This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa File: 326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa (raw, json) Hash identifier: 7HzMy3EQC4VhBpQQuwAgqmxWq4MZqQyb1t+9r/yAxck= Subject key identifier: 2E:57:26:EF:80:BC:65:30:BA:5A:41:F4:83:C6:97:27:7E:BC:FC:13 Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Certificate serial: 740F32667F952CCBC6F3ED91FFD71D170D582563 Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa Signing time: Fri 21 Nov 2025 17:45:14 +0000 ROA not before: Fri 21 Nov 2025 17:40:14 +0000 ROA not after: Fri 20 Nov 2026 17:45:14 +0000 asID: 198342 IP address blocks: 2a14:6f44:c701::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:0f:32:66:7f:95:2c:cb:c6:f3:ed:91:ff:d7:1d:17:0d:58:25:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Validity Not Before: Nov 21 17:40:14 2025 GMT Not After : Nov 20 17:45:14 2026 GMT Subject: CN=2E5726EF80BC6530BA5A41F483C697277EBCFC13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:98:01:ff:33:2a:e8:1f:97:3c:0d:0e:a0:90: ab:b0:2d:03:8e:e0:ae:d2:0a:d7:78:20:30:25:68: 87:19:84:1d:25:81:51:9c:d5:4c:79:0a:40:20:ec: a5:67:28:84:db:ad:0b:ac:61:f7:49:26:72:d0:8f: 6f:e5:03:2d:44:59:10:15:e6:50:53:26:47:de:48: 72:67:c6:af:41:55:c4:57:73:69:06:ab:8c:d8:76: ee:39:e7:60:22:f6:d5:7e:ec:ff:27:ea:cb:0a:a9: 0a:d1:a8:58:7c:d0:99:c1:14:1a:3b:1d:b0:85:d5: a2:8f:1e:0b:65:b8:34:4c:08:14:ba:31:c7:58:8c: 5d:aa:92:b8:35:b8:b0:96:57:7c:a1:7b:d1:c7:d0: 25:aa:49:d4:24:37:a3:f9:a2:74:a8:2e:30:cd:64: 09:81:dd:6e:ab:bb:18:25:58:20:65:de:00:66:67: 7b:7d:4f:6b:ad:a9:e7:51:ce:fe:49:39:5f:4e:d5: a1:e8:a9:c7:d9:9a:b5:7d:36:f9:90:7e:36:34:90: 43:ce:9e:20:46:17:f6:58:d1:37:f3:79:14:4e:b2: 99:71:15:0d:aa:01:98:82:80:70:e7:75:3f:32:cd: 1e:e0:3f:b2:53:37:ee:6e:62:d4:be:5a:93:bb:87: 74:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:57:26:EF:80:BC:65:30:BA:5A:41:F4:83:C6:97:27:7E:BC:FC:13 X509v3 Authority Key Identifier: keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6f44:c701::/48 Signature Algorithm: sha256WithRSAEncryption a0:bc:3b:04:db:d4:9e:b3:6b:96:bb:42:a5:fc:b7:de:b7:82: 1a:e1:48:f3:5a:57:d3:67:86:fb:0d:03:3d:23:bf:4c:64:81: 04:e3:ee:a6:11:f9:50:b3:ea:e3:2d:6e:ab:2a:4e:fb:13:19: 20:23:01:6a:16:10:d3:cf:3d:d0:f3:f7:6d:92:9b:5d:d5:ef: c5:40:76:b6:7e:8a:d9:1c:e7:43:18:a4:9c:1e:01:b2:af:37: 5a:51:e3:ee:5b:ec:3a:f6:b3:08:b2:ec:45:f1:dd:f8:ee:2f: a3:dd:ee:68:46:f1:8a:ac:ed:98:5c:ad:5c:29:c7:aa:21:f4: 96:88:02:59:da:eb:ab:24:7b:a9:2a:96:14:f2:d7:04:f8:ed: 33:ca:c4:d7:bf:8b:33:e1:38:86:28:c0:ae:77:45:2b:e8:b9: 8c:6d:7f:21:fe:7e:61:b8:17:93:13:a2:09:c8:b3:7f:d2:b2: 64:21:64:e0:69:09:03:f3:75:20:fb:cf:0a:e1:a0:3e:e0:9c: 37:2e:fc:f4:a2:2a:95:2e:ed:c3:80:84:cf:c0:33:a5:e5:3d: b8:22:34:31:45:42:da:f3:2a:31:6f:94:28:89:bf:d5:68:b9: e5:55:3c:8d:3a:d2:04:df:28:90:3c:15:54:3d:05:2a:3f:92: 44:29:20:40 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUdA8yZn+VLMvG8+2R/9cdFw1YJWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi YjJhYzMyZTAeFw0yNTExMjExNzQwMTRaFw0yNjExMjAxNzQ1MTRaMDMxMTAvBgNV BAMTKDJFNTcyNkVGODBCQzY1MzBCQTVBNDFGNDgzQzY5NzI3N0VCQ0ZDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1mAH/MyroH5c8DQ6gkKuwLQOO 4K7SCtd4IDAlaIcZhB0lgVGc1Ux5CkAg7KVnKITbrQusYfdJJnLQj2/lAy1EWRAV 5lBTJkfeSHJnxq9BVcRXc2kGq4zYdu4552Ai9tV+7P8n6ssKqQrRqFh80JnBFBo7 HbCF1aKPHgtluDRMCBS6McdYjF2qkrg1uLCWV3yhe9HH0CWqSdQkN6P5onSoLjDN ZAmB3W6ruxglWCBl3gBmZ3t9T2utqedRzv5JOV9O1aHoqcfZmrV9NvmQfjY0kEPO niBGF/ZY0TfzeRROsplxFQ2qAZiCgHDndT8yzR7gP7JTN+5uYtS+WpO7h3QFAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQULlcm74C8ZTC6WkH0g8aXJ368/BMwHwYDVR0j BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz cXd5NC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZmN2E5ODkt ZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzQvMzI2MTMxMzQzYTM2NjYzNDM0 M2E2MzM3MzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkzODMzMzQzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoUb0THATANBgkqhkiG9w0BAQsFAAOCAQEAoLw7BNvUnrNrlrtC pfy33reCGuFI81pX02eG+w0DPSO/TGSBBOPuphH5ULPq4y1uqypO+xMZICMBahYQ 08890PP3bZKbXdXvxUB2tn6K2RznQxiknB4Bsq83WlHj7lvsOvazCLLsRfHd+O4v o93uaEbxiqztmFytXCnHqiH0logCWdrrqyR7qSqWFPLXBPjtM8rE17+LM+E4hijA rndFK+i5jG1/If5+YbgXkxOiCcizf9KyZCFk4GkJA/N1IPvPCuGgPuCcNy789KIq lS7tw4CEz8AzpeU9uCI0MUVC2vMqMW+UKIm/1Wi55VU8jTrSBN8okDwVVD0FKj+S RCkgQA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:27 2025 by rpki-client