This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/326130623a346530373a6330303a3a2f33382d3438203d3e203134363138.roa File: 326130623a346530373a6330303a3a2f33382d3438203d3e203134363138.roa (raw, json) Hash identifier: iEYO5puyDd3JtuHWApK94siOE8CIhNdp34ccmJr583Q= Subject key identifier: 3F:97:3D:F4:82:47:A2:C3:6E:BA:19:F6:D9:F1:09:08:B0:44:C9:C4 Certificate issuer: /CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Certificate serial: 60367DAAD9D341488CC6ACBAD25C754482E3DFB9 Authority key identifier: 87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/326130623a346530373a6330303a3a2f33382d3438203d3e203134363138.roa Signing time: Wed 14 Jan 2026 19:34:48 +0000 ROA not before: Wed 14 Jan 2026 19:29:48 +0000 ROA not after: Wed 13 Jan 2027 19:34:48 +0000 asID: 14618 IP address blocks: 2a0b:4e07:c00::/38 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 23:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:36:7d:aa:d9:d3:41:48:8c:c6:ac:ba:d2:5c:75:44:82:e3:df:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Validity Not Before: Jan 14 19:29:48 2026 GMT Not After : Jan 13 19:34:48 2027 GMT Subject: CN=3F973DF48247A2C36EBA19F6D9F10908B044C9C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:00:10:2f:e5:fe:20:94:28:8e:0e:f0:62: b9:3c:b5:f2:ea:e3:90:8f:1f:08:d3:b0:e6:13:f6: aa:bc:28:a8:64:e7:c6:70:c9:86:ca:0f:49:6b:79: 72:d1:10:b5:c5:52:d5:f9:89:f7:46:6c:5d:fe:ae: 29:6d:70:19:4c:c7:83:1b:b0:62:6d:51:e8:23:14: ec:0e:a1:8e:c0:7e:d1:df:a4:9e:23:e9:40:0f:57: 08:69:f8:39:6c:d1:b2:bd:7e:30:e2:c1:4c:eb:05: 44:35:14:42:d0:85:be:1e:67:9e:1b:83:99:24:95: dd:07:84:80:be:8f:f6:ed:04:89:2a:d7:d5:e9:b8: 38:47:7c:76:d6:29:db:b3:23:23:d5:9c:a1:e9:b7: e2:6c:9e:a9:af:73:91:a2:c4:09:59:ea:b1:d7:a2: cc:15:a9:dc:df:d9:ca:f8:8a:6d:5f:24:30:65:76: 15:83:8c:54:58:cd:26:4d:9a:65:2d:30:1d:bf:88: c9:26:83:7e:45:d3:ee:5b:ec:05:b7:5b:4c:d2:bd: 7c:e1:fb:4f:43:f0:8b:94:8b:12:d9:ff:40:cd:73: 6a:75:30:68:b2:77:09:f1:d5:3b:c5:6e:6d:c6:df: 6d:ff:f1:1d:ee:c0:b8:4b:60:f5:7b:db:95:d9:ca: c4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:97:3D:F4:82:47:A2:C3:6E:BA:19:F6:D9:F1:09:08:B0:44:C9:C4 X509v3 Authority Key Identifier: keyid:87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/326130623a346530373a6330303a3a2f33382d3438203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:c00::/38 Signature Algorithm: sha256WithRSAEncryption 3e:1a:d2:cd:83:4e:0a:59:9f:70:c0:8c:c0:1a:c9:0c:dc:0f: 09:7c:b8:04:cd:c4:f1:8d:5b:54:b0:79:c7:b3:90:90:20:56: 33:86:05:b0:91:c5:7f:a9:61:4d:72:51:19:4d:cf:66:6f:c1: df:3a:4b:4d:d8:b2:c8:e3:0e:29:df:4a:22:8c:9e:5e:0d:eb: cd:3f:21:d2:5d:1e:62:e5:25:2f:39:72:46:05:cb:23:1b:03: e5:a9:26:96:cd:80:ea:a6:6c:76:b0:e0:5e:67:34:38:97:f5: 0d:72:47:65:e5:dc:4e:a0:8d:4b:e3:84:50:e0:3f:2c:67:da: 1e:90:1b:45:f6:1e:b1:ab:ec:88:37:1d:3d:da:6f:21:3e:17: ca:f8:48:59:13:62:17:8c:6a:3c:3a:6c:83:bd:91:6a:c8:17: 17:82:6e:35:82:e6:d6:44:f2:ca:12:ed:fa:70:66:13:32:6f: 29:bf:da:a8:0b:59:d5:08:c8:e6:16:2c:50:dd:57:1a:17:19: b2:5b:35:ec:8a:08:28:ac:28:7d:95:b6:e8:03:7e:29:e4:f3: 81:95:96:87:c2:49:e4:d7:67:91:18:10:4f:8f:b1:60:ca:da: 5e:43:3b:c2:28:4f:c7:e0:df:03:8d:9d:f9:f6:f8:94:43:ae: 15:9d:ec:23 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUYDZ9qtnTQUiMxqy60lx1RILj37kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNF MzgyMzE4NTAeFw0yNjAxMTQxOTI5NDhaFw0yNzAxMTMxOTM0NDhaMDMxMTAvBgNV BAMTKDNGOTczREY0ODI0N0EyQzM2RUJBMTlGNkQ5RjEwOTA4QjA0NEM5QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsuQAQL+X+IJQojg7wYrk8tfLq 45CPHwjTsOYT9qq8KKhk58ZwyYbKD0lreXLRELXFUtX5ifdGbF3+riltcBlMx4Mb sGJtUegjFOwOoY7AftHfpJ4j6UAPVwhp+Dls0bK9fjDiwUzrBUQ1FELQhb4eZ54b g5kkld0HhIC+j/btBIkq19XpuDhHfHbWKduzIyPVnKHpt+Jsnqmvc5GixAlZ6rHX oswVqdzf2cr4im1fJDBldhWDjFRYzSZNmmUtMB2/iMkmg35F0+5b7AW3W0zSvXzh +09D8IuUixLZ/0DNc2p1MGiydwnx1TvFbm3G323/8R3uwLhLYPV725XZysSFAgMB AAGjggJ1MIICcTAdBgNVHQ4EFgQUP5c99IJHosNuuhn22fEJCLBEycQwHwYDVR0j BBgwFoAUh5KAp9nm3d3Msp6ad4GdXOOCMYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgyMzE4NS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgy MzE4NS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgt MjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2ZDAzLzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2E2MzMwMzAzYTNhMmYzMzM4MmQzNDM4MjAzZDNlMjAzMTM0MzYzMTM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA AjAIAwYCKgtOBwwwDQYJKoZIhvcNAQELBQADggEBAD4a0s2DTgpZn3DAjMAayQzc Dwl8uATNxPGNW1SwecezkJAgVjOGBbCRxX+pYU1yURlNz2Zvwd86S03YssjjDinf SiKMnl4N680/IdJdHmLlJS85ckYFyyMbA+WpJpbNgOqmbHaw4F5nNDiX9Q1yR2Xl 3E6gjUvjhFDgPyxn2h6QG0X2HrGr7Ig3HT3abyE+F8r4SFkTYheMajw6bIO9kWrI FxeCbjWC5tZE8soS7fpwZhMybym/2qgLWdUIyOYWLFDdVxoXGbJbNeyKCCisKH2V tugDfink84GVlofCSeTXZ5EYEE+PsWDK2l5DO8IoT8fg3wONnfn2+JRDrhWd7CM= -----END CERTIFICATE-----Generated at Sat Jan 17 10:16:38 2026 by rpki-client