This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a326634303a3a2f34342d3438203d3e20323132353931.roa File: 326130653a666434353a326634303a3a2f34342d3438203d3e20323132353931.roa (raw, json) Hash identifier: m8ac/OmE29DqLuwrvKPJFKpYCamTHx1fmPvpHqRkArI= Subject key identifier: 28:E6:F8:84:5E:CF:8E:29:76:4E:3A:D3:8F:E7:94:AF:A4:49:CA:8E Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Certificate serial: 2DF759892E24AF14AC031A9631C85005351EF7CE Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a326634303a3a2f34342d3438203d3e20323132353931.roa Signing time: Sat 29 Nov 2025 22:47:12 +0000 ROA not before: Sat 29 Nov 2025 22:42:12 +0000 ROA not after: Sat 28 Nov 2026 22:47:12 +0000 asID: 212591 IP address blocks: 2a0e:fd45:2f40::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f7:59:89:2e:24:af:14:ac:03:1a:96:31:c8:50:05:35:1e:f7:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Validity Not Before: Nov 29 22:42:12 2025 GMT Not After : Nov 28 22:47:12 2026 GMT Subject: CN=28E6F8845ECF8E29764E3AD38FE794AFA449CA8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:79:5b:1f:01:46:c0:69:1f:c4:76:04:5c:1f: a6:21:61:f4:38:f8:13:f3:df:7a:13:bc:6b:98:9b: 2e:ad:44:bc:b8:38:0b:5e:80:8e:e3:1b:7d:32:f0: 02:94:51:86:ce:76:66:44:24:3e:f6:0f:ef:0d:55: 00:3d:ae:b7:ac:3c:6e:de:12:73:32:c7:f9:a0:91: ec:66:23:78:1b:d9:0f:0b:d0:64:6b:b7:58:ff:42: 63:60:28:8e:d9:d6:40:27:a7:37:d2:83:4f:27:7b: bb:87:7b:98:dc:1e:79:8e:dc:f1:f3:29:32:9d:d1: 71:80:15:2f:3d:3b:22:5e:1d:ef:be:42:dd:45:56: a5:c4:76:f4:10:77:15:e3:52:61:8e:b0:ee:95:c2: 98:b4:7b:d6:82:f1:24:bf:44:89:28:ac:9f:92:f1: 9d:35:aa:1f:46:c6:b4:77:5d:85:c3:2a:7e:9a:4e: 8d:19:30:96:1c:c0:0d:ee:25:a1:fe:df:6b:e9:b8: 82:24:a2:ab:3e:9f:48:82:35:1a:46:9d:a0:84:09: 68:5c:29:24:64:5b:78:44:05:04:15:14:6d:54:fe: 0c:5d:c8:9f:f4:96:81:98:98:56:19:12:30:e1:df: 34:f5:6b:42:39:bd:c2:d6:48:ff:52:ab:02:c4:5e: d6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E6:F8:84:5E:CF:8E:29:76:4E:3A:D3:8F:E7:94:AF:A4:49:CA:8E X509v3 Authority Key Identifier: keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a326634303a3a2f34342d3438203d3e20323132353931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:fd45:2f40::/44 Signature Algorithm: sha256WithRSAEncryption 95:e9:17:7f:d0:6f:4c:2b:eb:a8:46:76:cd:af:5b:94:96:8a: 00:d2:f8:89:07:f1:dd:ec:c8:8f:1a:7e:0c:44:35:5c:a2:4c: f6:d8:18:8e:24:f8:c3:ae:55:39:90:c6:b8:13:19:c3:07:d3: 40:95:57:3d:5b:1e:30:57:8d:cb:dd:fa:29:a8:4c:0d:94:67: