This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/323030313a3637383a6531303a3a2f34382d3438203d3e20323038393135.roa File: 323030313a3637383a6531303a3a2f34382d3438203d3e20323038393135.roa (raw, json) Hash identifier: Q+rBjBtdmpkMnJJ1scyQFgFf7p0XTL49lt2rh8zsejE= Subject key identifier: 8B:0B:9B:28:51:79:46:AA:F1:9D:7C:6F:DB:D5:6B:AB:54:6E:3C:1F Certificate issuer: /CN=407daf8dc897d3f1c43d866ea945305303ad73ed Certificate serial: 1BAF2E04B926E53D105F50786354269FC2B1EA13 Authority key identifier: 40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/323030313a3637383a6531303a3a2f34382d3438203d3e20323038393135.roa Signing time: Sat 15 Nov 2025 15:39:07 +0000 ROA not before: Sat 15 Nov 2025 15:34:07 +0000 ROA not after: Sat 14 Nov 2026 15:39:07 +0000 asID: 208915 IP address blocks: 2001:678:e10::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:af:2e:04:b9:26:e5:3d:10:5f:50:78:63:54:26:9f:c2:b1:ea:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407daf8dc897d3f1c43d866ea945305303ad73ed Validity Not Before: Nov 15 15:34:07 2025 GMT Not After : Nov 14 15:39:07 2026 GMT Subject: CN=8B0B9B28517946AAF19D7C6FDBD56BAB546E3C1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:26:b9:1d:8f:03:40:c3:c7:83:20:8b:ad:fc: 71:89:b1:5e:42:0b:96:b1:23:84:40:d3:b1:ba:86: 9c:0f:8a:5a:3c:c1:8d:36:54:1d:53:de:25:91:e6: 30:c4:46:38:a5:6b:e1:96:c8:2e:17:a6:c0:56:26: 55:ec:ca:02:78:a5:4b:83:58:d1:8e:25:f8:55:16: 42:f9:e1:9a:86:7c:08:d6:7f:e4:03:be:3b:f4:75: f4:94:b1:fb:47:cc:91:90:05:6a:fc:d9:da:cf:f9: 04:c2:c6:2d:41:83:ef:7f:17:e0:92:15:19:cc:1c: c8:d4:e6:d2:92:76:eb:2a:2b:75:1c:0d:da:63:ed: 78:71:94:eb:17:a7:a6:8c:f9:c1:e9:29:76:95:20: 2e:e0:3f:e0:d7:3a:ce:a2:29:ca:ed:52:8b:84:0d: 7e:7a:02:14:d9:87:19:9e:71:c2:45:98:dc:45:cb: 98:d3:a2:70:6d:3d:cd:88:b4:5d:f3:9d:4f:2d:18: 6e:95:f5:ca:bf:d0:f8:1e:c1:94:3c:54:34:51:10: e0:69:e6:9c:09:3f:b8:d5:31:3e:76:7d:c9:e7:43: f0:33:59:79:1d:58:07:7d:ef:32:22:69:a2:20:88: ad:f6:3d:ba:c7:e8:01:7f:1d:f0:35:ab:25:10:02: f3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0B:9B:28:51:79:46:AA:F1:9D:7C:6F:DB:D5:6B:AB:54:6E:3C:1F X509v3 Authority Key Identifier: keyid:40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/323030313a3637383a6531303a3a2f34382d3438203d3e20323038393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:e10::/48 Signature Algorithm: sha256WithRSAEncryption 3d:12:42:3e:26:a5:34:03:65:d9:d6:5f:dd:cb:5a:42:1f:bd: c4:c6:15:cf:2f:91:9d:48:91:9a:f2:c2:64:c8:2b:86:c2:ae: 