This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130323a3a2f34382d3438203d3e20323034323131.roa File: 326130663a316363363a623130323a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: 3TH6eeZIzb01qd47tRG7BB4/stDr7/uQSNohDht2KQk= Subject key identifier: 4A:56:E6:0B:78:EA:9D:07:F8:AD:BF:AB:C2:AC:A5:F0:CA:F0:48:F8 Certificate issuer: /CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0 Certificate serial: 6394016F79E8A8B73F118E55F8095F0E9CD9A76E Authority key identifier: 9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130323a3a2f34382d3438203d3e20323034323131.roa Signing time: Fri 07 Nov 2025 01:01:17 +0000 ROA not before: Fri 07 Nov 2025 00:56:17 +0000 ROA not after: Fri 06 Nov 2026 01:01:17 +0000 asID: 204211 IP address blocks: 2a0f:1cc6:b102::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.mft rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.crl rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:94:01:6f:79:e8:a8:b7:3f:11:8e:55:f8:09:5f:0e:9c:d9:a7:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0 Validity Not Before: Nov 7 00:56:17 2025 GMT Not After : Nov 6 01:01:17 2026 GMT Subject: CN=4A56E60B78EA9D07F8ADBFABC2ACA5F0CAF048F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2e:6a:71:05:01:fc:a6:2e:70:3f:29:75:1c: cb:c8:34:b5:ab:fe:1c:8a:13:e3:5d:0a:2a:d6:a2: 1d:7d:15:ee:94:f5:54:4b:5e:f7:95:1f:6b:75:e4: 28:7f:16:e1:77:d2:f5:79:f8:2b:68:5f:94:ca:e5: dd:a1:d3:27:ed:a1:41:95:be:70:b7:a0:19:9b:7f: 60:38:80:6f:7a:fe:b8:b1:11:51:d7:61:65:f2:80: a4:d8:91:8d:ab:d5:b2:99:6d:33:64:96:17:8f:7c: 9d:1c:d5:de:37:59:7c:28:6a:e6:1e:a2:96:e1:a8: fb:01:f7:43:b6:f5:0d:9a:fb:0a:b0:f1:32:09:4e: f7:27:e2:fb:9d:de:a4:e1:c4:37:b7:29:bb:a6:0f: e2:cb:2a:1c:6f:9a:18:4a:fe:9d:07:8a:a2:3d:55: 54:f3:60:2d:2a:35:1f:f7:b1:c1:0d:55:8f:33:be: 32:be:07:42:a7:c1:50:50:43:b4:01:7b:b7:07:53: a8:8d:5a:80:bc:08:5b:54:4a:f0:cf:a6:58:c4:cb: db:5c:9f:30:4c:32:e6:a1:02:39:c8:e3:7e:e9:8f: 8b:03:af:52:8a:cc:14:c4:a9:67:fa:7d:95:8d:c8: 05:20:5f:a1:e7:4d:e9:c7:4d:1b:92:ef:a0:c7:6c: 23:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:56:E6:0B:78:EA:9D:07:F8:AD:BF:AB:C2:AC:A5:F0:CA:F0:48:F8 X509v3 Authority Key Identifier: keyid:9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130323a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc6:b102::/48 Signature Algorithm: sha256WithRSAEncryption 32:ff:c8:04:74:d2:c4:9b:47:34:80:23:9b:76:af:83:28:8d: