This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33373a3a2f34382d3438203d3e20323135363635.roa File: 326131313a323963303a33373a3a2f34382d3438203d3e20323135363635.roa (raw, json) Hash identifier: OG2QK5vCx+S64Sh2sB7jhK95TlWrga1jqxGWansRipM= Subject key identifier: 4A:18:B4:40:84:7D:79:64:F0:B4:55:70:E7:36:B0:14:54:06:EE:26 Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873 Certificate serial: 1E2B563D078EB6DB1DD726FE688E2F750395E2A4 Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33373a3a2f34382d3438203d3e20323135363635.roa Signing time: Tue 25 Nov 2025 20:22:43 +0000 ROA not before: Tue 25 Nov 2025 20:17:43 +0000 ROA not after: Tue 24 Nov 2026 20:22:43 +0000 asID: 215665 IP address blocks: 2a11:29c0:37::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:2b:56:3d:07:8e:b6:db:1d:d7:26:fe:68:8e:2f:75:03:95:e2:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873 Validity Not Before: Nov 25 20:17:43 2025 GMT Not After : Nov 24 20:22:43 2026 GMT Subject: CN=4A18B440847D7964F0B45570E736B0145406EE26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:e0:c9:f5:f7:a1:11:d5:4d:5d:cc:16:9c:ad: d4:a9:ce:e9:bf:a2:bd:29:d0:2d:df:5b:5b:16:ef: d8:65:4d:22:15:2b:d9:17:37:d5:4a:19:a3:a9:99: c1:3d:22:fa:cf:35:b4:ae:1c:87:98:26:fc:ed:c9: a8:0e:4b:23:63:57:22:b5:11:f5:8b:f3:a5:b0:47: 31:92:15:b8:68:f3:bc:44:88:8a:20:a7:19:ac:c2: 27:52:14:a0:1b:28:88:df:6e:c4:cf:13:37:e0:69: 99:50:47:54:79:3a:5c:03:1c:be:d2:17:ed:6d:a0: c9:67:07:49:64:31:3b:6a:ea:9b:8e:1f:76:a2:fc: c3:4b:c6:34:37:c5:b3:73:d7:3e:77:71:ff:bb:81: 21:93:a3:c6:8d:b1:4d:cd:f6:03:04:a4:06:d9:8d: ea:4f:58:62:d9:04:5c:e9:d9:c9:14:1b:02:f6:55: d6:ed:e7:1a:da:e2:db:2a:5e:40:cb:94:62:b6:66: bc:61:27:60:01:bb:bf:8b:93:06:38:4a:17:0d:fc: 6a:14:20:37:d6:1f:2e:c7:2b:a4:b7:9d:5d:0d:7a: 1c:59:a1:3b:db:b0:2c:d9:1b:44:6c:7e:f3:ea:2a: 0b:f5:2b:62:4b:36:a3:89:dd:d4:75:9f:8c:9f:07: 96:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:18:B4:40:84:7D:79:64:F0:B4:55:70:E7:36:B0:14:54:06:EE:26 X509v3 Authority Key Identifier: keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33373a3a2f34382d3438203d3e20323135363635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:29c0:37::/48 Signature Algorithm: sha256WithRSAEncryption 69:9a:8b:e9:0b:2b:b5:22:9e:c0:5e:e6:4d:fd:68:44:85:56: ab:bf:f1:4e:7c:18:4d:4e:8c:d5:85:08:a4:c5:c2:2f:59:05: 81:86:3e:d5:4c:92:54:4d:3f:4c:26:9a:60:a8:fc:98:97:78: be:f8:99:aa:9d:b1:34:96:76:11:aa:1d:29:43:ff:c9:1e:44: ee:a3:59:85:00:29:5e:b2:6c:45:44:21:3f:71:72:b8:22:ff: 65:15:e1:8b:83:e6:6a:04:95:8f:27:f5:81:57:71:a1:e4:66: 1d:ad:01:03:8e:09:42:c4:37:18:cf:26:d4:33:58:ca:82:f0: 8b:d8:59:7a:62:85:c4:9c:d4:3a:ba:fe:ed:8a:e2:55:fd:58: 0a:9f:60:2e:9e:e0:97:60:c9:ae:a8:ea:dd:89:d8:1b:ac:cc: 3d:5f:72:59:8f:70:08:59:a8:7b:41:a3:25:77:03:17:32:ae: f6:73:56:e5:3b:61:82:b8:bf:a7:f9:57:ef:da:6d:37:63:2d: 26:0d:f7:54:62:b9:4d:a8:8f:f0:a4:fa:b4:2f:e3:42:d0:4b: d2:d3:0f:0d:82:b3:6e:26:9c:8c:9f:53:69:97:51:c7:81:40: b3:7e:bc:d5:4c:8c:c6:c4:95:e8:1d:e3:03:75:14:c7:6b:b5: 3e:9a:00:e1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUHitWPQeOttsd1yb+aI4vdQOV4qQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm MTA4Mjg3MzAeFw0yNTExMjUyMDE3NDNaFw0yNjExMjQyMDIyNDNaMDMxMTAvBgNV BAMTKDRBMThCNDQwODQ3RDc5NjRGMEI0NTU3MEU3MzZCMDE0NTQwNkVFMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD34Mn196ER1U1dzBacrdSpzum/ or0p0C3fW1sW79hlTSIVK9kXN9VKGaOpmcE9IvrPNbSuHIeYJvztyagOSyNjVyK1 EfWL86WwRzGSFbho87xEiIogpxmswidSFKAbKIjfbsTPEzfgaZlQR1R5OlwDHL7S F+1toMlnB0lkMTtq6puOH3ai/MNLxjQ3xbNz1z53cf+7gSGTo8aNsU3N9gMEpAbZ jepPWGLZBFzp2ckUGwL2Vdbt5xra4tsqXkDLlGK2ZrxhJ2ABu7+LkwY4ShcN/GoU IDfWHy7HK6S3nV0NehxZoTvbsCzZG0RsfvPqKgv1K2JLNqOJ3dR1n4yfB5YpAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUShi0QIR9eWTwtFVw5zawFFQG7iYwHwYDVR0j BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF SUtITS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw M2EzMzM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTM1MzYzNjM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAKhEpwAA3MA0GCSqGSIb3DQEBCwUAA4IBAQBpmovpCyu1Ip7AXuZN/WhE hVarv/FOfBhNTozVhQikxcIvWQWBhj7VTJJUTT9MJppgqPyYl3i++JmqnbE0lnYR qh0pQ//JHkTuo1mFAClesmxFRCE/cXK4Iv9lFeGLg+ZqBJWPJ/WBV3Gh5GYdrQED jglCxDcYzybUM1jKgvCL2Fl6YoXEnNQ6uv7tiuJV/VgKn2AunuCXYMmuqOrdidgb rMw9X3JZj3AIWah7QaMldwMXMq72c1blO2GCuL+n+Vfv2m03Yy0mDfdUYrlNqI/w pPq0L+NC0EvS0w8NgrNuJpyMn1Npl1HHgUCzfrzVTIzGxJXoHeMDdRTHa7U+mgDh -----END CERTIFICATE-----Generated at Sat Dec 6 05:57:53 2025 by rpki-client