This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/326131343a373538303a3737373a3a2f34382d3438203d3e203136353039.roa File: 326131343a373538303a3737373a3a2f34382d3438203d3e203136353039.roa (raw, json) Hash identifier: xvnqSl1qLoVMIEzXN9sXRb87iGsN7N/pVeZWynFQufE= Subject key identifier: 1B:B8:49:52:0B:DA:2F:32:80:13:E8:54:A5:0F:47:10:19:24:9D:07 Certificate issuer: /CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Certificate serial: 6B30E4508344E2056BE33CD4C76AC0D3B302DDAD Authority key identifier: 25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A Authority info access: rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/326131343a373538303a3737373a3a2f34382d3438203d3e203136353039.roa Signing time: Tue 25 Nov 2025 19:36:14 +0000 ROA not before: Tue 25 Nov 2025 19:31:14 +0000 ROA not after: Tue 24 Nov 2026 19:36:14 +0000 asID: 16509 IP address blocks: 2a14:7580:777::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:30:e4:50:83:44:e2:05:6b:e3:3c:d4:c7:6a:c0:d3:b3:02:dd:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Validity Not Before: Nov 25 19:31:14 2025 GMT Not After : Nov 24 19:36:14 2026 GMT Subject: CN=1BB849520BDA2F328013E854A50F471019249D07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3f:05:50:77:21:d5:88:38:6d:2d:1a:0d:83: ef:a0:4d:95:17:af:94:c1:75:35:09:73:ce:aa:64: 65:07:59:c8:7f:f3:4f:1e:76:34:b6:d6:5e:d5:ce: c2:dc:34:05:95:64:d1:91:51:bb:00:fa:0f:aa:ca: 25:64:c9:59:cd:0c:24:50:39:20:36:f0:c1:87:c4: d9:3d:91:50:e2:be:6d:e4:3e:95:de:00:17:82:ae: c8:40:0c:f5:2d:59:5e:2f:e9:0c:a1:c6:fc:ac:86: 1c:e2:fa:34:a0:56:ff:f8:f0:e0:83:26:1b:4b:1e: 37:81:b0:22:e7:69:cf:69:98:98:e0:07:3d:98:25: 1a:88:fc:41:f5:27:99:d8:2c:68:9f:1d:e9:cd:e6: d0:31:cb:76:5d:d1:35:48:39:d5:55:36:a5:a2:2a: 60:6d:fb:b4:0a:c1:01:9d:6e:51:b9:3f:3b:ef:2b: 72:46:06:2b:ed:3d:61:72:ec:64:43:18:0e:0a:db: eb:45:da:6b:7e:ae:6d:ea:f2:40:62:39:93:40:97: b8:69:d3:5a:82:12:ef:c2:87:92:7f:e8:f8:25:e8: 11:e4:37:e8:3b:4d:f5:af:c4:6a:b5:6d:87:9a:c6: 93:a6:6b:f1:2b:b0:6a:ba:8f:0a:f0:3c:08:d6:1f: 76:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B8:49:52:0B:DA:2F:32:80:13:E8:54:A5:0F:47:10:19:24:9D:07 X509v3 Authority Key Identifier: keyid:25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/326131343a373538303a3737373a3a2f34382d3438203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:777::/48 Signature Algorithm: sha256WithRSAEncryption 00:ab:6e:d7:a8:d4:96:a8:d2:47:14:3d:26:9b:b2:98:5b:ea: ca:8a:6b:05:7c:7e:8b:30:9d:e4:6a:4a:4e:a5:cd:2f:49:c7: