This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/326130393a643634303a3a2f32392d3239203d3e20313938333435.roa File: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (raw, json) Hash identifier: 2ZJoizA2XrGcopsLwhs8oaMaqFtkP0G9iClmvxEJgnM= Subject key identifier: 7C:1C:9E:A3:72:E7:FA:EF:E5:81:6F:86:82:04:21:C5:75:BF:C1:2A Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 16845EBC55536F6E049EF35C768403691D8B8588 Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/326130393a643634303a3a2f32392d3239203d3e20313938333435.roa Signing time: Thu 04 Dec 2025 13:55:14 +0000 ROA not before: Thu 04 Dec 2025 13:50:14 +0000 ROA not after: Thu 03 Dec 2026 13:55:14 +0000 asID: 198345 IP address blocks: 2a09:d640::/29 maxlen: 29 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:84:5e:bc:55:53:6f:6e:04:9e:f3:5c:76:84:03:69:1d:8b:85:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: Dec 4 13:50:14 2025 GMT Not After : Dec 3 13:55:14 2026 GMT Subject: CN=7C1C9EA372E7FAEFE5816F86820421C575BFC12A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:64:1f:b9:32:9a:15:8e:bc:b7:ee:08:92:1e: ba:db:1a:db:1c:c2:78:07:45:ae:cb:3f:e2:46:4c: f6:35:ba:2e:46:68:f8:89:40:86:39:44:4d:9d:75: fc:cd:39:fd:54:99:29:62:6b:9a:92:3f:36:0d:27: 4a:1b:5a:d7:93:73:58:36:eb:c2:a1:a2:c3:28:5e: 68:3c:f1:6d:c1:cf:38:ec:39:92:85:0a:20:57:bd: ef:56:ae:de:70:ac:f5:01:04:ad:4c:e0:c7:aa:7d: a0:89:c8:e7:9b:1a:65:1e:62:25:04:21:cf:f6:9f: a9:53:94:f9:fa:0c:73:a2:d4:54:f3:58:e9:f5:0a: c6:0c:e9:f7:d4:ee:37:74:49:ea:b7:4d:91:14:c6: 62:0a:27:5c:42:e1:a3:58:0d:95:77:01:ce:7b:84: a6:19:e1:b9:05:5c:45:8d:d3:52:27:3a:12:5b:02: 3e:93:8a:78:aa:65:ce:92:3f:c1:bb:ea:81:e2:a4: 97:87:12:8f:3c:9e:7c:c2:74:16:e3:0d:39:ff:37: 64:ca:20:58:87:a5:9d:b7:42:8e:b6:d5:62:47:e4: 97:d0:6e:11:68:e7:09:b5:b5:48:4d:0c:ac:7d:85: d1:52:1a:d9:0e:e0:06:b0:55:56:4d:0a:76:c1:ac: e7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1C:9E:A3:72:E7:FA:EF:E5:81:6F:86:82:04:21:C5:75:BF:C1:2A X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/326130393a643634303a3a2f32392d3239203d3e20313938333435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:d640::/29 Signature Algorithm: sha256WithRSAEncryption 33:0f:00:fc:59:5b:95:0b:9e:31:5f:5c:fb:39:e5:97:f5:a9: cc:25:28:a4:c0:66:53:b9:fb:86:50:55:00:90:a8:5e:c7:bc: 92:da:61:6e:86:49:be:db:5b:31:14:c7:ae:a8:ed:e3:d3:f4: 1f:a0:56:d2:96:a9:3c:25:82:2d:d1:69:84:cd:18:61:25:8d: 86:c3:e8:dc:e0:b4:49:59:22:2e:c8:ef:1a:50:31:49:1d:b0: 85:5b:21:e7:b8:41:d8:3f:bf:20:c6:c1:4c:f8:d8:99:24:c6: 62:19:6b:6e:23:be:81:28:ba:58:85:23:df:ae:ba:c3:b2:96: 03:8c:76:84:a3:24:ed:9e:eb:8e:73:ae:c7:33:a0:08:7f:2e: 57:3a:d7:99:4d:a2:da:d7:46:e2:98:70:4d:33:80:41:b7:3f: 52:1c:83:24:ca:42:fa:b5:92:70:65:a7:80:4a:ad:42:ae:20: f8:cb:63:22:c3:48:c7:13:5d:65:13:8b:6f:2c:7f:ad:be:8c: e8:e8:fb:33:d5:a7:23:94:c9:20:d9:b8:8e:1a:56:ca:d3:3b: 03:41:0d:fb:81:70:f9:d8:9d:1a:d0:8c:1b:f4:2c:36:9f:25: cb:be:b9:ff:d0:e5:e6:78:e5:57:02:04:b4:af:55:c0:7d:84: 73:7e:de:20 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUFoRevFVTb24EnvNcdoQDaR2LhYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNTEyMDQxMzUwMTRaFw0yNjEyMDMxMzU1MTRaMDMxMTAvBgNV BAMTKDdDMUM5RUEzNzJFN0ZBRUZFNTgxNkY4NjgyMDQyMUM1NzVCRkMxMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPZB+5MpoVjry37giSHrrbGtsc wngHRa7LP+JGTPY1ui5GaPiJQIY5RE2ddfzNOf1UmSlia5qSPzYNJ0obWteTc1g2 68KhosMoXmg88W3BzzjsOZKFCiBXve9Wrt5wrPUBBK1M4MeqfaCJyOebGmUeYiUE Ic/2n6lTlPn6DHOi1FTzWOn1CsYM6ffU7jd0Seq3TZEUxmIKJ1xC4aNYDZV3Ac57 hKYZ4bkFXEWN01InOhJbAj6TiniqZc6SP8G76oHipJeHEo88nnzCdBbjDTn/N2TK IFiHpZ23Qo621WJH5JfQbhFo5wm1tUhNDKx9hdFSGtkO4AawVVZNCnbBrOefAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUfByeo3Ln+u/lgW+GggQhxXW/wSowHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmYyNDU2N2It N2E3NC00YzFmLWFhODUtZGQyNGFmNzNjY2JiLzAvMzI2MTMwMzkzYTY0MzYzNDMw M2EzYTJmMzIzOTJkMzIzOTIwM2QzZTIwMzEzOTM4MzMzNDM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUD KgnWQDANBgkqhkiG9w0BAQsFAAOCAQEAMw8A/FlblQueMV9c+znll/WpzCUopMBm U7n7hlBVAJCoXse8ktphboZJvttbMRTHrqjt49P0H6BW0papPCWCLdFphM0YYSWN hsPo3OC0SVkiLsjvGlAxSR2whVsh57hB2D+/IMbBTPjYmSTGYhlrbiO+gSi6WIUj 3666w7KWA4x2hKMk7Z7rjnOuxzOgCH8uVzrXmU2i2tdG4phwTTOAQbc/UhyDJMpC +rWScGWngEqtQq4g+MtjIsNIxxNdZROLbyx/rb6M6Oj7M9WnI5TJINm4jhpWytM7 A0EN+4Fw+didGtCMG/QsNp8ly765/9Dl5njlVwIEtK9VwH2Ec37eIA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:13:54 2025 by rpki-client