This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336531303a3a2f34342d3434203d3e203630383934.roa File: 326131313a323963303a336531303a3a2f34342d3434203d3e203630383934.roa (raw, json) Hash identifier: 9lgFezsPBxSoJKATQ2FlWrLzea2G/4JdH8r2+jDB1n0= Subject key identifier: 7F:7A:C3:02:CF:6D:18:B9:D2:89:12:D4:A8:C6:2D:85:AA:F7:D6:27 Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873 Certificate serial: 6817067693777D150E2B45DEC986D5B285B7B018 Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336531303a3a2f34342d3434203d3e203630383934.roa Signing time: Sat 20 Dec 2025 19:22:43 +0000 ROA not before: Sat 20 Dec 2025 19:17:43 +0000 ROA not after: Sat 19 Dec 2026 19:22:43 +0000 asID: 60894 IP address blocks: 2a11:29c0:3e10::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:17:06:76:93:77:7d:15:0e:2b:45:de:c9:86:d5:b2:85:b7:b0:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873 Validity Not Before: Dec 20 19:17:43 2025 GMT Not After : Dec 19 19:22:43 2026 GMT Subject: CN=7F7AC302CF6D18B9D28912D4A8C62D85AAF7D627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:e2:2c:87:7c:62:25:3a:30:47:81:7a:a0: 0a:22:c4:1c:da:b8:2a:1a:4a:62:6e:1c:cb:b1:cc: 40:76:a3:75:bc:4c:bf:94:b4:31:10:dd:83:68:4e: b3:d6:07:56:cb:8f:86:13:bc:fe:a9:17:67:d3:a4: ff:30:b1:f6:8c:29:93:3c:36:13:ba:a9:47:bd:67: f1:16:4d:41:c3:88:ea:58:9f:06:c9:e8:73:72:41: ba:19:3f:bd:9b:a6:d7:11:45:2a:67:6d:64:11:1c: 67:7b:74:dc:a6:99:06:ec:b2:86:a2:67:dc:4b:e9: a9:83:9d:7f:96:15:da:f8:10:9d:f8:be:2f:42:48: a9:5b:85:08:d9:7f:24:5e:57:c5:bd:aa:4f:48:e4: d2:bb:51:69:14:cb:8d:e8:40:8a:7c:47:02:70:2b: 2e:4d:43:16:7f:69:7e:97:f1:a0:15:d3:1f:64:44: 1d:44:2f:a2:f0:af:e0:50:47:6d:eb:63:28:5a:d2: d6:04:83:cf:b5:d1:aa:71:bb:39:5d:be:fc:01:9b: 16:24:68:1a:2f:2a:6e:63:8f:56:b0:15:73:a5:d5: 81:8f:99:8c:80:fa:6b:2c:44:ff:51:63:cd:44:c2: e1:a4:3b:95:9a:7c:b0:24:a6:31:d5:55:d2:db:74: 85:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7A:C3:02:CF:6D:18:B9:D2:89:12:D4:A8:C6:2D:85:AA:F7:D6:27 X509v3 Authority Key Identifier: keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336531303a3a2f34342d3434203d3e203630383934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:29c0:3e10::/44 Signature Algorithm: sha256WithRSAEncryption 03:64:8b:b3:80:cf:93:f4:18:30:d4:e0:61:23:a4:fb:57:ec: a9:bc:78:25:31:30:a6:67:0a:14:cf:8c:58:64:c8:3a:37:9f: 98:20:ef:71:16:b2:58:e7:35:08:ad:00:99:82:0f:29:fd:2b: f1:17:00:5b:2f:11:09:e2:6c:cc:1b:5e:db:2f:e1:d3:de:64: 2d:86:3b:2e:84:72:25:04:06:79:6a:54:80:dc:9b:cf:64:1e: c7:1c:f3:dd:9c:22:ce:03:e8:d2:69:d3:3f:0f:43:d4:2f:1d: d2:08:8a:46:5d:db:60:69:72:80:b8:3c:a6:45:0a:c6:b3:bb: da:49:75:d0:78:5d:65:f3:9a:9b:97:d1:ec:af:3d:c9:6e:07: 5a:38:35:6e:e7:ca:41:62:8d:4c:0e:13:2b:f7:76:09:9b:56: b5:50:0c:6b:d9:67:ac:8f:49:0a:9e:e0:7f:c4:00:ba:46:fc: 1e:7e:52:aa:90:e3:1b:e1:01:82:7b:1c:25:e2:bb:fa:aa:c7: 6b:9d:5b:50:76:a4:fd:5a:4d:58:88:cd:ab:76:0f:55:80:eb: 45:c7:2e:a3:7a:6e:a7:64:79:09:82:a6:1a:d6:ca:ff:8a:e4: c2:4f:36:43:6d:77:98:2f:ba:2c:f8:93:7b:f1:0b:3a:ec:13: 22:5e:b3:fa -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIUaBcGdpN3fRUOK0XeyYbVsoW3sBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm MTA4Mjg3MzAeFw0yNTEyMjAxOTE3NDNaFw0yNjEyMTkxOTIyNDNaMDMxMTAvBgNV BAMTKDdGN0FDMzAyQ0Y2RDE4QjlEMjg5MTJENEE4QzYyRDg1QUFGN0Q2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkfOIsh3xiJTowR4F6oAoixBza uCoaSmJuHMuxzEB2o3W8TL+UtDEQ3YNoTrPWB1bLj4YTvP6pF2fTpP8wsfaMKZM8 NhO6qUe9Z/EWTUHDiOpYnwbJ6HNyQboZP72bptcRRSpnbWQRHGd7dNymmQbssoai Z9xL6amDnX+WFdr4EJ34vi9CSKlbhQjZfyReV8W9qk9I5NK7UWkUy43oQIp8RwJw Ky5NQxZ/aX6X8aAV0x9kRB1EL6Lwr+BQR23rYyha0tYEg8+10apxuzldvvwBmxYk aBovKm5jj1awFXOl1YGPmYyA+mssRP9RY81EwuGkO5WafLAkpjHVVdLbdIXRAgMB AAGjggJIMIICRDAdBgNVHQ4EFgQUf3rDAs9tGLnSiRLUqMYthar31icwHwYDVR0j BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF SUtITS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw M2EzMzY1MzEzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDM2MzAzODM5MzQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwQqESnAPhAwDQYJKoZIhvcNAQELBQADggEBAANki7OAz5P0GDDU4GEj pPtX7Km8eCUxMKZnChTPjFhkyDo3n5gg73EWsljnNQitAJmCDyn9K/EXAFsvEQni bMwbXtsv4dPeZC2GOy6EciUEBnlqVIDcm89kHscc892cIs4D6NJp0z8PQ9QvHdII ikZd22BpcoC4PKZFCsazu9pJddB4XWXzmpuX0eyvPcluB1o4NW7nykFijUwOEyv3 dgmbVrVQDGvZZ6yPSQqe4H/EALpG/B5+UqqQ4xvhAYJ7HCXiu/qqx2udW1B2pP1a TViIzat2D1WA60XHLqN6bqdkeQmCphrWyv+K5MJPNkNtd5gvuiz4k3vxCzrsEyJe s/o= -----END CERTIFICATE-----Generated at Tue Jan 27 01:07:43 2026 by rpki-client