This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa File: 326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa (raw, json) Hash identifier: qTx2l+4Rmw9QcHHVu+RMfEZ9wVvbUUTMbX9wtkxLgYk= Subject key identifier: 7B:2C:1A:26:53:DF:99:C4:0C:7F:9A:34:FD:B1:FC:87:96:6E:20:5B Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Certificate serial: 3102FDD0FD961E28FF3680C53BB239910EBBC018 Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa Signing time: Fri 21 Nov 2025 18:45:15 +0000 ROA not before: Fri 21 Nov 2025 18:40:15 +0000 ROA not after: Fri 20 Nov 2026 18:45:15 +0000 asID: 48436 IP address blocks: 2a14:6f45:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:02:fd:d0:fd:96:1e:28:ff:36:80:c5:3b:b2:39:91:0e:bb:c0:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Validity Not Before: Nov 21 18:40:15 2025 GMT Not After : Nov 20 18:45:15 2026 GMT Subject: CN=7B2C1A2653DF99C40C7F9A34FDB1FC87966E205B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0f:de:41:53:f7:f5:82:7d:2f:d0:12:db:a4: 16:a8:2b:36:d8:32:f8:c2:95:96:3d:fc:87:c2:2e: 6f:d8:5a:50:b9:bf:73:21:67:72:97:38:3f:55:91: 52:e3:8c:be:2a:85:f0:69:b9:7b:b2:42:43:e2:0c: 30:22:06:21:8c:33:21:da:e9:9b:36:45:77:a1:70: a8:d3:34:03:ff:d1:5c:b7:01:69:d1:ba:ae:7a:6e: 01:13:20:57:cf:b7:be:4b:cf:ac:4b:c7:22:3c:9f: 0b:71:ca:45:9a:3d:b4:19:e8:2f:c2:f0:73:f2:7e: 49:7c:6d:6e:e2:10:f6:31:ad:47:c3:da:4b:14:aa: f2:da:30:fa:78:9d:80:a8:86:7e:40:1c:cb:1a:7b: 8b:c9:b8:23:71:f2:09:27:6c:13:88:63:f8:09:90: e9:20:80:2d:6a:ea:da:92:18:3e:87:94:a9:5e:a4: 2c:19:f0:98:87:18:d8:e9:cb:d3:4e:54:43:6b:b4: 66:c8:b0:fa:49:94:5f:97:27:9b:ab:2e:fd:e8:77: 98:c4:fe:da:f1:ea:4b:86:ba:60:de:4a:9d:fa:f0: 1c:4d:4e:33:38:ef:e0:90:a4:41:78:2f:59:da:02: be:3d:0f:eb:1b:c8:50:2d:b2:8b:86:91:f9:b2:4f: fc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2C:1A:26:53:DF:99:C4:0C:7F:9A:34:FD:B1:FC:87:96:6E:20:5B X509v3 Authority Key Identifier: keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6f45:dead::/48 Signature Algorithm: sha256WithRSAEncryption a4:99:2e:35:29:49:dc:f2:6a:2c:da:f4:55:1b:14:70:84:40: 3f:87:c0:e2:29:0b:04:ba:94:1d:04:f7:ab:28:de:88:9a:47: 93:4c:a1:b6:18:0c:cc:1e:f9:32:5d:8a:65:30:46:8c:c5:2c: 56:7d:19:a3:4d:42:9d:f2:ca:70:c3:4c:e7:a1:0c:3c:98:06: 95:8b:a5:c4:b1:6b:38:a1:00:53:4d:d4:5b:48:da:d0:51:ce: aa:20:4c:e4:8b:34:60:17:39:48:fc:d7:95:a8:dd:02:f7:88: c6:5b:52:27:0d:2f:57:b7:14:9d:75:7a:23:48:de:6b:62:c2: bc:f3:1b:8c:c3:ca:49:1f:79:76:6b:f3:d3:48:3c:2b:3d:8f: ed:33:c5:fc:61:ed:6e:39:46:08:64:37:68:ce:62:57:79:7f: 06:c2:d5:1d:9f:09:5d:7c:3f:46:52:40:2b:a6:6b:dd:68:af: 78:91:4e:10:58:8b:cd:98:b7:e2:2e:c3:74:76:3c:01:ca:b5: ef:fe:5e:b5:2b:bf:39:0c:d6:b0:0a:ea:ac:e3:02:b6:73:74: 46:27:51:f0:2d:d2:e6:48:0d:1c:8d:35:22:78:e0:b6:8a:27: 7d:32:64:ea:ac:a3:32:f4:d2:be:4b:cf:c2:ed:05:5e:38:69: d4:ed:06:7f -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIUMQL90P2WHij/NoDFO7I5kQ67wBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi YjJhYzMyZTAeFw0yNTExMjExODQwMTVaFw0yNjExMjAxODQ1MTVaMDMxMTAvBgNV BAMTKDdCMkMxQTI2NTNERjk5QzQwQzdGOUEzNEZEQjFGQzg3OTY2RTIwNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+D95BU/f1gn0v0BLbpBaoKzbY MvjClZY9/IfCLm/YWlC5v3MhZ3KXOD9VkVLjjL4qhfBpuXuyQkPiDDAiBiGMMyHa 6Zs2RXehcKjTNAP/0Vy3AWnRuq56bgETIFfPt75Lz6xLxyI8nwtxykWaPbQZ6C/C 8HPyfkl8bW7iEPYxrUfD2ksUqvLaMPp4nYCohn5AHMsae4vJuCNx8gknbBOIY/gJ kOkggC1q6tqSGD6HlKlepCwZ8JiHGNjpy9NOVENrtGbIsPpJlF+XJ5urLv3od5jE /trx6kuGumDeSp368BxNTjM47+CQpEF4L1naAr49D+sbyFAtsouGkfmyT/xHAgMB AAGjggJIMIICRDAdBgNVHQ4EFgQUeywaJlPfmcQMf5o0/bH8h5ZuIFswHwYDVR0j BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz cXd5NC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZmN2E5ODkt ZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzQvMzI2MTMxMzQzYTM2NjYzNDM1 M2E2NDY1NjE2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzgzNDMzMzYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAqFG9F3q0wDQYJKoZIhvcNAQELBQADggEBAKSZLjUpSdzyaiza9FUb FHCEQD+HwOIpCwS6lB0E96so3oiaR5NMobYYDMwe+TJdimUwRozFLFZ9GaNNQp3y ynDDTOehDDyYBpWLpcSxazihAFNN1FtI2tBRzqogTOSLNGAXOUj815Wo3QL3iMZb UicNL1e3FJ11eiNI3mtiwrzzG4zDykkfeXZr89NIPCs9j+0zxfxh7W45RghkN2jO Yld5fwbC1R2fCV18P0ZSQCuma91or3iRThBYi82Yt+Iuw3R2PAHKte/+XrUrvzkM 1rAK6qzjArZzdEYnUfAt0uZIDRyNNSJ44LaKJ30yZOqsozL00r5Lz8LtBV44adTt Bn8= -----END CERTIFICATE-----Generated at Sat Dec 6 06:48:28 2025 by rpki-client