This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa File: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (raw, json) Hash identifier: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884= Subject key identifier: AB:61:7D:29:D9:32:4D:99:E2:0B:11:30:AB:CE:15:FE:48:62:1C:19 Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 4AFD0E741174EE900A26C6BD070CF34441EFA077 Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa Signing time: Fri 28 Nov 2025 23:17:04 +0000 ROA not before: Fri 28 Nov 2025 23:12:04 +0000 ROA not after: Fri 27 Nov 2026 23:17:04 +0000 asID: 208328 IP address blocks: 2a0d:b287:ec00::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:fd:0e:74:11:74:ee:90:0a:26:c6:bd:07:0c:f3:44:41:ef:a0:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Nov 28 23:12:04 2025 GMT Not After : Nov 27 23:17:04 2026 GMT Subject: CN=AB617D29D9324D99E20B1130ABCE15FE48621C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:68:e9:b7:9a:1b:6b:d7:92:56:2a:c8:cf: 48:7c:94:b1:09:5c:42:c6:36:35:9e:20:5e:6a:65: 9b:58:2c:77:7d:f2:2b:79:83:37:d4:e2:5d:90:ee: e0:7a:35:da:28:e5:fe:18:68:d6:43:4b:3c:06:01: 76:31:eb:7d:8e:cb:95:85:1b:ba:48:e9:da:e6:0b: 27:10:b8:e7:a1:0c:90:26:4e:d3:44:f8:7a:03:63: cd:e0:10:81:59:21:4d:16:8f:8e:19:2c:14:2c:a0: fb:24:92:8c:35:03:6e:35:61:6b:79:10:77:77:83: f3:1a:12:56:56:e2:26:38:0e:a1:77:ab:6b:56:e9: dd:c7:fb:70:1b:da:75:52:43:84:be:9e:af:df:85: cd:ab:7e:0f:10:28:f0:d5:07:54:46:46:d7:24:93: 35:80:12:3e:8c:27:7e:25:dd:03:57:37:8a:8f:5f: 58:3e:14:85:eb:94:32:09:ce:8c:7b:ab:64:bd:9d: 07:e0:37:e6:6b:d4:83:66:c2:c5:88:f0:9f:6b:d6: 70:37:b2:0c:d9:df:e4:c9:a0:f0:c2:c3:e8:2c:d8: 62:1e:62:18:46:e1:d9:15:6a:da:95:7a:68:b5:c9: dd:ab:12:68:c1:d1:6b:83:c1:27:74:f3:4e:3a:76: e4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:61:7D:29:D9:32:4D:99:E2:0B:11:30:AB:CE:15:FE:48:62:1C:19 X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:b287:ec00::/40 Signature Algorithm: sha256WithRSAEncryption 98:f6:56:aa:06:57:71:92:40:d6:a0:3e:a8:84:84:d1:7f:21: 68:b4:e9:75:33:a5:d7:ab:c0:67:86:eb:8c:7d:f4:58:f9:32: e3:5c:91:69:fe:3e:d3:17:ab:90:58:3b:37:34:23:d7:bf:00: 3c:a8:3e:af:9f:09:4e:9a:07:ff:e9:74:3d:a3:96:3f:30:54: b8:04:6f:bd:7b:04:77:7e:c6:1a:74:9e:85:03:8e:d3:35:79: d3:8c:68:3e:6d:d6:30:54:50:ac:68:c9:20:c2:7c:12:c7:7f: 86:3f:59:a6:a7:56:38:f7:d7:55:92:97:eb:e8:d7:10:bf:12: 9c:a5:c4:63:d9:b0:b2:90:b2:f2:2a:15:56:0c:a7:89:9b:33: f0:be:b1:e5:d6:e5:68:e6:21:d2:a4:bb:ec:25:ed:dd:41:41: ee:ec:b9:1e:dc:e8:01:79:ca:e9:16:8b:fe:a9:7d:92:a5:f9: 43:b7:07:7a:2b:d6:fc:d4:a5:76:db:51:fa:05:71:3b:c0:02: 38:42:20:b1:1f:a7:14:2c:14:5c:65:09:e3:2b:56:58:84:95: 53:ad:b1:37:ad:d8:9a:19:80:8c:34:97:62:0d:e9:33:4a:07: 75:46:fa:95:a3:fd:e2:e4:78:65:41:9c:d1:5e:75:e8:e3:ea: 7e:4a:9b:3d -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUSv0OdBF07pAKJsa9BwzzREHvoHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNTExMjgyMzEyMDRaFw0yNjExMjcyMzE3MDRaMDMxMTAvBgNV BAMTKEFCNjE3RDI5RDkzMjREOTlFMjBCMTEzMEFCQ0UxNUZFNDg2MjFDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5Gjpt5oba9eSVirIz0h8lLEJ XELGNjWeIF5qZZtYLHd98it5gzfU4l2Q7uB6Ndoo5f4YaNZDSzwGAXYx632Oy5WF G7pI6drmCycQuOehDJAmTtNE+HoDY83gEIFZIU0Wj44ZLBQsoPskkow1A241YWt5 EHd3g/MaElZW4iY4DqF3q2tW6d3H+3Ab2nVSQ4S+nq/fhc2rfg8QKPDVB1RGRtck kzWAEj6MJ34l3QNXN4qPX1g+FIXrlDIJzox7q2S9nQfgN+Zr1INmwsWI8J9r1nA3 sgzZ3+TJoPDCw+gs2GIeYhhG4dkVatqVemi1yd2rEmjB0WuDwSd08046duTvAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUq2F9KdkyTZniCxEwq84V/khiHBkwHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQt NjFjNS00MjkwLThhNmQtNWYyYjkwMjczMjJmLzAvMzI2MTMwNjQzYTYyMzIzODM3 M2E2NTYzMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzAzODMzMzIzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoNsofsMA0GCSqGSIb3DQEBCwUAA4IBAQCY9laqBldxkkDWoD6o hITRfyFotOl1M6XXq8BnhuuMffRY+TLjXJFp/j7TF6uQWDs3NCPXvwA8qD6vnwlO mgf/6XQ9o5Y/MFS4BG+9ewR3fsYadJ6FA47TNXnTjGg+bdYwVFCsaMkgwnwSx3+G P1mmp1Y499dVkpfr6NcQvxKcpcRj2bCykLLyKhVWDKeJmzPwvrHl1uVo5iHSpLvs Je3dQUHu7Lke3OgBecrpFov+qX2SpflDtwd6K9b81KV221H6BXE7wAI4QiCxH6cU LBRcZQnjK1ZYhJVTrbE3rdiaGYCMNJdiDekzSgd1RvqVo/3i5HhlQZzRXnXo4+p+ Sps9 -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:28 2025 by rpki-client