This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/326131343a373538303a3737353a3a2f34382d3438203d3e203136353039.roa File: 326131343a373538303a3737353a3a2f34382d3438203d3e203136353039.roa (raw, json) Hash identifier: LbzBckLICgXq7UKYaeP/CXL1PXD0JCr+a84omRC/7VY= Subject key identifier: 69:B4:41:E4:19:B3:5C:6A:21:8C:A0:CE:82:7E:A7:45:E3:D8:E2:C6 Certificate issuer: /CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Certificate serial: 400E4044B4BEF068B39A3F2B8B9F2CBDE69E874F Authority key identifier: 25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A Authority info access: rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/326131343a373538303a3737353a3a2f34382d3438203d3e203136353039.roa Signing time: Tue 25 Nov 2025 17:47:55 +0000 ROA not before: Tue 25 Nov 2025 17:42:55 +0000 ROA not after: Tue 24 Nov 2026 17:47:55 +0000 asID: 16509 IP address blocks: 2a14:7580:775::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:0e:40:44:b4:be:f0:68:b3:9a:3f:2b:8b:9f:2c:bd:e6:9e:87:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Validity Not Before: Nov 25 17:42:55 2025 GMT Not After : Nov 24 17:47:55 2026 GMT Subject: CN=69B441E419B35C6A218CA0CE827EA745E3D8E2C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:04:14:2a:3d:bc:42:7a:44:44:98:af:7f:7a: a5:0b:d8:fb:82:15:ff:78:dd:74:4b:34:6b:e1:bd: 83:6c:f5:eb:75:6f:e9:2d:8a:04:aa:4d:c4:c9:a9: 4b:15:01:10:ce:d6:52:25:48:01:40:82:44:4c:fa: 84:46:b3:f9:4c:ef:61:17:b9:ad:11:f8:19:81:dc: 90:31:eb:81:f4:44:9c:57:7f:52:10:46:96:31:82: eb:b4:ce:63:bc:b4:a3:d3:4e:c9:92:9e:e8:95:03: b2:b9:f1:42:6a:bd:16:3f:4c:a1:d6:62:55:ea:22: 85:55:d2:ba:db:50:a7:07:b1:b7:99:0d:5f:9d:fe: d3:fe:c8:5d:92:86:33:7f:8a:39:e8:99:35:b1:a7: 95:b8:d0:be:9b:36:66:1f:8e:1b:aa:52:2d:2f:bb: 0f:50:ac:38:e3:6d:cf:8a:c2:97:88:c4:db:50:d1: 71:46:cc:2d:d7:8e:33:7d:5c:f5:51:e2:9f:d3:be: 22:08:f5:a2:67:05:c8:c8:18:b0:ab:40:cf:d1:26: c2:f8:4d:00:0a:7e:c2:e0:62:62:73:84:cf:0d:f9: 4f:05:78:db:54:ae:8d:7e:f2:25:a8:f0:7d:df:a7: 03:54:09:18:0f:bc:b8:0e:19:42:e9:e8:92:71:83: f9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B4:41:E4:19:B3:5C:6A:21:8C:A0:CE:82:7E:A7:45:E3:D8:E2:C6 X509v3 Authority Key Identifier: keyid:25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/326131343a373538303a3737353a3a2f34382d3438203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:775::/48 Signature Algorithm: sha256WithRSAEncryption 97:d7:e4:e0:37:39:0e:fb:d1:0b:ed:a7:1c:3d:07:3b:32:a5: b8:47:0d:50:05:a8:7f:b7:1f:87:fc:25:56:51:2e:ce:ff:2d: 