This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/326130623a346530373a6330303a3a2f33382d3338203d3e203331383938.roa File: 326130623a346530373a6330303a3a2f33382d3338203d3e203331383938.roa (raw, json) Hash identifier: NzwfYz1RcrTw4DN+eHbiSUaQcCM+wfLgTJxkGWBbKjU= Subject key identifier: 05:A2:05:FB:E7:9D:6B:79:D3:CC:79:BE:D9:EC:4E:A4:54:AF:98:60 Certificate issuer: /CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Certificate serial: 5E9D7156FE13884E227CC156C7EBFB6130B6363A Authority key identifier: 87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/326130623a346530373a6330303a3a2f33382d3338203d3e203331383938.roa Signing time: Wed 14 Jan 2026 17:23:36 +0000 ROA not before: Wed 14 Jan 2026 17:18:36 +0000 ROA not after: Wed 13 Jan 2027 17:23:36 +0000 asID: 31898 IP address blocks: 2a0b:4e07:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 23:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:9d:71:56:fe:13:88:4e:22:7c:c1:56:c7:eb:fb:61:30:b6:36:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Validity Not Before: Jan 14 17:18:36 2026 GMT Not After : Jan 13 17:23:36 2027 GMT Subject: CN=05A205FBE79D6B79D3CC79BED9EC4EA454AF9860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7c:83:94:83:f3:76:57:5d:ca:7b:46:d9:9f: 5a:63:d3:2f:24:61:1e:28:56:92:c4:d1:e1:e5:fc: 1c:11:3c:19:57:c5:33:99:9b:a0:b0:ba:94:04:a5: 69:bd:33:6f:ba:bc:89:2d:92:4f:4d:1c:95:f8:55: ff:65:8b:58:64:bd:61:f4:09:8a:7a:17:d7:87:e3: d5:01:fc:17:ea:ee:6e:a9:90:f8:45:97:09:b5:8b: c5:3c:5b:78:4a:c3:ce:4f:19:03:64:d4:5d:31:b2: 88:64:13:2f:68:c0:85:6d:fb:2b:ea:b3:c7:f9:cd: 05:88:f1:87:eb:df:45:74:f3:5c:3b:65:06:90:fd: 8d:c4:ea:a5:64:39:1a:5c:eb:e1:ff:6f:e6:f9:5b: d8:38:cb:1d:0c:91:fa:12:70:21:85:81:ab:34:6c: 7c:fc:55:13:30:de:df:84:92:f4:60:c6:83:6d:7f: 30:a2:92:7e:07:52:81:e5:82:c5:17:85:41:47:bf: 96:08:a3:47:30:92:3d:a9:be:0b:c3:72:74:ef:bd: 14:8d:93:a4:84:6c:a6:0e:25:5e:29:22:99:c8:bd: 5e:62:6e:0b:24:a5:6f:6d:5a:4e:a1:a0:5b:57:63: 79:21:6f:8f:5a:0f:1f:9e:bc:c2:d8:ee:06:48:5e: 72:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A2:05:FB:E7:9D:6B:79:D3:CC:79:BE:D9:EC:4E:A4:54:AF:98:60 X509v3 Authority Key Identifier: keyid:87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/326130623a346530373a6330303a3a2f33382d3338203d3e203331383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:c00::/38 Signature Algorithm: sha256WithRSAEncryption 