This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3161313a3a2f34382d3438203d3e20323135363137.roa File: 326131343a373538313a3161313a3a2f34382d3438203d3e20323135363137.roa (raw, json) Hash identifier: LcoB7WDy2zFqL0IusHngV4nAMDB+ri5nZ3VtOLNnLsU= Subject key identifier: BD:02:C8:75:9E:C0:55:C5:21:BF:DE:4E:7C:AC:8E:54:84:52:B8:13 Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 507BA091DDEB266D663C0806CB8A26C2ADB624DD Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3161313a3a2f34382d3438203d3e20323135363137.roa Signing time: Mon 10 Nov 2025 14:01:33 +0000 ROA not before: Mon 10 Nov 2025 13:56:33 +0000 ROA not after: Mon 09 Nov 2026 14:01:33 +0000 asID: 215617 IP address blocks: 2a14:7581:1a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:7b:a0:91:dd:eb:26:6d:66:3c:08:06:cb:8a:26:c2:ad:b6:24:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Nov 10 13:56:33 2025 GMT Not After : Nov 9 14:01:33 2026 GMT Subject: CN=BD02C8759EC055C521BFDE4E7CAC8E548452B813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:16:1c:bb:f3:1b:e7:ee:9a:bb:eb:4d:a7: e0:40:94:f5:d7:c8:29:5c:e5:e5:ef:d3:bc:61:54: e5:72:f6:5c:9a:c6:d2:32:eb:ff:53:c6:00:f8:ca: 0c:0d:1c:d8:53:d6:a8:4e:15:ac:2d:37:c9:2c:b4: 8c:56:03:6e:e9:19:0c:c3:e8:4b:a7:e8:e3:b5:fd: 80:a3:35:b2:88:cf:75:6b:d2:e9:63:a0:1f:ca:22: 18:8d:d0:8e:9e:c1:62:5a:29:6f:17:99:8e:5d:31: 92:a5:a2:95:66:05:ee:6d:2c:aa:a7:f8:f1:cd:21: ee:02:53:25:e8:be:fe:2d:ee:e6:42:66:9d:6b:e8: 26:ed:8f:b4:4b:0e:e0:3a:5b:d1:d5:e4:96:fc:bf: a9:1e:b5:d4:9d:7a:95:c5:49:f5:42:76:a2:dd:e0: f6:2e:a6:b1:eb:da:61:23:50:7f:da:66:bc:85:9b: 57:aa:a4:4d:ca:fa:33:53:9e:e7:b1:be:bf:ee:05: 92:f6:9a:6b:0e:d7:a7:4b:0b:1c:18:85:1f:95:29: df:98:b5:2a:c5:c0:41:69:44:14:3b:59:41:3a:3a: ad:a2:0f:2f:c6:53:2d:d6:34:7a:8c:01:1c:96:04: d1:07:dc:eb:c8:5e:43:56:5d:36:ef:1f:f3:d3:ea: 7d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:02:C8:75:9E:C0:55:C5:21:BF:DE:4E:7C:AC:8E:54:84:52:B8:13 X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3161313a3a2f34382d3438203d3e20323135363137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:1a1::/48 Signature Algorithm: sha256WithRSAEncryption 82:eb:99:b4:7e:01:77:25:b9:3c:47:06:a5:08:3a:53:77:68: f6:19:37:4f:a7:a4:f2:4c:c8:10:ea:61:bf:6e:ae:67:89:e8: 11:0e:50:23:56:01:74:22:85:e9:7c:6e:e5:50:38:6d:35:7f: 1a:a7:8f:b2:66:e5:90:fd:5d:06:0f:80:b4:2a:76:3d:87:c8: e3:38:22:eb:99:f9:e4:a3:d8:f0:82:21:5d:66:c7:22:8b:17: 05:ad:31:40:6a:56:fe:ba:2f:d4:ce:b5:85:78:83:59:45:67: f6:dd:fc:0f:69:9b:ee:ee:c3:31:d7:d2:7f:3d:f5:f3:26:7a: 5b:56:3c:4f:a4:52:f8:40:6d:a6:f2:2b:03:05:84:4c:12:38: a1:0c:a7:32:58:94:11:4e:02:2c:77:c8:40:7d:db:5e:c7:b9: fb:d0:21:47:ab:c7:26:e4:5e:7b:fd:c0:15:3d:a4:ad:1e:1d: 76:32:78:8a:a5:3e:0d:fc:87:7c:b3:2c:69:db:aa:36:7b:85: 8f:f8:5d:ea:3a:84:09:c6:c8:84:2b:a5:fe:04:14:a3:0c:80: b4:80:37:33:03:b6:ec:77:66:7b:4b:60:09:70:dc:ff:0b:9a: 6a:9a:9f:59:1b:5a:e2:89:23:45:fc:e1:1c:26:32:01:6f:17: b2:84:2d:2c -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUUHugkd3rJm1mPAgGy4omwq22JN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNTExMTAxMzU2MzNaFw0yNjExMDkxNDAxMzNaMDMxMTAvBgNV BAMTKEJEMDJDODc1OUVDMDU1QzUyMUJGREU0RTdDQUM4RTU0ODQ1MkI4MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC97xYcu/Mb5+6au+tNp+BAlPXX yClc5eXv07xhVOVy9lyaxtIy6/9TxgD4ygwNHNhT1qhOFawtN8kstIxWA27pGQzD 6Eun6OO1/YCjNbKIz3Vr0uljoB/KIhiN0I6ewWJaKW8XmY5dMZKlopVmBe5tLKqn +PHNIe4CUyXovv4t7uZCZp1r6Cbtj7RLDuA6W9HV5Jb8v6ketdSdepXFSfVCdqLd 4PYuprHr2mEjUH/aZryFm1eqpE3K+jNTnuexvr/uBZL2mmsO16dLCxwYhR+VKd+Y tSrFwEFpRBQ7WUE6Oq2iDy/GUy3WNHqMARyWBNEH3OvIXkNWXTbvH/PT6n2vAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUvQLIdZ7AVcUhv95OfKyOVIRSuBMwHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMxNjEzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTM2MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYEBoTANBgkqhkiG9w0BAQsFAAOCAQEAguuZ tH4BdyW5PEcGpQg6U3do9hk3T6ek8kzIEOphv26uZ4noEQ5QI1YBdCKF6Xxu5VA4 bTV/GqePsmblkP1dBg+AtCp2PYfI4zgi65n55KPY8IIhXWbHIosXBa0xQGpW/rov 1M61hXiDWUVn9t38D2mb7u7DMdfSfz318yZ6W1Y8T6RS+EBtpvIrAwWETBI4oQyn MliUEU4CLHfIQH3bXse5+9AhR6vHJuRee/3AFT2krR4ddjJ4iqU+DfyHfLMsaduq NnuFj/hd6jqECcbIhCul/gQUowyAtIA3MwO27Hdme0tgCXDc/wuaapqfWRta4okj RfzhHCYyAW8XsoQtLA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:42:47 2025 by rpki-client