This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa File: 326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa (raw, json) Hash identifier: YRMori7doYSmuYrHuDGxvFWUqZxa6EqhEvjhhQlS2vI= Subject key identifier: 40:AD:06:06:B1:CF:07:DD:27:E2:61:46:77:74:55:84:F6:72:BA:77 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 0CCAA3FB3E00A5CA775D7557E8C47027906BB22E Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa Signing time: Fri 12 Dec 2025 16:26:20 +0000 ROA not before: Fri 12 Dec 2025 16:21:20 +0000 ROA not after: Fri 11 Dec 2026 16:26:20 +0000 asID: 214906 IP address blocks: 2a14:1ec1:7b30::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ca:a3:fb:3e:00:a5:ca:77:5d:75:57:e8:c4:70:27:90:6b:b2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Dec 12 16:21:20 2025 GMT Not After : Dec 11 16:26:20 2026 GMT Subject: CN=40AD0606B1CF07DD27E2614677745584F672BA77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d7:9b:9b:ba:cf:de:f3:ca:f1:62:cb:58:c9: 08:66:54:f3:39:dd:db:dd:88:38:c8:f8:92:73:dd: 97:01:c9:d8:b9:ce:cc:94:75:46:57:bc:1d:c1:3f: 08:98:61:fb:2d:92:d9:23:84:83:21:47:0c:49:1f: e6:b5:5f:65:dc:b8:ee:7f:17:0a:1a:f6:9e:04:df: 1c:71:de:72:59:8c:72:1e:17:43:93:6c:e5:9b:04: 79:cc:dd:bf:73:8d:f4:e4:7e:00:53:30:b8:51:2b: 25:4c:a2:cc:b7:72:59:ec:0f:4b:02:51:25:c2:dd: d7:8e:c3:be:a1:97:6b:f1:b6:21:55:31:9d:d3:45: af:4a:9a:40:0b:0e:2f:dd:4b:84:be:ee:ab:8c:70: 1a:62:ff:1f:03:1f:da:ae:cb:4d:e7:33:c9:0a:61: 1b:ed:28:a5:15:61:18:a7:33:52:0d:18:f9:40:65: 41:12:57:f4:f6:97:a3:04:a3:56:b2:01:a8:ff:38: c4:4d:e3:1f:36:29:22:a6:a5:82:45:e4:8b:1c:6e: 8f:2a:aa:d9:80:fb:7c:ed:f6:d1:6d:33:c5:66:7b: d9:80:42:a5:70:64:d6:59:e8:27:b5:a0:eb:f7:fd: 10:28:62:94:d0:79:60:e7:e5:79:b6:61:a5:77:6c: 73:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AD:06:06:B1:CF:07:DD:27:E2:61:46:77:74:55:84:F6:72:BA:77 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1ec1:7b30::/44 Signature Algorithm: sha256WithRSAEncryption 55:74:b9:69:98:cc:9d:9d:c1:c4:81:4a:d8:e5:44:1b:06:33: 2b:4f:b9:cb:5b:13:01:30:f2:d8:fa:16:53:2b:dd:ca:54:82: 30:dc:cc:f8:f0:1f:7c:36:28:91:2f:7e:96:35:cb:9d:3c:bb: 11:95:8b:22:5c:96:7c:98:76:10:87:c6:c8:74:aa:c7:18:3d: 89:df:37:d2:34:19:04:bf:f6:48:2a:2b:bf:09:cb:53:59:60: 48:1f:f2:40:27:64:61:d0:e2:ae:c3:2f:6d:c2:81:00:da:32: df:29:57:37:92:61:e3:5f:a3:51:25:81:6b:00:90:52:98:25: d3:9b:ea:67:26:e1:63:66:0d:2f:d9:87:49:86:7e:3d:a5:ec: 1f:0b:1b:37:04:b4:44:84:1b:61:ab:cd:71:b9:fb:12:b4:e5: fe:d8:e0:e4:f2:e6:c2:0f:94:7c:1e:11:8d:be:fe:2a:34:31: 05:b1:03:5b:aa:e5:d8:c3:5f:dd:2d:63:9f:f9:1b:05:82:28: 36:3c:46:ed:90:b8:4b:ac:9e:80:28:b4:d3:74:a3:d1:17:4b: fe:1a:72:2e:0b:20:af:df:3c:fe:78:20:f8:ec:c9:52:cc:d0: 93:e9:80:e1:dd:92:82:70:97:5f:a7:22:29:6b:a8:af:3c:a8: 51:96:b8:06 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUDMqj+z4Apcp3XXVX6MRwJ5Brsi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNTEyMTIxNjIxMjBaFw0yNjEyMTExNjI2MjBaMDMxMTAvBgNV BAMTKDQwQUQwNjA2QjFDRjA3REQyN0UyNjE0Njc3NzQ1NTg0RjY3MkJBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+15ubus/e88rxYstYyQhmVPM5 3dvdiDjI+JJz3ZcBydi5zsyUdUZXvB3BPwiYYfstktkjhIMhRwxJH+a1X2XcuO5/ Fwoa9p4E3xxx3nJZjHIeF0OTbOWbBHnM3b9zjfTkfgBTMLhRKyVMosy3clnsD0sC USXC3deOw76hl2vxtiFVMZ3TRa9KmkALDi/dS4S+7quMcBpi/x8DH9quy03nM8kK YRvtKKUVYRinM1INGPlAZUESV/T2l6MEo1ayAaj/OMRN4x82KSKmpYJF5Iscbo8q qtmA+3zt9tFtM8Vme9mAQqVwZNZZ6Ce1oOv3/RAoYpTQeWDn5Xm2YaV3bHN5AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUQK0GBrHPB90n4mFGd3RVhPZyuncwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yYWY3M2E5Yy0yMDU4LTQzYmItOWFjNi01YWI0MmRmYmY0MDkvMC8zMjYxMzEz NDNhMzE2NTYzMzEzYTM3NjIzMzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM0MzkzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhQewXswMA0GCSqGSIb3DQEBCwUAA4IBAQBV dLlpmMydncHEgUrY5UQbBjMrT7nLWxMBMPLY+hZTK93KVIIw3Mz48B98NiiRL36W NcudPLsRlYsiXJZ8mHYQh8bIdKrHGD2J3zfSNBkEv/ZIKiu/CctTWWBIH/JAJ2Rh 0OKuwy9twoEA2jLfKVc3kmHjX6NRJYFrAJBSmCXTm+pnJuFjZg0v2YdJhn49pewf Cxs3BLREhBthq81xufsStOX+2ODk8ubCD5R8HhGNvv4qNDEFsQNbquXYw1/dLWOf +RsFgig2PEbtkLhLrJ6AKLTTdKPRF0v+GnIuCyCv3zz+eCD47MlSzNCT6YDh3ZKC cJdfpyIpa6ivPKhRlrgG -----END CERTIFICATE-----Generated at Mon Dec 15 17:09:16 2025 by rpki-client