This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33613a3a2f34382d3438203d3e20323036303333.roa File: 326131313a323963303a33613a3a2f34382d3438203d3e20323036303333.roa (raw, json) Hash identifier: Me3LgyiODDnPWcv5AxQFF3NevvLRyNNbkeUpbc9fNG0= Subject key identifier: BA:19:5B:90:F2:DF:8F:36:20:C7:1A:C5:E7:8C:47:80:8A:70:F9:0E Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873 Certificate serial: 6001566EB528A43F2F45089131E08341581A6802 Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33613a3a2f34382d3438203d3e20323036303333.roa Signing time: Mon 15 Dec 2025 19:16:08 +0000 ROA not before: Mon 15 Dec 2025 19:11:08 +0000 ROA not after: Mon 14 Dec 2026 19:16:08 +0000 asID: 206033 IP address blocks: 2a11:29c0:3a::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:01:56:6e:b5:28:a4:3f:2f:45:08:91:31:e0:83:41:58:1a:68:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873 Validity Not Before: Dec 15 19:11:08 2025 GMT Not After : Dec 14 19:16:08 2026 GMT Subject: CN=BA195B90F2DF8F3620C71AC5E78C47808A70F90E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:9a:f8:13:4d:92:2f:e2:f9:80:62:eb:21: 1f:67:81:48:17:6c:63:f7:63:24:f1:af:48:e2:a1: 18:95:12:a7:3e:b8:b3:a1:f8:91:89:6f:a2:c1:39: b4:a3:0b:b1:89:f3:20:6d:f4:ec:00:49:de:5b:00: ba:0d:10:1a:23:82:e8:35:fb:99:c0:f4:6e:4c:52: d3:28:88:07:5d:b7:8a:7f:9c:60:ba:2d:b4:e9:52: 07:62:13:04:d6:a3:4c:fd:ac:dd:83:9b:31:33:fa: d2:af:95:e1:41:ee:8d:f0:b0:b0:c6:2b:ab:bc:2e: 5d:0d:a5:cc:a6:94:62:fd:5b:52:09:e7:d2:53:3b: 76:b2:0e:82:d7:2d:cb:fa:6a:b4:04:3b:19:e8:cc: d0:e8:db:0a:17:1d:db:0b:bd:76:f2:e4:98:d5:c0: 53:23:3d:97:26:f3:bd:80:f3:94:91:39:2a:41:58: 37:c4:36:97:4d:26:16:93:3f:38:ec:b7:bc:69:ff: da:bd:7b:22:92:36:3e:17:27:ce:a2:ce:df:53:0d: b0:fa:84:26:54:29:2a:88:8e:67:1d:65:13:d0:4e: d2:16:01:c1:4e:14:c4:23:1e:9f:52:ed:f8:20:d5: ac:f8:33:3b:79:81:31:49:8c:a1:a3:90:53:7e:bc: 0c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:19:5B:90:F2:DF:8F:36:20:C7:1A:C5:E7:8C:47:80:8A:70:F9:0E X509v3 Authority Key Identifier: keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33613a3a2f34382d3438203d3e20323036303333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:29c0:3a::/48 Signature Algorithm: sha256WithRSAEncryption 2a:f2:63:9e:0e:19:a0:b8:bd:3b:62:12:20:57:cf:f5:af:cd: e1:b0:24:16:cf:da:3c:bd:2d:f3:d1:a6:64:71:31:b3:76:52: f9:40:b2:6f:56:81:03:2c:4b:36:21:55:7a:3e:f2:55:9d:1d: b5:49:e3:47:1c:05:fa:51:78:44:e0:d6:42:ef:3d:83:83:df: e4:66:31:a6:2e:1b:15:49:6b:ec:c3:cb:05:97:5c:85:3b:86: 43:02:fe:da:1e:03:7e:70:48:ac:2c:93:76:5a:3d:59:bc:08: f7:db:56:66:81:3f:a2:37:e9:15:b8:b2:7d:ec:65:4d:f8:8a: 7f:6c:6f:46:16:cb:a3:51:7a:df:68:93:19:e5:e2:a9:0e:ce: 7b:32:5d:ab:2e:c6:c9:12:4e:ed:28:4f:86:72:95:9e:57:c8: 38:52:51:d4:f0:d9:5a:f1:88:60:6c:7c:b3:73:25:29:9d:be: 59:0b:13:85:80:45:67:fd:22:16:cf:b1:ca:f2:e0:13:c0:5b: 0f:2f:1c:6b:97:eb:c1:66:64:db:3c:7a:e7:3e:9d:0c:e0:0a: a4:49:e3:7a:75:d0:6c:d7:ac:0d:b4:f4:0d:01:0e:8c:ea:d3: 82:c4:47:90:b8:10:51:57:f4:9f:ef:3d:26:e2:44:c4:75:90: b8:e7:41:5b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUYAFWbrUopD8vRQiRMeCDQVgaaAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm MTA4Mjg3MzAeFw0yNTEyMTUxOTExMDhaFw0yNjEyMTQxOTE2MDhaMDMxMTAvBgNV BAMTKEJBMTk1QjkwRjJERjhGMzYyMEM3MUFDNUU3OEM0NzgwOEE3MEY5MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0FJr4E02SL+L5gGLrIR9ngUgX bGP3YyTxr0jioRiVEqc+uLOh+JGJb6LBObSjC7GJ8yBt9OwASd5bALoNEBojgug1 +5nA9G5MUtMoiAddt4p/nGC6LbTpUgdiEwTWo0z9rN2DmzEz+tKvleFB7o3wsLDG K6u8Ll0NpcymlGL9W1IJ59JTO3ayDoLXLcv6arQEOxnozNDo2woXHdsLvXby5JjV wFMjPZcm872A85SROSpBWDfENpdNJhaTPzjst7xp/9q9eyKSNj4XJ86izt9TDbD6 hCZUKSqIjmcdZRPQTtIWAcFOFMQjHp9S7fgg1az4Mzt5gTFJjKGjkFN+vAxJAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUuhlbkPLfjzYgxxrF54xHgIpw+Q4wHwYDVR0j BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF SUtITS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw M2EzMzYxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDM2MzAzMzMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAKhEpwAA6MA0GCSqGSIb3DQEBCwUAA4IBAQAq8mOeDhmguL07YhIgV8/1 r83hsCQWz9o8vS3z0aZkcTGzdlL5QLJvVoEDLEs2IVV6PvJVnR21SeNHHAX6UXhE 4NZC7z2Dg9/kZjGmLhsVSWvsw8sFl1yFO4ZDAv7aHgN+cEisLJN2Wj1ZvAj321Zm gT+iN+kVuLJ97GVN+Ip/bG9GFsujUXrfaJMZ5eKpDs57Ml2rLsbJEk7tKE+GcpWe V8g4UlHU8Nla8YhgbHyzcyUpnb5ZCxOFgEVn/SIWz7HK8uATwFsPLxxrl+vBZmTb PHrnPp0M4AqkSeN6ddBs16wNtPQNAQ6M6tOCxEeQuBBRV/Sf7z0m4kTEdZC450Fb -----END CERTIFICATE-----Generated at Wed Dec 17 20:07:23 2025 by rpki-client