This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730623a3a2f34382d3438203d3e20323134393535.roa File: 326131343a373538333a663730623a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: kLF1pGobCPtSBqVgUGHgu1by1e7kkegKpHMRpd10cN0= Subject key identifier: DF:DF:F1:6C:A3:94:7A:09:9C:2B:5B:92:D3:BE:31:1D:0A:17:32:C3 Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771 Certificate serial: 4CBA96C18270DD1B20DBC6527D5714CE786A6859 Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730623a3a2f34382d3438203d3e20323134393535.roa Signing time: Wed 03 Dec 2025 17:59:28 +0000 ROA not before: Wed 03 Dec 2025 17:54:28 +0000 ROA not after: Wed 02 Dec 2026 17:59:28 +0000 asID: 214955 IP address blocks: 2a14:7583:f70b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ba:96:c1:82:70:dd:1b:20:db:c6:52:7d:57:14:ce:78:6a:68:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702B79B445330AC21D237308277A4472598CE771 Validity Not Before: Dec 3 17:54:28 2025 GMT Not After : Dec 2 17:59:28 2026 GMT Subject: CN=DFDFF16CA3947A099C2B5B92D3BE311D0A1732C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bc:62:08:ec:3b:16:b3:55:e3:6e:63:1f:29: 72:3c:c3:a3:2e:dc:01:47:5b:f4:9b:a1:e3:9b:6c: fd:8c:cf:84:73:ce:d2:84:25:95:4b:78:e4:00:67: 65:ea:22:89:aa:87:ec:0a:c1:24:81:88:14:86:80: 00:3a:a9:a2:0d:e6:c8:af:1e:31:64:2e:16:19:59: 08:b2:9f:8e:16:50:4c:13:5a:10:4c:09:d1:9d:5d: 3b:0f:a5:93:e6:55:80:ae:1e:d8:df:a7:80:41:05: 5f:3e:d6:01:f9:c3:9c:8d:ed:54:b8:7c:e9:61:c7: 68:02:c1:9f:f9:12:a3:fe:f1:d4:eb:85:48:56:5e: ce:84:d8:ca:53:cc:48:92:17:d4:2f:0f:52:fd:d5: b2:a7:34:5c:23:9e:90:95:e8:23:75:11:e6:0f:be: 89:87:39:ec:c5:19:88:bf:20:87:da:ca:ad:c4:8c: 4c:e9:f4:7e:ed:e6:ca:19:1c:a7:3a:92:aa:6f:f4: 23:98:9c:a3:ab:e4:4d:4a:fc:5a:65:e8:fc:42:02: d8:cc:94:bb:fd:15:a9:69:1e:49:1d:fd:99:9a:e4: f9:f5:9a:23:2b:1f:5e:c7:7e:3e:aa:9c:9c:a9:90: e6:b3:e8:55:5a:3f:ba:bf:1c:1b:14:c4:d8:aa:3f: ac:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DF:F1:6C:A3:94:7A:09:9C:2B:5B:92:D3:BE:31:1D:0A:17:32:C3 X509v3 Authority Key Identifier: keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730623a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f70b::/48 Signature Algorithm: sha256WithRSAEncryption 07:a0:80:ec:4c:12:bc:07:27:aa:0f:66:4b:7a:2c:c3:6a:3e: 80:47:4a:1b:ba:95:4b:9a:e7:b3:10:4d:88:c9:6d:05:52:fb: 44:b9:8c:41:e0:e5:62:65:6e:4d:48:68:f9:6a:40:9e:68:d1: 76:c8:85:bf:56:da:93:72:13:d1:95:13:6b:99:f7:eb:5c:3d: d7:f0:c0:44:8d:b0:71:2b:c8:58:78:13:0e:13:94:c7:7a:03: 43:ef:63:5b:bc:7e:cd:64:03:98:b4:91:cc:cc:5c:7a:1b:25: a1:fb:64:ed:f4:e1:a6:3f:11:cd:eb:c9:0a:2e:51:8c:f6:6a: 81:ee:c4:a3:94:f1:29:4e:2b:fc:36:bb:99:fb:07:23:62:9d: 54:10:d2:2f:0b:0b:51:41:1e:c4:17:13:26:d8:01:a7:a0:3c: e0:0c:de:09:9a:e5:a5:95:39:27:62:ab:0d:48:59:62:84:a4: 67:68:59:61:f1:ea:1c:bb:f3:a6:1f:50:e5:71:0c:ba:c5:4c: 86:1a:51:b9:07:dd:cf:8f:b3:0b:a0:75:7e:d0:c0:41:21:32: 82:39:89:54:b9:21:e7:49:af:88:f8:3c:47:69:ba:22:95:32: 1b:f4:94:b0:e6:76:90:21:f7:9b:5d:c7:8c:c0:0f:32:8b:03: d5:ea:78:a1 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUTLqWwYJw3Rsg28ZSfVcUznhqaFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1 OThDRTc3MTAeFw0yNTEyMDMxNzU0MjhaFw0yNjEyMDIxNzU5MjhaMDMxMTAvBgNV BAMTKERGREZGMTZDQTM5NDdBMDk5QzJCNUI5MkQzQkUzMTFEMEExNzMyQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqvGII7DsWs1XjbmMfKXI8w6Mu 3AFHW/SboeObbP2Mz4RzztKEJZVLeOQAZ2XqIomqh+wKwSSBiBSGgAA6qaIN5siv HjFkLhYZWQiyn44WUEwTWhBMCdGdXTsPpZPmVYCuHtjfp4BBBV8+1gH5w5yN7VS4 fOlhx2gCwZ/5EqP+8dTrhUhWXs6E2MpTzEiSF9QvD1L91bKnNFwjnpCV6CN1EeYP vomHOezFGYi/IIfayq3EjEzp9H7t5soZHKc6kqpv9COYnKOr5E1K/Fpl6PxCAtjM lLv9FalpHkkd/Zma5Pn1miMrH17Hfj6qnJypkOaz6FVaP7q/HBsUxNiqP6xxAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU39/xbKOUegmcK1uS074xHQoXMsMwHwYDVR0j BBgwFoAUcCt5tEUzCsIdI3MIJ3pEclmM53EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzEvNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1OThDRTc3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MDJCNzlCNDQ1MzMwQUMyMUQyMzczMDgy NzdBNDQ3MjU5OENFNzcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzczMDYyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g/cLMA0GCSqGSIb3DQEBCwUAA4IBAQAH oIDsTBK8ByeqD2ZLeizDaj6AR0obupVLmuezEE2IyW0FUvtEuYxB4OViZW5NSGj5 akCeaNF2yIW/VtqTchPRlRNrmffrXD3X8MBEjbBxK8hYeBMOE5THegND72NbvH7N ZAOYtJHMzFx6GyWh+2Tt9OGmPxHN68kKLlGM9mqB7sSjlPEpTiv8NruZ+wcjYp1U ENIvCwtRQR7EFxMm2AGnoDzgDN4JmuWllTknYqsNSFlihKRnaFlh8eocu/OmH1Dl cQy6xUyGGlG5B93Pj7MLoHV+0MBBITKCOYlUuSHnSa+I+DxHaboilTIb9JSw5naQ IfebXceMwA8yiwPV6nih -----END CERTIFICATE-----Generated at Sat Dec 6 05:44:42 2025 by rpki-client