This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a346530303a3a2f34302d3438203d3e20323135363338.roa File: 326131313a323963303a346530303a3a2f34302d3438203d3e20323135363338.roa (raw, json) Hash identifier: ipmYOYTqy6m7XZ0XWY7JffvThORppPojPAfzSTUYJh4= Subject key identifier: FE:E0:95:A7:28:4F:C7:2E:6C:F3:1D:28:B6:5C:0F:ED:A0:5E:DD:43 Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873 Certificate serial: 08C1A8E999ADB9ABFA4821C2813619F30FD2F54E Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a346530303a3a2f34302d3438203d3e20323135363338.roa Signing time: Tue 30 Dec 2025 23:22:43 +0000 ROA not before: Tue 30 Dec 2025 23:17:43 +0000 ROA not after: Tue 29 Dec 2026 23:22:43 +0000 asID: 215638 IP address blocks: 2a11:29c0:4e00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c1:a8:e9:99:ad:b9:ab:fa:48:21:c2:81:36:19:f3:0f:d2:f5:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873 Validity Not Before: Dec 30 23:17:43 2025 GMT Not After : Dec 29 23:22:43 2026 GMT Subject: CN=FEE095A7284FC72E6CF31D28B65C0FEDA05EDD43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:ab:b6:ef:62:b5:b2:b8:62:a4:6e:fe:da: 7b:b6:4d:6c:a7:2d:43:25:a7:b7:e6:d1:21:6d:d1: 5e:fa:c2:2b:96:f6:b3:e8:b4:cc:8d:c7:bb:37:ad: 57:a7:72:52:23:2a:00:3d:37:27:60:77:c2:a7:54: de:8b:09:90:5f:8c:ad:70:4c:53:6f:e1:0a:f7:49: fa:31:4f:c7:50:7f:87:e3:6b:48:88:12:de:dc:c9: 0a:11:38:3f:64:a7:a2:65:0e:ab:20:08:64:92:a1: f1:ab:0e:14:b3:bb:06:5c:e4:55:e4:c4:88:03:cb: 10:66:9d:3a:60:36:be:62:38:21:4f:5a:3a:24:ec: 7a:84:83:32:2b:e3:d3:54:80:32:62:91:04:98:04: 6e:ed:6a:6d:8e:72:21:b9:d5:79:65:e3:1d:0a:da: e7:75:23:f0:6c:76:c1:7e:cd:78:ba:97:f8:a9:99: 8e:69:c2:ba:6f:73:9a:9c:2a:44:d7:0a:82:7a:0e: 5d:b7:74:9d:67:58:10:39:9d:76:f3:b7:7f:87:d7: 8e:45:fc:13:a1:ec:fe:fc:a4:9e:24:1d:3d:bb:86: 92:ba:61:55:b8:c9:87:ea:7c:71:1c:92:79:c4:fd: e5:6f:28:f6:73:41:b9:17:bc:73:80:83:9a:8d:10: f7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E0:95:A7:28:4F:C7:2E:6C:F3:1D:28:B6:5C:0F:ED:A0:5E:DD:43 X509v3 Authority Key Identifier: keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a346530303a3a2f34302d3438203d3e20323135363338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:29c0:4e00::/40 Signature Algorithm: sha256WithRSAEncryption 2d:6e:8d:ab:40:c0:3c:a1:bb:15:e3:c8:82:d6:02:46:4f:03: 09:c3:9f:2c:81:76:79:8f:ca:7e:8c:dd:83:6a:d5:13:7b:22: c0:84:3d:9d:c9:3c:22:63:8f:36:f9:44:00:ca:94:3a:fb:83: d2:ab:91:60:07:ae:ee:2c:3e:d9:3c:a8:5b:b4:dd:15:4f:f7: eb:91:0a:79:a3:67:c5:d4:3a:96:2a:70:f6:40:3e:e6:64:7b: 49:2a:d7:d9:0d:30:12:1e:dd:04:5d:4c:19:b3:54:61:71:72: 29:af:93:46:e8:f6:4c:8a:e8:aa:49:f7:84:45:c4:47:01:a3: 3b:25:26:62:42:99:13:e7:6a:01:46:93:41:af:e3:98:55:96: e9:dd:ca:84:ce:89:dc:c5:59:70:d9:a6:32:81:8c:55:1c:b3: 85:bf:69:f7:51:32:74:de:37:e1:98:0d:b0:41:3f:df:6c:04: ff:4d:de:85:3e:e6:00:a5:90:06:84:32:77:eb:10:09:cd:24: cd:d0:77:91:0b:ed:50:9c:22:a9:f8:62:98:b5:0f:27:fa:2d: d0:f1:a1:5d:3a:9e:bd:62:c4:ec:57:df:58:0c:1b:95:b6:2d: 65:19:11:e2:29:b1:57:be:ca:eb:82:15:73:6a:27:c0:6a:fd: e9:96:79:e6 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUCMGo6Zmtuav6SCHCgTYZ8w/S9U4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm MTA4Mjg3MzAeFw0yNTEyMzAyMzE3NDNaFw0yNjEyMjkyMzIyNDNaMDMxMTAvBgNV BAMTKEZFRTA5NUE3Mjg0RkM3MkU2Q0YzMUQyOEI2NUMwRkVEQTA1RURENDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Nau272K1srhipG7+2nu2TWyn LUMlp7fm0SFt0V76wiuW9rPotMyNx7s3rVenclIjKgA9Nydgd8KnVN6LCZBfjK1w TFNv4Qr3SfoxT8dQf4fja0iIEt7cyQoROD9kp6JlDqsgCGSSofGrDhSzuwZc5FXk xIgDyxBmnTpgNr5iOCFPWjok7HqEgzIr49NUgDJikQSYBG7tam2OciG51Xll4x0K 2ud1I/BsdsF+zXi6l/ipmY5pwrpvc5qcKkTXCoJ6Dl23dJ1nWBA5nXbzt3+H145F /BOh7P78pJ4kHT27hpK6YVW4yYfqfHEcknnE/eVvKPZzQbkXvHOAg5qNEPftAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQU/uCVpyhPxy5s8x0otlwP7aBe3UMwHwYDVR0j BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF SUtITS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw M2EzNDY1MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNTM2MzMzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoRKcBOMA0GCSqGSIb3DQEBCwUAA4IBAQAtbo2rQMA8obsV48iC 1gJGTwMJw58sgXZ5j8p+jN2DatUTeyLAhD2dyTwiY482+UQAypQ6+4PSq5FgB67u LD7ZPKhbtN0VT/frkQp5o2fF1DqWKnD2QD7mZHtJKtfZDTASHt0EXUwZs1RhcXIp r5NG6PZMiuiqSfeERcRHAaM7JSZiQpkT52oBRpNBr+OYVZbp3cqEzoncxVlw2aYy gYxVHLOFv2n3UTJ03jfhmA2wQT/fbAT/Td6FPuYApZAGhDJ36xAJzSTN0HeRC+1Q nCKp+GKYtQ8n+i3Q8aFdOp69YsTsV99YDBuVti1lGRHiKbFXvsrrghVzaifAav3p lnnm -----END CERTIFICATE-----Generated at Sun Jan 25 14:03:26 2026 by rpki-client