This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/2/326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa File: 326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: dkoJT5raOa4KuZRrr6+6zluQh8ya5UfNDP5wUsDhGEc= Subject key identifier: 09:70:06:78:EF:3D:5E:C3:EC:AF:F1:80:51:52:ED:31:DA:A6:D0:61 Certificate issuer: /CN=7657DDAA0EC784E5517D769FF91F5C35434A9408 Certificate serial: 6E1478E8D8862B34826D3A02E4A2F19FF98EAF4D Authority key identifier: 76:57:DD:AA:0E:C7:84:E5:51:7D:76:9F:F9:1F:5C:35:43:4A:94:08 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/7657DDAA0EC784E5517D769FF91F5C35434A9408.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/2/326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa Signing time: Wed 31 Dec 2025 18:44:18 +0000 ROA not before: Wed 31 Dec 2025 18:39:18 +0000 ROA not after: Wed 30 Dec 2026 18:44:18 +0000 asID: 214955 IP address blocks: 2a0f:1cc5:2d01::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 6e:14:78:e8:d8:86:2b:34:82:6d:3a:02:e4:a2:f1:9f:f9:8e:af:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7657DDAA0EC784E5517D769FF91F5C35434A9408 Validity Not Before: Dec 31 18:39:18 2025 GMT Not After : Dec 30 18:44:18 2026 GMT Subject: CN=09700678EF3D5EC3ECAFF1805152ED31DAA6D061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:71:0e:49:fb:39:1b:bc:db:70:8a:7d:91:0d: c5:37:c0:1f:b2:a9:23:08:06:2e:d4:20:5a:12:db: 5f:ab:4c:f0:2d:50:ba:f4:78:29:12:58:bf:cd:62: 7a:1b:da:57:04:41:d5:57:f9:19:50:9f:e4:ab:84: 8d:be:09:0c:8f:59:92:ca:a3:63:6b:ad:03:05:bb: 41:72:83:60:08:55:20:63:64:46:a4:ae:f2:73:3e: d9:07:1e:29:33:e4:5d:55:51:d7:7f:3a:eb:8f:82: e6:a1:20:a3:cd:41:25:47:47:74:46:2d:d6:8d:df: ff:5f:73:07:1d:50:bb:c2:7b:f3:86:d1:e8:16:1f: eb:de:84:22:29:4f:3f:63:fc:77:8f:37:2f:24:f2: 9a:7a:21:7f:20:e7:8e:82:c7:6f:20:0c:04:0e:65: 95:0c:0d:09:76:b4:6d:a5:cc:82:0a:eb:4c:12:14: be:9c:29:c9:6d:25:07:ea:78:6a:65:52:bf:e4:a6: bd:ad:08:27:14:62:ec:85:b6:e4:df:6f:52:4c:44: 10:e2:94:dc:1c:96:86:88:a1:70:3c:4a:80:2e:cf: 77:08:ee:8f:1a:b9:3e:5f:4a:ce:5c:63:63:ce:e6: 15:c2:8c:f0:0a:70:91:9d:49:33:ab:05:93:83:fc: dd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:70:06:78:EF:3D:5E:C3:EC:AF:F1:80:51:52:ED:31:DA:A6:D0:61 X509v3 Authority Key Identifier: keyid:76:57:DD:AA:0E:C7:84:E5:51:7D:76:9F:F9:1F:5C:35:43:4A:94:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/2/7657DDAA0EC784E5517D769FF91F5C35434A9408.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/7657DDAA0EC784E5517D769FF91F5C35434A9408.