This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa File: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (raw, json) Hash identifier: /APvQtIczoMdPeFgS8yLWOSzDbhA86h5Cc1N87vUKRI= Subject key identifier: 12:A7:C7:98:B2:83:65:AD:88:09:E4:07:1B:65:3A:72:8E:62:80:6A Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 456F72F696E7A83CDDB0AB2D2CEAEC7E7DDB9C62 Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa Signing time: Thu 20 Nov 2025 06:09:14 +0000 ROA not before: Thu 20 Nov 2025 06:04:14 +0000 ROA not after: Thu 19 Nov 2026 06:09:14 +0000 asID: 204291 IP address blocks: 2a13:9644:40ae::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:6f:72:f6:96:e7:a8:3c:dd:b0:ab:2d:2c:ea:ec:7e:7d:db:9c:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Nov 20 06:04:14 2025 GMT Not After : Nov 19 06:09:14 2026 GMT Subject: CN=12A7C798B28365AD8809E4071B653A728E62806A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:21:06:9c:4b:d0:38:d9:8d:92:1b:78:0b:b3: 18:dd:f7:7a:36:f9:87:e1:8b:fc:b4:44:7f:34:9b: 00:d1:69:5c:9a:f6:66:73:8b:49:77:dd:da:78:23: 69:5a:23:0f:22:46:39:d3:b9:41:f8:3e:7a:a9:21: 61:15:11:78:40:55:f6:e3:50:8c:62:9d:a1:d2:57: 71:24:88:43:d1:7a:c1:42:4d:d3:12:b6:ca:b2:05: bf:f4:32:95:d2:30:b5:45:27:7f:ea:9f:27:6f:b7: be:ae:52:fd:a8:71:82:2b:a0:84:b1:16:8d:57:fb: 4f:72:81:31:12:fe:fa:37:29:49:80:c9:3d:84:d3: 5a:dd:f5:72:3f:c2:43:18:d1:c7:d7:13:09:1b:3c: 11:1e:a6:94:54:bd:08:80:18:be:54:ea:f2:fd:fb: ad:c9:af:55:29:41:ee:f6:e9:5c:ed:22:97:fa:d9: 2e:62:05:48:f6:1d:3b:ed:ef:44:32:47:4d:6e:a4: 5d:ba:c2:b0:f2:c1:08:39:c3:31:08:ec:c6:21:0b: 15:00:e4:45:f9:54:f4:a9:ec:48:ea:94:35:58:b2: ed:62:af:cc:f8:e0:54:e2:d0:61:4a:49:06:72:e5: a9:35:24:ac:b1:e6:e2:54:70:47:7f:c1:10:b3:79: 36:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A7:C7:98:B2:83:65:AD:88:09:E4:07:1B:65:3A:72:8E:62:80:6A X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9644:40ae::/48 Signature Algorithm: sha256WithRSAEncryption 1e:3d:26:c5:ba:ad:52:aa:11:12:99:27:2e:be:f5:d0:27:d6: 91:dd:7f:4a:5f:c5:cd:53:50:5b:08:e6:b8:37:bf:0d:26:f3: 94:9f:70:56:68:36:f4:f1:58:0a:4a:45:95:29:8d:5a:64:75: b2:14:13:70:10:b9:e2:f6:80:77:00:61:91:d4:eb:e5:76:83: 56:bb:32:4e:88:15:aa:a2:b3:45:0d:f2:27:44:a0:d9:8c:aa: cb:ec:93:5d:77:f2:15:29:6a:37:89:86:0c:42:f7:b4:bd:83: b3:b5:c0:67:20:17:da:cf:cf:41:0e:ce:99:72:ee:2c:4f:db: c6:e3:cb:26:17:8a:67:ba:5a:5a:05:08:c0:78:b7:be:81:28: 58:4a:6b:29:d6:5f:5d:b3:6a:8b:58:f0:71:f7:05:b3:d7:90: ad:d4:82:46:d8:89:fc:a0:8c:99:86:53:5c:4f:04:a2:cf:f3: 72:98:3b:e5:1d:3c:63:66:f1:12:b8:a5:af:c4:ee:18:c5:0e: 14:22:d4:19:aa:21:df:b0:d8:c7:e7:b6:2d:fa:d1:2e:a2:cd: f8:3d:b0:40:c2:e4:1f:ad:09:ca:d0:09:d5:c1:d8:57:fe:6d: 64:7a:43:61:e4:2c:66:01:42:55:35:5e:3e:51:81:28:64:5b: 3f:d7:49:3b -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIURW9y9pbnqDzdsKstLOrsfn3bnGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNTExMjAwNjA0MTRaFw0yNjExMTkwNjA5MTRaMDMxMTAvBgNV BAMTKDEyQTdDNzk4QjI4MzY1QUQ4ODA5RTQwNzFCNjUzQTcyOEU2MjgwNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClIQacS9A42Y2SG3gLsxjd93o2 +Yfhi/y0RH80mwDRaVya9mZzi0l33dp4I2laIw8iRjnTuUH4PnqpIWEVEXhAVfbj UIxinaHSV3EkiEPResFCTdMStsqyBb/0MpXSMLVFJ3/qnydvt76uUv2ocYIroISx Fo1X+09ygTES/vo3KUmAyT2E01rd9XI/wkMY0cfXEwkbPBEeppRUvQiAGL5U6vL9 +63Jr1UpQe726VztIpf62S5iBUj2HTvt70QyR01upF26wrDywQg5wzEI7MYhCxUA 5EX5VPSp7EjqlDVYsu1ir8z44FTi0GFKSQZy5ak1JKyx5uJUcEd/wRCzeTa5AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUEqfHmLKDZa2ICeQHG2U6co5igGowHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82NWVhZTc0NS04YWM5LTRlNzEtYmM5NC1mY2IyNjE3MDNmOTYvMS8zMjYxMzEz MzNhMzkzNjM0MzQzYTM0MzA2MTY1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhOWRECuMA0GCSqGSIb3DQEBCwUAA4IBAQAe PSbFuq1SqhESmScuvvXQJ9aR3X9KX8XNU1BbCOa4N78NJvOUn3BWaDb08VgKSkWV KY1aZHWyFBNwELni9oB3AGGR1OvldoNWuzJOiBWqorNFDfInRKDZjKrL7JNdd/IV KWo3iYYMQve0vYOztcBnIBfaz89BDs6Zcu4sT9vG48smF4pnulpaBQjAeLe+gShY Smsp1l9ds2qLWPBx9wWz15Ct1IJG2In8oIyZhlNcTwSiz/NymDvlHTxjZvESuKWv xO4YxQ4UItQZqiHfsNjH57Yt+tEuos34PbBAwuQfrQnK0AnVwdhX/m1kekNh5Cxm AUJVNV4+UYEoZFs/10k7 -----END CERTIFICATE-----Generated at Sat Dec 6 20:46:45 2025 by rpki-client