This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a3432303a3a2f34342d3438203d3e20323036373531.roa File: 326131343a366634343a3432303a3a2f34342d3438203d3e20323036373531.roa (raw, json) Hash identifier: tAH3E769OlzQWJEjgXPQBoGBF8R2vjgSThIJK0OhT8g= Subject key identifier: 70:10:CE:6E:71:D3:0F:A1:6A:AC:D6:B5:FA:42:FF:A3:A9:5A:12:EC Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Certificate serial: 02FA7AF86BC32B1FCFEA77960B065CEF351F38CA Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a3432303a3a2f34342d3438203d3e20323036373531.roa Signing time: Sat 06 Dec 2025 00:34:44 +0000 ROA not before: Sat 06 Dec 2025 00:29:44 +0000 ROA not after: Sat 05 Dec 2026 00:34:44 +0000 asID: 206751 IP address blocks: 2a14:6f44:420::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:fa:7a:f8:6b:c3:2b:1f:cf:ea:77:96:0b:06:5c:ef:35:1f:38:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Validity Not Before: Dec 6 00:29:44 2025 GMT Not After : Dec 5 00:34:44 2026 GMT Subject: CN=7010CE6E71D30FA16AACD6B5FA42FFA3A95A12EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c9:c4:e4:b9:e8:c4:6c:48:28:19:fc:0c:62: e4:d2:01:74:5d:16:5d:a7:e3:f3:6f:19:43:4a:ab: 59:36:ac:16:32:c6:d1:55:3b:3f:0b:9c:c2:51:3a: c6:b5:b7:4f:d4:2f:31:d0:82:92:9f:f6:31:9b:ca: c0:c4:91:81:41:50:e8:64:a2:05:8c:4f:22:7c:65: b9:7f:dd:71:88:1c:99:a3:56:47:7e:7a:71:fd:fd: 1f:c1:ca:2d:88:87:99:56:2a:ac:62:52:f2:48:37: 0c:0d:aa:86:8b:6a:e4:cf:b4:ec:6d:cb:c2:38:5b: 98:84:79:21:fb:b6:5c:67:28:cf:fc:b0:94:db:bb: a4:27:ee:96:bb:48:bf:80:55:10:d7:b5:65:8f:57: 1a:24:a5:41:b1:ba:12:e9:95:58:57:98:7e:9f:ab: 0c:09:d1:79:2c:bf:ad:d7:da:4e:07:96:8c:b8:26: af:66:eb:16:c3:a8:e9:4f:4c:1b:01:5a:e6:f4:0e: 32:7a:60:9a:7b:af:9b:0e:f9:aa:ea:99:80:7c:18: d6:aa:2c:16:38:5b:24:9b:9c:ec:f7:6c:86:76:e2: bc:b2:12:f7:94:38:c5:bd:3c:27:9b:36:be:7e:31: cc:12:c4:44:2b:d3:73:04:69:f7:6d:5a:53:b4:fd: 65:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:10:CE:6E:71:D3:0F:A1:6A:AC:D6:B5:FA:42:FF:A3:A9:5A:12:EC X509v3 Authority Key Identifier: keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a3432303a3a2f34342d3438203d3e20323036373531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6f44:420::/44 Signature Algorithm: sha256WithRSAEncryption 24:ce:4c:41:81:0f:9c:1e:fd:3b:96:1c:69:37:b8:d9:57:3f: 77:cc:c1:88:1a:dc:91:44:13:89:b8:0e:f6:d5:5d:b2:16:ec: 9a:4d:47:f4:0f:d5:d5:ca:e9:e2:9a:7c:6d:11:49:dd:ae:0b: d2:60:26:38:10:0c:a2:e1:00:2c:4c:01:77:4b:6c:0d:00:70: 17:c3:c9:31:8d:aa:59:26:03:3c:a9:a1:18:56:49:9b:59:6e: 5b:8b:fd:39:14:57:bf:05:b4:a7:0b:85:e7:64:6a:90:76:89: 83:cd:a6:aa:67:05:66:b5:a4:7b:33:39:dd:f0:64:3f:85:4b: bd:7d:72:ef:8f:90:d4:b4:ba:e8:f0:d3:02:83:3d:79:38:48: d1:2b:0e:15:06:67:13:03:f0:ac:9a:95:8a:b4:89:02:98:c8: b1:24:9a:03:e9:d9:84:bf:b4:23:c0:ec:48:5b:2c:17:96:ef: be:85:4a:0d:c9:22:c0:6a:f3:18:ee:48:88:a5:c9:41:71:eb: c8:82:e0:e7:4c:75:ef:e7:98:b2:4a:10:c6:68:e4:0c:b2:0e: 55:8f:c4:c4:a0:0f:67:10:9e:f3:aa:9f:cb:3b:f0:2d:59:b3: af:65:fa:9c:51:e4:a0:fd:a2:68:1a:ff:23:e5:c4:be:0c:61: d3:57:b8:06 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIUAvp6+GvDKx/P6neWCwZc7zUfOMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi YjJhYzMyZTAeFw0yNTEyMDYwMDI5NDRaFw0yNjEyMDUwMDM0NDRaMDMxMTAvBgNV BAMTKDcwMTBDRTZFNzFEMzBGQTE2QUFDRDZCNUZBNDJGRkEzQTk1QTEyRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZycTkuejEbEgoGfwMYuTSAXRd Fl2n4/NvGUNKq1k2rBYyxtFVOz8LnMJROsa1t0/ULzHQgpKf9jGbysDEkYFBUOhk ogWMTyJ8Zbl/3XGIHJmjVkd+enH9/R/Byi2Ih5lWKqxiUvJINwwNqoaLauTPtOxt y8I4W5iEeSH7tlxnKM/8sJTbu6Qn7pa7SL+AVRDXtWWPVxokpUGxuhLplVhXmH6f qwwJ0Xksv63X2k4Hloy4Jq9m6xbDqOlPTBsBWub0DjJ6YJp7r5sO+arqmYB8GNaq LBY4WySbnOz3bIZ24ryyEveUOMW9PCebNr5+McwSxEQr03MEafdtWlO0/WWnAgMB AAGjggJIMIICRDAdBgNVHQ4EFgQUcBDObnHTD6FqrNa1+kL/o6laEuwwHwYDVR0j BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz cXd5NC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZmN2E5ODkt ZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzQvMzI2MTMxMzQzYTM2NjYzNDM0 M2EzNDMyMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjMwMzYzNzM1MzEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwQqFG9EBCAwDQYJKoZIhvcNAQELBQADggEBACTOTEGBD5we/TuWHGk3 uNlXP3fMwYga3JFEE4m4DvbVXbIW7JpNR/QP1dXK6eKafG0RSd2uC9JgJjgQDKLh ACxMAXdLbA0AcBfDyTGNqlkmAzypoRhWSZtZbluL/TkUV78FtKcLhedkapB2iYPN pqpnBWa1pHszOd3wZD+FS719cu+PkNS0uujw0wKDPXk4SNErDhUGZxMD8KyalYq0 iQKYyLEkmgPp2YS/tCPA7EhbLBeW776FSg3JIsBq8xjuSIilyUFx68iC4OdMde/n mLJKEMZo5AyyDlWPxMSgD2cQnvOqn8s78C1Zs69l+pxR5KD9omga/yPlxL4MYdNX uAY= -----END CERTIFICATE-----Generated at Sat Dec 6 06:37:15 2025 by rpki-client