This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386235303a3a2f34342d313238203d3e20323036363034.roa File: 326130363a313238333a386235303a3a2f34342d313238203d3e20323036363034.roa (raw, json) Hash identifier: LicWRa2PbfgNORQ+JYzjM1l7VK8HvoCbIwWlhpceGoA= Subject key identifier: 8E:D9:B7:3D:CC:1E:17:2B:80:AC:8F:79:40:6B:BE:3D:57:24:93:1E Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 53C82BD5B194A8D06EC2128E260C1BB7CECC66E0 Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386235303a3a2f34342d313238203d3e20323036363034.roa Signing time: Thu 04 Dec 2025 19:48:26 +0000 ROA not before: Thu 04 Dec 2025 19:43:26 +0000 ROA not after: Thu 03 Dec 2026 19:48:26 +0000 asID: 206604 IP address blocks: 2a06:1283:8b50::/44 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 14:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c8:2b:d5:b1:94:a8:d0:6e:c2:12:8e:26:0c:1b:b7:ce:cc:66:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Dec 4 19:43:26 2025 GMT Not After : Dec 3 19:48:26 2026 GMT Subject: CN=8ED9B73DCC1E172B80AC8F79406BBE3D5724931E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:fa:0b:4c:9a:4d:c4:13:89:34:e1:15:2a:82: a2:b4:9e:62:cb:71:8d:3e:fa:f1:24:8b:a4:3c:ef: ac:70:fa:55:cd:80:57:6b:b5:d9:66:c9:cf:92:35: 7b:e9:0c:64:a9:38:86:89:ce:29:18:4d:07:16:fa: 5c:e9:02:e2:4c:16:0d:10:ae:68:d6:db:04:58:6e: 16:66:c7:0d:ed:d5:bb:26:76:fa:c4:60:70:0e:de: 28:2d:71:dd:2f:c2:63:27:54:47:26:ad:33:7b:d2: 8d:69:81:f0:fd:e0:07:6f:95:ea:a2:cf:b4:48:f5: 91:18:e7:e5:19:76:05:6b:f4:a6:ae:4c:95:1c:8d: 95:d6:25:79:dd:ef:79:13:f3:64:9e:4e:80:f3:08: dd:17:cc:73:24:a9:12:19:8b:36:8d:f7:bd:39:20: 80:82:d6:4e:f5:ab:b7:46:a9:8e:f4:b3:64:16:51: 63:eb:58:9d:b2:55:bb:80:f8:67:44:ba:05:e4:b2: 40:03:f3:b2:fb:84:23:22:8f:cc:5f:17:46:7b:47: ee:4b:b4:be:99:0b:b7:3c:ae:97:9b:3f:2f:fe:25: 0f:13:cf:3c:e7:ad:47:50:a1:1b:b5:32:bf:11:d5: 2d:3b:e3:ea:56:d1:e9:e5:71:18:d8:dc:14:63:3d: 93:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D9:B7:3D:CC:1E:17:2B:80:AC:8F:79:40:6B:BE:3D:57:24:93:1E X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386235303a3a2f34342d313238203d3e20323036363034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8b50::/44 Signature Algorithm: sha256WithRSAEncryption a0:ba:57:d7:5f:d3:85:1b:44:41:bd:38:ae:20:ba:9d:dc:f5: 29:b0:08:dd:3c:10:a3:f0:10:5a:94:21:f6:9f:4b:92:2f:a3: 2b:42:22:0a:e2:46:55:91:6e:e5:9c:a6:87:cd:16:df:f3:74: 33:bc:06:c6:51:58:db:dd:32:8a:49:4a:8c:a4:ed:ba:be:6c: 4d:16:86:5d:a5:4c:ac:f3:b2:ea:1d:4f:9d:49:7e:72:af:60: 10:5f:01:e2:15:fc:73:ae:d1:e6:8f:d0:0a:d4:91:a7:6e:41: 8f:25:47:0c:2e:40:76:8b:2d:71:5d:9f:bd:02:53:03:b2:65: b1:70:19:1f:62:e4:11:1a:cd:4a:9e:ef:81:ed:3e:0c:81:ea: 92:ef:31:ae:c9:db:43:37:e9:d1:cc:e7:b8:34:9f:f5:f3:56: 5f:cb:17:c9:87:8a:cd:2a:40:92:75:00:20:fc:13:2d:6b:44: 10:99:07:9c:c5:ed:e1:24:2d:73:f0:38:7d:c4:89:da:37:3b: 36:27:56:bd:9f:88:cc:f2:68:03:59:7b:2a:f1:b1:7e:5a:53: 8c:ce:4b:ef:cc:d3:24:26:55:99:79:1e:e4:0a:af:56:3e:a8: 99:f5:ce:b6:55:18:86:86:01:82:04:a0:11:a1:4e:22:9e:a3: 15:ff:aa:bb -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUU8gr1bGUqNBuwhKOJgwbt87MZuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNTEyMDQxOTQzMjZaFw0yNjEyMDMxOTQ4MjZaMDMxMTAvBgNV BAMTKDhFRDlCNzNEQ0MxRTE3MkI4MEFDOEY3OTQwNkJCRTNENTcyNDkzMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4+gtMmk3EE4k04RUqgqK0nmLL cY0++vEki6Q876xw+lXNgFdrtdlmyc+SNXvpDGSpOIaJzikYTQcW+lzpAuJMFg0Q rmjW2wRYbhZmxw3t1bsmdvrEYHAO3igtcd0vwmMnVEcmrTN70o1pgfD94Advleqi z7RI9ZEY5+UZdgVr9KauTJUcjZXWJXnd73kT82SeToDzCN0XzHMkqRIZizaN9705 IICC1k71q7dGqY70s2QWUWPrWJ2yVbuA+GdEugXkskAD87L7hCMij8xfF0Z7R+5L tL6ZC7c8rpebPy/+JQ8TzzznrUdQoRu1Mr8R1S074+pW0enlcRjY3BRjPZPJAgMB AAGjggKHMIICgzAdBgNVHQ4EFgQUjtm3PcweFyuArI95QGu+PVckkx4wHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4NjIzNTMwM2EzYTJmMzQzNDJkMzEzMjM4MjAzZDNlMjAz MjMwMzYzNjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwQqBhKDi1AwDQYJKoZIhvcNAQELBQADggEB AKC6V9df04UbREG9OK4gup3c9SmwCN08EKPwEFqUIfafS5IvoytCIgriRlWRbuWc pofNFt/zdDO8BsZRWNvdMopJSoyk7bq+bE0Whl2lTKzzsuodT51JfnKvYBBfAeIV /HOu0eaP0ArUkaduQY8lRwwuQHaLLXFdn70CUwOyZbFwGR9i5BEazUqe74HtPgyB 6pLvMa7J20M36dHM57g0n/XzVl/LF8mHis0qQJJ1ACD8Ey1rRBCZB5zF7eEkLXPw OH3Eido3OzYnVr2fiMzyaANZeyrxsX5aU4zOS+/M0yQmVZl5HuQKr1Y+qJn1zrZV GIaGAYIEoBGhTiKeoxX/qrs= -----END CERTIFICATE-----Generated at Sat Dec 6 05:49:16 2025 by rpki-client