This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa File: 326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa (raw, json) Hash identifier: buWW9LxxoX84xDGlXRuc7ac6Vqdjfpe3tuguLo1bU7c= Subject key identifier: B8:6B:16:79:4D:85:63:31:83:0C:0F:08:68:B7:22:0E:03:E1:A2:83 Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Certificate serial: 24FAB10BE9EB4143D2CDEFCF8C2E3939D37A679A Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa Signing time: Fri 21 Nov 2025 17:45:14 +0000 ROA not before: Fri 21 Nov 2025 17:40:14 +0000 ROA not after: Fri 20 Nov 2026 17:45:14 +0000 asID: 48436 IP address blocks: 2a14:6f45:c000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:fa:b1:0b:e9:eb:41:43:d2:cd:ef:cf:8c:2e:39:39:d3:7a:67:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Validity Not Before: Nov 21 17:40:14 2025 GMT Not After : Nov 20 17:45:14 2026 GMT Subject: CN=B86B16794D856331830C0F0868B7220E03E1A283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ab:66:74:7a:ce:f3:b7:9a:4b:da:92:94:55: bb:53:f5:85:40:19:e2:9c:77:13:3b:26:ad:5c:cc: ca:5a:89:a9:89:08:cf:d6:df:8d:15:e4:ff:9d:93: 8a:08:2c:f9:53:70:5a:23:5e:9b:ae:47:48:4a:4c: 9c:d9:40:e7:4e:a0:75:5c:33:6b:ac:ca:c3:c4:37: f4:52:28:29:c2:e1:f7:95:3c:14:14:32:b0:62:b7: 23:bb:2e:09:f9:a0:75:97:8a:c5:5b:ce:f6:65:25: 6d:54:89:7e:c0:d7:5d:63:df:47:a0:a5:09:32:b3: 03:06:0e:9b:8c:94:01:cb:e0:c0:ce:1d:f4:5e:37: 5d:eb:56:cd:16:dd:b1:29:31:2e:69:f4:95:d2:93: 30:84:8f:d1:82:6f:96:d1:bc:b4:d5:0c:6f:7e:f5: ee:68:43:64:e2:50:01:86:b9:e5:ba:e9:89:41:a0: d7:fa:41:cb:51:cd:42:f3:79:7e:89:5a:78:e4:95: 52:54:66:7d:13:64:9b:4e:27:10:20:80:23:44:15: 41:79:7a:5f:23:73:1a:c4:3a:4a:22:34:1e:25:c9: d3:80:5a:dc:79:16:61:37:bf:a7:bd:b9:7c:0c:dd: ad:93:d0:cb:6e:e4:05:0f:b4:3f:6f:b5:37:5a:26: b4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6B:16:79:4D:85:63:31:83:0C:0F:08:68:B7:22:0E:03:E1:A2:83 X509v3 Authority Key Identifier: keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6f45:c000::/36 Signature Algorithm: sha256WithRSAEncryption a4:6d:b9:69:2a:80:2b:b6:2d:d7:fa:75:20:62:1a:00:2c:8b: 4b:e7:7f:d8:20:1a:5b:23:fe:d9:9b:3b:9d:8e:be:39:08:d1: 30:79:3a:86:b9:6c:bd:de:9d:8f:0f:ad:25:49:fe:1b:31:e0: ac:bf:76:3c:a4:26:e6:97:ef:ea:8e:b6:cd:4a:f1:50:66:af: 8a:01:fd:68:6d:63:fb:20:fd:c5:e6:ed:c9:dd:37:5b:57:df: b7:bb:3a:4c:4a:cb:47:36:8d:d4:e7:f5:2e:7f:fe:4b:59:cb: 7c:29:09:e4:bf:bc:3e:ca:98:e2:52:db:ac:33:57:72:0d:c4: 62:76:ef:f0:ed:9b:c9:77:41:cb:3c:f0:d7:03:a2:2d:98:12: 3b:eb:4b:53:6b:e6:12:e2:67:86:b6:7a:b4:fa:6c:cb:d4:c0: 3c:cb:e6:16:35:46:16:49:a4:ec:3a:66:bc:ce:c2:8c:0c:52: c7:4d:c0:e1:a1:8a:7a:e5:9d:e2:83:8f:ad:3a:b5:8d:2e:4d: f4:85:a1:d2:97:e2:b0:af:fa:83:00:47:07:a6:7a:97:41:c3: 48:7b:6b:87:17:16:8f:43:3b:86:68:ff:f2:ac:de:e3:f4:14: 4d:c7:38:b9:8d:91:79:56:e0:a2:0e:56:87:34:a5:9e:4a:03: 5c:2c:fb:3d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJPqxC+nrQUPSze/PjC45OdN6Z5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi YjJhYzMyZTAeFw0yNTExMjExNzQwMTRaFw0yNjExMjAxNzQ1MTRaMDMxMTAvBgNV BAMTKEI4NkIxNjc5NEQ4NTYzMzE4MzBDMEYwODY4QjcyMjBFMDNFMUEyODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgq2Z0es7zt5pL2pKUVbtT9YVA GeKcdxM7Jq1czMpaiamJCM/W340V5P+dk4oILPlTcFojXpuuR0hKTJzZQOdOoHVc M2usysPEN/RSKCnC4feVPBQUMrBityO7Lgn5oHWXisVbzvZlJW1UiX7A111j30eg pQkyswMGDpuMlAHL4MDOHfReN13rVs0W3bEpMS5p9JXSkzCEj9GCb5bRvLTVDG9+ 9e5oQ2TiUAGGueW66YlBoNf6QctRzULzeX6JWnjklVJUZn0TZJtOJxAggCNEFUF5 el8jcxrEOkoiNB4lydOAWtx5FmE3v6e9uXwM3a2T0Mtu5AUPtD9vtTdaJrQNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUuGsWeU2FYzGDDA8IaLciDgPhooMwHwYDVR0j BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz cXd5NC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZmN2E5ODkt ZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzQvMzI2MTMxMzQzYTM2NjYzNDM1 M2E2MzMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNkM2UyMDM0MzgzNDMzMzYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgQqFG9FwDANBgkqhkiG9w0BAQsFAAOCAQEApG25aSqAK7Yt1/p1IGIa ACyLS+d/2CAaWyP+2Zs7nY6+OQjRMHk6hrlsvd6djw+tJUn+GzHgrL92PKQm5pfv 6o62zUrxUGavigH9aG1j+yD9xebtyd03W1fft7s6TErLRzaN1Of1Ln/+S1nLfCkJ 5L+8PsqY4lLbrDNXcg3EYnbv8O2byXdByzzw1wOiLZgSO+tLU2vmEuJnhrZ6tPps y9TAPMvmFjVGFkmk7DpmvM7CjAxSx03A4aGKeuWd4oOPrTq1jS5N9IWh0pfisK/6 gwBHB6Z6l0HDSHtrhxcWj0M7hmj/8qze4/QUTcc4uY2ReVbgog5WhzSlnkoDXCz7 PQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:01:32 2025 by rpki-client