This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa File: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (raw, json) Hash identifier: RGTgCra6z97DL3zPw+EaFuLG0rQZ9DlytQ3X3ko6llc= Subject key identifier: 15:4A:0C:3C:0D:DE:67:B5:6E:D2:5C:39:F7:54:A8:D8:3F:BA:CE:6C Certificate issuer: /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3 Certificate serial: 66A13AAEF102FF52D82CD9847F436D682A051564 Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa Signing time: Mon 12 Jan 2026 17:40:25 +0000 ROA not before: Mon 12 Jan 2026 17:35:25 +0000 ROA not after: Mon 11 Jan 2027 17:40:25 +0000 asID: 215296 IP address blocks: 2001:67c:e3c::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 20:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a1:3a:ae:f1:02:ff:52:d8:2c:d9:84:7f:43:6d:68:2a:05:15:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3 Validity Not Before: Jan 12 17:35:25 2026 GMT Not After : Jan 11 17:40:25 2027 GMT Subject: CN=154A0C3C0DDE67B56ED25C39F754A8D83FBACE6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:11:5e:bd:d7:61:3d:de:fd:88:1e:b0:c8:0e: 9b:00:6a:b2:ec:01:65:57:59:e9:ff:53:36:47:d6: ff:e2:9a:85:ae:50:77:b1:59:e2:2f:1c:23:09:a8: f4:95:1e:12:9b:3f:fe:9b:aa:27:95:b9:9e:53:07: b6:8c:19:c9:8a:b1:50:bb:33:bd:7e:4d:1a:63:6c: 85:28:aa:19:c4:72:f7:85:ba:2f:c1:f5:3d:95:d6: 15:0c:b7:45:6e:f3:2e:5a:80:61:64:46:81:b2:ce: 3d:83:42:e6:de:84:c8:29:64:66:8d:11:d6:1a:64: da:0c:e1:e4:87:56:1b:01:a5:f8:6c:56:e9:9f:8b: ac:1b:bc:f9:c8:5e:ee:dc:52:28:0a:60:26:f6:e7: cb:c6:38:58:bc:79:75:bf:11:56:8b:a3:d1:39:f6: d7:25:1a:56:cc:fd:1a:d3:76:f3:d2:c9:c8:dc:4a: d7:24:4f:f9:a6:f2:5c:47:b0:91:85:d9:a0:3f:51: 96:c5:03:9e:78:2d:f8:4f:a6:36:d1:59:0f:cf:1b: 47:6c:3c:2c:0b:8a:9f:4a:e5:b3:b1:08:e4:09:5a: 4c:b4:10:e5:2f:2a:10:43:f1:36:d2:ec:29:c5:85: 89:be:d9:7b:59:fb:d7:c7:5e:59:d4:81:37:6f:f1: 69:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4A:0C:3C:0D:DE:67:B5:6E:D2:5C:39:F7:54:A8:D8:3F:BA:CE:6C X509v3 Authority Key Identifier: keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:e3c::/48 Signature Algorithm: sha256WithRSAEncryption 3d:ee:9e:a2:11:93:79:67:40:d3:e8:87:1b:f5:a6:cc:a8:3c: a6:17:70:d4:c4:7d:4f:8e:31:6d:19:5a:e2:3c:67:87:c2:49: 4f:7c:90:f9:41:c5:37:46:dc:5b:6e:2a:6e:67:00:48:b0:35: 56:fe:9d:b6:96:4b:e0:04:60:57:8f:b7:ab:05:a6:dc:07:e3: