This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130343a3a2f34382d3438203d3e20323034323131.roa File: 326130663a316363363a623130343a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: n97+h27GU7jKCkXTYmO9WYpKNEgEu3SjZGImQi8R+o8= Subject key identifier: 75:F5:E9:CE:08:45:4E:3D:E3:45:79:9D:60:FC:A3:FE:0E:54:B5:4C Certificate issuer: /CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0 Certificate serial: 654F9DD67AE22ADE78398E022568811B4D0AD574 Authority key identifier: 9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130343a3a2f34382d3438203d3e20323034323131.roa Signing time: Tue 11 Nov 2025 15:13:11 +0000 ROA not before: Tue 11 Nov 2025 15:08:11 +0000 ROA not after: Tue 10 Nov 2026 15:13:11 +0000 asID: 204211 IP address blocks: 2a0f:1cc6:b104::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.mft rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.crl rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:4f:9d:d6:7a:e2:2a:de:78:39:8e:02:25:68:81:1b:4d:0a:d5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0 Validity Not Before: Nov 11 15:08:11 2025 GMT Not After : Nov 10 15:13:11 2026 GMT Subject: CN=75F5E9CE08454E3DE345799D60FCA3FE0E54B54C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:be:5c:b4:18:da:bb:a1:ef:97:0e:e1:e3:4c: 23:0a:ba:0e:ce:b5:1a:39:ee:f5:5d:38:15:31:1e: 1c:bc:4e:e0:f2:13:cb:89:e5:22:1c:82:2a:c9:27: f0:c9:e5:2a:c0:04:57:cf:73:63:01:22:ef:36:e2: 22:ab:2a:9a:fb:f3:92:21:0d:99:ae:3a:fa:17:62: d3:ec:91:37:eb:f9:d9:12:72:f8:08:cb:f1:0e:1c: 96:83:e2:fd:10:6a:93:67:5b:7b:85:d6:8d:5d:92: 04:ec:fd:5e:5b:2b:fb:bb:f3:64:2d:98:71:ba:8c: c8:2a:57:dd:25:1c:c1:78:ec:9c:ce:40:c9:4b:e3: 71:e4:59:41:b9:11:14:2d:cc:3f:9a:aa:c9:67:d0: 76:55:60:51:a5:bc:94:7b:c1:a8:c5:e2:89:9f:f7: 81:fc:d3:fa:af:91:48:a1:26:c8:80:b1:b6:20:fa: 4f:d7:1c:a2:4b:a0:02:cd:d3:13:fa:55:74:cd:fe: e7:13:d6:42:fc:20:07:d1:0d:69:73:2f:43:d4:75: b2:79:f9:bc:a4:a8:8f:aa:36:c5:29:23:7d:65:a9: 53:f3:df:1a:d7:91:21:3f:4e:eb:42:ef:24:eb:f9: 20:ab:55:c7:30:fe:5f:ff:88:47:05:89:0f:31:c6: 61:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F5:E9:CE:08:45:4E:3D:E3:45:79:9D:60:FC:A3:FE:0E:54:B5:4C X509v3 Authority Key Identifier: keyid:9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/326130663a316363363a623130343a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc6:b104::/48 Signature Algorithm: sha256WithRSAEncryption 59:c2:e2:3f:3c:1c:85:74:1c:1a:e2:c0:68:60:67:48:ad:86: