This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663230303a3a2f34302d3438203d3e20323036353430.roa File: 326131343a316563373a663230303a3a2f34302d3438203d3e20323036353430.roa (raw, json) Hash identifier: qSdNZRVsblfNLTN5jWJzdVW0nG7dD+fw8GdvqXWqzCg= Subject key identifier: 0D:06:A1:20:2E:59:3D:DB:4C:A4:2B:87:13:1C:AB:EF:D4:79:51:92 Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434 Certificate serial: 401F475368938E986A613E15171C5782359A9C6D Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663230303a3a2f34302d3438203d3e20323036353430.roa Signing time: Sun 30 Nov 2025 12:07:30 +0000 ROA not before: Sun 30 Nov 2025 12:02:30 +0000 ROA not after: Sun 29 Nov 2026 12:07:30 +0000 asID: 206540 IP address blocks: 2a14:1ec7:f200::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:1f:47:53:68:93:8e:98:6a:61:3e:15:17:1c:57:82:35:9a:9c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434 Validity Not Before: Nov 30 12:02:30 2025 GMT Not After : Nov 29 12:07:30 2026 GMT Subject: CN=0D06A1202E593DDB4CA42B87131CABEFD4795192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bc:6b:57:67:1e:d9:ca:ae:7f:12:05:15:9a: 4e:b0:33:10:08:d0:5d:82:60:ec:f6:13:33:81:c1: f1:21:e4:8a:71:1c:e8:ec:8a:e6:49:3d:76:6d:3f: ef:97:10:56:bc:6a:61:73:9e:3a:e6:4a:bf:f9:c0: a5:4c:30:3c:8a:76:97:83:63:9d:d6:6c:99:0b:52: ab:d2:2a:83:95:28:d5:0d:eb:4e:06:d3:d8:d9:56: 38:27:ee:e5:2b:02:9a:c3:a4:c9:20:dc:72:97:08: 7c:ee:3a:9f:c2:bf:5a:22:8e:a8:b7:0a:88:13:6e: 68:bb:60:42:d7:5f:00:f9:ac:4f:da:84:ce:c9:2d: 91:99:54:20:4e:bf:d8:fd:71:06:4b:4b:6c:9d:a8: fd:94:40:85:f5:5e:2b:a9:ea:7d:9a:44:a4:53:49: 13:80:83:0a:7a:ce:d3:6b:b0:1c:df:51:5e:09:35: cf:23:49:39:ea:6b:ab:cd:1b:68:8e:aa:9b:7a:50: 47:a4:26:e1:af:b2:78:a6:ee:4a:7d:c5:af:96:6a: bb:8a:28:15:cc:0c:64:45:5c:93:56:4c:a8:29:3d: 6e:fc:b7:5f:e2:95:ab:4a:7b:b1:9b:70:5a:b8:dc: ef:35:b2:d0:15:4b:a2:47:71:61:df:be:39:04:3a: 6e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:06:A1:20:2E:59:3D:DB:4C:A4:2B:87:13:1C:AB:EF:D4:79:51:92 X509v3 Authority Key Identifier: keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663230303a3a2f34302d3438203d3e20323036353430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1ec7:f200::/40 Signature Algorithm: sha256WithRSAEncryption 27:3d:81:7c:93:f0:ed:51:57:f0:de:47:1c:e3:85:e7:5d:82: a0:49:11:f0:a4:1c:7b:f7:cf:14:cb:86:40:31:ab:de:07:d0: c2:d7:bf:49:c9:4c:b3:35:b5:49:45:e6:f4:50:ac:32:ae:b3: cb:f2:79:35:9f:7a:21:fa:47:0a:43:0e:73:e1:ed:36:7b:86: e4:4e:e7:22:e8:72:78:f9:d0:3f:6c:1f:b3:8b:3c:66:da:de: f0:f7:1a:75:bf:3b:e5:5d:a4:43:eb:1e:45:77:b3:1a:e1:1c: ff:23:25:17:ca:f5:94:95:bc:ae:a8:62:6c:25:1d:cb:70:80: 08:18:ab:9c:73:f7:2c:e5:3b:41:41:2f:d8:d2:47:22:81:74: 5b:9b:93:b2:bf:d6:72:e3:f9:5c:c4:21:32:65:77:01:25:0f: 80:40:c9:83:1f:2a:be:4f:0f:4b:4e:dd:4c:0e:f9:be:66:19: cf:77:9f:c3:01:bb:81:a3:18:f0:93:6e:47:70:64:7d:b0:a1: ee:7b:d5:b6:69:7b:bd:67:3c:21:76:a3:6b:95:c3:b6:12:c5: 64:10:d2:70:e4:23:6e:74:15:61:39:45:ae:1c:5d:c4:e6:c4: ea:46:d0:08:fd:aa:63:cd:75:2f:1e:34:3f:f4:5a:86:25:79: 97:ec:33:23 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUQB9HU2iTjphqYT4VFxxXgjWanG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj NGYzNTQzNDAeFw0yNTExMzAxMjAyMzBaFw0yNjExMjkxMjA3MzBaMDMxMTAvBgNV BAMTKDBEMDZBMTIwMkU1OTNEREI0Q0E0MkI4NzEzMUNBQkVGRDQ3OTUxOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtvGtXZx7Zyq5/EgUVmk6wMxAI 0F2CYOz2EzOBwfEh5IpxHOjsiuZJPXZtP++XEFa8amFznjrmSr/5wKVMMDyKdpeD Y53WbJkLUqvSKoOVKNUN604G09jZVjgn7uUrAprDpMkg3HKXCHzuOp/Cv1oijqi3 CogTbmi7YELXXwD5rE/ahM7JLZGZVCBOv9j9cQZLS2ydqP2UQIX1Xiup6n2aRKRT SROAgwp6ztNrsBzfUV4JNc8jSTnqa6vNG2iOqpt6UEekJuGvsnim7kp9xa+WaruK KBXMDGRFXJNWTKgpPW78t1/ilatKe7GbcFq43O81stAVS6JHcWHfvjkEOm4fAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUDQahIC5ZPdtMpCuHExyr79R5UZIwHwYDVR0j BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4 NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U elZEUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWEzYmI5M2Yt OThhNC00YzdlLWEwZTEtODA1N2E0ZjA4NmM5LzAvMzI2MTMxMzQzYTMxNjU2MzM3 M2E2NjMyMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzNjM1MzQzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoUHsfyMA0GCSqGSIb3DQEBCwUAA4IBAQAnPYF8k/DtUVfw3kcc 44XnXYKgSRHwpBx7988Uy4ZAMaveB9DC179JyUyzNbVJReb0UKwyrrPL8nk1n3oh +kcKQw5z4e02e4bkTuci6HJ4+dA/bB+zizxm2t7w9xp1vzvlXaRD6x5Fd7Ma4Rz/ IyUXyvWUlbyuqGJsJR3LcIAIGKucc/cs5TtBQS/Y0kcigXRbm5Oyv9Zy4/lcxCEy ZXcBJQ+AQMmDHyq+Tw9LTt1MDvm+ZhnPd5/DAbuBoxjwk25HcGR9sKHue9W2aXu9 ZzwhdqNrlcO2EsVkENJw5CNudBVhOUWuHF3E5sTqRtAI/apjzXUvHjQ/9FqGJXmX 7DMj -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:29 2025 by rpki-client