This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/326130623a346530373a6330303a3a2f33382d3338203d3e20333936393832.roa File: 326130623a346530373a6330303a3a2f33382d3338203d3e20333936393832.roa (raw, json) Hash identifier: khFQaDJH0Dxp6+y0T5GtiIZzJKeSYsTI8bMAtlaM5bY= Subject key identifier: EE:5A:4D:80:AD:35:FE:F9:32:49:B1:45:67:34:34:06:AB:0A:34:53 Certificate issuer: /CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Certificate serial: 5F625C109D611D9DD55BDE83E4A4201ED3B9A6FC Authority key identifier: 87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/326130623a346530373a6330303a3a2f33382d3338203d3e20333936393832.roa Signing time: Wed 14 Jan 2026 21:40:17 +0000 ROA not before: Wed 14 Jan 2026 21:35:17 +0000 ROA not after: Wed 13 Jan 2027 21:40:17 +0000 asID: 396982 IP address blocks: 2a0b:4e07:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 23:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:62:5c:10:9d:61:1d:9d:d5:5b:de:83:e4:a4:20:1e:d3:b9:a6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Validity Not Before: Jan 14 21:35:17 2026 GMT Not After : Jan 13 21:40:17 2027 GMT Subject: CN=EE5A4D80AD35FEF93249B14567343406AB0A3453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:16:72:60:d7:97:55:03:0d:e7:19:0d:d0:84: b0:69:77:85:13:38:cc:ed:94:1c:e5:12:15:b8:4d: 59:64:36:8c:00:85:f8:d1:8c:67:9c:1a:e3:51:36: 0d:03:30:e4:9f:ea:2c:f7:b3:cd:db:c7:4b:e7:1b: ec:c2:e0:94:08:ca:77:09:cd:26:a8:c8:0b:47:5a: 65:92:40:c7:5d:b2:33:9b:55:63:e0:ba:46:d7:df: bd:d9:7c:ff:8a:12:f3:28:9e:1c:a7:1b:8a:02:00: 76:0c:f4:03:ef:0c:28:45:eb:0b:70:ca:80:86:eb: 18:29:cb:5a:f2:b3:6a:81:8a:e0:f7:7a:22:16:85: 1e:fb:13:45:a5:2e:25:61:77:17:90:3c:16:f4:4f: 6d:a3:cc:2c:7a:11:b5:ed:86:86:c9:d1:5a:a1:e0: 4a:ea:40:3d:ab:e5:7c:51:ea:71:37:4f:99:d8:75: e0:84:ee:e4:52:b7:5a:9a:c3:3c:5b:0a:72:32:6b: 16:91:ee:56:c5:e3:a4:c3:75:8f:9e:57:b5:0c:ca: bf:d0:ea:f5:2e:41:11:f9:5b:18:3b:f6:15:ee:e4: a3:9a:9e:c1:4c:ec:a0:10:43:d3:3d:48:07:e9:63: 2a:e9:78:ae:22:d4:c5:65:e2:cc:64:83:f6:18:62: c8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5A:4D:80:AD:35:FE:F9:32:49:B1:45:67:34:34:06:AB:0A:34:53 X509v3 Authority Key Identifier: keyid:87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/326130623a346530373a6330303a3a2f33382d3338203d3e20333936393832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:c00::/38 Signature Algorithm: sha256WithRSAEncryption 03:0a:42:91:bd:b6:68:b2:34:d7:e1:00:cf:53:88:c8:cc:b3: 5b:43:b3:58:7c:af:46:78:77:c5:de:16:c0:6f:dc:6d:e3:52: b9:01:69:0f:a2:e5:7b:83:ef:70:92:69:6a:21:fc:99:1c:95: cd:16:12:64:dc:b1:43:c3:b7:86:90:b5:12:d3:56:ed:a8:97: a1:e4:75:39:45:56:fa:e4:3a:0b:2e:11:57:9d:68:2c:3f:f5: 35:bb:5f:a5:a8:90:f6:2b:9f:0b:bc:36:eb:b7:d6:a1:18:24: 79:e7:63:d9:47:c3:81:31:98:52:7a:18:f6:d6:00:b4:fe:03: ba:21:c6:d9:16:ff:b7:ad:c3:f7:90:40:f0:8c:f4:cf:d0:56: ce:7b:36:2f:a4:9e:e2:c6:b9:32:ff:91:54:33:3e:f5:12:1e: 2d:50:43:f9:9d:5b:9c:15:2a:a9:ce:ad:b6:d1:14:36:b5:f9: ac:fc:6f:df:32:11:09:9e:00:7c:bc:55:9d:60:09:3b:22:c5: 23:16:95:fc:1d:a0:e2:00:e2:67:0f:c7:9e:45:3d:cc:9d:0d: 89:20:02:56:ea:58:98:0b:58:77:2b:f6:50:e0:06:52:a5:ec: c9:51:2f:5c:ff:f9:58:5d:43:43:c1:30:65:d2:20:f7:d2:11: 86:a6:f0:cf -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUX2JcEJ1hHZ3VW96D5KQgHtO5pvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNF MzgyMzE4NTAeFw0yNjAxMTQyMTM1MTdaFw0yNzAxMTMyMTQwMTdaMDMxMTAvBgNV BAMTKEVFNUE0RDgwQUQzNUZFRjkzMjQ5QjE0NTY3MzQzNDA2QUIwQTM0NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYFnJg15dVAw3nGQ3QhLBpd4UT OMztlBzlEhW4TVlkNowAhfjRjGecGuNRNg0DMOSf6iz3s83bx0vnG+zC4JQIyncJ zSaoyAtHWmWSQMddsjObVWPgukbX373ZfP+KEvMonhynG4oCAHYM9APvDChF6wtw yoCG6xgpy1rys2qBiuD3eiIWhR77E0WlLiVhdxeQPBb0T22jzCx6EbXthobJ0Vqh 4ErqQD2r5XxR6nE3T5nYdeCE7uRSt1qawzxbCnIyaxaR7lbF46TDdY+eV7UMyr/Q 6vUuQRH5Wxg79hXu5KOansFM7KAQQ9M9SAfpYyrpeK4i1MVl4sxkg/YYYshBAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU7lpNgK01/vkySbFFZzQ0BqsKNFMwHwYDVR0j BBgwFoAUh5KAp9nm3d3Msp6ad4GdXOOCMYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgyMzE4NS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgy MzE4NS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgt MjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2ZDAzLzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2E2MzMwMzAzYTNhMmYzMzM4MmQzMzM4MjAzZDNlMjAzMzM5MzYzOTM4MzIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgIqC04HDDANBgkqhkiG9w0BAQsFAAOCAQEAAwpCkb22aLI01+EAz1OI yMyzW0OzWHyvRnh3xd4WwG/cbeNSuQFpD6Lle4PvcJJpaiH8mRyVzRYSZNyxQ8O3 hpC1EtNW7aiXoeR1OUVW+uQ6Cy4RV51oLD/1NbtfpaiQ9iufC7w267fWoRgkeedj 2UfDgTGYUnoY9tYAtP4DuiHG2Rb/t63D95BA8Iz0z9BWzns2L6Se4sa5Mv+RVDM+ 9RIeLVBD+Z1bnBUqqc6tttEUNrX5rPxv3zIRCZ4AfLxVnWAJOyLFIxaV/B2g4gDi Zw/HnkU9zJ0NiSACVupYmAtYdyv2UOAGUqXsyVEvXP/5WF1DQ8EwZdIg99IRhqbw zw== -----END CERTIFICATE-----Generated at Sat Jan 17 10:16:39 2026 by rpki-client