This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130333a3a2f34382d3438203d3e20323034323131.roa File: 326130663a316363363a623130333a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: l1deJh2xZQ3JA3TbSO/Wo6HX4zpKObbvg59oDSxOzdM= Subject key identifier: 94:B4:38:46:86:46:5D:A1:FF:12:9B:3E:A4:EC:68:36:4B:F7:64:95 Certificate issuer: /CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0 Certificate serial: 0D81E2D4CC5C6D45F57D6F1B6F4BE5BE4A798F21 Authority key identifier: 9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130333a3a2f34382d3438203d3e20323034323131.roa Signing time: Sun 09 Nov 2025 05:36:19 +0000 ROA not before: Sun 09 Nov 2025 05:31:19 +0000 ROA not after: Sun 08 Nov 2026 05:36:19 +0000 asID: 204211 IP address blocks: 2a0f:1cc6:b103::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.mft rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.crl rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:81:e2:d4:cc:5c:6d:45:f5:7d:6f:1b:6f:4b:e5:be:4a:79:8f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0 Validity Not Before: Nov 9 05:31:19 2025 GMT Not After : Nov 8 05:36:19 2026 GMT Subject: CN=94B4384686465DA1FF129B3EA4EC68364BF76495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:20:e8:6a:56:44:10:a7:2a:fb:10:27:65: b7:44:f1:23:79:6d:35:d7:fa:52:1c:b0:b8:aa:c9: cc:d1:02:fa:e3:73:70:a7:a6:ff:91:97:52:92:84: a3:3a:f2:07:c9:fa:43:21:4d:e9:d6:9a:ed:0b:cc: a6:5e:ce:82:31:d1:4f:84:41:dd:18:7b:94:34:8a: 37:0c:48:ad:c0:80:81:90:48:a4:13:0e:ba:85:7a: ba:c2:bd:6f:ec:3d:4a:7d:11:fa:86:a9:e8:22:e1: f8:a1:75:8c:15:fc:bf:8c:33:98:81:df:22:0f:41: ed:60:e3:0d:3d:59:f5:cb:59:7e:e3:25:6f:a6:33: 80:bc:fd:3f:05:b4:d1:70:2a:f9:6b:0a:70:e4:a9: a8:47:59:d2:7f:f8:42:1e:c3:aa:47:ac:35:74:60: 0a:3d:22:72:9b:a7:e6:1c:13:a2:34:57:b2:71:1f: e6:25:4a:21:33:8e:79:89:bd:77:74:7d:12:67:94: 33:4c:3f:25:d8:b9:ca:27:36:db:eb:61:af:15:ed: 6e:03:5e:a7:c6:ba:8a:d1:33:2b:6d:cc:72:06:4a: 1e:9b:08:d0:71:16:46:24:9a:59:4e:94:a1:7f:eb: 99:78:39:ff:99:b3:df:00:1c:f3:dc:10:2b:cb:4a: df:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B4:38:46:86:46:5D:A1:FF:12:9B:3E:A4:EC:68:36:4B:F7:64:95 X509v3 Authority Key Identifier: keyid:9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130333a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc6:b103::/48 Signature Algorithm: sha256WithRSAEncryption a7:05:bd:53:d2:7b:d3:17:ae:01:75:e2:23:7f:43:a6:bf:f1: 