:e6:a6:ed:c5:b8:ab:b0:71:87: f4:5e:e6:6b:af:de:b9:07:2c:60:31:65:1a:2b:5f:a1:fd:3b: 35:d5:f0:6e:dc:da:0b:30:29:9e:09:40:c1:93:94:a8:03:b7: c2:f4:1f:fb:26:f7:c5:61:86:01:78:9d:df:70:3c:3d:01:40: b5:78:40:b1:55:c8:ee:0f:59:29:ed:bf:cc:a9:b8:85:2d:e6: ac:55:b5:3b:03:88:aa:d1:ef:da:f5:87:e6:98:39:ef:f4:a4: f1:6d:2a:41:ed:e0:cf:25:eb:a1:d7:10:7c:dc:90:e3:16:78: 4a:dd:f1:47:a8:d9:ae:2d:2d:1d:d4:05:bc:6f:20:d7:e0:c7: 61:21:62:6c:ab:2d:58:bb:e7:ce:fd:ed:1e:bd:ab:35:63:eb: cf:92:29:ae:d5:d8:8c:4e:f6:91:ec:05:ad:47:8d:7c:5c:c0: bd:e5:c7:91:46:01:60:f1:b1:2f:fb:bc:88:a8:67:58:6f:13: 31:3c:b8:7c:a7:6d:80:32:96:cf:5d:0f:7f:c8:28:90:28:4d: 39:2a:ad:f0:69:af:47:a9:ca:54:e2:88:74:ff:3c:00:83:96: 07:cf:9b:aa -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUddZHQIiwzRrlNaWzkUu05N63LvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3 MkY1OTUyQTAeFw0yNTExMjUxNzQzMThaFw0yNjExMjQxNzQ4MThaMDMxMTAvBgNV BAMTKDU5NTI1OEZDMUI0OTk1MUVEQTIwODUwMUM3OUFGQjRDREFCMjdCMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0nxtifKYoTq11rUONalN6eOAn jVqDtP6yf9mgQpc7wqZqQ2upA5QT9TlXS6swQhMQJixIfPpHqo58b7mWxEhDvz2K wG6ZFG6R3fw1PfptTEDh+uJEbrWPBXdedavzoHuR/paM3jHlEZ96Sv5LMO24aMAO psQiK7bsxshzkOpoRVWzxpmKpYAWlrqg3VbzP1MWa7Az5TInv/IUbpxDOQ1mMzKH PrpTu9ak0d8/inIOYvHiNPk19isY6C8tvD1nSzOd4xqqHHhSkXhP473zh5VjhJSH 8F2FRr3MSP6ok5slbbCzybM/BqpBlVRIQUo/3m9P0/QLbJbsk7WG4UfRzbRPAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUWVJY/BtJlR7aIIUBx5r7TNqyeyYwHwYDVR0j BBgwFoAUJY0c4Mt2qYblbHqQpmun3HL1lSowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJm ZTIzLzEvMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5j cmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3Jwa2kuYXhp dm9yYS5uZXQvcmVwby9BeGl2b3JhLU5ldC8yLzI1OEQxQ0UwQ0I3NkE5ODZFNTZD N0E5MEE2NkJBN0RDNzJGNTk1MkEuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYI KwYBBQUHMAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5LzAzZmQwYjc2LTcyNDMtNGIyNi05NzYwLWNjMDdiOTRiZmUyMy8xLzMy NjEzMTM0M2EzNzM1MzgzMDNhMzczNzM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw MzEzNDM2MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYAHdTANBgkqhkiG9w0BAQsFAAOCAQEA FIOI0wS5Wtmv86fFneZRtqtCjaUVeCkhsyKS5qbtxbirsHGH9F7ma6/euQcsYDFl Gitfof07NdXwbtzaCzApnglAwZOUqAO3wvQf+yb3xWGGAXid33A8PQFAtXhAsVXI 7g9ZKe2/zKm4hS3mrFW1OwOIqtHv2vWH5pg57/Sk8W0qQe3gzyXrodcQfNyQ4xZ4 St3xR6jZri0tHdQFvG8g1+DHYSFibKstWLvnzv3tHr2rNWPrz5IprtXYjE72kewF rUeNfFzAveXHkUYBYPGxL/u8iKhnWG8TMTy4fKdtgDKWz10Pf8gokChNOSqt8Gmv R6nKVOKIdP88AIOWB8+bqg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:54:09 2025 by rpki-client