88:79:53:55:55:a9:4b:ed:dc:bf:00:87:dd:0c:6c:1c:4c:0c: e7:61:bc:2b:06:28:c1:bb:23:2c:6b:9c:51:96:49:7e:43:88: a4:9d:30:16:12:d4:8e:eb:f4:1f:08:da:e2:d8:a1:a5:35:cc: 16:0d:b6:22:1c:d0:d3:68:fd:78:17:52:1a:55:a7:5b:ae:00: 52:f1:7c:57:c7:93:53:0d:64:0e:73:e0:f1:fa:cf:b6:2c:27: 66:0a:d7:3c:41:e0:fd:5a:bd:66:8d:c5:81:8f:89:5d:1f:53: 10:f9:f5:06:c7:39:0e:ea:98:cf:15:87:9d:38:8a:b9:5f:49: 38:9f:10:80:3c:24:38:ef:e8:19:fb:58:4c:f2:08:3e:c3:44: 95:da:95:2d:ba:00:e1:41:29:0e:11:d4:f9:eb:8e:2b:f6:5a: 3f:d7:36:06:db:65:74:d9:ab:3a:29:70:cc:f4:12:c1:f2:0e: 8d:40:74:18:6c:28:f1:dd:5d:4d:d7:c2:8d:7b:0b:45:7e:59: c0:cb:09:37:d6:0f:ca:d7:b1:35:8b:ec:55:3d:2e:96:a8:64: 76:36:8f:08:c4:b1:74:f3:12:0a:47:db:34:99:79:92:70:52: aa:c2:cd:fe:6c:c9:92:39:0f:2e:8f:42:e8:fd:3e:7d:2e:d1: d9:6b:3f:94 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUXp1xVv4TiE4ifMFWx+v7YTC2NjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNF MzgyMzE4NTAeFw0yNjAxMTQxNzE4MzZaFw0yNzAxMTMxNzIzMzZaMDMxMTAvBgNV BAMTKDA1QTIwNUZCRTc5RDZCNzlEM0NDNzlCRUQ5RUM0RUE0NTRBRjk4NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDfIOUg/N2V13Ke0bZn1pj0y8k YR4oVpLE0eHl/BwRPBlXxTOZm6CwupQEpWm9M2+6vIktkk9NHJX4Vf9li1hkvWH0 CYp6F9eH49UB/Bfq7m6pkPhFlwm1i8U8W3hKw85PGQNk1F0xsohkEy9owIVt+yvq s8f5zQWI8Yfr30V081w7ZQaQ/Y3E6qVkORpc6+H/b+b5W9g4yx0MkfoScCGFgas0 bHz8VRMw3t+EkvRgxoNtfzCikn4HUoHlgsUXhUFHv5YIo0cwkj2pvgvDcnTvvRSN k6SEbKYOJV4pIpnIvV5ibgskpW9tWk6hoFtXY3khb49aDx+evMLY7gZIXnJ/AgMB AAGjggJ1MIICcTAdBgNVHQ4EFgQUBaIF++eda3nTzHm+2exOpFSvmGAwHwYDVR0j BBgwFoAUh5KAp9nm3d3Msp6ad4GdXOOCMYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgyMzE4NS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgy MzE4NS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgt MjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2ZDAzLzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2E2MzMwMzAzYTNhMmYzMzM4MmQzMzM4MjAzZDNlMjAzMzMxMzgzOTM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA AjAIAwYCKgtOBwwwDQYJKoZIhvcNAQELBQADggEBAIh5U1VVqUvt3L8Ah90MbBxM DOdhvCsGKMG7IyxrnFGWSX5DiKSdMBYS1I7r9B8I2uLYoaU1zBYNtiIc0NNo/XgX UhpVp1uuAFLxfFfHk1MNZA5z4PH6z7YsJ2YK1zxB4P1avWaNxYGPiV0fUxD59QbH OQ7qmM8Vh504irlfSTifEIA8JDjv6Bn7WEzyCD7DRJXalS26AOFBKQ4R1Pnrjiv2 Wj/XNgbbZXTZqzopcMz0EsHyDo1AdBhsKPHdXU3Xwo17C0V+WcDLCTfWD8rXsTWL 7FU9LpaoZHY2jwjEsXTzEgpH2zSZeZJwUqrCzf5syZI5Dy6PQuj9Pn0u0dlrP5Q= -----END CERTIFICATE-----Generated at Sat Jan 17 10:16:38 2026 by rpki-client