This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3265323a3a2f34382d3438203d3e20323136333234.roa File: 326131343a373538313a3265323a3a2f34382d3438203d3e20323136333234.roa (raw, json) Hash identifier: GKXLCSeFsPXA+5XR/7Yw2sxktMmqnqOuZqCtrK/Shm0= Subject key identifier: 12:DF:C9:A4:DD:78:F6:81:17:65:66:6A:D0:2F:2D:2A:DF:C1:99:A9 Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 78FB1C8EE18E134475CAAAF86CF596F4F00DA4DB Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3265323a3a2f34382d3438203d3e20323136333234.roa Signing time: Tue 25 Nov 2025 13:01:47 +0000 ROA not before: Tue 25 Nov 2025 12:56:47 +0000 ROA not after: Tue 24 Nov 2026 13:01:47 +0000 asID: 216324 IP address blocks: 2a14:7581:2e2::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:fb:1c:8e:e1:8e:13:44:75:ca:aa:f8:6c:f5:96:f4:f0:0d:a4:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Nov 25 12:56:47 2025 GMT Not After : Nov 24 13:01:47 2026 GMT Subject: CN=12DFC9A4DD78F6811765666AD02F2D2ADFC199A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e6:22:28:f3:57:bf:f2:d1:65:4c:f0:88:28: 34:64:fd:af:be:b8:43:97:bb:ec:c2:57:81:9f:08: c2:83:9a:4b:b6:fd:77:87:02:f3:d2:65:fd:e0:a1: 7c:1e:8e:bc:69:b0:66:84:29:2b:cb:f9:e7:ed:c5: f3:1f:3d:c9:3d:2d:80:2a:c2:b6:63:4b:89:2c:31: dd:d2:9c:a8:a5:df:d8:b3:db:73:70:c6:5a:18:95: 99:f2:33:e5:c6:66:c4:4d:13:0c:55:e0:75:af:1a: 98:54:a1:a4:ff:ad:81:50:aa:74:c2:f0:55:28:1d: be:5c:eb:4f:de:eb:f3:78:c1:d4:b9:e7:ab:24:6a: 2a:8c:04:3b:85:7c:b8:cd:1b:7c:ff:ae:33:bd:f8: b4:80:e2:72:3f:a5:fa:7c:34:f2:ef:0e:b0:7e:cd: 64:26:c1:35:f3:a6:2e:04:84:f0:86:d8:7b:b7:5f: 93:35:62:c7:08:dc:aa:b1:8a:e8:eb:ae:1b:90:f4: c7:6b:ee:ef:aa:82:aa:27:e7:84:5c:51:80:35:db: 32:39:53:33:aa:0b:d2:7c:15:ab:8d:83:ab:02:a1: 6e:f3:a2:b8:50:63:23:69:22:fd:0d:21:ac:68:bb: d6:74:4b:e5:ae:93:1a:ac:00:c5:32:17:65:62:48: 62:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DF:C9:A4:DD:78:F6:81:17:65:66:6A:D0:2F:2D:2A:DF:C1:99:A9 X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3265323a3a2f34382d3438203d3e20323136333234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:2e2::/48 Signature Algorithm: sha256WithRSAEncryption 5a:ac:7c:b6:a4:28:67:6d:6c:3f:60:28:32:83:a7:c2:47:64: 6f:1d:8a:5a:75:06:4a:93:41:ff:f7:80:64:6e:72:91:7e:c3: 68:84:1b:35:a8:c6:5b:b5:b5:74:c4:21:70:ce:c5:ba:dd:6a: 69:2e:02:02:96:26:6c:7a:5b:82:10:5c:48:f6:21:76:9d:12: 00:7c:7a:e7:7c:d0:f6:ac:7a:a5:1e:16:0d:63:f7:1a:4e:52: ca:26:62:0f:ea:c4:44:8c:33:8e:ac:0a:23:7f:8d:71:04:c1: 84:e2:8f:eb:41:e5:2d:d0:f3:de:f3:5a:2d:b8:b4:fe:46:de: 2b:cd:25:00:63:0d:28:d0:b2:2c:4d:2d:a1:ad:3a:e8:45:2e: 60:05:45:a2:01:2a:09:db:b7:9b:37:b7:d7:fb:b5:ce:54:09: 1a:ce:22:d7:ec:d3:21:2d:0b:70:77:d4:48:6c:6d:4e:06:48: bd:f5:76:41:17:af:3f:75:ac:b4:ca:e4:b2:57:38:f7:25:15: e3:8c:d1:3d:38:50:42:08:10:1c:93:ce:52:a4:ce:c3:55:12: 80:12:06:2a:ff:83:e5:98:f5:0a:3e:f7:1a:5f:35:81:05:70: 15:0c:60:3d:74:df:dc:a5:bf:70:99:7d:c0:ac:3f:51:65:ca: eb:d9:30:f8 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUePscjuGOE0R1yqr4bPWW9PANpNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNTExMjUxMjU2NDdaFw0yNjExMjQxMzAxNDdaMDMxMTAvBgNV BAMTKDEyREZDOUE0REQ3OEY2ODExNzY1NjY2QUQwMkYyRDJBREZDMTk5QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65iIo81e/8tFlTPCIKDRk/a++ uEOXu+zCV4GfCMKDmku2/XeHAvPSZf3goXwejrxpsGaEKSvL+eftxfMfPck9LYAq wrZjS4ksMd3SnKil39iz23NwxloYlZnyM+XGZsRNEwxV4HWvGphUoaT/rYFQqnTC 8FUoHb5c60/e6/N4wdS556skaiqMBDuFfLjNG3z/rjO9+LSA4nI/pfp8NPLvDrB+ zWQmwTXzpi4EhPCG2Hu3X5M1YscI3KqxiujrrhuQ9Mdr7u+qgqon54RcUYA12zI5 UzOqC9J8FauNg6sCoW7zorhQYyNpIv0NIaxou9Z0S+WukxqsAMUyF2ViSGJrAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUEt/JpN149oEXZWZq0C8tKt/BmakwHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMyNjUzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NjMzMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYEC4jANBgkqhkiG9w0BAQsFAAOCAQEAWqx8 tqQoZ21sP2AoMoOnwkdkbx2KWnUGSpNB//eAZG5ykX7DaIQbNajGW7W1dMQhcM7F ut1qaS4CApYmbHpbghBcSPYhdp0SAHx653zQ9qx6pR4WDWP3Gk5SyiZiD+rERIwz jqwKI3+NcQTBhOKP60HlLdDz3vNaLbi0/kbeK80lAGMNKNCyLE0toa066EUuYAVF ogEqCdu3mze31/u1zlQJGs4i1+zTIS0LcHfUSGxtTgZIvfV2QRevP3WstMrkslc4 9yUV44zRPThQQggQHJPOUqTOw1USgBIGKv+D5Zj1Cj73Gl81gQVwFQxgPXTf3KW/ cJl9wKw/UWXK69kw+A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:39:02 2025 by rpki-client