ed:57:f9:98:bf:ab:c5:82:6a:60:7a:09:de:d4:ee:b3:6c:dd: 57:d4:de:3a:fb:e8:f7:17:74:0a:bc:50:aa:20:84:f6:61:21: 19:0a:26:97:9f:34:f9:57:bc:70:5f:ca:7b:b6:20:a2:36:95: 2b:d2:22:91:91:09:0e:07:e4:05:4d:09:be:60:a0:a6:95:4b: 9f:e0:54:40:6d:2b:60:41:55:55:64:9c:64:df:2f:7b:08:65: 52:0b:c2:da:de:63:da:99:82:1d:d9:be:aa:12:9a:d4:f0:3d: 34:f8:e0:f5:fa:9c:e1:72:c5:79:7e:ce:2b:06:a6:91:50:d1: ae:b4:c2:37:98:eb:69:f9:18:14:98:4a:6c:86:40:53:9e:e8: 04:f3:0a:76:ab:bb:e3:c3:60:05:df:b7:66:d9:d9:fb:16:ce: f1:ab:d1:40:02:b7:0c:c5:ad:15:63:f2:08:71:51:ad:8a:d9: b7:e4:d6:de:b7:76:dc:4d:86:77:fe:fe:67:4c:c7:ea:35:fc: 1d:88:bf:6a:ac:df:bd:8c:6c:6a:eb:60:1d:a5:f5:3f:28:56: 20:9e:c1:fe:76:76:39:82:63:41:cd:a6:28:c1:9a:a2:7d:46: 95:2f:fc:6d -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUZU+d1nriKt54OY4CJWiBG00K1XQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY3MDQyQzNCMzhBMkE0REFCNzU2MzM3MTIyQUQyQjky N0RENkRFMDAeFw0yNTExMTExNTA4MTFaFw0yNjExMTAxNTEzMTFaMDMxMTAvBgNV BAMTKDc1RjVFOUNFMDg0NTRFM0RFMzQ1Nzk5RDYwRkNBM0ZFMEU1NEI1NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtvly0GNq7oe+XDuHjTCMKug7O tRo57vVdOBUxHhy8TuDyE8uJ5SIcgirJJ/DJ5SrABFfPc2MBIu824iKrKpr785Ih DZmuOvoXYtPskTfr+dkScvgIy/EOHJaD4v0QapNnW3uF1o1dkgTs/V5bK/u782Qt mHG6jMgqV90lHMF47JzOQMlL43HkWUG5ERQtzD+aqsln0HZVYFGlvJR7wajF4omf 94H80/qvkUihJsiAsbYg+k/XHKJLoALN0xP6VXTN/ucT1kL8IAfRDWlzL0PUdbJ5 +bykqI+qNsUpI31lqVPz3xrXkSE/TutC7yTr+SCrVccw/l//iEcFiQ8xxmFPAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUdfXpzghFTj3jRXmdYPyj/g5UtUwwHwYDVR0j BBgwFoAUn3BCw7OKKk2rdWM3EirSuSfdbeAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzAvOUY3MDQyQzNCMzhBMkE0REFCNzU2MzM3MTIyQUQyQjkyN0RENkRFMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2Q4ZGI3MS1hNWJlLTQ2 NGMtYThiOS04YjdiMzc0YWUzZmEvMi85RjcwNDJDM0IzOEEyQTREQUI3NTYzMzcx MjJBRDJCOTI3REQ2REUwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMC8zMjYxMzA2 NjNhMzE2MzYzMzYzYTYyMzEzMDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKg8cxrEEMA0GCSqGSIb3DQEBCwUAA4IBAQBZ wuI/PByFdBwa4sBoYGdIrYbtV/mYv6vFgmpgegne1O6zbN1X1N46++j3F3QKvFCq IIT2YSEZCiaXnzT5V7xwX8p7tiCiNpUr0iKRkQkOB+QFTQm+YKCmlUuf4FRAbStg QVVVZJxk3y97CGVSC8La3mPamYId2b6qEprU8D00+OD1+pzhcsV5fs4rBqaRUNGu tMI3mOtp+RgUmEpshkBTnugE8wp2q7vjw2AF37dm2dn7Fs7xq9FAArcMxa0VY/II cVGtitm35Nbet3bcTYZ3/v5nTMfqNfwdiL9qrN+9jGxq62AdpfU/KFYgnsH+dnY5 gmNBzaYowZqifUaVL/xt -----END CERTIFICATE-----Generated at Sat Dec 6 05:44:38 2025 by rpki-client