This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3231303a3a2f34382d3438203d3e20323136333234.roa File: 326131343a373538313a3231303a3a2f34382d3438203d3e20323136333234.roa (raw, json) Hash identifier: TmjYuvvE7dkdGxJdUg55utrXQMF7Cqzr0X12Z4UGOMQ= Subject key identifier: 70:83:9C:48:33:8B:28:C3:DE:84:0D:25:DE:03:D1:82:48:64:41:D7 Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 0673D55456C1A16A3F29DF014B712D8C7D0274BC Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3231303a3a2f34382d3438203d3e20323136333234.roa Signing time: Sat 29 Nov 2025 09:03:20 +0000 ROA not before: Sat 29 Nov 2025 08:58:20 +0000 ROA not after: Sat 28 Nov 2026 09:03:20 +0000 asID: 216324 IP address blocks: 2a14:7581:210::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:73:d5:54:56:c1:a1:6a:3f:29:df:01:4b:71:2d:8c:7d:02:74:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Nov 29 08:58:20 2025 GMT Not After : Nov 28 09:03:20 2026 GMT Subject: CN=70839C48338B28C3DE840D25DE03D182486441D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:d7:0d:c5:e7:f7:7c:8a:16:46:74:3e:b9: bb:3d:1a:d9:64:5d:1c:e1:eb:3e:03:22:f7:32:b5: 4e:c2:18:1e:43:79:fd:db:94:17:e3:a6:c5:ad:1a: 46:cb:40:24:2d:e1:a8:60:f3:65:f3:73:dd:03:97: 8d:8d:1f:52:a8:a6:46:07:da:68:a9:2a:84:85:39: a0:21:0a:40:36:8e:2e:c5:cf:c2:a9:bf:18:da:e0: 54:e0:6f:27:45:d0:4c:63:bb:49:0c:fa:2f:57:02: 77:ec:a3:19:0e:f0:df:71:59:37:8b:fa:ed:2c:a4: 36:d1:16:0b:d9:98:e6:2f:06:e8:1f:fd:3b:03:dd: fb:f5:e9:2e:c5:21:b4:16:6e:e3:1c:b6:54:d6:62: 77:10:4e:55:d8:26:56:6a:b1:3b:06:94:d1:c0:a9: 19:c3:d9:59:76:c3:64:fe:db:6c:60:4e:07:b7:ea: d6:09:38:7b:4c:f8:6e:12:80:2a:09:de:18:92:ad: b5:69:9b:cf:29:ec:ff:12:99:5a:7f:66:1d:8a:f2: 07:68:3f:dd:08:22:6f:be:ff:77:15:fa:e6:ac:ee: 3a:d9:43:68:a3:b0:8b:ab:c3:e9:9f:29:df:4f:86: 81:85:d6:b8:10:ef:04:5c:6f:86:bc:a7:96:ed:01: 1e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:83:9C:48:33:8B:28:C3:DE:84:0D:25:DE:03:D1:82:48:64:41:D7 X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3231303a3a2f34382d3438203d3e20323136333234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:210::/48 Signature Algorithm: sha256WithRSAEncryption 0c:a8:95:62:c8:c9:bd:0b:ec:c1:1f:05:1b:aa:44:3b:6b:e1: e8:4b:ee:d7:83:44:90:7b:7c:8f:f4:f3:99:d7:f2:b2:a9:f2: 4e:84:55:7f:18:a1:0d:d9:11:67:e3:86:fa:d1:5b:90:2c:ee: c3:68:e7:28:21:9f:84:36:a6:c5:43:67:4b:68:a2:94:fb:79: a6:dc:87:95:56:e7:a0:4b:f3:d3:0e:85:7d:ae:39:82:ee:cc: 18:5d:aa:55:b3:9a:d2:95:28:c0:6c:be:93:e4:ef:f0:dc:99: 7d:1d:24:e0:f0:86:f8:1b:71:7f:95:3a:fc:cd:35:cf:3e:52: 90:4c:6d:ab:cf:db:5b:fb:52:14:30:1e:71:d7:00:3d:12:39: 2d:35:da:26:1c:79:06:aa:2d:1e:1f:16:5f:71:f8:31:06:ac: 54:cf:77:2d:83:17:55:35:7f:f1:1c:fe:16:89:a2:cd:5f:ec: b4:57:e0:f6:81:26:40:1e:d3:e5:d2:98:95:e2:8d:30:07:93: cc:79:f5:0e:81:cf:70:9a:9c:a2:1d:ed:81:c4:3b:9f:57:08: 78:1f:62:c7:d9:d1:f2:8b:9a:d0:70:83:c1:fb:c4:84:80:06: 59:b9:55:df:6e:36:88:21:6e:1d:80:3e:51:96:99:c8:e6:cc: 9f:13:13:65 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUBnPVVFbBoWo/Kd8BS3EtjH0CdLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNTExMjkwODU4MjBaFw0yNjExMjgwOTAzMjBaMDMxMTAvBgNV BAMTKDcwODM5QzQ4MzM4QjI4QzNERTg0MEQyNURFMDNEMTgyNDg2NDQxRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyptcNxef3fIoWRnQ+ubs9Gtlk XRzh6z4DIvcytU7CGB5Def3blBfjpsWtGkbLQCQt4ahg82Xzc90Dl42NH1KopkYH 2mipKoSFOaAhCkA2ji7Fz8Kpvxja4FTgbydF0Exju0kM+i9XAnfsoxkO8N9xWTeL +u0spDbRFgvZmOYvBugf/TsD3fv16S7FIbQWbuMctlTWYncQTlXYJlZqsTsGlNHA qRnD2Vl2w2T+22xgTge36tYJOHtM+G4SgCoJ3hiSrbVpm88p7P8SmVp/Zh2K8gdo P90IIm++/3cV+uas7jrZQ2ijsIurw+mfKd9PhoGF1rgQ7wRcb4a8p5btAR4NAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUcIOcSDOLKMPehA0l3gPRgkhkQdcwHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMyMzEzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NjMzMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYECEDANBgkqhkiG9w0BAQsFAAOCAQEADKiV YsjJvQvswR8FG6pEO2vh6Evu14NEkHt8j/TzmdfysqnyToRVfxihDdkRZ+OG+tFb kCzuw2jnKCGfhDamxUNnS2iilPt5ptyHlVbnoEvz0w6Ffa45gu7MGF2qVbOa0pUo wGy+k+Tv8NyZfR0k4PCG+Btxf5U6/M01zz5SkExtq8/bW/tSFDAecdcAPRI5LTXa Jhx5BqotHh8WX3H4MQasVM93LYMXVTV/8Rz+FomizV/stFfg9oEmQB7T5dKYleKN MAeTzHn1DoHPcJqcoh3tgcQ7n1cIeB9ix9nR8oua0HCDwfvEhIAGWblV3242iCFu HYA+UZaZyObMnxMTZQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:22:02 2025 by rpki-client