This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/326131343a373538303a3737373a3a2f34382d3438203d3e203134363138.roa File: 326131343a373538303a3737373a3a2f34382d3438203d3e203134363138.roa (raw, json) Hash identifier: RTK2m9QZnNSKC5ZVcuz7+tdRZKTs7/hzcAu/hXd2ZTc= Subject key identifier: 0F:E7:B9:74:CA:C6:52:42:E7:8F:52:CD:9A:40:AF:0C:26:A5:2A:CD Certificate issuer: /CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Certificate serial: 160D0626FBC318DDFC993EF468AED892DCEDBDE9 Authority key identifier: 25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A Authority info access: rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/326131343a373538303a3737373a3a2f34382d3438203d3e203134363138.roa Signing time: Tue 25 Nov 2025 19:36:29 +0000 ROA not before: Tue 25 Nov 2025 19:31:29 +0000 ROA not after: Tue 24 Nov 2026 19:36:29 +0000 asID: 14618 IP address blocks: 2a14:7580:777::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:0d:06:26:fb:c3:18:dd:fc:99:3e:f4:68:ae:d8:92:dc:ed:bd:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Validity Not Before: Nov 25 19:31:29 2025 GMT Not After : Nov 24 19:36:29 2026 GMT Subject: CN=0FE7B974CAC65242E78F52CD9A40AF0C26A52ACD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3d:45:df:02:e2:01:2b:b6:e2:90:ca:85:f9: 2f:20:61:34:43:6c:cd:17:c0:ba:49:ce:2b:39:c0: f5:17:3b:52:32:56:cb:9a:18:88:67:73:11:53:d1: 6c:d4:fa:b7:74:3c:0f:5c:f3:99:88:38:fb:d4:46: 03:d2:d0:73:51:31:65:0c:1a:3c:b5:bf:1b:ab:ba: 17:c3:e0:56:91:e9:bf:7d:d8:7a:94:eb:ac:9b:bd: b2:a0:7a:e9:7e:32:2c:3e:e2:9b:ca:91:79:3d:1b: 30:bb:58:6e:d7:6d:44:67:c4:b7:ff:98:4a:62:3d: c1:f3:87:f9:c5:08:d9:f0:64:3a:0c:34:8f:42:d0: ab:4f:91:ae:e0:30:99:ca:30:b9:52:f3:b7:22:db: ef:15:2b:07:fb:73:7f:a1:e7:16:18:35:b7:fa:ff: 96:e8:c8:34:78:c3:09:02:f0:70:66:06:9d:be:25: 7f:1e:ba:7e:3a:33:fc:96:a3:ae:a5:93:70:63:19: 51:8b:c7:fb:43:79:7c:c8:97:77:85:2f:5a:05:dd: e2:ce:6d:fd:84:69:95:07:82:f6:c5:9e:90:e8:90: d5:ea:a1:ac:ce:4a:9f:15:aa:05:14:a1:58:c9:1d: f4:13:3c:40:aa:87:c2:fd:a9:c5:f3:3c:71:a0:36: 3b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E7:B9:74:CA:C6:52:42:E7:8F:52:CD:9A:40:AF:0C:26:A5:2A:CD X509v3 Authority Key Identifier: keyid:25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/326131343a373538303a3737373a3a2f34382d3438203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:777::/48 Signature Algorithm: sha256WithRSAEncryption 86:17:b3:31:c1:7b:34:dd:c9:db:b1:ff:88:88:ad:dd:79:80: 84:7a:83:33:f1:88:08:c5:44:ed:c3:43:5d:40:cf:af:87:aa: