This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33343a3a2f34382d3438203d3e20323135393533.roa File: 326131313a323963303a33343a3a2f34382d3438203d3e20323135393533.roa (raw, json) Hash identifier: rVX0jDZXSbhMCRjawaBX7odOabTpjtZ8RqMVxcncM58= Subject key identifier: 88:54:1C:F8:FE:0D:FD:D5:08:70:1A:D0:18:1F:78:6C:11:A7:40:05 Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873 Certificate serial: 1E581499C5AE4D26BC14BBB876C91ED4BC92EFC4 Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33343a3a2f34382d3438203d3e20323135393533.roa Signing time: Thu 06 Nov 2025 13:22:42 +0000 ROA not before: Thu 06 Nov 2025 13:17:42 +0000 ROA not after: Thu 05 Nov 2026 13:22:42 +0000 asID: 215953 IP address blocks: 2a11:29c0:34::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:58:14:99:c5:ae:4d:26:bc:14:bb:b8:76:c9:1e:d4:bc:92:ef:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873 Validity Not Before: Nov 6 13:17:42 2025 GMT Not After : Nov 5 13:22:42 2026 GMT Subject: CN=88541CF8FE0DFDD508701AD0181F786C11A74005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f2:95:ef:54:52:f6:c2:55:a9:9c:7f:53:0c: 2b:40:63:c4:01:6a:85:a4:17:46:fd:8c:ad:52:10: b4:78:5e:d3:2c:a2:9e:b2:bc:d7:83:d7:13:15:b1: 88:fb:50:f3:7b:db:4f:ae:8c:89:2c:5a:74:c2:6d: b5:56:0d:c0:19:fe:af:f4:45:3b:22:ac:9d:f9:33: 33:f3:6b:d6:da:bd:93:6f:53:40:1f:16:ab:f2:63: 24:bb:a5:9d:d1:62:80:ed:49:8c:d9:e9:02:7d:da: 2c:ff:44:18:76:ff:09:53:67:61:d2:e4:c7:a8:37: 35:6f:f4:f9:2b:3f:5c:00:d3:1b:38:51:c6:f2:99: 4b:5e:a7:5d:f4:42:dc:e0:50:a8:ea:94:a5:b8:c1: 7c:69:27:c3:2d:68:c4:e3:46:29:b8:49:69:5e:4f: bb:46:fe:93:ce:ac:28:08:cf:7e:0e:4e:ce:9c:be: 6c:e2:a8:e6:13:c7:35:c7:c0:98:ef:f4:18:ec:47: e0:7b:b1:69:27:7e:81:74:15:1f:aa:60:96:e6:03: 9b:49:07:8c:e6:5d:ab:3f:0f:b2:7b:25:4f:26:d1: d4:b6:a3:b9:ec:0e:c2:f5:eb:c2:82:47:1a:75:e0: 09:c0:ff:6f:42:12:b9:4a:74:08:35:a0:0d:5e:4f: 82:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:54:1C:F8:FE:0D:FD:D5:08:70:1A:D0:18:1F:78:6C:11:A7:40:05 X509v3 Authority Key Identifier: keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33343a3a2f34382d3438203d3e20323135393533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:29c0:34::/48 Signature Algorithm: sha256WithRSAEncryption 9c:62:10:7a:f7:4f:be:0a:b9:3b:f6:4f:ce:30:8c:2b:f8:c5: 90:0d:3c:ea:e7:7b:4b:ac:62:ac:44:c2:02:cc:68:16:04:c8: 7d:74:90:dc:ab:c6:8b:6c:52:2a:9e:0f:bd:f9:1e:60:69:ba: 5f:ee:9d:b1:37:c0:ef:d9:2f:8a:76:50:80:ba:50:44:a1:30: 9b:ea:46:f3:f8:65:9b:97:9d:96:1e:5e:c9:c0:10:0f:a5:07: 6c:9c:1b:63:d3:e0:f7:7f:d7:7b:10:5c:08:c0:74:5a:6b:8c: 3e:d8:1d:19:c8:45:a1:c9:4a:bc:9b:25:7b:95:ac:0b:57:04: 7e:f6:9a:fc:70:eb:44:24:16:80:0d:7c:29:09:c7:e9:e2:60: a2:3a:09:2a:33:1c:5d:ad:08:8c:28:74:ad:c0:fa:04:92:b4: 84:76:74:8b:ae:a2:3a:ae:50:4f:d7:00:b5:0f:ec:ec:b4:65: a7:bc:34:c1:05:49:79:04:54:ad:ad:78:77:a9:f8:95:29:c8: a9:56:38:79:ac:9d:44:ce:38:a8:ba:09:99:1f:e0:d7:07:c1: f9:f2:79:7f:98:3e:2d:bd:f4:54:09:60:ed:ed:14:af:36:58: 51:d9:70:cb:5d:3c:f5:5c:87:ff:58:6f:85:0f:d7:fb:1e:a2: f8:4b:2c:6d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUHlgUmcWuTSa8FLu4dske1LyS78QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm MTA4Mjg3MzAeFw0yNTExMDYxMzE3NDJaFw0yNjExMDUxMzIyNDJaMDMxMTAvBgNV BAMTKDg4NTQxQ0Y4RkUwREZERDUwODcwMUFEMDE4MUY3ODZDMTFBNzQwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj8pXvVFL2wlWpnH9TDCtAY8QB aoWkF0b9jK1SELR4XtMsop6yvNeD1xMVsYj7UPN720+ujIksWnTCbbVWDcAZ/q/0 RTsirJ35MzPza9bavZNvU0AfFqvyYyS7pZ3RYoDtSYzZ6QJ92iz/RBh2/wlTZ2HS 5MeoNzVv9PkrP1wA0xs4UcbymUtep130QtzgUKjqlKW4wXxpJ8MtaMTjRim4SWle T7tG/pPOrCgIz34OTs6cvmziqOYTxzXHwJjv9BjsR+B7sWknfoF0FR+qYJbmA5tJ B4zmXas/D7J7JU8m0dS2o7nsDsL168KCRxp14AnA/29CErlKdAg1oA1eT4KRAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUiFQc+P4N/dUIcBrQGB94bBGnQAUwHwYDVR0j BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF SUtITS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw M2EzMzM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTM1MzkzNTMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAKhEpwAA0MA0GCSqGSIb3DQEBCwUAA4IBAQCcYhB690++Crk79k/OMIwr +MWQDTzq53tLrGKsRMICzGgWBMh9dJDcq8aLbFIqng+9+R5gabpf7p2xN8Dv2S+K dlCAulBEoTCb6kbz+GWbl52WHl7JwBAPpQdsnBtj0+D3f9d7EFwIwHRaa4w+2B0Z yEWhyUq8myV7lawLVwR+9pr8cOtEJBaADXwpCcfp4mCiOgkqMxxdrQiMKHStwPoE krSEdnSLrqI6rlBP1wC1D+zstGWnvDTBBUl5BFStrXh3qfiVKcipVjh5rJ1Ezjio ugmZH+DXB8H58nl/mD4tvfRUCWDt7RSvNlhR2XDLXTz1XIf/WG+FD9f7HqL4Syxt -----END CERTIFICATE-----Generated at Sat Dec 6 05:58:01 2025 by rpki-client