17:51:7c:68:c5:fb:03:85:06:76:0a:37:10:62:05:ec:0f:b4: 5d:3e:61:4e:68:2a:ca:62:96:85:45:66:f5:c9:38:d5:17:0c: 6e:24:4d:22:5a:85:e1:9f:c0:bd:b3:97:2f:4c:79:f8:1d:26: b1:4d:7b:02:99:51:45:79:6d:10:21:44:03:80:f0:1e:73:14: a0:2d:b1:04:5d:b8:62:d9:cc:4f:e2:80:8a:b0:81:96:8d:00: c4:a7:67:a3:65:9e:5d:a3:34:e2:0b:60:a3:bd:b8:33:4d:fe: 6e:8b:88:4b:9c:66:38:b5:04:a8:d4:36:1c:80:6f:57:f9:98: 70:a9:51:f9:9d:bb:a6:98:b8:64:d8:60:0e:4c:3f:d9:d8:7b: 25:15:1c:e1:fa:83:65:26:8d:ed:af:15:26:35:82:e2:27:41: d1:94:e1:3a:83:62:ba:7a:29:6b:b9:6f:c4:23:81:79:08:62: a5:e6:b0:3c:0a:13:36:1d:25:45:62:56:45:f7:c0:0b:63:08: 86:05:67:8b:3c:f6:91:4a:1d:41:26:69:ad:32:bc:36:ec:c5: 44:ba:0d:2f -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUQA5ARLS+8Gizmj8ri58sveaeh08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3 MkY1OTUyQTAeFw0yNTExMjUxNzQyNTVaFw0yNjExMjQxNzQ3NTVaMDMxMTAvBgNV BAMTKDY5QjQ0MUU0MTlCMzVDNkEyMThDQTBDRTgyN0VBNzQ1RTNEOEUyQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTBBQqPbxCekREmK9/eqUL2PuC Ff943XRLNGvhvYNs9et1b+ktigSqTcTJqUsVARDO1lIlSAFAgkRM+oRGs/lM72EX ua0R+BmB3JAx64H0RJxXf1IQRpYxguu0zmO8tKPTTsmSnuiVA7K58UJqvRY/TKHW YlXqIoVV0rrbUKcHsbeZDV+d/tP+yF2ShjN/ijnomTWxp5W40L6bNmYfjhuqUi0v uw9QrDjjbc+KwpeIxNtQ0XFGzC3XjjN9XPVR4p/TviII9aJnBcjIGLCrQM/RJsL4 TQAKfsLgYmJzhM8N+U8FeNtUro1+8iWo8H3fpwNUCRgPvLgOGULp6JJxg/mJAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUabRB5BmzXGohjKDOgn6nRePY4sYwHwYDVR0j BBgwFoAUJY0c4Mt2qYblbHqQpmun3HL1lSowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJm ZTIzLzEvMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5j cmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3Jwa2kuYXhp dm9yYS5uZXQvcmVwby9BeGl2b3JhLU5ldC8yLzI1OEQxQ0UwQ0I3NkE5ODZFNTZD N0E5MEE2NkJBN0RDNzJGNTk1MkEuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYI KwYBBQUHMAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5LzAzZmQwYjc2LTcyNDMtNGIyNi05NzYwLWNjMDdiOTRiZmUyMy8xLzMy NjEzMTM0M2EzNzM1MzgzMDNhMzczNzM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw MzEzNjM1MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYAHdTANBgkqhkiG9w0BAQsFAAOCAQEA l9fk4Dc5DvvRC+2nHD0HOzKluEcNUAWof7cfh/wlVlEuzv8tF1F8aMX7A4UGdgo3 EGIF7A+0XT5hTmgqymKWhUVm9ck41RcMbiRNIlqF4Z/AvbOXL0x5+B0msU17AplR RXltECFEA4DwHnMUoC2xBF24YtnMT+KAirCBlo0AxKdno2WeXaM04gtgo724M03+ bouIS5xmOLUEqNQ2HIBvV/mYcKlR+Z27ppi4ZNhgDkw/2dh7JRUc4fqDZSaN7a8V JjWC4idB0ZThOoNiunopa7lvxCOBeQhipeawPAoTNh0lRWJWRffAC2MIhgVnizz2 kUodQSZprTK8NuzFRLoNLw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:39:22 2025 by rpki-client