This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3161323a3a2f34382d3438203d3e20323135363137.roa File: 326131343a373538313a3161323a3a2f34382d3438203d3e20323135363137.roa (raw, json) Hash identifier: QWmyZ3NwBgKAB9vvDkE+0Uy3DgpC9XfAtbSvaFUZSsQ= Subject key identifier: FA:BC:73:3A:A7:39:8C:49:1F:99:3C:E8:21:93:61:E4:B0:22:4D:20 Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 5DB8B3549B1B92097F4F30C20F3690944EA08059 Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3161323a3a2f34382d3438203d3e20323135363137.roa Signing time: Mon 10 Nov 2025 14:01:33 +0000 ROA not before: Mon 10 Nov 2025 13:56:33 +0000 ROA not after: Mon 09 Nov 2026 14:01:33 +0000 asID: 215617 IP address blocks: 2a14:7581:1a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b8:b3:54:9b:1b:92:09:7f:4f:30:c2:0f:36:90:94:4e:a0:80:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Nov 10 13:56:33 2025 GMT Not After : Nov 9 14:01:33 2026 GMT Subject: CN=FABC733AA7398C491F993CE8219361E4B0224D20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bb:e4:c7:fb:da:c2:0a:52:19:a4:19:96:4a: 1b:cc:2a:27:e1:74:e5:b1:d7:63:e0:22:75:a1:15: d5:27:47:22:94:92:2f:f4:7b:7a:a0:01:99:58:b9: 12:d4:0a:38:73:45:1d:3d:ca:85:1d:73:bb:2e:5e: d6:ae:a1:98:1a:f0:b5:6e:bc:8d:65:c5:e5:80:8c: 46:80:54:e0:c9:23:fd:6e:71:f5:f9:93:13:ef:94: c7:32:ee:19:39:4b:86:e0:8b:31:68:c7:82:91:49: 08:40:35:d8:ce:ee:f2:97:55:ff:8f:39:4e:54:62: 2b:1a:e2:bb:86:d2:31:b9:30:45:3e:cd:f0:54:01: 66:bc:71:b3:03:cc:14:0f:3b:ac:af:77:a6:ef:03: 5b:00:94:be:b9:ef:cd:09:14:37:8e:8c:46:2a:0c: 74:c1:5d:d2:0e:2f:48:f3:20:81:2f:61:20:29:6b: 52:45:6f:a4:54:37:bc:dd:ef:c8:78:29:05:27:2a: fd:a0:3d:cc:f8:56:19:90:12:c5:24:1c:9e:6a:00: ad:88:a5:56:4d:92:71:9d:08:24:e4:54:7b:a1:38: 7f:42:cc:2d:7b:18:9d:4c:d9:bc:1a:3e:f8:0a:b7: 37:76:23:e4:8f:dd:ac:42:a3:98:90:eb:2e:7e:51: 18:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BC:73:3A:A7:39:8C:49:1F:99:3C:E8:21:93:61:E4:B0:22:4D:20 X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3161323a3a2f34382d3438203d3e20323135363137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:1a2::/48 Signature Algorithm: sha256WithRSAEncryption 5c:2a:84:1e:f7:cd:04:e7:30:88:9a:b6:1f:09:da:12:85:83: da:1b:0b:96:8b:a6:a5:60:87:f3:d8:d7:00:41:57:9a:65:e7: cb:ea:e6:47:c5:08:49:07:a0:4e:ad:67:08:ad:40:18:74:e1: cc:1c:2a:c1:ef:44:89:57:08:32:2b:59:1d:c5:ce:73:47:cd: 29:5b:fb:d5:34:9f:3a:f2:fc:3b:e8:96:50:15:35:ce:ff:0e: e5:d2:30:ff:0a:45:da:de:85:85:e4:92:10:19:37:11:62:d2: 5b:29:6d:e0:27:57:73:70:3d:c9:a7:a4:40:bd:eb:de:1f:5b: 1f:cb:2a:67:1a:7c:0a:01:60:99:0a:2a:1b:b9:12:02:0c:2e: 2a:a5:fb:a5:7a:fe:74:b5:d0:3c:08:55:62:4f:31:23:cd:92: 43:41:4b:09:2f:41:23:7f:f8:ef:6f:2e:07:66:04:08:ac:76: 72:69:1b:11:63:84:8c:ad:5e:d9:ac:8a:2b:9c:56:22:d7:86: f2:15:ec:76:3f:1d:ba:de:78:30:c4:bd:85:c6:4e:f6:be:f2: c9:7d:82:41:fa:25:e2:4a:06:32:f2:25:14:a8:0b:a6:df:43: 50:db:c8:17:60:c0:8c:03:22:78:e4:c8:85:8d:68:5c:a9:af: 45:d1:5b:3d -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUXbizVJsbkgl/TzDCDzaQlE6ggFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNTExMTAxMzU2MzNaFw0yNjExMDkxNDAxMzNaMDMxMTAvBgNV BAMTKEZBQkM3MzNBQTczOThDNDkxRjk5M0NFODIxOTM2MUU0QjAyMjREMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCru+TH+9rCClIZpBmWShvMKifh dOWx12PgInWhFdUnRyKUki/0e3qgAZlYuRLUCjhzRR09yoUdc7suXtauoZga8LVu vI1lxeWAjEaAVODJI/1ucfX5kxPvlMcy7hk5S4bgizFox4KRSQhANdjO7vKXVf+P OU5UYisa4ruG0jG5MEU+zfBUAWa8cbMDzBQPO6yvd6bvA1sAlL65780JFDeOjEYq DHTBXdIOL0jzIIEvYSApa1JFb6RUN7zd78h4KQUnKv2gPcz4VhmQEsUkHJ5qAK2I pVZNknGdCCTkVHuhOH9CzC17GJ1M2bwaPvgKtzd2I+SP3axCo5iQ6y5+URhZAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQU+rxzOqc5jEkfmTzoIZNh5LAiTSAwHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMxNjEzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTM2MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYEBojANBgkqhkiG9w0BAQsFAAOCAQEAXCqE HvfNBOcwiJq2HwnaEoWD2hsLloumpWCH89jXAEFXmmXny+rmR8UISQegTq1nCK1A GHThzBwqwe9EiVcIMitZHcXOc0fNKVv71TSfOvL8O+iWUBU1zv8O5dIw/wpF2t6F heSSEBk3EWLSWylt4CdXc3A9yaekQL3r3h9bH8sqZxp8CgFgmQoqG7kSAgwuKqX7 pXr+dLXQPAhVYk8xI82SQ0FLCS9BI3/4728uB2YECKx2cmkbEWOEjK1e2ayKK5xW IteG8hXsdj8dut54MMS9hcZO9r7yyX2CQfol4koGMvIlFKgLpt9DUNvIF2DAjAMi eOTIhY1oXKmvRdFbPQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:21:00 2025 by rpki-client