This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa File: 326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa (raw, json) Hash identifier: dtubQqytFEqkt8TqTYJ+KlZgpXqOEEfNHG9KMyAKroE= Subject key identifier: 6E:C9:E0:1D:64:A2:58:7B:5D:56:81:46:8E:7D:83:74:E6:AD:E6:77 Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Certificate serial: 1EACB414FFA9CB3B6704EA6ECD2817C66A0B97B0 Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa Signing time: Wed 05 Nov 2025 11:01:28 +0000 ROA not before: Wed 05 Nov 2025 10:56:28 +0000 ROA not after: Wed 04 Nov 2026 11:01:28 +0000 asID: 205036 IP address blocks: 2a0f:5fc0:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ac:b4:14:ff:a9:cb:3b:67:04:ea:6e:cd:28:17:c6:6a:0b:97:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Validity Not Before: Nov 5 10:56:28 2025 GMT Not After : Nov 4 11:01:28 2026 GMT Subject: CN=6EC9E01D64A2587B5D5681468E7D8374E6ADE677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b6:4b:86:7f:58:40:6a:74:a7:19:7c:2c:36: ce:9b:2f:a3:c8:fd:43:9c:be:8a:9a:8e:db:49:8d: 32:ea:c0:84:ff:4a:c8:1a:32:9d:c2:58:7c:df:b5: f9:7a:46:89:f9:76:ed:6e:20:3d:5d:49:21:47:8e: 5e:4e:ee:5a:b8:05:14:d9:4d:a4:31:f4:f9:5c:21: b5:38:7e:51:00:a9:a7:a7:5d:ba:fe:ce:84:d5:19: ef:e3:92:a9:fb:52:4d:ad:34:40:a3:87:8e:34:26: c7:3f:d7:4b:72:a7:a9:9e:06:89:11:f1:60:54:f7: 56:7b:fc:fc:d2:b6:2f:93:b9:d9:7e:f7:95:18:69: 01:a6:b4:2d:ca:1a:6e:b8:e1:1e:ed:7a:6b:94:e7: 4b:2d:c9:9a:47:e6:de:86:07:af:7a:62:f6:de:d5: 21:08:aa:8a:06:82:6c:f0:af:a5:12:0e:91:0c:08: 0e:2b:99:4a:8f:d4:61:b1:54:fe:24:40:8d:46:54: d5:88:31:f3:fb:60:4b:51:a9:0d:ed:df:40:8c:af: 7d:c9:bb:09:2c:eb:d6:ea:f2:d9:97:39:b7:e4:dc: 5f:61:2e:a1:bc:82:f3:19:a1:26:ae:93:11:6b:f6: f4:06:1f:4b:38:51:4b:34:2d:b1:26:3d:97:31:38: 1d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C9:E0:1D:64:A2:58:7B:5D:56:81:46:8E:7D:83:74:E6:AD:E6:77 X509v3 Authority Key Identifier: keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5fc0:b00b::/48 Signature Algorithm: sha256WithRSAEncryption aa:42:09:df:6e:14:17:0b:b3:b0:bf:fa:b6:4c:12:43:b0:45: 66:18:50:5a:75:f0:42:4a:c0:32:92:d8:69:1f:98:ba:d7:04: 86:3a:95:68:92:4f:77:80:61:95:85:52:f2:e1:fa:89:37:82: 5b:26:38:66:e9:f7:85:56:a4:78:6f:dd:28:5c:3c:57:e8:50: a3:99:fd:23:9b:10:de:3d:3f:00:c3:0b:80:2c:1d:80:db:83: fc:17:d3:42:3f:ce:60:d3:08:7f:85:96:73:c6:57:c8:9e:44: 1b:d1:03:4e:f7:7f:22:fd:8f:05:e6:bc:3f:78:65:d1:9a:22: f1:4c:39:c8:a8:d5:fc:ee:d0:0d:02:c0:a5:65:0d:05:25:70: e7:ea:17:7f:2c:75:75:c5:3a:03:26:74:38:ed:e6:5f:b2:93: 7b:40:c5:03:33:5a:d7:f9:9f:1b:24:44:3a:ff:7f:71:0e:ef: 2f:ad:a2:67:df:ce:d1:eb:39:4e:f5:6e:1c:67:2a:ae:e0:c7: c0:21:ff:bc:53:eb:e0:7e:3a:dc:3a:a2:16:b0:d2:3a:18:b5: 30:75:f0:fa:8e:6d:fd:fc:91:54:db:e5:f0:75:ea:15:99:e3: 8c:fc:e2:42:6b:0d:20:e2:22:9d:77:52:ac:b6:02:1f:bf:31: 40:d0:c2:70 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUHqy0FP+pyztnBOpuzSgXxmoLl7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3 NjI2MDBlNjAeFw0yNTExMDUxMDU2MjhaFw0yNjExMDQxMTAxMjhaMDMxMTAvBgNV BAMTKDZFQzlFMDFENjRBMjU4N0I1RDU2ODE0NjhFN0Q4Mzc0RTZBREU2NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCutkuGf1hAanSnGXwsNs6bL6PI /UOcvoqajttJjTLqwIT/SsgaMp3CWHzftfl6Ron5du1uID1dSSFHjl5O7lq4BRTZ TaQx9PlcIbU4flEAqaenXbr+zoTVGe/jkqn7Uk2tNECjh440Jsc/10typ6meBokR 8WBU91Z7/PzSti+Tudl+95UYaQGmtC3KGm644R7temuU50styZpH5t6GB696Yvbe 1SEIqooGgmzwr6USDpEMCA4rmUqP1GGxVP4kQI1GVNWIMfP7YEtRqQ3t30CMr33J uwks69bq8tmXObfk3F9hLqG8gvMZoSaukxFr9vQGH0s4UUs0LbEmPZcxOB0FAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUbsngHWSiWHtdVoFGjn2DdOat5ncwHwYDVR0j BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1 N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ bUFPWS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEt ODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1N2ZlLzAvMzI2MTMwNjYzYTM1NjY2MzMw M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNTMwMzMzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoPX8CwCzANBgkqhkiG9w0BAQsFAAOCAQEAqkIJ324UFwuzsL/6 tkwSQ7BFZhhQWnXwQkrAMpLYaR+YutcEhjqVaJJPd4BhlYVS8uH6iTeCWyY4Zun3 hVakeG/dKFw8V+hQo5n9I5sQ3j0/AMMLgCwdgNuD/BfTQj/OYNMIf4WWc8ZXyJ5E G9EDTvd/Iv2PBea8P3hl0Zoi8Uw5yKjV/O7QDQLApWUNBSVw5+oXfyx1dcU6AyZ0 OO3mX7KTe0DFAzNa1/mfGyREOv9/cQ7vL62iZ9/O0es5TvVuHGcqruDHwCH/vFPr 4H463DqiFrDSOhi1MHXw+o5t/fyRVNvl8HXqFZnjjPziQmsNIOIinXdSrLYCH78x QNDCcA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:22:02 2025 by rpki-client