0a:1c:4a:75:4c:ad:b9:44:1e:88:9b:24:b4:1a:8d:8e:ee:88: 25:d8:ae:17:ef:d8:6d:5a:f8:61:d7:b0:21:87:80:e8:17:80: 93:d4:f0:8e:37:54:ac:00:fd:70:52:f2:3c:0e:7f:59:92:06: 8e:bc:0e:07:10:61:73:6b:42:59:d4:e7:e7:8d:59:0a:ca:19: 09:4d:ee:40:f7:67:ef:74:ef:97:75:7b:b1:56:be:bc:a4:e3: 41:b0:ce:be:44:f6:29:b3:a7:1f:92:a2:16:95:83:9e:40:9d: 29:38:6d:00:95:e7:77:8d:72:fc:42:d9:48:41:5d:e5:1c:83: 42:47:1e:0a:af:ab:70:08:2d:5b:01:84:63:8a:77:6f:36:93: d9:de:68:e4:ac:33:48:9d:67:3a:65:0d:42:c8:56:06:a7:e9: ad:fb:c3:c2:d7:bc:d9:c0:d3:6b:3c:5f:37:96:ca:4e:e3:4f: d2:ab:9b:d8:db:bc:e2:ec:19:87:fd:30:87:6a:ed:1d:26:a5: fc:e7:a7:4b:98:f1:43:9b:25:ab:5e:c3:61:d9:90:44:44:62: c2:63:47:c5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUG68uBLkm5T0QX1B4Y1Qmn8Kx6hMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3ZGFmOGRjODk3ZDNmMWM0M2Q4NjZlYTk0NTMwNTMw M2FkNzNlZDAeFw0yNTExMTUxNTM0MDdaFw0yNjExMTQxNTM5MDdaMDMxMTAvBgNV BAMTKDhCMEI5QjI4NTE3OTQ2QUFGMTlEN0M2RkRCRDU2QkFCNTQ2RTNDMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChJrkdjwNAw8eDIIut/HGJsV5C C5axI4RA07G6hpwPilo8wY02VB1T3iWR5jDERjila+GWyC4XpsBWJlXsygJ4pUuD WNGOJfhVFkL54ZqGfAjWf+QDvjv0dfSUsftHzJGQBWr82drP+QTCxi1Bg+9/F+CS FRnMHMjU5tKSdusqK3UcDdpj7XhxlOsXp6aM+cHpKXaVIC7gP+DXOs6iKcrtUouE DX56AhTZhxmeccJFmNxFy5jTonBtPc2ItF3znU8tGG6V9cq/0PgewZQ8VDRREOBp 5pwJP7jVMT52fcnnQ/AzWXkdWAd97zIiaaIgiK32PbrH6AF/HfA1qyUQAvNnAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUiwubKFF5RqrxnXxv29Vrq1RuPB8wHwYDVR0j BBgwFoAUQH2vjciX0/HEPYZuqUUwUwOtc+0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAtZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5 MTE2LzAvNDA3REFGOERDODk3RDNGMUM0M0Q4NjZFQTk0NTMwNTMwM0FENzNFRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FIMnZqY2lYMF9IRVBZWnVxVVV3VXdP dGMtMC5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAt ZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5MTE2LzAvMzIzMDMwMzEzYTM2MzczODNh NjUzMTMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDM4MzkzMTM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEGeA4QMA0GCSqGSIb3DQEBCwUAA4IBAQA9EkI+JqU0A2XZ1l/dy1pC H73ExhXPL5GdSJGa8sJkyCuGwq4KHEp1TK25RB6ImyS0Go2O7ogl2K4X79htWvhh 17Ahh4DoF4CT1PCON1SsAP1wUvI8Dn9ZkgaOvA4HEGFza0JZ1OfnjVkKyhkJTe5A 92fvdO+XdXuxVr68pONBsM6+RPYps6cfkqIWlYOeQJ0pOG0Aled3jXL8QtlIQV3l HINCRx4Kr6twCC1bAYRjindvNpPZ3mjkrDNInWc6ZQ1CyFYGp+mt+8PC17zZwNNr PF83lspO40/Sq5vY27zi7BmH/TCHau0dJqX856dLmPFDmyWrXsNh2ZBERGLCY0fF -----END CERTIFICATE-----Generated at Sat Dec 6 13:19:48 2025 by rpki-client