ee:75:6c:3b:08:d9:1d:76:e0:f4:07:dd:85:f3:94:fa:52:ba: 41:cf:cd:4c:61:50:e7:44:80:20:c0:44:64:ca:4a:12:3e:63: 66:4a:85:bf:af:5e:ef:42:d2:e7:11:3b:5f:17:7b:4e:5b:a0: 11:ae:cd:24:bc:4b:22:76:93:59:6b:60:b2:61:8f:6b:7e:42: 5c:c0:cd:e0:55:55:f2:57:11:09:91:b4:b1:60:20:be:8c:a6: 76:2d:c9:ba:47:68:34:84:c6:82:5e:2a:b0:49:51:46:57:1c: ee:a4:fc:35:02:3a:21:a9:94:1a:90:f3:79:f8:79:0c:1e:fc: 04:9b:b5:6b:b4:66:5a:00:49:46:48:22:0d:ee:69:12:1f:90: 03:f4:46:b0:b2:f6:a0:87:8f:91:36:d8:0d:6a:cd:8c:93:43: 29:46:4f:b0:67:86:74:32:65:b5:23:f3:a6:7e:43:b4:d7:ca: bd:20:28:03:d3:e8:30:17:d0:00:d5:7a:1e:68:a4:65:0a:4f: e6:c7:15:a2:58:46:6c:e8:8c:30:53:76:08:9d:f8:c9:97:58: 69:7b:70:6a -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUazDkUINE4gVr4zzUx2rA07MC3a0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3 MkY1OTUyQTAeFw0yNTExMjUxOTMxMTRaFw0yNjExMjQxOTM2MTRaMDMxMTAvBgNV BAMTKDFCQjg0OTUyMEJEQTJGMzI4MDEzRTg1NEE1MEY0NzEwMTkyNDlEMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPwVQdyHViDhtLRoNg++gTZUX r5TBdTUJc86qZGUHWch/808edjS21l7VzsLcNAWVZNGRUbsA+g+qyiVkyVnNDCRQ OSA28MGHxNk9kVDivm3kPpXeABeCrshADPUtWV4v6Qyhxvyshhzi+jSgVv/48OCD JhtLHjeBsCLnac9pmJjgBz2YJRqI/EH1J5nYLGifHenN5tAxy3Zd0TVIOdVVNqWi KmBt+7QKwQGdblG5PzvvK3JGBivtPWFy7GRDGA4K2+tF2mt+rm3q8kBiOZNAl7hp 01qCEu/Ch5J/6Pgl6BHkN+g7TfWvxGq1bYeaxpOma/ErsGq6jwrwPAjWH3apAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUG7hJUgvaLzKAE+hUpQ9HEBkknQcwHwYDVR0j BBgwFoAUJY0c4Mt2qYblbHqQpmun3HL1lSowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJm ZTIzLzEvMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5j cmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3Jwa2kuYXhp dm9yYS5uZXQvcmVwby9BeGl2b3JhLU5ldC8yLzI1OEQxQ0UwQ0I3NkE5ODZFNTZD N0E5MEE2NkJBN0RDNzJGNTk1MkEuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYI KwYBBQUHMAuGgZNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5LzAzZmQwYjc2LTcyNDMtNGIyNi05NzYwLWNjMDdiOTRiZmUyMy8xLzMy NjEzMTM0M2EzNzM1MzgzMDNhMzczNzM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw MzEzNjM1MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYAHdzANBgkqhkiG9w0BAQsFAAOCAQEA AKtu16jUlqjSRxQ9JpuymFvqyoprBXx+izCd5GpKTqXNL0nH7nVsOwjZHXbg9Afd hfOU+lK6Qc/NTGFQ50SAIMBEZMpKEj5jZkqFv69e70LS5xE7Xxd7TlugEa7NJLxL InaTWWtgsmGPa35CXMDN4FVV8lcRCZG0sWAgvoymdi3JukdoNITGgl4qsElRRlcc 7qT8NQI6IamUGpDzefh5DB78BJu1a7RmWgBJRkgiDe5pEh+QA/RGsLL2oIePkTbY DWrNjJNDKUZPsGeGdDJltSPzpn5DtNfKvSAoA9PoMBfQANV6HmikZQpP5scVolhG bOiMMFN2CJ34yZdYaXtwag== -----END CERTIFICATE-----Generated at Sat Dec 6 15:39:17 2025 by rpki-client