This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/326130663a316363353a6330303a3a2f34302d3430203d3e20323038373534.roa File: 326130663a316363353a6330303a3a2f34302d3430203d3e20323038373534.roa (raw, json) Hash identifier: Q5Z/wqUBwWhM8mRyojjN6NpV/xV/IzhUzgKoHX5P1HU= Subject key identifier: 3B:C0:62:A3:E0:33:B1:74:31:1D:63:74:6B:2B:04:DA:5E:5F:93:55 Certificate issuer: /CN=61D9F4B7CF8D860603082E07FDCA08518E16AAFB Certificate serial: 611FE3F0D0F838AC1B34680F97F793E21D280D10 Authority key identifier: 61:D9:F4:B7:CF:8D:86:06:03:08:2E:07:FD:CA:08:51:8E:16:AA:FB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/326130663a316363353a6330303a3a2f34302d3430203d3e20323038373534.roa Signing time: Fri 12 Dec 2025 11:28:48 +0000 ROA not before: Fri 12 Dec 2025 11:23:48 +0000 ROA not after: Fri 11 Dec 2026 11:28:48 +0000 asID: 208754 IP address blocks: 2a0f:1cc5:c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.crl rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 10:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:1f:e3:f0:d0:f8:38:ac:1b:34:68:0f:97:f7:93:e2:1d:28:0d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61D9F4B7CF8D860603082E07FDCA08518E16AAFB Validity Not Before: Dec 12 11:23:48 2025 GMT Not After : Dec 11 11:28:48 2026 GMT Subject: CN=3BC062A3E033B174311D63746B2B04DA5E5F9355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ed:da:69:ff:b0:97:e1:20:c9:71:d5:97:a2: bb:36:ec:4a:4b:c2:5d:93:46:77:f7:24:35:87:1d: 34:30:0f:79:a7:02:1f:f6:43:bf:7e:2f:88:e9:e2: eb:d3:ad:91:57:b2:96:ec:85:ae:47:4b:b8:01:1f: 33:66:93:90:87:a4:2c:19:23:c3:8e:25:fe:a6:6b: d8:54:99:8f:4b:ca:92:97:53:5c:3b:df:16:01:0a: 58:6c:a8:ad:67:95:02:2d:44:d2:32:a8:3a:a3:69: f7:84:bf:0a:d3:bc:91:0e:3d:e8:e1:5a:4b:81:85: e8:a7:71:93:fa:b1:ab:6f:9f:81:93:43:0b:eb:e7: 77:5a:cc:b9:be:f3:b3:aa:e9:0e:1d:95:2e:82:a2: 8b:72:52:c2:98:41:45:f8:2a:b7:9c:99:2c:7f:d1: 4d:7d:e0:86:d6:e1:e6:53:33:48:79:7d:71:69:ea: 53:b8:43:75:56:9c:2c:05:a7:78:d8:a0:6e:bd:5c: fe:a8:a8:a8:88:90:c6:61:1b:f1:34:d1:ab:4e:07: 38:a3:50:20:11:72:67:21:a0:55:9d:12:f6:5a:68: fc:de:c4:1a:18:f1:5c:56:c3:66:a7:b5:76:57:56: 4a:2a:7a:a5:8f:6f:33:a4:2a:47:d1:b4:4d:32:9a: ce:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C0:62:A3:E0:33:B1:74:31:1D:63:74:6B:2B:04:DA:5E:5F:93:55 X509v3 Authority Key Identifier: keyid:61:D9:F4:B7:CF:8D:86:06:03:08:2E:07:FD:CA:08:51:8E:16:AA:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/326130663a316363353a6330303a3a2f34302d3430203d3e20323038373534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:c00::/40 Signature Algorithm: