This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/326130303a313766383a3a2f33322d3634203d3e203439343338.roa File: 326130303a313766383a3a2f33322d3634203d3e203439343338.roa (raw, json) Hash identifier: /KtiO33L6se3kHkVpFIPImnjoEV3e3gPcr4HV+lO8sc= Subject key identifier: F2:1D:5A:08:DB:69:3E:C4:DE:98:15:C5:0E:63:44:FA:6F:00:64:F6 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 73DAD4ECB87CA4A502EF66276EA00B1BD2BD918B Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/326130303a313766383a3a2f33322d3634203d3e203439343338.roa Signing time: Wed 12 Nov 2025 15:03:59 +0000 ROA not before: Wed 12 Nov 2025 14:58:59 +0000 ROA not after: Wed 11 Nov 2026 15:03:59 +0000 asID: 49438 IP address blocks: 2a00:17f8::/32 maxlen: 64 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:da:d4:ec:b8:7c:a4:a5:02:ef:66:27:6e:a0:0b:1b:d2:bd:91:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 12 14:58:59 2025 GMT Not After : Nov 11 15:03:59 2026 GMT Subject: CN=F21D5A08DB693EC4DE9815C50E6344FA6F0064F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8c:fe:27:28:a6:10:cf:42:e3:7f:91:37:62: 71:58:1f:11:7f:7d:9e:b9:5d:66:e4:af:58:6d:75: 82:e4:44:64:5c:d6:e2:f7:ef:19:ba:f6:7e:1c:22: 6b:53:d6:08:f7:70:d3:f1:99:b0:88:3d:7f:15:89: 74:34:dc:8f:eb:1e:25:9d:72:db:77:5d:04:6e:1d: 04:35:77:14:5f:88:df:96:d2:97:03:02:65:2b:5a: e9:0b:70:b5:7d:33:4e:9f:35:a9:d4:c9:e5:8d:04: 8d:8c:89:98:fa:22:de:a3:02:96:82:31:2f:d6:3e: 27:9a:5e:28:44:51:0f:b5:1a:4a:15:dc:f8:3e:17: 07:61:39:54:49:59:98:79:4e:13:15:be:b8:b4:39: 37:8e:74:c1:ab:c8:88:66:aa:59:71:31:5b:14:57: 51:19:6d:c3:c5:0b:50:76:db:36:d8:de:7e:f7:76: cd:ab:cb:8e:64:09:79:18:b4:b3:ff:7d:c2:f7:35: 59:8b:81:f2:c5:8f:08:ba:e4:bf:c4:b8:b2:da:e5: 23:65:66:78:2b:b7:8f:b3:d0:bf:a1:56:02:b0:f2: 4c:39:3f:de:70:c0:9f:c8:5d:11:21:9c:22:5e:21: 6d:34:5a:48:ab:53:86:56:4b:33:f9:90:d8:28:4a: 22:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1D:5A:08:DB:69:3E:C4:DE:98:15:C5:0E:63:44:FA:6F:00:64:F6 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/326130303a313766383a3a2f33322d3634203d3e203439343338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:17f8::/32 Signature Algorithm: sha256WithRSAEncryption 09:5a:59:b5:ed:e0:e6:70:46:dc:57:7e:37:85:34:c4:ab:e0: 54:51:fb:73:6a:49:ca:1c:20:d2:16:72:c8:25:4f:59:d9:c6: 4d:02:34:38:40:cb:11:4d:e2:2e:6a:73:25:15:aa:43:e7:ed: 24:90:d9:6a:66:89:0b:c5:bb:7a:5a:db:77:2d:5e:bd:d2:53: 25:79:ef:bf:82:5e:48:01:92:2c:d7:07:d0:8b:2e:d4:df:6a: ae:26:05:97:5b:be:a9:26:49:be:72:e1:f1:27:f6:26:9a:d3: 37:d5:8e:0f:7f:1e:f8:19:51:1e:c5:fd:85:43:9a:6c:41:eb: d0:a3:c7:33:4d:ea:fd:e5:3c:36:4d:3d:fd:b6:77:fa:58:01: 87:cf:f8:05:de:ba:52:f7:22:00:75:78:da:37:c1:63:43:21: d6:52:a7:17:1d:9d:d5:98:ff:d7:d4:20:b8:6f:ce:10:38:20: e2:40:70:53:15:94:f4:63:ca:35:f9:f5:a2:94:84:6b:e9:e0: 67:0c:31:65:11:db:63:7d:90:d8:24:cf:8b:2c:e8:2a:58:c4: af:3c:39:ee:5d:6a:b7:1c:9d:70:c0:39:57:1a:42:9e:2c:cb: f5:ac:d3:c6:a1:d0:a5:a4:d9:0c:3e:f5:6a:9d:0b:31:a7:bb: e4:ca:73:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc9rU7Lh8pKUC72YnbqALG9K9kYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTIxNDU4NTlaFw0yNjExMTExNTAzNTlaMDMxMTAvBgNV BAMTKEYyMUQ1QTA4REI2OTNFQzRERTk4MTVDNTBFNjM0NEZBNkYwMDY0RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDljP4nKKYQz0Ljf5E3YnFYHxF/ fZ65XWbkr1htdYLkRGRc1uL37xm69n4cImtT1gj3cNPxmbCIPX8ViXQ03I/rHiWd ctt3XQRuHQQ1dxRfiN+W0pcDAmUrWukLcLV9M06fNanUyeWNBI2MiZj6It6jApaC MS/WPieaXihEUQ+1GkoV3Pg+FwdhOVRJWZh5ThMVvri0OTeOdMGryIhmqllxMVsU V1EZbcPFC1B22zbY3n73ds2ry45kCXkYtLP/fcL3NVmLgfLFjwi65L/EuLLa5SNl Zngrt4+z0L+hVgKw8kw5P95wwJ/IXREhnCJeIW00WkirU4ZWSzP5kNgoSiInAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8h1aCNtpPsTemBXFDmNE+m8AZPYwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzI2MTMwMzAzYTMxMzc2NjM4 M2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzQzOTM0MzMzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoA F/gwDQYJKoZIhvcNAQELBQADggEBAAlaWbXt4OZwRtxXfjeFNMSr4FRR+3NqScoc INIWcsglT1nZxk0CNDhAyxFN4i5qcyUVqkPn7SSQ2WpmiQvFu3pa23ctXr3SUyV5 77+CXkgBkizXB9CLLtTfaq4mBZdbvqkmSb5y4fEn9iaa0zfVjg9/HvgZUR7F/YVD mmxB69CjxzNN6v3lPDZNPf22d/pYAYfP+AXeulL3IgB1eNo3wWNDIdZSpxcdndWY /9fUILhvzhA4IOJAcFMVlPRjyjX59aKUhGvp4GcMMWUR22N9kNgkz4ss6CpYxK88 Oe5darccnXDAOVcaQp4sy/Ws08ah0KWk2Qw+9WqdCzGnu+TKc0g= -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:45 2025 by rpki-client