This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633064653a3a2f34382d3438203d3e203438343336.roa File: 326131343a366634343a633064653a3a2f34382d3438203d3e203438343336.roa (raw, json) Hash identifier: g+1tMLXY3SN1Y/zUSSaWRJc99akoWdOPFvMCxkZrGLU= Subject key identifier: 29:23:63:C2:36:CF:10:16:91:D6:C2:F8:34:B5:C7:84:3E:8D:09:C9 Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Certificate serial: 216BB33718B10D773D0C97D7186BC02963A54E66 Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633064653a3a2f34382d3438203d3e203438343336.roa Signing time: Fri 21 Nov 2025 17:45:14 +0000 ROA not before: Fri 21 Nov 2025 17:40:14 +0000 ROA not after: Fri 20 Nov 2026 17:45:14 +0000 asID: 48436 IP address blocks: 2a14:6f44:c0de::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6b:b3:37:18:b1:0d:77:3d:0c:97:d7:18:6b:c0:29:63:a5:4e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Validity Not Before: Nov 21 17:40:14 2025 GMT Not After : Nov 20 17:45:14 2026 GMT Subject: CN=292363C236CF101691D6C2F834B5C7843E8D09C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:52:c7:e7:5f:b6:51:d2:90:0e:af:08:82:9d: 2f:d5:79:ee:57:fa:4e:bc:56:ad:8a:16:ef:46:16: 8f:c0:e6:07:24:42:61:8f:db:44:89:ee:b2:71:2f: ba:d8:6e:36:4e:53:4b:8e:58:f3:93:89:03:2d:c2: 91:d4:bd:1e:f1:df:6d:c8:1f:cf:7a:2e:a9:23:5b: 76:aa:46:ac:9d:82:9d:01:6e:a8:75:b6:93:9f:f4: 23:ca:79:99:3b:ee:dc:5b:ee:5d:a9:0e:c0:bf:55: df:6d:5c:e3:9e:f2:9b:09:c9:68:25:0e:97:ec:31: d9:10:13:10:59:ef:2b:d6:78:a0:fe:b4:59:83:7e: 01:14:bc:e9:e8:0f:1d:ae:36:19:9d:57:95:37:14: d2:5c:e8:30:2b:5d:22:c1:a5:da:20:96:56:60:92: 42:04:bc:94:83:d9:fe:c3:c5:3e:2e:45:80:50:b9: 35:15:a5:33:2e:48:b8:85:d4:86:69:6f:e2:08:ef: 75:39:dd:81:21:97:f4:b7:c5:3b:25:05:9c:cd:00: e5:0a:43:96:7b:58:1d:37:c9:d2:9b:49:33:ef:10: 80:0f:2b:71:1c:66:2a:1e:1b:60:06:c6:15:34:9d: 43:4a:41:66:c0:13:21:dc:55:68:a8:b3:35:cd:ae: 19:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:23:63:C2:36:CF:10:16:91:D6:C2:F8:34:B5:C7:84:3E:8D:09:C9 X509v3 Authority Key Identifier: keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633064653a3a2f34382d3438203d3e203438343336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6f44:c0de::/48 Signature Algorithm: sha256WithRSAEncryption 41:31:6e:53:93:82:cc:55:4f:88:e1:2b:2e:fc:7f:28:34:12: 56:0b:dc:de:93:12:5a:cf:7a:63:e1:55:ed:06:7e:78:1e:1d: 25:b9:55:3b:fb:fd:e4:80:d3:1c:f1:3b:af:83:18:7c:eb:c4: e1:82:19:3c:37:5f:39:a8:a7:6f:20:b1:6f:bd:7c:54:2b:8d: c7:5a:3d:18:c6:0d:a3:c3:b8:17:e3:47:12:c3:03:62:6c:a2: 5c:13:63:83:e2:7d:86:5f:62:9a:71:6f:dc:f7:24:fc:85:31: 89:7d:bc:24:a1:d0:d9:b1:4e:c7:c5:3c:7c:25:17:0c:6c:3c: 86:07:5a:68:43:ec:90:12:11:86:9c:ff:81:2b:15:80:47:8c: fb:08:a8:ce:c6:d3:43:a9:0d:ec:a6:f2:14:55:93:15:ed:b0: e4:56:3a:ea:09:75:f1:52:fb:2c:51:6b:77:dd:a7:4b:02:ca: bd:44:be:36:0c:7d:f1:b1:07:93:11:c1:69:3f:6d:3a:ae:5f: dd:49:06:f0:df:df:b4:a5:0f:ca:b4:22:9d:11:b9:39:76:63: 0f:91:5e:2e:31:32:fb:a3:1c:d6:43:aa:be:89:7b:03:34:7e: 44:3d:b6:a6:ec:cb:96:84:87:ce:3a:0c:ed:b2:15:bf:8b:18: 51:60:f6:0e -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIUIWuzNxixDXc9DJfXGGvAKWOlTmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi YjJhYzMyZTAeFw0yNTExMjExNzQwMTRaFw0yNjExMjAxNzQ1MTRaMDMxMTAvBgNV BAMTKDI5MjM2M0MyMzZDRjEwMTY5MUQ2QzJGODM0QjVDNzg0M0U4RDA5QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJUsfnX7ZR0pAOrwiCnS/Vee5X +k68Vq2KFu9GFo/A5gckQmGP20SJ7rJxL7rYbjZOU0uOWPOTiQMtwpHUvR7x323I H896LqkjW3aqRqydgp0Bbqh1tpOf9CPKeZk77txb7l2pDsC/Vd9tXOOe8psJyWgl DpfsMdkQExBZ7yvWeKD+tFmDfgEUvOnoDx2uNhmdV5U3FNJc6DArXSLBpdogllZg kkIEvJSD2f7DxT4uRYBQuTUVpTMuSLiF1IZpb+II73U53YEhl/S3xTslBZzNAOUK Q5Z7WB03ydKbSTPvEIAPK3EcZioeG2AGxhU0nUNKQWbAEyHcVWioszXNrhn9AgMB AAGjggJIMIICRDAdBgNVHQ4EFgQUKSNjwjbPEBaR1sL4NLXHhD6NCckwHwYDVR0j BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz cXd5NC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZmN2E5ODkt ZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzQvMzI2MTMxMzQzYTM2NjYzNDM0 M2E2MzMwNjQ2NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzgzNDMzMzYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAqFG9EwN4wDQYJKoZIhvcNAQELBQADggEBAEExblOTgsxVT4jhKy78 fyg0ElYL3N6TElrPemPhVe0GfngeHSW5VTv7/eSA0xzxO6+DGHzrxOGCGTw3Xzmo p28gsW+9fFQrjcdaPRjGDaPDuBfjRxLDA2JsolwTY4PifYZfYppxb9z3JPyFMYl9 vCSh0NmxTsfFPHwlFwxsPIYHWmhD7JASEYac/4ErFYBHjPsIqM7G00OpDeym8hRV kxXtsORWOuoJdfFS+yxRa3fdp0sCyr1EvjYMffGxB5MRwWk/bTquX91JBvDf37Sl D8q0Ip0RuTl2Yw+RXi4xMvujHNZDqr6JewM0fkQ9tqbsy5aEh846DO2yFb+LGFFg 9g4= -----END CERTIFICATE-----Generated at Sat Dec 6 06:49:47 2025 by rpki-client