sha256WithRSAEncryption 72:5c:eb:93:be:36:e9:c0:b9:14:6e:da:0c:29:70:49:a6:6a: d2:e6:49:2e:d3:8f:e5:d4:2b:37:a9:f2:6b:d3:ee:83:c7:f3: 83:3a:70:3c:8e:ab:0a:b2:e1:31:34:0a:3f:9c:a8:4a:10:07: 59:17:bf:52:5a:7b:59:df:c3:de:41:f9:3a:44:8b:01:6f:81: ef:47:7d:c9:13:e8:66:7a:09:23:e6:8e:e1:94:99:0d:54:c3: 71:c8:ed:b1:f4:16:36:34:0e:53:ef:46:08:eb:8c:63:cc:c9: c0:e5:e0:e1:be:20:b4:62:4f:1e:8a:19:00:3b:4d:7b:7c:5e: ff:77:7a:95:53:5d:01:05:2c:1f:f0:0f:92:db:a2:cb:e5:dc: 1c:1a:19:24:d3:a6:be:37:c9:3c:ff:7b:a3:8e:e2:6c:71:0d: 17:cd:1a:bf:c6:3d:d5:7d:0b:f3:74:eb:31:d6:5e:0e:bf:f3: 4e:16:ec:54:c8:d2:05:d0:44:d2:77:91:0e:0d:ad:5b:4f:67: 48:96:79:7e:53:b2:e8:eb:b7:36:fb:09:3b:e3:7c:a3:82:57: be:6b:a3:2c:bb:e6:c9:db:26:19:7e:19:ec:08:28:58:a7:4a: 5c:be:7b:d6:3e:ce:2d:14:c0:c4:66:fc:e1:e9:52:32:d4:4d: 56:35:8b:8e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYR/j8ND4OKwbNGgPl/eT4h0oDRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFEOUY0QjdDRjhEODYwNjAzMDgyRTA3RkRDQTA4NTE4 RTE2QUFGQjAeFw0yNTEyMTIxMTIzNDhaFw0yNjEyMTExMTI4NDhaMDMxMTAvBgNV BAMTKDNCQzA2MkEzRTAzM0IxNzQzMTFENjM3NDZCMkIwNERBNUU1RjkzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC47dpp/7CX4SDJcdWXors27EpL wl2TRnf3JDWHHTQwD3mnAh/2Q79+L4jp4uvTrZFXspbsha5HS7gBHzNmk5CHpCwZ I8OOJf6ma9hUmY9LypKXU1w73xYBClhsqK1nlQItRNIyqDqjafeEvwrTvJEOPejh WkuBheincZP6satvn4GTQwvr53dazLm+87Oq6Q4dlS6CootyUsKYQUX4KrecmSx/ 0U194IbW4eZTM0h5fXFp6lO4Q3VWnCwFp3jYoG69XP6oqKiIkMZhG/E00atOBzij UCARcmchoFWdEvZaaPzexBoY8VxWw2antXZXVkoqeqWPbzOkKkfRtE0yms7XAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUO8Bio+AzsXQxHWN0aysE2l5fk1UwHwYDVR0j BBgwFoAUYdn0t8+NhgYDCC4H/coIUY4WqvswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy ZTkwLzAvNjFEOUY0QjdDRjhEODYwNjAzMDgyRTA3RkRDQTA4NTE4RTE2QUFGQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC82MUQ5RjRCN0NGOEQ4NjA2MDMwODJFMDdG RENBMDg1MThFMTZBQUZCLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mODEyZDNlZi1jNWZjLTQ1YjAtOTU0YS04YTUyMjEwYzJlOTAvMC8zMjYxMzA2 NjNhMzE2MzYzMzUzYTYzMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzAz ODM3MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoPHMUMMA0GCSqGSIb3DQEBCwUAA4IBAQByXOuT vjbpwLkUbtoMKXBJpmrS5kku04/l1Cs3qfJr0+6Dx/ODOnA8jqsKsuExNAo/nKhK EAdZF79SWntZ38PeQfk6RIsBb4HvR33JE+hmegkj5o7hlJkNVMNxyO2x9BY2NA5T 70YI64xjzMnA5eDhviC0Yk8eihkAO017fF7/d3qVU10BBSwf8A+S26LL5dwcGhkk 06a+N8k8/3ujjuJscQ0XzRq/xj3VfQvzdOsx1l4Ov/NOFuxUyNIF0ETSd5EODa1b T2dIlnl+U7Lo67c2+wk743yjgle+a6Msu+bJ2yYZfhnsCChYp0pcvnvWPs4tFMDE Zvzh6VIy1E1WNYuO -----END CERTIFICATE-----Generated at Sun Dec 14 01:01:41 2025 by rpki-client