ce:a4:8a:54:25:d9:8e:8e:1b:43:13:8a:a8:b3:d9:65:a3:a5: c8:6c:11:98:3c:b4:73:b9:ec:8b:0b:c9:3d:1f:68:d1:28:49: 6a:03:3a:97:b5:16:02:32:1f:18:7d:34:30:80:ac:0d:a8:1c: 32:d3:a9:d0:db:05:dc:be:aa:f9:21:69:e8:6b:7a:0e:19:35: 07:eb:14:90:a5:15:3f:5f:6a:21:62:67:78:4e:62:87:94:71: cf:49:b9:ad:19:10:4d:27:f1:bb:db:6c:f5:7c:14:85:25:bb: 7c:56:1e:59:ba:8e:82:81:b0:d3:c0:0f:cd:f1:02:83:5e:9c: ec:19:39:8d:40:8c:de:e5:c0:86:2e:63:4f:c3:25:39:f8:14: 96:a4:49:9b:b7:7c:ac:f2:6a:96:37:df:3d:3c:03:fc:a2:e4: d4:d9:05:fe:21:e6:87:fa:02:6f:d4:50:14:1d:e5:a9:b9:f2: d1:4f:9a:5b -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIULfdZiS4krxSsAxqWMchQBTUe984wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2YyMTZmNDlhM2I5YTg0YTBlODVlODBhMmM0Mjg3NGYw OWVhMzk4NTAeFw0yNTExMjkyMjQyMTJaFw0yNjExMjgyMjQ3MTJaMDMxMTAvBgNV BAMTKDI4RTZGODg0NUVDRjhFMjk3NjRFM0FEMzhGRTc5NEFGQTQ0OUNBOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIeVsfAUbAaR/EdgRcH6YhYfQ4 +BPz33oTvGuYmy6tRLy4OAtegI7jG30y8AKUUYbOdmZEJD72D+8NVQA9rresPG7e EnMyx/mgkexmI3gb2Q8L0GRrt1j/QmNgKI7Z1kAnpzfSg08ne7uHe5jcHnmO3PHz KTKd0XGAFS89OyJeHe++Qt1FVqXEdvQQdxXjUmGOsO6Vwpi0e9aC8SS/RIkorJ+S 8Z01qh9GxrR3XYXDKn6aTo0ZMJYcwA3uJaH+32vpuIIkoqs+n0iCNRpGnaCECWhc KSRkW3hEBQQVFG1U/gxdyJ/0loGYmFYZEjDh3zT1a0I5vcLWSP9SqwLEXtY/AgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUKOb4hF7Pjil2TjrTj+eUr6RJyo4wHwYDVR0j BBgwFoAUfyFvSaO5qEoOhegKLEKHTwnqOYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmRmYjMwY2EtZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1 YWYxLzAvN0YyMTZGNDlBM0I5QTg0QTBFODVFODBBMkM0Mjg3NEYwOUVBMzk4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Z5RnZTYU81cUVvT2hlZ0tMRUtIVHdu cU9ZVS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmRmYjMwY2Et ZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1YWYxLzAvMzI2MTMwNjUzYTY2NjQzNDM1 M2EzMjY2MzQzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzEzMjM1MzkzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHBCoO/UUvQDANBgkqhkiG9w0BAQsFAAOCAQEAlekXf9BvTCvrqEZ2 za9blJaKANL4iQfx3ezIjxp+DEQ1XKJM9tgYjiT4w65VOZDGuBMZwwfTQJVXPVse MFeNy936KahMDZRnzqSKVCXZjo4bQxOKqLPZZaOlyGwRmDy0c7nsiwvJPR9o0ShJ agM6l7UWAjIfGH00MICsDagcMtOp0NsF3L6q+SFp6Gt6Dhk1B+sUkKUVP19qIWJn eE5ih5Rxz0m5rRkQTSfxu9ts9XwUhSW7fFYeWbqOgoGw08APzfECg16c7Bk5jUCM 3uXAhi5jT8MlOfgUlqRJm7d8rPJqljffPTwD/KLk1NkF/iHmh/oCb9RQFB3lqbny 0U+aWw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:05:20 2025 by rpki-client