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/2/326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:2d01::/48 Signature Algorithm: sha256WithRSAEncryption af:70:a7:d5:34:53:8e:b3:d1:fe:8a:5b:d2:0a:57:51:4b:1a: 12:de:b9:bd:7e:19:e7:4a:77:bd:df:ad:84:21:62:db:cd:f2: 55:4f:4f:54:c2:ea:2b:96:c4:f7:cf:7b:ac:48:b7:a8:1c:40: 5e:0e:a7:b7:86:00:87:92:db:19:16:ab:2c:d1:17:67:d2:40: 93:9c:ae:ad:85:c5:51:14:de:21:d7:77:ca:69:ad:73:96:3d: 6d:f9:e8:a9:0a:4a:fa:02:9e:0e:59:03:61:41:95:0d:1e:e3: ff:3d:ad:2c:d2:6c:d1:ca:15:a3:74:f1:b5:49:35:cb:e2:f2: 4d:9c:94:18:d2:e2:01:89:1c:8a:82:3f:8e:25:95:14:c3:f1: ab:b2:95:38:ab:e5:10:90:69:cb:ff:98:97:c8:9f:30:8b:e4: 22:25:fc:2a:59:70:29:fb:0c:f9:5f:4b:67:e3:c6:2e:9a:2e: ce:d7:2b:04:d5:8d:dc:98:be:0f:bc:4d:ac:6f:7c:a3:29:b8: ee:2a:95:7f:31:a4:b4:e8:ce:77:a4:be:4d:e7:42:df:15:46: 2d:de:57:e4:08:b1:28:86:d1:04:15:ca:0c:9d:ad:ae:c2:55: dd:d5:64:88:18:10:61:a0:9c:69:d6:4b:ca:3a:86:eb:cb:ee: c4:55:01:77 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUbhR46NiGKzSCbToC5KLxn/mOr00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1N0REQUEwRUM3ODRFNTUxN0Q3NjlGRjkxRjVDMzU0 MzRBOTQwODAeFw0yNTEyMzExODM5MThaFw0yNjEyMzAxODQ0MThaMDMxMTAvBgNV BAMTKDA5NzAwNjc4RUYzRDVFQzNFQ0FGRjE4MDUxNTJFRDMxREFBNkQwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfcQ5J+zkbvNtwin2RDcU3wB+y qSMIBi7UIFoS21+rTPAtULr0eCkSWL/NYnob2lcEQdVX+RlQn+SrhI2+CQyPWZLK o2NrrQMFu0Fyg2AIVSBjZEakrvJzPtkHHikz5F1VUdd/OuuPguahIKPNQSVHR3RG LdaN3/9fcwcdULvCe/OG0egWH+vehCIpTz9j/HePNy8k8pp6IX8g546Cx28gDAQO ZZUMDQl2tG2lzIIK60wSFL6cKcltJQfqeGplUr/kpr2tCCcUYuyFtuTfb1JMRBDi lNwcloaIoXA8SoAuz3cI7o8auT5fSs5cY2PO5hXCjPAKcJGdSTOrBZOD/N0tAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUCXAGeO89XsPsr/GAUVLtMdqm0GEwHwYDVR0j BBgwFoAUdlfdqg7HhOVRfXaf+R9cNUNKlAgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzIvNzY1N0REQUEwRUM3ODRFNTUxN0Q3NjlGRjkxRjVDMzU0MzRBOTQwOC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC83NjU3RERBQTBFQzc4NEU1NTE3RDc2OUZG OTFGNUMzNTQzNEE5NDA4LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMi8zMjYxMzA2 NjNhMzE2MzYzMzUzYTMyNjQzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKg8cxS0BMA0GCSqGSIb3DQEBCwUAA4IBAQCv cKfVNFOOs9H+ilvSCldRSxoS3rm9fhnnSne9362EIWLbzfJVT09UwuorlsT3z3us SLeoHEBeDqe3hgCHktsZFqss0Rdn0kCTnK6thcVRFN4h13fKaa1zlj1t+eipCkr6 Ap4OWQNhQZUNHuP/Pa0s0mzRyhWjdPG1STXL4vJNnJQY0uIBiRyKgj+OJZUUw/Gr spU4q+UQkGnL/5iXyJ8wi+QiJfwqWXAp+wz5X0tn48Yumi7O1ysE1Y3cmL4PvE2s b3yjKbjuKpV/MaS06M53pL5N50LfFUYt3lfkCLEohtEEFcoMna2uwlXd1WSIGBBh oJxp1kvKOobry+7EVQF3 -----END CERTIFICATE-----Generated at Mon Jan 26 11:45:04 2026 by rpki-client