This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930363a3a2f34382d313238203d3e20323134303333.roa File: 326130363a313238333a383930363a3a2f34382d313238203d3e20323134303333.roa (raw, json) Hash identifier: SDzB93ZmXL/9JaeiFrClXOKOMdMaPjQdBjiuTrcER6c= Subject key identifier: 64:8B:1A:DF:E7:37:1B:0A:A7:C5:55:A4:2A:FE:3C:A4:05:43:50:53 Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 278BB9D3718EB09EF755ECE5368E7F232B3323D5 Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930363a3a2f34382d313238203d3e20323134303333.roa Signing time: Sat 25 Oct 2025 22:57:57 +0000 ROA not before: Sat 25 Oct 2025 22:52:57 +0000 ROA not after: Sat 24 Oct 2026 22:57:57 +0000 asID: 214033 IP address blocks: 2a06:1283:8906::/48 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:8b:b9:d3:71:8e:b0:9e:f7:55:ec:e5:36:8e:7f:23:2b:33:23:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Oct 25 22:52:57 2025 GMT Not After : Oct 24 22:57:57 2026 GMT Subject: CN=648B1ADFE7371B0AA7C555A42AFE3CA405435053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2a:61:c5:cb:52:89:5c:8b:20:98:bc:ac:d8: e8:27:63:99:f8:f0:48:c7:36:74:11:72:db:52:4e: 8c:db:fd:23:8f:1f:01:22:29:57:66:12:44:cd:f9: fd:ed:da:aa:95:92:e7:dd:96:2b:10:6d:15:3e:a4: 08:47:85:53:4e:4e:e6:f0:db:f5:94:b1:1a:fb:1e: fd:4b:d9:0a:9f:37:6e:dc:1a:16:3d:2e:bb:7b:a7: 79:15:e2:5f:0d:77:82:08:0a:25:bf:81:6d:6d:35: a0:35:c7:35:f8:f2:14:0e:0a:60:f5:f5:9b:e7:9c: 35:48:6d:37:42:c0:3b:c4:b0:86:92:48:ca:d4:86: 84:fb:c7:de:99:25:13:4e:47:36:57:49:72:81:58: 09:ae:53:e2:a1:44:a7:d6:ae:df:a6:88:1d:27:da: 40:fa:04:c7:8d:29:7a:e1:8f:45:ab:36:d1:75:6f: 89:3e:53:ca:b0:bd:6b:c7:e8:b9:98:13:c7:0c:2b: 0a:a8:b3:3f:2d:eb:e6:c3:63:6b:7f:4c:5c:13:0b: 39:11:7b:e3:36:45:11:ab:98:b3:a9:37:50:00:50: 6e:91:b9:6f:53:8d:63:5c:4f:1d:cb:bc:c5:fc:e1: 7a:41:cd:e2:cf:eb:1a:88:93:aa:0c:9c:f7:95:94: 82:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8B:1A:DF:E7:37:1B:0A:A7:C5:55:A4:2A:FE:3C:A4:05:43:50:53 X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930363a3a2f34382d313238203d3e20323134303333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8906::/48 Signature Algorithm: sha256WithRSAEncryption 85:37:75:ec:59:0e:be:cd:1a:b7:0d:47:1c:5d:cb:de:39:cc: 01:aa:8f:3d:b6:95:8b:ec:d6:25:fb:ce:4d:69:d4:4a:c4:7b: 1b:e1:ab:cc:13:f6:c3:64:45:3a:69:3d:1b:ec:10:81:a1:bc: 76:02:e8:ca:9c:a9:0a:54:09:5e:44:f6:ae:da:5e:4d:5d:17: 0b:b1:22:8b:90:95:b2:41:7f:f1:e3:38:98:fa:95:74:3e:89: 65:64:5b:7f:67:a0:df:11:19:1d:38:87:b1:87:d7:38:32:df: e4:0c:fe:1b:3a:49:e1:0b:2d:d7:fe:88:24:03:46:d6:86:de: a0:86:e6:d9:d8:94:90:e0:de:91:6f:9f:9a:e8:f9:36:2c:ab: 2d:a3:76:b8:5f:98:4b:24:d2:9c:b4:9d:25:27:eb:8f:34:08: ec:29:8c:a1:e0:b3:90:a2:22:c3:86:23:4c:32:36:41:41:36: 4d:c2:b4:8f:9e:b3:83:6a:a2:80:40:40:80:5d:e7:2e:ec:4c: 94:fe:00:41:5a:4f:fe:04:83:b3:43:8c:13:6b:40:aa:12:33: 7d:12:ce:4d:16:bb:c7:bb:2b:f0:ad:3c:05:3f:a5:5d:bc:2b: 63:ea:bd:80:1d:8a:9a:b3:ff:12:7e:de:2c:73:5e:c6:1b:ad: 5a:50:60:5a -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUJ4u503GOsJ73VezlNo5/IyszI9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNTEwMjUyMjUyNTdaFw0yNjEwMjQyMjU3NTdaMDMxMTAvBgNV BAMTKDY0OEIxQURGRTczNzFCMEFBN0M1NTVBNDJBRkUzQ0E0MDU0MzUwNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtKmHFy1KJXIsgmLys2OgnY5n4 8EjHNnQRcttSTozb/SOPHwEiKVdmEkTN+f3t2qqVkufdlisQbRU+pAhHhVNOTubw 2/WUsRr7Hv1L2QqfN27cGhY9Lrt7p3kV4l8Nd4IICiW/gW1tNaA1xzX48hQOCmD1 9ZvnnDVIbTdCwDvEsIaSSMrUhoT7x96ZJRNORzZXSXKBWAmuU+KhRKfWrt+miB0n 2kD6BMeNKXrhj0WrNtF1b4k+U8qwvWvH6LmYE8cMKwqosz8t6+bDY2t/TFwTCzkR e+M2RRGrmLOpN1AAUG6RuW9TjWNcTx3LvMX84XpBzeLP6xqIk6oMnPeVlIJxAgMB AAGjggKHMIICgzAdBgNVHQ4EFgQUZIsa3+c3GwqnxVWkKv48pAVDUFMwHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMDM2M2EzYTJmMzQzODJkMzEzMjM4MjAzZDNlMjAz MjMxMzQzMDMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBhKDiQYwDQYJKoZIhvcNAQELBQADggEB AIU3dexZDr7NGrcNRxxdy945zAGqjz22lYvs1iX7zk1p1ErEexvhq8wT9sNkRTpp PRvsEIGhvHYC6MqcqQpUCV5E9q7aXk1dFwuxIouQlbJBf/HjOJj6lXQ+iWVkW39n oN8RGR04h7GH1zgy3+QM/hs6SeELLdf+iCQDRtaG3qCG5tnYlJDg3pFvn5ro+TYs qy2jdrhfmEsk0py0nSUn6480COwpjKHgs5CiIsOGI0wyNkFBNk3CtI+es4NqooBA QIBd5y7sTJT+AEFaT/4Eg7NDjBNrQKoSM30Szk0Wu8e7K/CtPAU/pV28K2PqvYAd ipqz/xJ+3ixzXsYbrVpQYFo= -----END CERTIFICATE-----Generated at Thu Dec 4 09:03:42 2025 by rpki-client