This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/326131343a373538313a6230303a3a2f34302d3438203d3e20323134353735.roa File: 326131343a373538313a6230303a3a2f34302d3438203d3e20323134353735.roa (raw, json) Hash identifier: YwVA55nGhmg50Nrcm1+tsq8Rc4xtCFLwJqkp0AhkdXQ= Subject key identifier: 10:95:18:BF:A4:75:95:F5:AA:AA:CD:C9:B1:2A:E6:03:B1:42:F0:CC Certificate issuer: /CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Certificate serial: 733F1E174323BEC552C12B25B77BDCC549732FAD Authority key identifier: E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/326131343a373538313a6230303a3a2f34302d3438203d3e20323134353735.roa Signing time: Fri 07 Nov 2025 16:15:01 +0000 ROA not before: Fri 07 Nov 2025 16:10:01 +0000 ROA not after: Fri 06 Nov 2026 16:15:01 +0000 asID: 214575 IP address blocks: 2a14:7581:b00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:3f:1e:17:43:23:be:c5:52:c1:2b:25:b7:7b:dc:c5:49:73:2f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Validity Not Before: Nov 7 16:10:01 2025 GMT Not After : Nov 6 16:15:01 2026 GMT Subject: CN=109518BFA47595F5AAAACDC9B12AE603B142F0CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e5:c4:08:2d:4f:f0:c5:f8:ec:18:10:f7:7b: 7e:a2:69:c9:da:5e:64:a3:0b:4b:03:2c:52:64:46: 68:6a:9e:80:18:20:e1:cf:4f:47:dc:28:21:1a:1e: 8e:8d:67:fb:ca:e0:fa:f8:a4:c8:f1:17:21:94:48: e2:20:c0:fb:25:51:ba:ae:0a:da:75:78:5c:5e:be: 3b:78:cf:5d:94:4e:c7:fc:6d:0c:b0:d2:75:32:8d: 74:3a:94:c4:9f:6d:b9:8a:d3:eb:90:2f:73:3e:23: a1:7a:42:77:31:9a:80:88:4c:ba:79:9d:a7:b5:0d: 48:43:29:26:84:ee:36:05:ff:4c:51:9c:1a:fc:2b: e0:e1:42:63:5d:09:b9:9d:6e:53:79:af:78:d0:9e: 31:b4:07:d5:6b:10:9d:fb:99:11:9c:9b:5c:58:48: dd:2e:2e:78:e5:b8:3a:a7:70:32:92:f6:7a:c3:1c: fd:85:6e:7b:17:1e:51:33:44:89:f3:48:f3:2a:d7: b5:d9:83:16:25:bc:41:e4:53:81:f1:a4:5c:5a:6e: 93:32:8a:49:47:37:86:85:8c:72:d2:a9:9d:62:58: 73:24:9f:b6:c5:6b:b4:22:a2:72:96:bd:0e:d9:6a: d5:8b:17:f6:b0:e2:72:6c:41:18:63:c7:ed:d1:1e: 97:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:95:18:BF:A4:75:95:F5:AA:AA:CD:C9:B1:2A:E6:03:B1:42:F0:CC X509v3 Authority Key Identifier: keyid:E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/326131343a373538313a6230303a3a2f34302d3438203d3e20323134353735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:b00::/40 Signature Algorithm: sha256WithRSAEncryption 90:83:69:63:88:3e:a1:01:bc:c7:54:f6:33:1b:67:95:34:25: a9:87:6d:ef:09:92:9e:ed:20:97:79:e1:e6:9c:dd:bf:bb:71: 