This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663734343a3a2f34382d3438203d3e20323134393535.roa File: 326131343a373538333a663734343a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: 2S+JbymcjIynwfVZAKfR00rXladCcxDgshwKEZR1YsA= Subject key identifier: 89:5F:CE:AB:2D:FE:1B:46:3D:69:28:0A:84:08:37:8A:F8:B1:4E:9D Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771 Certificate serial: 3856BBF6A4183D955EB070E802322A096178B932 Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663734343a3a2f34382d3438203d3e20323134393535.roa Signing time: Tue 11 Nov 2025 00:39:43 +0000 ROA not before: Tue 11 Nov 2025 00:34:43 +0000 ROA not after: Tue 10 Nov 2026 00:39:43 +0000 asID: 214955 IP address blocks: 2a14:7583:f744::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:56:bb:f6:a4:18:3d:95:5e:b0:70:e8:02:32:2a:09:61:78:b9:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702B79B445330AC21D237308277A4472598CE771 Validity Not Before: Nov 11 00:34:43 2025 GMT Not After : Nov 10 00:39:43 2026 GMT Subject: CN=895FCEAB2DFE1B463D69280A8408378AF8B14E9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:c5:38:81:30:24:ad:d9:23:59:ae:ec:01: 8c:8b:a6:48:a3:74:c6:43:a9:ae:7e:c4:ad:44:af: 8c:03:02:b8:bd:e0:5c:fb:a6:98:c3:fa:c4:6e:8a: 0a:fb:cd:21:b7:44:9d:4c:f1:b3:87:17:da:3e:ed: 40:51:25:d5:7d:f9:8b:13:6f:2d:2c:75:c8:78:52: 6e:b1:90:d0:25:fb:9c:83:61:81:3c:f3:4f:6c:e8: 28:72:98:07:c8:23:6f:e5:1e:be:dc:e9:1a:b9:23: 6c:ed:e6:df:c0:3d:47:81:03:5b:2c:e5:41:9e:ab: 6e:62:4e:57:04:d2:18:95:fe:1d:da:e5:16:13:82: 22:0f:ad:d1:13:ea:2c:ca:8f:91:bf:a0:d6:c2:48: e8:73:99:a9:36:ae:38:fa:18:56:7d:fc:bf:6d:eb: 80:95:a4:f0:97:b2:cd:0e:d9:13:b4:51:a3:c2:ef: 15:23:b6:b2:73:d2:7c:b3:03:d5:5f:b7:29:89:7e: 1b:19:87:85:91:07:3b:d9:7d:34:23:f5:cc:0c:0a: 5a:5f:39:b5:c3:fc:b8:df:8a:8f:f1:2f:3f:86:a7: 1f:89:d2:a0:52:a2:df:a3:4d:86:0f:18:6d:d8:ea: ef:6a:78:43:9b:50:ef:64:11:ea:70:25:92:12:15: 5f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5F:CE:AB:2D:FE:1B:46:3D:69:28:0A:84:08:37:8A:F8:B1:4E:9D X509v3 Authority Key Identifier: keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663734343a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f744::/48 Signature Algorithm: sha256WithRSAEncryption 22:53:2c:1b:33:ff:81:23:01:23:3c:cf:a5:8a:42:98:35:dd: 54:9a:d9:a6:39:af:5e:e7:69:12:71:c5:d9:b8:c7:20:12:02: cc:dd:e4:1e:91:6f:e7:c6:13:9c:94:d9:87:f6:3e:59:a8:3d: 2f:02:5c:45:c3:08:c6:ad:70:8d:fb:74:bf:6d:04:b3:1f:8d: a6:84:ad:c2:fa:36:7c:59:52:29:41:a8:90:82:67:b3:43:0b: 64:8b:11:a8:60:1d:0e:ee:b7:4b:a3:d1:6e:82:03:9d:53:0b: 02:98:d9:94:90:06:db:a2:88:1e:cf:dc:25:b8:4d:c1:6e:be: b5:24:ba:62:df:c8:31:7c:0b:79:2e:32:af:d0:05:bb:a8:4f: ce:9f:c7:b4:fd:2f:b7:da:8e:c3:1c:6e:bf:9e:e8:1c:a9:19: 0c:56:93:d5:2e:72:21:fb:89:04:5f:10:43:8f:35:ed:19:d7: 92:70:59:ba:0b:49:43:0e:f2:14:41:8c:3b:87:d6:98:26:30: e2:82:4c:21:9c:d4:61:54:77:f6:14:61:cd:f6:40:ef:0f:a8: 78:ab:f2:44:8a:fd:df:30:7e:7f:81:78:9b:88:29:c1:1f:f6: 04:22:58:28:e9:e5:f5:ee:96:7b:08:d5:10:01:15:1c:9c:d1: 36:3f:97:5b -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUOFa79qQYPZVesHDoAjIqCWF4uTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1 OThDRTc3MTAeFw0yNTExMTEwMDM0NDNaFw0yNjExMTAwMDM5NDNaMDMxMTAvBgNV BAMTKDg5NUZDRUFCMkRGRTFCNDYzRDY5MjgwQTg0MDgzNzhBRjhCMTRFOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1LcU4gTAkrdkjWa7sAYyLpkij dMZDqa5+xK1Er4wDAri94Fz7ppjD+sRuigr7zSG3RJ1M8bOHF9o+7UBRJdV9+YsT by0sdch4Um6xkNAl+5yDYYE8809s6ChymAfII2/lHr7c6Rq5I2zt5t/APUeBA1ss 5UGeq25iTlcE0hiV/h3a5RYTgiIPrdET6izKj5G/oNbCSOhzmak2rjj6GFZ9/L9t 64CVpPCXss0O2RO0UaPC7xUjtrJz0nyzA9VftymJfhsZh4WRBzvZfTQj9cwMClpf ObXD/Ljfio/xLz+Gpx+J0qBSot+jTYYPGG3Y6u9qeEObUO9kEepwJZISFV8lAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUiV/Oqy3+G0Y9aSgKhAg3ivixTp0wHwYDVR0j BBgwFoAUcCt5tEUzCsIdI3MIJ3pEclmM53EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzEvNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1OThDRTc3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MDJCNzlCNDQ1MzMwQUMyMUQyMzczMDgy NzdBNDQ3MjU5OENFNzcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzczNDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g/dEMA0GCSqGSIb3DQEBCwUAA4IBAQAi UywbM/+BIwEjPM+likKYNd1UmtmmOa9e52kSccXZuMcgEgLM3eQekW/nxhOclNmH 9j5ZqD0vAlxFwwjGrXCN+3S/bQSzH42mhK3C+jZ8WVIpQaiQgmezQwtkixGoYB0O 7rdLo9FuggOdUwsCmNmUkAbboogez9wluE3Bbr61JLpi38gxfAt5LjKv0AW7qE/O n8e0/S+32o7DHG6/nugcqRkMVpPVLnIh+4kEXxBDjzXtGdeScFm6C0lDDvIUQYw7 h9aYJjDigkwhnNRhVHf2FGHN9kDvD6h4q/JEiv3fMH5/gXibiCnBH/YEIlgo6eX1 7pZ7CNUQARUcnNE2P5db -----END CERTIFICATE-----Generated at Sat Dec 6 05:44:42 2025 by rpki-client