ea:6b:97:d2:e4:37:f0:78:e5:d2:b8:ad:39:b7:f3:e1:f7:b6: 90:2e:70:13:f8:fe:67:cc:e6:9d:c0:43:55:bf:41:43:42:fa: 10:89:37:7e:c0:af:95:24:22:71:64:51:37:4b:ff:5a:2e:82: bf:c3:6e:0d:73:0d:4d:84:a6:78:99:7c:cf:75:f0:58:29:29: 07:d4:d6:51:53:bb:ea:62:22:ce:78:fb:e4:e0:ea:92:ef:82: 6e:f7:d8:c6:31:01:e4:ec:76:1d:2a:8f:87:64:3d:bb:7f:31: fe:06:8b:7c:c5:66:aa:38:f7:5a:87:8b:dd:ab:a2:b4:fd:2c: 15:cf:8d:d1:db:0b:11:f7:0d:fa:5b:f2:5b:82:28:c0:0b:f8: 30:d6:38:f5:de:95:9f:1f:8c:8c:41:52:df:b2:0d:ba:12:fc: 6a:e2:2c:ba:bc:30:03:77:63:a3:ff:7e:f6:f0:73:f6:ca:9f: 41:a3:75:bc:3e:76:8c:49:a2:72:76:11:c1:3a:8f:d6:63:72: e7:25:56:b3:a2:fd:e8:59:f6:b8:a4:36:6f:66:2e:8d:47:91: 88:1d:d6:f3:fb:89:4f:72:01:fa:40:0c:f8:29:75:62:d2:63: 98:aa:1a:cc -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUY5QBb3noqLc/EY5V+AlfDpzZp24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY3MDQyQzNCMzhBMkE0REFCNzU2MzM3MTIyQUQyQjky N0RENkRFMDAeFw0yNTExMDcwMDU2MTdaFw0yNjExMDYwMTAxMTdaMDMxMTAvBgNV BAMTKDRBNTZFNjBCNzhFQTlEMDdGOEFEQkZBQkMyQUNBNUYwQ0FGMDQ4RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlLmpxBQH8pi5wPyl1HMvINLWr /hyKE+NdCirWoh19Fe6U9VRLXveVH2t15Ch/FuF30vV5+CtoX5TK5d2h0yftoUGV vnC3oBmbf2A4gG96/rixEVHXYWXygKTYkY2r1bKZbTNklhePfJ0c1d43WXwoauYe opbhqPsB90O29Q2a+wqw8TIJTvcn4vud3qThxDe3KbumD+LLKhxvmhhK/p0HiqI9 VVTzYC0qNR/3scENVY8zvjK+B0KnwVBQQ7QBe7cHU6iNWoC8CFtUSvDPpljEy9tc nzBMMuahAjnI437pj4sDr1KKzBTEqWf6fZWNyAUgX6HnTenHTRuS76DHbCNVAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUSlbmC3jqnQf4rb+rwqyl8MrwSPgwHwYDVR0j BBgwFoAUn3BCw7OKKk2rdWM3EirSuSfdbeAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzAvOUY3MDQyQzNCMzhBMkE0REFCNzU2MzM3MTIyQUQyQjkyN0RENkRFMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2Q4ZGI3MS1hNWJlLTQ2 NGMtYThiOS04YjdiMzc0YWUzZmEvMi85RjcwNDJDM0IzOEEyQTREQUI3NTYzMzcx MjJBRDJCOTI3REQ2REUwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMC8zMjYxMzA2 NjNhMzE2MzYzMzYzYTYyMzEzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKg8cxrECMA0GCSqGSIb3DQEBCwUAA4IBAQAy /8gEdNLEm0c0gCObdq+DKI3qa5fS5DfweOXSuK05t/Ph97aQLnAT+P5nzOadwENV v0FDQvoQiTd+wK+VJCJxZFE3S/9aLoK/w24Ncw1NhKZ4mXzPdfBYKSkH1NZRU7vq YiLOePvk4OqS74Ju99jGMQHk7HYdKo+HZD27fzH+Bot8xWaqOPdah4vdq6K0/SwV z43R2wsR9w36W/JbgijAC/gw1jj13pWfH4yMQVLfsg26Evxq4iy6vDADd2Oj/372 8HP2yp9Bo3W8PnaMSaJydhHBOo/WY3LnJVazov3oWfa4pDZvZi6NR5GIHdbz+4lP cgH6QAz4KXVi0mOYqhrM -----END CERTIFICATE-----Generated at Sat Dec 6 05:44:36 2025 by rpki-client