2b:f1:b7:ef:de:4d:4c:92:0d:8e:21:4c:04:00:d2:dd:41:24: 3e:3e:e8:77:00:37:87:7b:19:33:41:15:6b:ff:e6:b7:92:bc: 25:38:cc:92:ed:30:a2:44:cc:3d:38:e3:87:15:15:e2:ed:df: ff:2c:d4:43:d9:96:97:c7:57:76:d2:6b:9c:02:ca:31:72:6b: 60:ea:60:cd:d6:66:c7:e1:10:c9:8d:12:d0:0f:9d:2e:ab:94: d4:46:e4:1e:37:ce:47:3b:f4:a9:8d:ec:96:04:9d:af:e1:ff: b8:d4:b7:05:52:b2:c8:ac:54:8c:92:b1:e9:bf:c6:90:fb:3c: a9:3b:c6:f4:7c:4d:a1:86:10:a6:29:df:32:e7:bc:ad:f4:4d: 76:7c:c8:bf:b7:ce:d3:f1:b6:f4:a9:9b:b4:8d:e2:52:fe:88: cf:ab:01:a7:0d:f7:b9:b3:be:f4:61:1a:21:f9:58:80:d9:6a: 6f:19:82:8d:80:11:43:6e:3c:76:6f:ae:04:61:b4:63:87:30: e5:fa:ab:94:94:0f:7b:bb:a4:5f:a6:33:76:9c:5d:72:9e:dc: d7:4a:5d:4a:27:8b:cf:37:ce:06:cc:ef:ed:df:0f:eb:27:ea: c9:ed:00:3f -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUDYHi1MxcbUX1fW8bb0vlvkp5jyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY3MDQyQzNCMzhBMkE0REFCNzU2MzM3MTIyQUQyQjky N0RENkRFMDAeFw0yNTExMDkwNTMxMTlaFw0yNjExMDgwNTM2MTlaMDMxMTAvBgNV BAMTKDk0QjQzODQ2ODY0NjVEQTFGRjEyOUIzRUE0RUM2ODM2NEJGNzY0OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDBSDoalZEEKcq+xAnZbdE8SN5 bTXX+lIcsLiqyczRAvrjc3Cnpv+Rl1KShKM68gfJ+kMhTenWmu0LzKZezoIx0U+E Qd0Ye5Q0ijcMSK3AgIGQSKQTDrqFerrCvW/sPUp9EfqGqegi4fihdYwV/L+MM5iB 3yIPQe1g4w09WfXLWX7jJW+mM4C8/T8FtNFwKvlrCnDkqahHWdJ/+EIew6pHrDV0 YAo9InKbp+YcE6I0V7JxH+YlSiEzjnmJvXd0fRJnlDNMPyXYuconNtvrYa8V7W4D XqfGuorRMyttzHIGSh6bCNBxFkYkmllOlKF/65l4Of+Zs98AHPPcECvLSt+PAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUlLQ4RoZGXaH/Eps+pOxoNkv3ZJUwHwYDVR0j BBgwFoAUn3BCw7OKKk2rdWM3EirSuSfdbeAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzAvOUY3MDQyQzNCMzhBMkE0REFCNzU2MzM3MTIyQUQyQjkyN0RENkRFMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2Q4ZGI3MS1hNWJlLTQ2 NGMtYThiOS04YjdiMzc0YWUzZmEvMi85RjcwNDJDM0IzOEEyQTREQUI3NTYzMzcx MjJBRDJCOTI3REQ2REUwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMC8zMjYxMzA2 NjNhMzE2MzYzMzYzYTYyMzEzMDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKg8cxrEDMA0GCSqGSIb3DQEBCwUAA4IBAQCn Bb1T0nvTF64BdeIjf0Omv/Er8bfv3k1Mkg2OIUwEANLdQSQ+Puh3ADeHexkzQRVr /+a3krwlOMyS7TCiRMw9OOOHFRXi7d//LNRD2ZaXx1d20mucAsoxcmtg6mDN1mbH 4RDJjRLQD50uq5TURuQeN85HO/SpjeyWBJ2v4f+41LcFUrLIrFSMkrHpv8aQ+zyp O8b0fE2hhhCmKd8y57yt9E12fMi/t87T8bb0qZu0jeJS/ojPqwGnDfe5s770YRoh +ViA2WpvGYKNgBFDbjx2b64EYbRjhzDl+quUlA97u6RfpjN2nF1yntzXSl1KJ4vP N84GzO/t3w/rJ+rJ7QA/ -----END CERTIFICATE-----Generated at Sat Dec 6 05:44:36 2025 by rpki-client