5b:10:e9:40:dd:61:aa:bd:1b:2b:06:5c:70:f3:8d:47:a8:2c: d6:6b:ab:44:f2:19:01:9b:87:78:da:1f:e6:48:e4:cc:ed:dd: 07:d7:54:8d:32:28:4a:5c:df:df:c1:3d:16:15:12:31:0c:9c: de:81:e8:62:fd:93:68:d1:2a:72:96:f3:92:01:fe:06:5e:c2: 4a:5c:ba:2d:fd:bd:cc:90:df:33:8b:1b:33:d0:c4:7f:41:4c: d4:da:0d:74:bf:50:7a:cc:5f:20:a1:c2:e9:23:5a:c3:ad:8b: 3a:7a:76:65:ca:20:0c:ce:0e:81:93:c3:ff:15:49:65:8c:fe: 42:60:c7:af:d1:f0:b5:85:0b:6b:0d:81:cc:82:f6:89:41:1d: 9a:49:15:bd:37:d4:e7:54:14:dc:2a:ce:2e:80:49:a5:25:aa: 96:38:aa:db:0e:4c:64:0d:72:2d:f5:cd:9b:b8:ab:91:63:fa: c8:fc:2c:eb:48:30:c9:f7:18:b3:ec:bf:d9:68:64:62:8b:b0: ab:27:03:57:74:c1:57:61:4e:8c:16:11:09:8b:6d:63:c3:00: 71:93:cc:8e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcz8eF0MjvsVSwSslt3vcxUlzL60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0 Q0E4MTNGRTAeFw0yNTExMDcxNjEwMDFaFw0yNjExMDYxNjE1MDFaMDMxMTAvBgNV BAMTKDEwOTUxOEJGQTQ3NTk1RjVBQUFBQ0RDOUIxMkFFNjAzQjE0MkYwQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh5cQILU/wxfjsGBD3e36iacna XmSjC0sDLFJkRmhqnoAYIOHPT0fcKCEaHo6NZ/vK4Pr4pMjxFyGUSOIgwPslUbqu Ctp1eFxevjt4z12UTsf8bQyw0nUyjXQ6lMSfbbmK0+uQL3M+I6F6QncxmoCITLp5 nae1DUhDKSaE7jYF/0xRnBr8K+DhQmNdCbmdblN5r3jQnjG0B9VrEJ37mRGcm1xY SN0uLnjluDqncDKS9nrDHP2FbnsXHlEzRInzSPMq17XZgxYlvEHkU4HxpFxabpMy iklHN4aFjHLSqZ1iWHMkn7bFa7QionKWvQ7ZatWLF/aw4nJsQRhjx+3RHpe3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUEJUYv6R1lfWqqs3JsSrmA7FC8MwwHwYDVR0j BBgwFoAU6dL3Mp9bpC7g2Jgije5YtkyoE/4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGM5YWNlY2UtZDA1Yi00ZjczLTljNmUtZDg3ODVkMTc4 OWMzLzEvRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0Q0E4MTNGRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FOUQyRjczMjlGNUJBNDJFRTBEODk4MjI4 REVFNThCNjRDQTgxM0ZFLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS80YzlhY2VjZS1kMDViLTRmNzMtOWM2ZS1kODc4NWQxNzg5YzMvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTYyMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEz NDM1MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYELMA0GCSqGSIb3DQEBCwUAA4IBAQCQg2lj iD6hAbzHVPYzG2eVNCWph23vCZKe7SCXeeHmnN2/u3FbEOlA3WGqvRsrBlxw841H qCzWa6tE8hkBm4d42h/mSOTM7d0H11SNMihKXN/fwT0WFRIxDJzegehi/ZNo0Spy lvOSAf4GXsJKXLot/b3MkN8zixsz0MR/QUzU2g10v1B6zF8gocLpI1rDrYs6enZl yiAMzg6Bk8P/FUlljP5CYMev0fC1hQtrDYHMgvaJQR2aSRW9N9TnVBTcKs4ugEml JaqWOKrbDkxkDXIt9c2buKuRY/rI/CzrSDDJ9xiz7L/ZaGRii7CrJwNXdMFXYU6M FhEJi21jwwBxk8yO -----END CERTIFICATE-----Generated at Sat Dec 6 16:18:18 2025 by rpki-client