This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730633a3a2f34382d3438203d3e20323134393535.roa File: 326131343a373538333a663730633a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: MCTGvJAm8U3NtPMr0TfqstCKnf65Svz4B5aqt1Vg4GE= Subject key identifier: 85:56:97:63:12:AC:A2:35:4A:77:BB:7D:D3:72:D3:32:25:AC:50:C5 Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771 Certificate serial: 1F2F344DD9A0D46FBD33878D183365853E9FB4EE Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730633a3a2f34382d3438203d3e20323134393535.roa Signing time: Thu 04 Dec 2025 17:31:36 +0000 ROA not before: Thu 04 Dec 2025 17:26:36 +0000 ROA not after: Thu 03 Dec 2026 17:31:36 +0000 asID: 214955 IP address blocks: 2a14:7583:f70c::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 22:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:2f:34:4d:d9:a0:d4:6f:bd:33:87:8d:18:33:65:85:3e:9f:b4:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702B79B445330AC21D237308277A4472598CE771 Validity Not Before: Dec 4 17:26:36 2025 GMT Not After : Dec 3 17:31:36 2026 GMT Subject: CN=8556976312ACA2354A77BB7DD372D33225AC50C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2e:8b:d5:6c:66:5c:f1:c0:a9:13:5f:bc:b8: 9d:be:9d:03:69:57:f1:10:f3:66:a9:62:32:55:a8: 8a:38:b7:60:d6:0c:26:38:58:0b:0a:f9:c4:93:74: 55:5f:f9:3b:32:9f:80:1e:d5:58:ca:b2:1b:d1:5a: 85:4d:ae:d1:3f:9a:bf:05:5c:bb:48:40:d7:f3:5e: 98:30:2b:cc:38:d8:22:c1:38:dd:ad:23:c1:46:d3: ae:7e:49:79:a9:de:18:84:9d:69:3b:86:18:12:fb: 1e:f2:6c:83:07:49:30:6f:ef:29:43:ea:17:62:48: 0e:b7:b7:94:b1:73:89:72:c1:e1:59:d8:50:e7:a7: ae:b9:95:5b:8c:cf:ad:3f:b5:5d:44:1c:11:ff:1d: b9:ff:9e:b9:72:d4:27:c2:c7:39:96:50:18:11:81: d5:98:8f:4c:8e:16:c3:71:04:80:da:ab:24:98:f1: 48:d4:60:3e:a7:0c:33:fe:01:29:a2:f6:16:63:05: e8:1b:97:6a:a3:32:3b:b6:9a:a4:6b:0b:91:8c:27: 08:07:a1:3a:47:6e:cd:b0:29:87:57:15:00:11:62: ab:c7:e7:96:09:ba:fd:00:2a:5d:34:47:e4:0d:d2: 4e:57:dd:9b:31:0a:90:c8:93:e2:63:ea:d0:46:8c: c8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:56:97:63:12:AC:A2:35:4A:77:BB:7D:D3:72:D3:32:25:AC:50:C5 X509v3 Authority Key Identifier: keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730633a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f70c::/48 Signature Algorithm: sha256WithRSAEncryption 0a:2c:cb:3e:f1:58:62:f3:9f:0c:d1:59:ae:aa:94:6f:3e:4e: d2:86:cc:62:85:44:df:e8:d6:ce:d7:eb:5b:8a:1c:d5:26:74: 3c:e3:ca:75:33:13:1e:8b:eb:1a:55:01:38:52:6a:df:71:ea: 26:f2:b9:28:9a:2e:0d:db:22:96:e8:6f:54:b6:15:4f:64:48: 76:30:79:21:e7:a7:25:c4:72:fb:e4:16:87:dc:97:fb:16:51: d1:e0:e1:5b:98:85:d4:9a:b2:33:5c:f9:41:8d:16:4b:f5:59: 04:5b:e7:d3:b3:f8:e6:a1:9a:ea:19:47:7d:d7:e9:92:ae:21: f8:99:71:0d:ea:18:39:12:86:64:40:a0:16:2e:f7:6c:78:f6: c1:90:b8:30:db:ff:7a:07:c5:d6:55:84:ef:16:18:7f:2e:35: a5:0d:8c:f1:21:f6:d7:63:a7:99:23:51:2d:69:ff:97:df:a9: b8:79:73:a5:3f:b8:72:a3:e0:e8:85:e9:71:40:c5:0b:89:81: df:b9:ac:54:64:cd:90:69:0f:ab:e6:b9:f7:10:e5:59:0d:5e: 62:c5:c5:c6:8c:0d:5e:39:e7:df:ab:26:dd:90:36:d4:51:69: e8:71:ac:10:a7:ca:47:1d:32:53:e9:bd:31:fb:87:f9:8f:77: 77:91:15:23 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUHy80Tdmg1G+9M4eNGDNlhT6ftO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1 OThDRTc3MTAeFw0yNTEyMDQxNzI2MzZaFw0yNjEyMDMxNzMxMzZaMDMxMTAvBgNV BAMTKDg1NTY5NzYzMTJBQ0EyMzU0QTc3QkI3REQzNzJEMzMyMjVBQzUwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLovVbGZc8cCpE1+8uJ2+nQNp V/EQ82apYjJVqIo4t2DWDCY4WAsK+cSTdFVf+Tsyn4Ae1VjKshvRWoVNrtE/mr8F XLtIQNfzXpgwK8w42CLBON2tI8FG065+SXmp3hiEnWk7hhgS+x7ybIMHSTBv7ylD 6hdiSA63t5Sxc4lyweFZ2FDnp665lVuMz60/tV1EHBH/Hbn/nrly1CfCxzmWUBgR gdWYj0yOFsNxBIDaqySY8UjUYD6nDDP+ASmi9hZjBegbl2qjMju2mqRrC5GMJwgH oTpHbs2wKYdXFQARYqvH55YJuv0AKl00R+QN0k5X3ZsxCpDIk+Jj6tBGjMgxAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUhVaXYxKsojVKd7t903LTMiWsUMUwHwYDVR0j BBgwFoAUcCt5tEUzCsIdI3MIJ3pEclmM53EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzEvNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1OThDRTc3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MDJCNzlCNDQ1MzMwQUMyMUQyMzczMDgy NzdBNDQ3MjU5OENFNzcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzczMDYzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g/cMMA0GCSqGSIb3DQEBCwUAA4IBAQAK LMs+8Vhi858M0VmuqpRvPk7ShsxihUTf6NbO1+tbihzVJnQ848p1MxMei+saVQE4 Umrfceom8rkomi4N2yKW6G9UthVPZEh2MHkh56clxHL75BaH3Jf7FlHR4OFbmIXU mrIzXPlBjRZL9VkEW+fTs/jmoZrqGUd91+mSriH4mXEN6hg5EoZkQKAWLvdsePbB kLgw2/96B8XWVYTvFhh/LjWlDYzxIfbXY6eZI1Etaf+X36m4eXOlP7hyo+Dohelx QMULiYHfuaxUZM2QaQ+r5rn3EOVZDV5ixcXGjA1eOeffqybdkDbUUWnocawQp8pH HTJT6b0x+4f5j3d3kRUj -----END CERTIFICATE-----Generated at Sun Dec 7 13:10:28 2025 by rpki-client