This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633064653a3a2f34382d3438203d3e20313938333432.roa File: 326131343a366634343a633064653a3a2f34382d3438203d3e20313938333432.roa (raw, json) Hash identifier: CR1Da8B3Ve/Ki5AH4lTB+zn6wD6Vb8CX/Tfk65mSnm4= Subject key identifier: AE:F5:62:0A:B7:B8:39:C6:40:1A:9F:04:65:7C:E1:83:FD:A1:08:BA Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Certificate serial: 202FC9AF5F424DF01E3F652A5469B366A2F1362E Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633064653a3a2f34382d3438203d3e20313938333432.roa Signing time: Fri 21 Nov 2025 17:45:14 +0000 ROA not before: Fri 21 Nov 2025 17:40:14 +0000 ROA not after: Fri 20 Nov 2026 17:45:14 +0000 asID: 198342 IP address blocks: 2a14:6f44:c0de::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:2f:c9:af:5f:42:4d:f0:1e:3f:65:2a:54:69:b3:66:a2:f1:36:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Validity Not Before: Nov 21 17:40:14 2025 GMT Not After : Nov 20 17:45:14 2026 GMT Subject: CN=AEF5620AB7B839C6401A9F04657CE183FDA108BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:64:21:83:84:93:a3:46:a0:6b:ca:16:39:86: 7b:61:09:a5:bf:58:2d:b4:e3:ee:c8:e0:95:99:75: 77:9d:09:1e:bf:e7:b2:bf:05:4a:9f:75:cf:ff:5b: eb:21:07:39:a1:2b:3d:98:12:aa:56:67:17:54:81: dc:cb:4f:c0:1c:a6:f8:2a:27:d6:15:f2:20:ef:6b: 42:fe:d7:c0:bf:44:49:e8:0b:f9:b7:c0:54:16:fe: 42:df:9a:e7:7f:39:fc:96:02:67:a3:98:eb:af:2d: 3d:e0:92:68:7a:db:c3:c7:08:91:2f:ba:58:56:0c: 6d:65:6a:a0:e0:6a:5f:41:a0:2c:6e:b5:e2:01:7b: 96:08:ac:de:74:70:7a:01:82:b8:1c:f3:91:0d:9c: 77:fd:ec:8f:db:11:fb:f5:51:82:b5:06:8f:08:43: a4:a1:6b:08:ec:fa:55:f0:19:fd:17:03:d2:db:6e: 99:80:82:8e:fb:5e:ef:dc:b9:ac:70:d6:31:a7:9f: 93:e0:0b:4e:ac:6d:8a:59:80:b0:8f:fb:0e:6b:14: 26:c1:5d:8b:d1:9d:48:2d:aa:49:b4:0b:7d:4a:40: 1f:17:7a:58:0f:7b:53:63:58:45:8d:ad:a2:61:88: 20:e4:70:11:e3:cb:f4:22:6d:86:bc:35:2b:bb:57: f7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F5:62:0A:B7:B8:39:C6:40:1A:9F:04:65:7C:E1:83:FD:A1:08:BA X509v3 Authority Key Identifier: keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633064653a3a2f34382d3438203d3e20313938333432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6f44:c0de::/48 Signature Algorithm: sha256WithRSAEncryption 89:ee:3c:63:78:b6:4f:cd:54:24:11:00:b2:74:90:48:b6:c9: 29:6b:4e:eb:35:b7:b4:a6:e3:26:7b:83:22:74:45:03:a9:a3: cb:d6:ab:0b:49:25:39:a7:35:81:29:e6:58:3d:a0:68:2c:fd: a9:f2:ae:41:d7:68:2b:32:b7:58:f6:9c:e9:9b:fc:a3:18:ee: a7:77:e3:8a:ed:e9:7a:1b:f6:e8:a5:98:aa:d9:58:34:a0:e0: 1c:e0:31:a7:9e:95:92:bd:68:8e:16:2c:39:d6:37:8c:d8:e0: ea:aa:7f:25:50:d1:c0:26:69:ec:f8:60:56:c9:de:e5:13:a4: 0b:35:7e:a7:95:ac:ae:74:2c:20:b6:16:3c:3f:67:6e:aa:a0: ec:50:df:7f:e3:f4:41:5d:0d:0c:56:c3:33:c9:1a:22:0f:40: 8a:1d:b2:14:c6:11:73:3b:74:41:79:b2:3f:b4:9d:91:1f:a1: c1:7d:e3:33:3d:cc:76:be:09:f5:16:ae:3d:a7:06:30:c6:ab: 33:aa:af:00:c7:40:d3:1a:64:fd:1b:84:5f:e1:36:bb:dd:c4: 1c:92:24:a8:c6:74:fb:77:d6:ee:8e:44:03:27:86:e8:ab:8d: 85:80:24:97:19:0f:eb:0c:ed:2f:91:1f:90:62:d9:87:6d:6c: 70:ed:d3:bd -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUIC/Jr19CTfAeP2UqVGmzZqLxNi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi YjJhYzMyZTAeFw0yNTExMjExNzQwMTRaFw0yNjExMjAxNzQ1MTRaMDMxMTAvBgNV BAMTKEFFRjU2MjBBQjdCODM5QzY0MDFBOUYwNDY1N0NFMTgzRkRBMTA4QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNZCGDhJOjRqBryhY5hnthCaW/ WC204+7I4JWZdXedCR6/57K/BUqfdc//W+shBzmhKz2YEqpWZxdUgdzLT8Acpvgq J9YV8iDva0L+18C/REnoC/m3wFQW/kLfmud/OfyWAmejmOuvLT3gkmh628PHCJEv ulhWDG1laqDgal9BoCxuteIBe5YIrN50cHoBgrgc85ENnHf97I/bEfv1UYK1Bo8I Q6Shawjs+lXwGf0XA9LbbpmAgo77Xu/cuaxw1jGnn5PgC06sbYpZgLCP+w5rFCbB XYvRnUgtqkm0C31KQB8XelgPe1NjWEWNraJhiCDkcBHjy/QibYa8NSu7V/dfAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUrvViCre4OcZAGp8EZXzhg/2hCLowHwYDVR0j BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz cXd5NC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZmN2E5ODkt ZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzQvMzI2MTMxMzQzYTM2NjYzNDM0 M2E2MzMwNjQ2NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkzODMzMzQzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoUb0TA3jANBgkqhkiG9w0BAQsFAAOCAQEAie48Y3i2T81UJBEA snSQSLbJKWtO6zW3tKbjJnuDInRFA6mjy9arC0klOac1gSnmWD2gaCz9qfKuQddo KzK3WPac6Zv8oxjup3fjiu3pehv26KWYqtlYNKDgHOAxp56Vkr1ojhYsOdY3jNjg 6qp/JVDRwCZp7PhgVsne5ROkCzV+p5WsrnQsILYWPD9nbqqg7FDff+P0QV0NDFbD M8kaIg9Aih2yFMYRczt0QXmyP7SdkR+hwX3jMz3Mdr4J9RauPacGMMarM6qvAMdA 0xpk/RuEX+E2u93EHJIkqMZ0+3fW7o5EAyeG6KuNhYAklxkP6wztL5EfkGLZh21s cO3TvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:34 2025 by rpki-client