This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663730303a3a2f34302d3438203d3e20323033363632.roa File: 326131343a316563373a663730303a3a2f34302d3438203d3e20323033363632.roa (raw, json) Hash identifier: TXZSGetReOdbEu0rJcDlVY8E6EFEIEHEr5rTFcqv3xU= Subject key identifier: FD:CC:B6:EC:2B:39:DD:03:40:B4:32:5A:8A:6A:62:05:85:74:31:5F Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434 Certificate serial: 169A802A2805035FA3B01792BD4BC02FBA81DF99 Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663730303a3a2f34302d3438203d3e20323033363632.roa Signing time: Mon 17 Nov 2025 18:56:58 +0000 ROA not before: Mon 17 Nov 2025 18:51:58 +0000 ROA not after: Mon 16 Nov 2026 18:56:58 +0000 asID: 203662 IP address blocks: 2a14:1ec7:f700::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:9a:80:2a:28:05:03:5f:a3:b0:17:92:bd:4b:c0:2f:ba:81:df:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434 Validity Not Before: Nov 17 18:51:58 2025 GMT Not After : Nov 16 18:56:58 2026 GMT Subject: CN=FDCCB6EC2B39DD0340B4325A8A6A62058574315F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8d:e1:13:c3:ef:de:49:65:e6:5a:7b:33:15: 82:a5:1d:0f:be:db:c7:10:da:f2:58:0b:00:af:cc: b2:40:f4:a1:ea:04:c0:a0:b5:ff:0e:46:b0:47:ae: 48:e7:be:d2:e9:ba:5c:7f:cb:79:2c:c8:b5:5d:44: 9a:93:0b:f2:19:ad:9a:a2:e1:f8:90:66:c1:b2:ff: 0d:82:bd:62:5f:fe:e9:ed:33:b3:69:85:c1:90:04: a8:83:a8:9a:6a:20:c5:22:60:41:cc:5e:6d:2b:92: e8:ab:3c:3d:9b:01:10:cb:4b:97:06:df:0e:60:e9: bc:bd:d4:79:f4:a6:9e:46:48:4d:e3:06:84:26:2f: 21:a4:18:30:26:13:41:f5:09:29:1b:b1:31:60:e3: 4b:a9:8f:e5:64:3a:a9:e7:da:b6:46:47:ad:3c:04: 9a:9f:ed:4c:51:ba:c0:41:66:c9:60:b0:00:ee:2c: cf:61:be:04:8a:24:1f:21:38:30:2b:45:11:38:8e: ef:f6:1f:3f:20:4c:f3:2c:c1:e9:bc:20:26:b0:9f: a4:33:94:13:b9:07:75:61:62:4e:fe:c0:e8:8f:83: 20:c4:51:fd:39:8d:2e:7c:75:49:c0:79:6a:91:3c: 62:a1:cc:97:3e:73:a2:02:21:8f:5e:b2:70:7a:99: 87:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CC:B6:EC:2B:39:DD:03:40:B4:32:5A:8A:6A:62:05:85:74:31:5F X509v3 Authority Key Identifier: keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663730303a3a2f34302d3438203d3e20323033363632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1ec7:f700::/40 Signature Algorithm: sha256WithRSAEncryption 09:93:2b:3f:5e:54:af:b1:04:b6:bd:1b:07:0f:ac:41:08:e1: f7:76:0a:c2:26:bc:2e:b8:2d:a8:d1:f7:fd:de:e0:5c:f5:ed: 14:4d:97:43:e8:11:a2:1d:33:34:5c:9e:f7:44:9d:19:49:6c: e8:1b:cb:6b:a7:39:b3:da:30:93:d0:03:fd:07:2b:e6:e9:2f: 59:5d:69:04:f1:e9:a2:ec:ca:c3:38:53:76:8d:b6:d3:b8:09: d5:ea:d5:85:53:ce:f6:fd:5d:19:be:aa:f8:45:c0:06:19:6b: 10:a5:80:2a:10:43:d1:52:70:a2:18:59:80:d2:1c:53:0d:f5: b6:5a:0c:07:40:7c:bf:dc:85:44:c3:9f:f6:3c:94:86:6a:1d: 0f:0d:e3:7c:38:69:1d:62:e3:54:ef:7c:62:11:bc:f7:c9:54: 53:62:7d:16:1f:d1:d8:5d:87:0a:71:48:43:c5:6f:f5:44:be: 42:81:e4:99:f7:b4:cf:35:c8:75:cd:e3:1c:00:0b:3c:57:dc: 22:b1:75:cf:a3:fd:91:d3:a0:af:e1:dd:6b:4d:6e:c3:13:6f: ed:8f:31:8c:b1:13:e0:ef:8e:4a:b1:e1:61:71:b1:e5:83:94: 5b:94:89:00:85:5e:c8:8f:65:41:b4:de:f0:0c:94:66:b3:f8: 92:f3:86:dd -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUFpqAKigFA1+jsBeSvUvAL7qB35kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj NGYzNTQzNDAeFw0yNTExMTcxODUxNThaFw0yNjExMTYxODU2NThaMDMxMTAvBgNV BAMTKEZEQ0NCNkVDMkIzOUREMDM0MEI0MzI1QThBNkE2MjA1ODU3NDMxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFjeETw+/eSWXmWnszFYKlHQ++ 28cQ2vJYCwCvzLJA9KHqBMCgtf8ORrBHrkjnvtLpulx/y3ksyLVdRJqTC/IZrZqi 4fiQZsGy/w2CvWJf/untM7NphcGQBKiDqJpqIMUiYEHMXm0rkuirPD2bARDLS5cG 3w5g6by91Hn0pp5GSE3jBoQmLyGkGDAmE0H1CSkbsTFg40upj+VkOqnn2rZGR608 BJqf7UxRusBBZslgsADuLM9hvgSKJB8hODArRRE4ju/2Hz8gTPMswem8ICawn6Qz lBO5B3VhYk7+wOiPgyDEUf05jS58dUnAeWqRPGKhzJc+c6ICIY9esnB6mYcdAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQU/cy27Cs53QNAtDJaimpiBYV0MV8wHwYDVR0j BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4 NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U elZEUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWEzYmI5M2Yt OThhNC00YzdlLWEwZTEtODA1N2E0ZjA4NmM5LzAvMzI2MTMxMzQzYTMxNjU2MzM3 M2E2NjM3MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMzM2MzYzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoUHsf3MA0GCSqGSIb3DQEBCwUAA4IBAQAJkys/XlSvsQS2vRsH D6xBCOH3dgrCJrwuuC2o0ff93uBc9e0UTZdD6BGiHTM0XJ73RJ0ZSWzoG8trpzmz 2jCT0AP9Byvm6S9ZXWkE8emi7MrDOFN2jbbTuAnV6tWFU872/V0Zvqr4RcAGGWsQ pYAqEEPRUnCiGFmA0hxTDfW2WgwHQHy/3IVEw5/2PJSGah0PDeN8OGkdYuNU73xi Ebz3yVRTYn0WH9HYXYcKcUhDxW/1RL5CgeSZ97TPNch1zeMcAAs8V9wisXXPo/2R 06Cv4d1rTW7DE2/tjzGMsRPg745KseFhcbHlg5RblIkAhV7Ij2VBtN7wDJRms/iS 84bd -----END CERTIFICATE-----Generated at Sat Dec 6 05:37:20 2025 by rpki-client