This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/326130663a316363353a6330303a3a2f34342d3434203d3e20313337393038.roa File: 326130663a316363353a6330303a3a2f34342d3434203d3e20313337393038.roa (raw, json) Hash identifier: ATZc214+3GX48p6REnIm7Qjen5IkiQYJugGYiQlSRpg= Subject key identifier: C3:EA:DA:6E:83:A9:07:89:E7:61:0F:1F:31:36:D0:C6:D4:F4:CE:06 Certificate issuer: /CN=61D9F4B7CF8D860603082E07FDCA08518E16AAFB Certificate serial: 1F3AD5F5B0480D41809665252B84D1465B3D2172 Authority key identifier: 61:D9:F4:B7:CF:8D:86:06:03:08:2E:07:FD:CA:08:51:8E:16:AA:FB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/326130663a316363353a6330303a3a2f34342d3434203d3e20313337393038.roa Signing time: Fri 12 Dec 2025 15:02:23 +0000 ROA not before: Fri 12 Dec 2025 14:57:23 +0000 ROA not after: Fri 11 Dec 2026 15:02:23 +0000 asID: 137908 IP address blocks: 2a0f:1cc5:c00::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.crl rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 10:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:3a:d5:f5:b0:48:0d:41:80:96:65:25:2b:84:d1:46:5b:3d:21:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61D9F4B7CF8D860603082E07FDCA08518E16AAFB Validity Not Before: Dec 12 14:57:23 2025 GMT Not After : Dec 11 15:02:23 2026 GMT Subject: CN=C3EADA6E83A90789E7610F1F3136D0C6D4F4CE06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:be:19:7b:de:6c:4e:5f:93:b1:d6:4a:c4:b0: d7:1b:4f:c8:6a:df:4b:02:78:89:aa:cd:a2:3b:c0: aa:52:55:b1:8e:39:25:c9:1f:4b:14:3f:b9:cd:c1: 0f:df:8c:15:0a:ca:95:7f:29:ca:49:2d:92:ff:3b: e9:f3:a3:23:76:9d:5f:f6:87:30:b0:d3:4b:4d:af: ed:a9:83:62:b6:3c:3e:47:f8:5a:f4:b3:76:63:62: c0:cd:da:f8:73:59:02:95:c6:36:50:13:48:13:f4: ef:5c:4b:0f:a1:2d:14:e8:04:ce:8a:16:de:50:2c: ff:6e:4f:1c:32:3a:8d:9f:2e:3b:78:bd:63:08:63: 74:e6:67:9d:2d:32:a0:17:4a:55:36:3f:56:08:15: 2d:80:a8:36:58:fd:dc:06:f1:a9:91:ee:40:41:db: 4b:2d:7e:9b:f0:c0:56:89:19:38:f5:2e:97:84:06: 1c:89:af:2a:c7:3d:bf:7b:cd:a9:a6:7f:7c:88:31: 3c:0f:3e:81:29:b4:be:b8:d1:25:9d:74:0f:89:9a: ce:7a:8a:0c:6b:43:88:00:8f:73:80:ab:f4:8e:15: 0b:01:5d:aa:49:7f:bc:bd:42:4f:6d:54:6f:ae:b4: c8:77:ef:e8:dc:2f:42:8a:89:d2:39:fa:5c:cb:9a: b1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EA:DA:6E:83:A9:07:89:E7:61:0F:1F:31:36:D0:C6:D4:F4:CE:06 X509v3 Authority Key Identifier: keyid:61:D9:F4:B7:CF:8D:86:06:03:08:2E:07:FD:CA:08:51:8E:16:AA:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/326130663a316363353a6330303a3a2f34342d3434203d3e20313337393038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:c00::/44 Signature Algorithm: sha256WithRSAEncryption 93:c0:7a:92:f6:26:b4:c3:d7:32:db:76:a8:ae:13:b0:8b:5b: 80:9e:08:37:c3:d9:4f:e9:ee:3b:f8:f6:a8:52:89:c2:07:7c: c7:5f:b4:46:24:18:cf:30:2c:1a:b9:2e:9e:58:2c:c0:a9:a0: ab:3f:9d:02:9b:10:4a:c0:88:ce:4e:5c:63:af:e2:f0:24:82: 5b:8f:3b:90:0e:9c:96:60:69:b1:93:8d:77:91:4c:e0:7c:b5: 83:56:63:e7:82:f4:e1:5b:75:6d:3d:f5:28:5e:46:06:f8:a0: 9b:f9:25:cf:26:90:cb:59:b3:41:9a:e2:56:5d:9e:da:a9:53: 36:f7:03:3b:9b:c4:52:62:8f:27:4d:0b:92:c1:9d:32:25:c2: de:3a:74:7d:5d:4e:c5:1e:6d:44:76:a6:c9:43:f0:7d:a4:84: 55:9b:7b:21:68:63:17:8b:89:a4:8c:f7:ae:12:b4:ae:9a:80: 93:d9:54:33:ed:af:37:56:44:6d:66:5e:49:b4:57:11:20:92: 9e:68:dc:29:40:ae:da:6d:56:ee:74:f0:11:ec:d2:72:8c:dd: 94:7f:b7:49:d5:5a:e6:65:49:11:86:d4:b3:84:ce:06:77:a2: 7f:38:db:3a:7b:2f:ea:0e:19:03:7e:8f:6e:40:93:aa:88:58: 1b:86:9e:14 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUHzrV9bBIDUGAlmUlK4TRRls9IXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFEOUY0QjdDRjhEODYwNjAzMDgyRTA3RkRDQTA4NTE4 RTE2QUFGQjAeFw0yNTEyMTIxNDU3MjNaFw0yNjEyMTExNTAyMjNaMDMxMTAvBgNV BAMTKEMzRUFEQTZFODNBOTA3ODlFNzYxMEYxRjMxMzZEMEM2RDRGNENFMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTvhl73mxOX5Ox1krEsNcbT8hq 30sCeImqzaI7wKpSVbGOOSXJH0sUP7nNwQ/fjBUKypV/KcpJLZL/O+nzoyN2nV/2 hzCw00tNr+2pg2K2PD5H+Fr0s3ZjYsDN2vhzWQKVxjZQE0gT9O9cSw+hLRToBM6K Ft5QLP9uTxwyOo2fLjt4vWMIY3TmZ50tMqAXSlU2P1YIFS2AqDZY/dwG8amR7kBB 20stfpvwwFaJGTj1LpeEBhyJryrHPb97zammf3yIMTwPPoEptL640SWddA+Jms56 igxrQ4gAj3OAq/SOFQsBXapJf7y9Qk9tVG+utMh37+jcL0KKidI5+lzLmrEnAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUw+raboOpB4nnYQ8fMTbQxtT0zgYwHwYDVR0j BBgwFoAUYdn0t8+NhgYDCC4H/coIUY4WqvswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy ZTkwLzAvNjFEOUY0QjdDRjhEODYwNjAzMDgyRTA3RkRDQTA4NTE4RTE2QUFGQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC82MUQ5RjRCN0NGOEQ4NjA2MDMwODJFMDdG RENBMDg1MThFMTZBQUZCLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mODEyZDNlZi1jNWZjLTQ1YjAtOTU0YS04YTUyMjEwYzJlOTAvMC8zMjYxMzA2 NjNhMzE2MzYzMzUzYTYzMzAzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMxMzMz NzM5MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHBCoPHMUMADANBgkqhkiG9w0BAQsFAAOCAQEAk8B6 kvYmtMPXMtt2qK4TsItbgJ4IN8PZT+nuO/j2qFKJwgd8x1+0RiQYzzAsGrkunlgs wKmgqz+dApsQSsCIzk5cY6/i8CSCW487kA6clmBpsZONd5FM4Hy1g1Zj54L04Vt1 bT31KF5GBvigm/klzyaQy1mzQZriVl2e2qlTNvcDO5vEUmKPJ00LksGdMiXC3jp0 fV1OxR5tRHamyUPwfaSEVZt7IWhjF4uJpIz3rhK0rpqAk9lUM+2vN1ZEbWZeSbRX ESCSnmjcKUCu2m1W7nTwEezScozdlH+3SdVa5mVJEYbUs4TOBneifzjbOnsv6g4Z A36PbkCTqohYG4aeFA== -----END CERTIFICATE-----Generated at Sat Dec 13 19:45:15 2025 by rpki-client