This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34643a3a2f34382d3438203d3e20323134313338.roa File: 326131313a323963303a34643a3a2f34382d3438203d3e20323134313338.roa (raw, json) Hash identifier: JMVvwvBa9mnkkYOhnNa2NUqohkfkJnSsK0nWU7PHLNk= Subject key identifier: 86:B8:D7:9E:A4:EA:E0:43:3D:EB:6D:47:D3:32:95:2D:B8:FE:84:66 Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873 Certificate serial: 769C2C674C384B0CCAF4E6B822CB0E2895575D6C Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34643a3a2f34382d3438203d3e20323134313338.roa Signing time: Fri 14 Nov 2025 00:22:43 +0000 ROA not before: Fri 14 Nov 2025 00:17:43 +0000 ROA not after: Fri 13 Nov 2026 00:22:43 +0000 asID: 214138 IP address blocks: 2a11:29c0:4d::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:9c:2c:67:4c:38:4b:0c:ca:f4:e6:b8:22:cb:0e:28:95:57:5d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873 Validity Not Before: Nov 14 00:17:43 2025 GMT Not After : Nov 13 00:22:43 2026 GMT Subject: CN=86B8D79EA4EAE0433DEB6D47D332952DB8FE8466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:86:2a:ea:ff:27:1d:f9:15:de:33:22:c6:8d: d7:bf:5d:a2:00:55:83:85:19:0b:f1:9f:d8:53:e1: f3:3e:24:06:04:91:c8:3a:84:41:b6:9d:0a:48:2c: cd:bb:c6:d6:ab:7d:ac:1d:cd:2c:d3:08:a0:ff:22: df:e7:79:7d:15:25:b2:75:c8:a8:c5:25:25:e1:64: db:8d:f7:23:6b:ca:77:64:a8:e4:67:26:73:98:89: 1a:71:49:96:64:77:3e:11:fa:ee:d1:30:d8:6a:4e: ad:93:0c:73:fe:22:01:a3:44:27:02:82:5e:64:e3: 12:78:8b:51:86:21:77:d4:c0:00:e3:fa:5d:32:cc: 8f:e1:8f:0f:e8:33:7e:09:8d:49:97:76:f5:af:e5: 01:33:f4:e2:d7:4d:e7:cb:08:2d:32:87:c3:4e:b2: 72:40:6c:c9:09:90:15:dd:8b:1a:f1:da:8e:59:2e: 93:69:3c:b3:4a:d3:6c:4a:29:5f:1a:ff:cd:ea:8a: 0a:f0:c0:49:e9:5e:73:18:30:be:df:bb:09:de:f4: 1a:bb:ea:95:43:da:96:16:fc:ab:99:b3:29:35:d6: 49:ef:ee:0d:18:6f:bd:8e:85:2a:d1:37:df:7e:a8: 76:fd:c9:10:99:99:f1:12:ba:58:29:9e:d3:4c:19: 66:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B8:D7:9E:A4:EA:E0:43:3D:EB:6D:47:D3:32:95:2D:B8:FE:84:66 X509v3 Authority Key Identifier: keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34643a3a2f34382d3438203d3e20323134313338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:29c0:4d::/48 Signature Algorithm: sha256WithRSAEncryption 86:7f:af:95:9e:42:0c:44:3b:a0:40:7c:cb:95:fe:26:54:5b: 39:fb:a6:70:24:03:d9:65:ed:1c:57:2e:a2:8b:2c:b0:49:d8: 3b:b0:c1:82:0f:b8:eb:70:df:b9:9c:b3:68:30:8d:8e:35:26: 48:dc:fb:3d:ee:ee:d4:43:60:02:15:cb:9f:52:0b:20:b6:0c: 62:e2:72:16:71:b8:ea:c3:c9:62:66:a0:70:e5:c8:bf:53:b3: 29:a2:1f:1b:e6:04:2a:97:29:0f:a5:00:70:18:04:e2:7e:17: a4:df:39:88:ff:c9:65:e9:38:c9:4f:05:2a:a0:37:01:7f:3d: b0:19:40:68:5d:0d:a8:9c:3e:84:51:e5:20:fe:55:b5:95:62: ee:69:a9:79:1d:e1:86:bb:1c:77:42:0e:a8:4b:23:84:6f:cb: b2:92:f1:18:dc:1c:54:9c:e4:55:7d:a9:50:ac:20:84:16:c2: 7e:03:37:fe:1e:93:1f:65:cf:66:78:ba:10:a3:d9:86:5d:2e: de:14:57:42:f3:97:a6:02:a0:8f:6d:b2:3d:aa:8d:69:27:13: 29:a1:e9:a4:f9:56:08:dc:d8:ab:b4:a2:87:cc:09:48:f8:a6: a0:02:3f:34:69:4b:92:a4:3c:e7:be:ba:67:bc:0a:aa:b4:54: e7:24:fb:8d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUdpwsZ0w4SwzK9Oa4IssOKJVXXWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm MTA4Mjg3MzAeFw0yNTExMTQwMDE3NDNaFw0yNjExMTMwMDIyNDNaMDMxMTAvBgNV BAMTKDg2QjhENzlFQTRFQUUwNDMzREVCNkQ0N0QzMzI5NTJEQjhGRTg0NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hirq/ycd+RXeMyLGjde/XaIA VYOFGQvxn9hT4fM+JAYEkcg6hEG2nQpILM27xtarfawdzSzTCKD/It/neX0VJbJ1 yKjFJSXhZNuN9yNryndkqORnJnOYiRpxSZZkdz4R+u7RMNhqTq2TDHP+IgGjRCcC gl5k4xJ4i1GGIXfUwADj+l0yzI/hjw/oM34JjUmXdvWv5QEz9OLXTefLCC0yh8NO snJAbMkJkBXdixrx2o5ZLpNpPLNK02xKKV8a/83qigrwwEnpXnMYML7fuwne9Bq7 6pVD2pYW/KuZsyk11knv7g0Yb72OhSrRN99+qHb9yRCZmfESulgpntNMGWYRAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUhrjXnqTq4EM9621H0zKVLbj+hGYwHwYDVR0j BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF SUtITS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw M2EzNDY0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTM0MzEzMzM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAKhEpwABNMA0GCSqGSIb3DQEBCwUAA4IBAQCGf6+VnkIMRDugQHzLlf4m VFs5+6ZwJAPZZe0cVy6iiyywSdg7sMGCD7jrcN+5nLNoMI2ONSZI3Ps97u7UQ2AC FcufUgsgtgxi4nIWcbjqw8liZqBw5ci/U7Mpoh8b5gQqlykPpQBwGATifhek3zmI /8ll6TjJTwUqoDcBfz2wGUBoXQ2onD6EUeUg/lW1lWLuaal5HeGGuxx3Qg6oSyOE b8uykvEY3BxUnORVfalQrCCEFsJ+Azf+HpMfZc9meLoQo9mGXS7eFFdC85emAqCP bbI9qo1pJxMpoemk+VYI3NirtKKHzAlI+KagAj80aUuSpDznvrpnvAqqtFTnJPuN -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:04 2025 by rpki-client