This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa File: 326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa (raw, json) Hash identifier: E5i+93dh5I/S5MMaZahzwFpc+FrF3/j8/oPFxMb1ofg= Subject key identifier: 08:BD:82:03:AA:15:8A:98:E9:31:3A:1A:B9:ED:A6:2B:48:FB:09:C5 Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Certificate serial: 6A303C5FB9DBA8A732A277C94E0C6D9B73798214 Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa Signing time: Fri 21 Nov 2025 17:45:14 +0000 ROA not before: Fri 21 Nov 2025 17:40:14 +0000 ROA not after: Fri 20 Nov 2026 17:45:14 +0000 asID: 198342 IP address blocks: 2a14:6f45:c000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:30:3c:5f:b9:db:a8:a7:32:a2:77:c9:4e:0c:6d:9b:73:79:82:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Validity Not Before: Nov 21 17:40:14 2025 GMT Not After : Nov 20 17:45:14 2026 GMT Subject: CN=08BD8203AA158A98E9313A1AB9EDA62B48FB09C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:02:aa:07:dc:42:67:e9:63:a3:be:a4:77: 7c:46:e6:a4:d0:9f:7b:9f:eb:e7:7f:80:d5:01:0d: a5:44:ab:8e:11:26:30:ef:e8:a6:ac:ab:64:5e:79: 3a:e8:9d:b4:7f:2a:71:1b:8d:a9:1d:6d:1c:d4:b2: d3:6d:6c:77:05:db:0f:97:78:fc:76:77:af:01:25: 58:81:19:ac:b7:5c:a6:e6:33:84:c3:46:62:88:86: fb:9e:5a:06:c7:d3:54:1d:32:a5:18:c5:2d:03:da: e8:3d:5d:0d:d3:33:19:c8:2b:ec:0f:af:8f:41:10: ad:16:df:c9:b7:55:f6:ca:d9:71:ad:ba:4e:c4:43: f2:68:58:83:b3:af:14:dd:e3:a7:77:f9:04:a4:24: c0:32:0b:87:15:26:ea:ed:d3:77:1d:63:00:85:dd: b4:28:c8:44:22:2a:04:77:6c:57:c5:51:49:ba:be: 95:99:21:a3:7a:3e:93:74:31:43:02:4c:23:0e:4f: 67:36:9f:5a:d2:b1:3e:56:51:0f:f3:e1:92:5e:0b: f1:1b:fa:06:c7:10:e4:5a:db:31:75:f7:e6:9c:50: ec:cb:a1:ce:a7:75:9d:6f:aa:9f:10:ab:19:e2:9d: ce:12:c9:63:ff:49:48:8a:dc:3b:73:2d:86:61:dd: 45:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BD:82:03:AA:15:8A:98:E9:31:3A:1A:B9:ED:A6:2B:48:FB:09:C5 X509v3 Authority Key Identifier: keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6f45:c000::/36 Signature Algorithm: sha256WithRSAEncryption a0:4c:e6:eb:cf:e0:5c:1f:af:70:90:c3:f7:97:de:a1:b4:07: 8a:a5:1c:e8:e3:3d:88:9e:8a:81:4f:4e:ca:c9:97:4c:e0:cd: 3d:ce:00:43:18:5b:5e:3b:b2:0e:b5:4c:ef:4a:90:fd:18:ae: 8f:18:45:f8:5f:50:dd:55:4f:b1:d9:96:21:a6:c0:bf:cd:e2: a3:87:12:89:bd:34:ab:7c:02:22:a7:5c:00:93:41:53:e5:c7: 2e:09:19:5b:a3:f3:17:cd:a0:ce:fd:f2:f6:37:55:02:bc:8b: 19:af:ad:7d:9f:9e:23:1d:54:3d:e3:74:96:e5:52:b9:5c:79: e6:d4:1e:88:89:2d:68:0e:dd:02:57:2f:1c:38:d5:98:b3:e2: 05:67:ae:fb:53:6b:08:f3:4e:62:83:82:a4:a1:03:e8:53:16: bc:71:d4:dc:b2:9e:79:3a:15:65:f6:7c:2d:33:b5:e2:59:ce: 1c:21:50:e9:86:01:86:a1:7b:09:9a:b5:10:5d:10:cc:d4:53: a5:80:b8:ab:ae:e8:44:3b:a1:77:f1:02:33:f3:bd:2f:78:4a: 67:7d:3c:fa:f4:c4:24:6f:83:d6:48:fc:36:76:81:36:67:79: c6:eb:08:f9:50:90:8f:7f:a0:ae:e7:9d:6b:b3:67:34:de:0f: b4:0f:59:42 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUajA8X7nbqKcyonfJTgxtm3N5ghQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi YjJhYzMyZTAeFw0yNTExMjExNzQwMTRaFw0yNjExMjAxNzQ1MTRaMDMxMTAvBgNV BAMTKDA4QkQ4MjAzQUExNThBOThFOTMxM0ExQUI5RURBNjJCNDhGQjA5QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzewKqB9xCZ+ljo76kd3xG5qTQ n3uf6+d/gNUBDaVEq44RJjDv6Kasq2ReeTronbR/KnEbjakdbRzUstNtbHcF2w+X ePx2d68BJViBGay3XKbmM4TDRmKIhvueWgbH01QdMqUYxS0D2ug9XQ3TMxnIK+wP r49BEK0W38m3VfbK2XGtuk7EQ/JoWIOzrxTd46d3+QSkJMAyC4cVJurt03cdYwCF 3bQoyEQiKgR3bFfFUUm6vpWZIaN6PpN0MUMCTCMOT2c2n1rSsT5WUQ/z4ZJeC/Eb +gbHEORa2zF19+acUOzLoc6ndZ1vqp8Qqxninc4SyWP/SUiK3DtzLYZh3UX3AgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUCL2CA6oVipjpMToaue2mK0j7CcUwHwYDVR0j BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz cXd5NC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZmN2E5ODkt ZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzQvMzI2MTMxMzQzYTM2NjYzNDM1 M2E2MzMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNkM2UyMDMxMzkzODMzMzQzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGBCoUb0XAMA0GCSqGSIb3DQEBCwUAA4IBAQCgTObrz+BcH69wkMP3 l96htAeKpRzo4z2InoqBT07KyZdM4M09zgBDGFteO7IOtUzvSpD9GK6PGEX4X1Dd VU+x2ZYhpsC/zeKjhxKJvTSrfAIip1wAk0FT5ccuCRlbo/MXzaDO/fL2N1UCvIsZ r619n54jHVQ943SW5VK5XHnm1B6IiS1oDt0CVy8cONWYs+IFZ677U2sI805ig4Kk oQPoUxa8cdTcsp55OhVl9nwtM7XiWc4cIVDphgGGoXsJmrUQXRDM1FOlgLirruhE O6F38QIz870veEpnfTz69MQkb4PWSPw2doE2Z3nG6wj5UJCPf6Cu551rs2c03g+0 D1lC -----END CERTIFICATE-----Generated at Sat Dec 6 05:55:30 2025 by rpki-client