bb:80:b7:37:52:37:d6:72:92:63:ce:70:b0:fe:e9:89:6c:25: a8:cc:2c:09:37:53:3d:3f:48:5f:98:e7:80:ac:5a:4a:19:3a: 9c:80:c5:c4:e3:a3:05:40:41:80:63:a1:45:d3:a3:ef:8b:37: 2f:e7:d0:ed:a8:82:56:f4:c8:ed:89:0e:ce:bf:bc:61:8a:1c: 39:ae:ea:25:46:4e:3c:da:f5:7d:ae:49:89:af:12:0a:30:20: 8c:65:54:50:7a:b8:3a:1c:d5:6d:54:09:48:23:11:eb:d1:6c: ad:af:d1:36:e6:7b:8f:74:f8:a5:02:b9:e1:71:b9:35:51:92: d2:5a:76:1e:56:dc:7f:73:81:36:c7:dc:2e:b5:3a:fd:d2:87: 5a:1e:4e:43:fd:ab:b1:55:9f:c7:78:d9:a4:72:c2:4e:24:bf: b2:ec:8d:4f:04:fe:9e:e7:cf:c1:e6:86:df:51:01:22:24:0a: 39:71:e4:c0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUZqE6rvEC/1LYLNmEf0NtaCoFFWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4ZDdkYzk3NzliMjc4MTVlYmI1YzNmNWZjZjA3Y2M1 ODM3MDhiMzAeFw0yNjAxMTIxNzM1MjVaFw0yNzAxMTExNzQwMjVaMDMxMTAvBgNV BAMTKDE1NEEwQzNDMERERTY3QjU2RUQyNUMzOUY3NTRBOEQ4M0ZCQUNFNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvEV6912E93v2IHrDIDpsAarLs AWVXWen/UzZH1v/imoWuUHexWeIvHCMJqPSVHhKbP/6bqieVuZ5TB7aMGcmKsVC7 M71+TRpjbIUoqhnEcveFui/B9T2V1hUMt0Vu8y5agGFkRoGyzj2DQubehMgpZGaN EdYaZNoM4eSHVhsBpfhsVumfi6wbvPnIXu7cUigKYCb258vGOFi8eXW/EVaLo9E5 9tclGlbM/RrTdvPSycjcStckT/mm8lxHsJGF2aA/UZbFA554LfhPpjbRWQ/PG0ds PCwLip9K5bOxCOQJWky0EOUvKhBD8TbS7CnFhYm+2XtZ+9fHXlnUgTdv8Wk9AgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUFUoMPA3eZ7Vu0lw591So2D+6zmwwHwYDVR0j BBgwFoAUV419yXebJ4Feu1w/X88HzFg3CLMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWNhMjUzNTAtOWUzZi00NmUxLWFlMmItMWM2MWI2ZWE1 YWUyLzAvNTc4RDdEQzk3NzlCMjc4MTVFQkI1QzNGNUZDRjA3Q0M1ODM3MDhCMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Y0MTl5WGViSjRGZXUxd19YODhIekZn M0NMTS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWNhMjUzNTAt OWUzZi00NmUxLWFlMmItMWM2MWI2ZWE1YWUyLzAvMzIzMDMwMzEzYTM2Mzc2MzNh NjUzMzYzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTM1MzIzOTM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEGfA48MA0GCSqGSIb3DQEBCwUAA4IBAQA97p6iEZN5Z0DT6Icb9abM qDymF3DUxH1PjjFtGVriPGeHwklPfJD5QcU3RtxbbipuZwBIsDVW/p22lkvgBGBX j7erBabcB+O7gLc3UjfWcpJjznCw/umJbCWozCwJN1M9P0hfmOeArFpKGTqcgMXE 46MFQEGAY6FF06Pvizcv59DtqIJW9MjtiQ7Ov7xhihw5ruolRk482vV9rkmJrxIK MCCMZVRQerg6HNVtVAlIIxHr0Wytr9E25nuPdPilArnhcbk1UZLSWnYeVtx/c4E2 x9wutTr90odaHk5D/auxVZ/HeNmkcsJOJL+y7I1PBP6e58/B5obfUQEiJAo5ceTA -----END CERTIFICATE-----Generated at Mon Feb 2 12:49:01 2026 by rpki-client