This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa File: 326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa (raw, json) Hash identifier: 9H5bHORS1buGdk6dUDjyuqRIpPDaKxv77H5RNmLlgrw= Subject key identifier: 33:ED:40:67:22:0D:76:D8:A5:07:23:CC:7A:9F:B6:8E:96:14:71:BF Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Certificate serial: 1B2D58AB4F58B878DDF041E9527ABAC280F6E4E1 Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa Signing time: Fri 21 Nov 2025 18:45:15 +0000 ROA not before: Fri 21 Nov 2025 18:40:15 +0000 ROA not after: Fri 20 Nov 2026 18:45:15 +0000 asID: 198342 IP address blocks: 2a14:6f45:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:2d:58:ab:4f:58:b8:78:dd:f0:41:e9:52:7a:ba:c2:80:f6:e4:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Validity Not Before: Nov 21 18:40:15 2025 GMT Not After : Nov 20 18:45:15 2026 GMT Subject: CN=33ED4067220D76D8A50723CC7A9FB68E961471BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:01:93:5e:4f:1a:a8:fd:8c:93:31:f7:11:14: 1c:e2:96:58:15:05:c4:e4:2f:47:98:08:07:e4:eb: 65:c8:ab:41:d0:8d:c1:13:6f:ba:a1:04:ad:fd:9a: dc:5b:3e:19:18:01:86:b3:8e:aa:e3:e9:7d:43:4f: 7a:8e:e2:e5:d7:ac:6e:3d:01:d5:7f:55:0d:f5:72: a2:41:d5:54:e8:c9:54:5d:52:2b:61:ff:f7:d8:69: a8:dc:36:d5:37:1c:94:f1:31:4f:33:a6:4b:c5:ad: ab:d2:78:da:1d:b1:69:2d:9e:7b:35:c6:f8:07:bc: 4c:a5:79:57:dc:5c:4d:91:e9:67:23:c7:8b:7b:82: 3b:fd:c8:37:2e:d2:60:25:06:eb:f1:8b:8d:2f:fc: ed:cb:a1:96:0b:03:31:e9:42:18:04:e9:e4:1a:08: 3f:59:51:5b:bd:ce:2c:b9:f6:0e:c0:3c:7a:3b:26: a3:68:fd:3e:a2:3f:df:c7:30:7b:39:63:50:f5:2f: 63:5f:ea:3f:56:78:fb:2c:49:18:a0:94:8d:21:f1: 6d:3b:14:26:20:5d:48:72:92:0a:5b:9d:11:22:ec: 89:f5:5b:d3:c7:3d:ec:85:44:df:d3:6a:04:20:7f: a6:e3:8b:42:59:98:b5:cc:f6:22:74:7f:2f:f3:c8: 95:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:ED:40:67:22:0D:76:D8:A5:07:23:CC:7A:9F:B6:8E:96:14:71:BF X509v3 Authority Key Identifier: keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6f45:dead::/48 Signature Algorithm: sha256WithRSAEncryption 05:44:a3:89:cd:92:63:d2:c6:40:95:37:7d:38:a2:78:c8:d5: 86:db:a0:90:a8:48:a0:ba:c7:89:24:12:1a:71:8f:02:fd:40: 15:15:c4:4c:10:2d:98:52:b3:52:b4:c6:8b:ae:fd:1d:eb:a9: bf:78:34:44:e5:6d:ef:13:17:a5:e1:4d:d0:f3:af:9d:5f:c3: 7f:c9:f2:db:80:e4:31:1e:95:0f:f4:0f:b7:b9:b3:29:8b:5e: 95:b7:41:52:36:99:ad:ef:6d:8b:21:ef:37:f8:1b:be:cb:97: 77:5a:30:dc:b8:00:dc:3b:e1:5f:fb:2a:83:99:80:c3:10:4c: 7c:01:dc:c1:92:a5:39:59:fe:e8:e9:1d:e1:09:69:88:6c:fa: ef:15:0a:98:f6:64:be:f0:46:ff:e0:8c:a5:e8:65:6f:c0:d8: f3:28:02:d7:a6:92:86:1b:98:14:dd:a5:2f:3e:df:ba:30:9f: fb:9e:bd:c9:b5:87:cf:5c:5c:70:3c:22:92:27:4c:f0:48:78: d9:95:da:bf:e5:26:39:48:51:cf:16:a4:ea:12:db:fa:f0:1f: 29:d7:77:ab:0d:b1:dc:b3:d5:da:d2:42:f8:94:eb:5c:71:6f: d4:3e:f3:e8:c4:99:67:43:d1:b7:9f:4d:e0:a8:ed:bf:d7:b1: c3:ed:77:2c -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUGy1Yq09YuHjd8EHpUnq6woD25OEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi YjJhYzMyZTAeFw0yNTExMjExODQwMTVaFw0yNjExMjAxODQ1MTVaMDMxMTAvBgNV BAMTKDMzRUQ0MDY3MjIwRDc2RDhBNTA3MjNDQzdBOUZCNjhFOTYxNDcxQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTAZNeTxqo/YyTMfcRFBzillgV BcTkL0eYCAfk62XIq0HQjcETb7qhBK39mtxbPhkYAYazjqrj6X1DT3qO4uXXrG49 AdV/VQ31cqJB1VToyVRdUith//fYaajcNtU3HJTxMU8zpkvFravSeNodsWktnns1 xvgHvEyleVfcXE2R6Wcjx4t7gjv9yDcu0mAlBuvxi40v/O3LoZYLAzHpQhgE6eQa CD9ZUVu9ziy59g7APHo7JqNo/T6iP9/HMHs5Y1D1L2Nf6j9WePssSRiglI0h8W07 FCYgXUhykgpbnREi7In1W9PHPeyFRN/TagQgf6bji0JZmLXM9iJ0fy/zyJV7AgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUM+1AZyINdtilByPMep+2jpYUcb8wHwYDVR0j BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz cXd5NC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZmN2E5ODkt ZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzQvMzI2MTMxMzQzYTM2NjYzNDM1 M2E2NDY1NjE2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkzODMzMzQzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoUb0XerTANBgkqhkiG9w0BAQsFAAOCAQEABUSjic2SY9LGQJU3 fTiieMjVhtugkKhIoLrHiSQSGnGPAv1AFRXETBAtmFKzUrTGi679Heupv3g0ROVt 7xMXpeFN0POvnV/Df8ny24DkMR6VD/QPt7mzKYtelbdBUjaZre9tiyHvN/gbvsuX d1ow3LgA3DvhX/sqg5mAwxBMfAHcwZKlOVn+6Okd4QlpiGz67xUKmPZkvvBG/+CM pehlb8DY8ygC16aShhuYFN2lLz7fujCf+569ybWHz1xccDwikidM8Eh42ZXav+Um OUhRzxak6hLb+vAfKdd3qw2x3LPV2tJC+JTrXHFv1D7z6MSZZ0PRt59N4Kjtv9ex w+13LA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:14 2025 by rpki-client