This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663330303a3a2f34302d3438203d3e20323132303835.roa File: 326131343a316563373a663330303a3a2f34302d3438203d3e20323132303835.roa (raw, json) Hash identifier: /N5wUQJdysICqY/mrt3+ONpnXUY6EQuvRkeb07T1NVw= Subject key identifier: AB:09:42:1B:1C:FC:58:1D:C4:10:C7:53:3B:A4:66:E5:40:B9:6C:A3 Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434 Certificate serial: 33DD74F3F5F5DBF10E7DFF33D2F4610D049CA2D8 Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663330303a3a2f34302d3438203d3e20323132303835.roa Signing time: Sat 06 Dec 2025 11:58:48 +0000 ROA not before: Sat 06 Dec 2025 11:53:48 +0000 ROA not after: Sat 05 Dec 2026 11:58:48 +0000 asID: 212085 IP address blocks: 2a14:1ec7:f300::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:dd:74:f3:f5:f5:db:f1:0e:7d:ff:33:d2:f4:61:0d:04:9c:a2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434 Validity Not Before: Dec 6 11:53:48 2025 GMT Not After : Dec 5 11:58:48 2026 GMT Subject: CN=AB09421B1CFC581DC410C7533BA466E540B96CA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8a:b8:38:56:a8:29:da:78:f5:8f:55:de:e9: 9e:ec:78:7b:fa:93:c8:1a:70:f6:32:15:c0:27:77: bd:7b:91:f6:55:64:79:e6:58:41:92:4b:71:b4:1d: 50:13:fa:48:da:7a:86:62:87:28:6d:7b:d8:74:bf: 62:83:e8:4d:61:66:2e:c5:b8:13:7f:63:ed:9a:09: ed:04:ec:d8:a7:2a:bf:f7:44:f0:bd:50:94:72:44: e7:51:1a:f7:bb:36:31:a7:f6:a5:49:84:80:18:ba: e2:bc:0f:a2:17:9b:37:64:31:bb:44:f1:ec:65:0d: 35:90:16:4d:8e:1d:96:35:eb:af:8b:48:46:f0:77: 5b:fc:ac:b4:39:dc:e3:0e:84:77:6b:25:2f:a5:0b: 45:42:e9:50:a5:00:5a:7b:cf:53:b3:24:a3:ac:c0: 7c:b1:9b:f6:32:9c:32:3d:03:12:6a:63:d3:f2:5b: 3d:03:24:0d:9e:dc:bb:a5:39:f2:2d:ef:68:12:21: 2d:bf:47:27:1a:fb:c5:56:4a:bf:4e:c5:4e:77:dc: 2d:20:00:63:26:5e:f5:23:88:08:4c:0f:bc:4f:58: a8:76:b4:90:83:ed:2b:b7:bd:39:83:97:59:04:ff: d1:4d:4a:d3:c3:4c:bc:15:6c:85:6c:3c:3a:c1:f6: cc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:09:42:1B:1C:FC:58:1D:C4:10:C7:53:3B:A4:66:E5:40:B9:6C:A3 X509v3 Authority Key Identifier: keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663330303a3a2f34302d3438203d3e20323132303835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1ec7:f300::/40 Signature Algorithm: sha256WithRSAEncryption 9d:c0:96:95:d1:85:c3:a0:f5:17:5c:87:95:57:c0:77:8f:8b: 10:6e:1d:61:4e:c4:4f:2d:bd:d8:c3:24:88:ef:cf:2d:30:c7: fe:e6:82:7b:ad:53:7e:c4:2b:6a:8c:89:91:0e:ba:f7:6f:86: 3c:60:e5:69:f7:d0:5c:cb:44:08:cb:46:a5:5f:9e:9d:b5:bf: 83:e1:ea:93:05:8b:7e:5a:7c:67:f8:63:5e:29:06:08:1f:58: 3f:c9:2e:b5:87:bf:b4:ae:04:e5:1d:0e:67:71:97:99:70:00: 21:c2:1f:82:04:99:e0:88:ce:61:15:a4:99:14:94:34:64:e7: 0b:de:51:ce:41:ee:1e:85:dc:05:ac:77:ca:2f:fc:ab:0e:0b: 4b:4d:a3:14:6d:c3:b4:9d:b4:5c:9b:15:2b:3e:d0:62:12:85: 59:4d:0f:a2:09:9d:e1:42:d4:c5:e5:f5:bb:1a:47:c8:a3:f9: 78:61:fb:16:64:2d:88:25:35:ca:fa:52:8b:fc:d1:b7:14:54: 75:73:c9:e4:5b:5f:44:b5:ad:69:18:25:6c:dc:77:49:92:67: 92:6c:8b:9f:13:05:db:7d:f4:62:9b:31:ae:36:32:9f:dc:14: 4c:0b:be:32:f1:85:2c:17:22:36:e2:57:cf:cd:43:22:e0:e1: 46:48:9c:56 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUM9108/X12/EOff8z0vRhDQScotgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj NGYzNTQzNDAeFw0yNTEyMDYxMTUzNDhaFw0yNjEyMDUxMTU4NDhaMDMxMTAvBgNV BAMTKEFCMDk0MjFCMUNGQzU4MURDNDEwQzc1MzNCQTQ2NkU1NDBCOTZDQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbirg4Vqgp2nj1j1Xe6Z7seHv6 k8gacPYyFcAnd717kfZVZHnmWEGSS3G0HVAT+kjaeoZihyhte9h0v2KD6E1hZi7F uBN/Y+2aCe0E7NinKr/3RPC9UJRyROdRGve7NjGn9qVJhIAYuuK8D6IXmzdkMbtE 8exlDTWQFk2OHZY166+LSEbwd1v8rLQ53OMOhHdrJS+lC0VC6VClAFp7z1OzJKOs wHyxm/YynDI9AxJqY9PyWz0DJA2e3LulOfIt72gSIS2/Ryca+8VWSr9OxU533C0g AGMmXvUjiAhMD7xPWKh2tJCD7Su3vTmDl1kE/9FNStPDTLwVbIVsPDrB9swpAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUqwlCGxz8WB3EEMdTO6Rm5UC5bKMwHwYDVR0j BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4 NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U elZEUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWEzYmI5M2Yt OThhNC00YzdlLWEwZTEtODA1N2E0ZjA4NmM5LzAvMzI2MTMxMzQzYTMxNjU2MzM3 M2E2NjMzMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzMjMwMzgzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoUHsfzMA0GCSqGSIb3DQEBCwUAA4IBAQCdwJaV0YXDoPUXXIeV V8B3j4sQbh1hTsRPLb3YwySI788tMMf+5oJ7rVN+xCtqjImRDrr3b4Y8YOVp99Bc y0QIy0alX56dtb+D4eqTBYt+Wnxn+GNeKQYIH1g/yS61h7+0rgTlHQ5ncZeZcAAh wh+CBJngiM5hFaSZFJQ0ZOcL3lHOQe4ehdwFrHfKL/yrDgtLTaMUbcO0nbRcmxUr PtBiEoVZTQ+iCZ3hQtTF5fW7GkfIo/l4YfsWZC2IJTXK+lKL/NG3FFR1c8nkW19E ta1pGCVs3HdJkmeSbIufEwXbffRimzGuNjKf3BRMC74y8YUsFyI24lfPzUMi4OFG SJxW -----END CERTIFICATE-----Generated at Sun Dec 7 00:46:33 2025 by rpki-client