This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633730313a3a2f34382d3438203d3e203438343336.roa File: 326131343a366634343a633730313a3a2f34382d3438203d3e203438343336.roa (raw, json) Hash identifier: ga3nLrPruxDKXz/HZkq9lRMiU1IAca5YQ8TT+rGp+T4= Subject key identifier: F1:4F:B8:92:99:16:35:CA:11:F8:17:AB:82:04:4F:12:55:AF:E8:39 Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Certificate serial: 56851DE6A6043C98ABD83DABCA752E5A0A7A18D3 Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633730313a3a2f34382d3438203d3e203438343336.roa Signing time: Fri 21 Nov 2025 17:45:14 +0000 ROA not before: Fri 21 Nov 2025 17:40:14 +0000 ROA not after: Fri 20 Nov 2026 17:45:14 +0000 asID: 48436 IP address blocks: 2a14:6f44:c701::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:85:1d:e6:a6:04:3c:98:ab:d8:3d:ab:ca:75:2e:5a:0a:7a:18:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Validity Not Before: Nov 21 17:40:14 2025 GMT Not After : Nov 20 17:45:14 2026 GMT Subject: CN=F14FB892991635CA11F817AB82044F1255AFE839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ee:2e:5f:27:f0:41:f0:58:59:a7:1a:cd:b0: 42:48:cb:b5:89:15:62:5f:54:f9:58:80:6d:35:b4: 72:c1:f9:e7:6a:ee:60:12:6f:e4:84:9a:42:62:c9: ce:ed:d6:87:ec:97:18:47:74:ca:f1:3b:e9:82:25: 5e:ef:0f:d9:e0:c9:e8:71:78:de:41:12:bb:95:31: 92:af:8e:4d:fc:69:59:24:fc:1a:ee:3b:1b:b5:e2: 55:fc:8c:b4:f1:98:97:6e:f5:69:15:45:5d:d5:fd: 5e:79:40:4d:ea:a0:f5:d5:64:cd:1c:3b:d9:b3:a8: b1:2f:a7:13:8d:ec:99:02:4c:d3:8e:2d:1f:2a:a0: f0:1b:38:56:5a:11:b3:cf:28:70:fb:5b:bd:b8:61: 1e:cc:b6:fb:67:aa:22:86:66:97:77:26:a8:e4:5b: 8a:28:cb:f1:1f:74:0d:a5:ab:9e:d4:9d:8f:0d:78: 01:1f:2a:01:2a:46:1b:7f:21:3c:6c:b6:f6:72:28: b7:d1:8f:18:f3:11:a9:99:dd:a4:0d:c2:e8:c5:6f: 3d:e1:e0:24:d4:48:07:d5:9b:cd:98:f8:2a:04:c4: e7:4e:de:d5:ac:89:01:1f:5b:38:de:f7:b5:06:c4: 74:df:77:6b:1e:67:77:5e:1b:02:61:f6:ec:95:21: be:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4F:B8:92:99:16:35:CA:11:F8:17:AB:82:04:4F:12:55:AF:E8:39 X509v3 Authority Key Identifier: keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a633730313a3a2f34382d3438203d3e203438343336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6f44:c701::/48 Signature Algorithm: sha256WithRSAEncryption 23:ad:cf:10:49:95:fa:88:2f:95:1c:84:3c:6e:f6:bb:6a:8e: 20:5c:b4:c3:6b:e4:f6:33:13:30:5e:62:18:ca:43:1c:c7:6a: 50:6c:23:9b:86:85:61:96:79:32:20:f3:f0:a6:cd:70:97:02: 8b:74:5c:e6:70:22:92:5d:93:13:51:23:8b:93:b9:42:1e:65: 0d:7b:ce:32:22:0c:3a:d2:9f:a8:0d:06:ca:f2:c7:0e:40:9b: 6a:30:06:42:a2:94:1b:03:01:ac:fb:f5:dc:d0:be:8b:9b:3e: 5f:f0:c3:0e:2d:26:0d:53:ff:34:13:58:76:40:4e:c8:c7:8c: be:2e:bf:72:12:b1:3f:e3:3e:2f:1f:ad:47:16:0c:28:44:ff: ae:13:30:88:d8:44:ee:7d:32:02:31:3f:bb:d6:c2:f7:16:7e: 2b:b6:6e:6b:25:ed:d7:df:00:d4:3c:a2:10:ae:6f:a1:41:cb: 20:91:b3:2c:c3:85:94:d7:a2:e2:3f:d5:72:70:09:68:ad:ae: a2:c6:3f:f1:69:02:ac:cc:88:af:d9:78:ab:30:17:d3:52:9c: da:91:04:9f:57:8d:d1:cc:d3:96:3e:a6:56:17:67:71:b4:1c: 31:0c:42:bb:50:b5:9f:e8:ff:0b:15:3b:e0:91:fb:e6:af:c8: f4:57:2e:98 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIUVoUd5qYEPJir2D2rynUuWgp6GNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi YjJhYzMyZTAeFw0yNTExMjExNzQwMTRaFw0yNjExMjAxNzQ1MTRaMDMxMTAvBgNV BAMTKEYxNEZCODkyOTkxNjM1Q0ExMUY4MTdBQjgyMDQ0RjEyNTVBRkU4MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs7i5fJ/BB8FhZpxrNsEJIy7WJ FWJfVPlYgG01tHLB+edq7mASb+SEmkJiyc7t1ofslxhHdMrxO+mCJV7vD9ngyehx eN5BEruVMZKvjk38aVkk/BruOxu14lX8jLTxmJdu9WkVRV3V/V55QE3qoPXVZM0c O9mzqLEvpxON7JkCTNOOLR8qoPAbOFZaEbPPKHD7W724YR7MtvtnqiKGZpd3Jqjk W4ooy/EfdA2lq57UnY8NeAEfKgEqRht/ITxstvZyKLfRjxjzEamZ3aQNwujFbz3h 4CTUSAfVm82Y+CoExOdO3tWsiQEfWzje97UGxHTfd2seZ3deGwJh9uyVIb5lAgMB AAGjggJIMIICRDAdBgNVHQ4EFgQU8U+4kpkWNcoR+BerggRPElWv6DkwHwYDVR0j BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz cXd5NC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZmN2E5ODkt ZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzQvMzI2MTMxMzQzYTM2NjYzNDM0 M2E2MzM3MzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzgzNDMzMzYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAqFG9ExwEwDQYJKoZIhvcNAQELBQADggEBACOtzxBJlfqIL5UchDxu 9rtqjiBctMNr5PYzEzBeYhjKQxzHalBsI5uGhWGWeTIg8/CmzXCXAot0XOZwIpJd kxNRI4uTuUIeZQ17zjIiDDrSn6gNBsryxw5Am2owBkKilBsDAaz79dzQvoubPl/w ww4tJg1T/zQTWHZATsjHjL4uv3ISsT/jPi8frUcWDChE/64TMIjYRO59MgIxP7vW wvcWfiu2bmsl7dffANQ8ohCub6FByyCRsyzDhZTXouI/1XJwCWitrqLGP/FpAqzM iK/ZeKswF9NSnNqRBJ9XjdHM05Y+plYXZ3G0HDEMQrtQtZ/o/wsVO+CR++avyPRX Lpg= -----END CERTIFICATE-----Generated at Mon Dec 8 08:37:48 2025 by rpki-client