a6:77:71:bc:14:e3:70:7e:1f:f8:00:2f:c6:95:24:c8:3a:84: 50:94:2b:c6:0d:e4:89:24:dd:36:08:ed:29:02:ba:49:73:29: 35:8b:f7:a3:d2:5a:6d:94:c0:55:d2:d9:2b:6a:4d:71:1f:f4: 3f:77:86:1e:7d:70:ad:4c:c6:65:d7:e9:4e:ae:f1:da:74:62: da:55:4b:9b:da:f0:22:67:c8:14:0d:92:a9:1b:b5:58:1c:d8: f6:7e:8f:ed:b8:84:f2:75:29:e0:4f:5a:28:88:d0:03:6f:57: 02:6a:1c:4a:80:47:15:6d:6a:8a:3b:fd:f3:ef:54:d4:75:30: cc:0b:cd:3c:b2:fd:91:fc:2f:64:f4:fa:2e:cd:5b:18:c0:39: 64:a9:84:69:6b:66:9a:51:c9:b3:4d:15:28:cb:18:35:9b:17: 0a:52:21:95:c4:b7:ed:2e:6f:ac:6f:97:fe:d0:b8:7e:a4:db: fe:24:53:5d:e0:6e:12:59:3c:86:da:2d:6f:e6:bc:78:c3:ea: c9:1f:9a:40:aa:19:4c:4a:fc:0a:c6:55:3c:80:52:3f:e7:fa: a2:1e:ee:28 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUFg0GJvvDGN38mT70aK7YktztvekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3 MkY1OTUyQTAeFw0yNTExMjUxOTMxMjlaFw0yNjExMjQxOTM2MjlaMDMxMTAvBgNV BAMTKDBGRTdCOTc0Q0FDNjUyNDJFNzhGNTJDRDlBNDBBRjBDMjZBNTJBQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPUXfAuIBK7bikMqF+S8gYTRD bM0XwLpJzis5wPUXO1IyVsuaGIhncxFT0WzU+rd0PA9c85mIOPvURgPS0HNRMWUM Gjy1vxuruhfD4FaR6b992HqU66ybvbKgeul+Miw+4pvKkXk9GzC7WG7XbURnxLf/ mEpiPcHzh/nFCNnwZDoMNI9C0KtPka7gMJnKMLlS87ci2+8VKwf7c3+h5xYYNbf6 /5boyDR4wwkC8HBmBp2+JX8eun46M/yWo66lk3BjGVGLx/tDeXzIl3eFL1oF3eLO bf2EaZUHgvbFnpDokNXqoazOSp8VqgUUoVjJHfQTPECqh8L9qcXzPHGgNjtLAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUD+e5dMrGUkLnj1LNmkCvDCalKs0wHwYDVR0j BBgwFoAUJY0c4Mt2qYblbHqQpmun3HL1lSowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJm ZTIzLzEvMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5j cmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3Jwa2kuYXhp dm9yYS5uZXQvcmVwby9BeGl2b3JhLU5ldC8yLzI1OEQxQ0UwQ0I3NkE5ODZFNTZD N0E5MEE2NkJBN0RDNzJGNTk1MkEuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYI KwYBBQUHMAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5LzAzZmQwYjc2LTcyNDMtNGIyNi05NzYwLWNjMDdiOTRiZmUyMy8xLzMy NjEzMTM0M2EzNzM1MzgzMDNhMzczNzM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw MzEzNDM2MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYAHdzANBgkqhkiG9w0BAQsFAAOCAQEA hhezMcF7NN3J27H/iIit3XmAhHqDM/GICMVE7cNDXUDPr4eqpndxvBTjcH4f+AAv xpUkyDqEUJQrxg3kiSTdNgjtKQK6SXMpNYv3o9JabZTAVdLZK2pNcR/0P3eGHn1w rUzGZdfpTq7x2nRi2lVLm9rwImfIFA2SqRu1WBzY9n6P7biE8nUp4E9aKIjQA29X AmocSoBHFW1qijv98+9U1HUwzAvNPLL9kfwvZPT6Ls1bGMA5ZKmEaWtmmlHJs00V KMsYNZsXClIhlcS37S5vrG+X/tC4fqTb/iRTXeBuElk8htotb+a8eMPqyR+aQKoZ TEr8CsZVPIBSP+f6oh7uKA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:54:08 2025 by rpki-client