This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32663a3a2f34382d3438203d3e20323036303333.roa File: 326131313a323963303a32663a3a2f34382d3438203d3e20323036303333.roa (raw, json) Hash identifier: tRmIWeLICy4ovvcUatcAMR2POrD5hbpExNfBptid+nQ= Subject key identifier: 6D:D6:74:30:9E:B9:11:42:92:CD:05:9D:E4:7E:6B:1C:5E:22:13:3F Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873 Certificate serial: 32C483F5B5442E20226FCC7FF29DE90DF59C1A97 Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32663a3a2f34382d3438203d3e20323036303333.roa Signing time: Sun 23 Nov 2025 19:18:19 +0000 ROA not before: Sun 23 Nov 2025 19:13:19 +0000 ROA not after: Sun 22 Nov 2026 19:18:19 +0000 asID: 206033 IP address blocks: 2a11:29c0:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c4:83:f5:b5:44:2e:20:22:6f:cc:7f:f2:9d:e9:0d:f5:9c:1a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873 Validity Not Before: Nov 23 19:13:19 2025 GMT Not After : Nov 22 19:18:19 2026 GMT Subject: CN=6DD674309EB9114292CD059DE47E6B1C5E22133F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f5:c5:0f:70:dd:43:95:18:08:1f:94:b4:d6: 43:23:a2:43:8f:96:b0:a1:5e:0d:1e:df:f5:1f:08: 30:96:43:33:78:c1:cc:a0:ec:37:0a:b3:63:b6:b3: bf:6b:83:a5:5b:b4:72:3c:65:8d:2f:ea:a7:b1:d7: 1f:d2:4b:58:b4:e5:40:7a:a1:f0:ff:4e:f2:a4:4f: 91:fa:2c:32:1a:2f:f7:46:d6:36:f6:d9:94:d9:a7: 61:15:85:c6:87:ac:c8:28:d7:a4:68:e2:6e:3f:05: 36:a2:ec:42:57:4f:90:fa:55:96:a6:3f:a9:cd:62: a0:5e:24:e7:7b:37:24:e1:8f:f0:31:1b:4c:5e:fa: ba:ba:85:10:62:9b:d3:d9:9f:33:18:65:4e:38:ff: e3:3a:e0:90:da:b7:7d:20:07:1a:78:e6:02:3d:17: 77:53:0b:e3:5a:a3:dc:a0:78:7f:69:db:62:94:bd: a4:11:a5:97:ed:dc:98:52:24:15:92:51:26:d4:5a: 68:b7:e8:ea:fa:d1:f2:b2:cf:b2:d9:0e:b8:1a:fa: 55:c6:ef:21:d5:51:68:11:c3:0d:cd:dc:19:1e:d8: a4:03:af:af:fc:4e:cf:09:f3:03:a3:69:af:04:32: aa:49:05:ab:e2:2a:fb:9e:f8:c1:1a:05:f6:b1:51: 25:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D6:74:30:9E:B9:11:42:92:CD:05:9D:E4:7E:6B:1C:5E:22:13:3F X509v3 Authority Key Identifier: keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32663a3a2f34382d3438203d3e20323036303333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:29c0:2f::/48 Signature Algorithm: sha256WithRSAEncryption 99:83:9c:85:52:36:22:d0:e6:20:ee:2e:33:6d:c2:1e:95:e0: 1b:79:e9:5f:99:ff:b7:92:d7:39:e8:2f:f5:90:99:77:b4:f1: f6:9c:69:3d:e7:d4:ca:d5:03:2a:7d:51:2b:ae:b1:48:60:15: 6d:fb:0e:9a:11:78:a4:00:ff:a1:06:95:3c:95:5c:06:c0:3a: 4e:25:cb:65:12:81:11:62:87:30:7e:c3:23:0d:e5:cc:76:06: ec:ec:02:79:42:ef:93:53:05:60:47:12:16:0e:c9:3d:0f:0c: 4f:a8:83:3d:03:ce:30:dc:1e:2d:a2:78:f0:9f:55:d2:b0:a4: cf:28:58:71:de:e1:7b:41:85:bd:20:5f:92:53:01:a3:e9:95: dd:54:84:6e:72:a0:5a:e6:ff:da:5c:78:51:b4:ff:d7:74:ab: 15:f1:e1:1f:bc:c8:f8:9f:9b:f5:aa:53:3f:d3:76:c4:50:9b: 19:2e:fe:3c:ee:6a:65:82:d4:8d:b3:0d:18:8a:cb:95:41:2a: e4:6a:59:d1:83:9b:c5:d6:e7:b8:e2:c5:f5:7d:00:f1:2b:5e: 24:8f:0d:95:01:c7:fe:54:de:01:7a:d5:17:14:81:3b:13:99: 78:6d:e1:ff:0a:b7:66:cd:a1:3e:56:59:45:47:1c:b1:77:b1: 28:4c:31:65 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUMsSD9bVELiAib8x/8p3pDfWcGpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm MTA4Mjg3MzAeFw0yNTExMjMxOTEzMTlaFw0yNjExMjIxOTE4MTlaMDMxMTAvBgNV BAMTKDZERDY3NDMwOUVCOTExNDI5MkNEMDU5REU0N0U2QjFDNUUyMjEzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy9cUPcN1DlRgIH5S01kMjokOP lrChXg0e3/UfCDCWQzN4wcyg7DcKs2O2s79rg6VbtHI8ZY0v6qex1x/SS1i05UB6 ofD/TvKkT5H6LDIaL/dG1jb22ZTZp2EVhcaHrMgo16Ro4m4/BTai7EJXT5D6VZam P6nNYqBeJOd7NyThj/AxG0xe+rq6hRBim9PZnzMYZU44/+M64JDat30gBxp45gI9 F3dTC+Nao9ygeH9p22KUvaQRpZft3JhSJBWSUSbUWmi36Or60fKyz7LZDrga+lXG 7yHVUWgRww3N3Bke2KQDr6/8Ts8J8wOjaa8EMqpJBaviKvue+MEaBfaxUSXhAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUbdZ0MJ65EUKSzQWd5H5rHF4iEz8wHwYDVR0j BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF SUtITS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw M2EzMjY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDM2MzAzMzMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAKhEpwAAvMA0GCSqGSIb3DQEBCwUAA4IBAQCZg5yFUjYi0OYg7i4zbcIe leAbeelfmf+3ktc56C/1kJl3tPH2nGk959TK1QMqfVErrrFIYBVt+w6aEXikAP+h BpU8lVwGwDpOJctlEoERYocwfsMjDeXMdgbs7AJ5Qu+TUwVgRxIWDsk9DwxPqIM9 A84w3B4tonjwn1XSsKTPKFhx3uF7QYW9IF+SUwGj6ZXdVIRucqBa5v/aXHhRtP/X dKsV8eEfvMj4n5v1qlM/03bEUJsZLv487mplgtSNsw0YisuVQSrkalnRg5vF1ue4 4sX1fQDxK14kjw2VAcf+VN4BetUXFIE7E5l4beH/CrdmzaE+VllFRxyxd7EoTDFl -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:49 2025 by rpki-client