This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/326130623a346530373a6330303a3a2f33382d3438203d3e20323135373630.roa File: 326130623a346530373a6330303a3a2f33382d3438203d3e20323135373630.roa (raw, json) Hash identifier: YPrQ7rMdq3JvlF7MZ9xUnQFGrFDCIgYUVgYATMFPJvs= Subject key identifier: 3B:AF:30:93:5F:06:3A:8A:6E:E0:8E:36:96:E6:B1:91:71:53:4D:6E Certificate issuer: /CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Certificate serial: 221FB0D7E070F0954081962D64B100E6C72529DA Authority key identifier: 87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/326130623a346530373a6330303a3a2f33382d3438203d3e20323135373630.roa Signing time: Wed 14 Jan 2026 11:34:10 +0000 ROA not before: Wed 14 Jan 2026 11:29:10 +0000 ROA not after: Wed 13 Jan 2027 11:34:10 +0000 asID: 215760 IP address blocks: 2a0b:4e07:c00::/38 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 23:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:1f:b0:d7:e0:70:f0:95:40:81:96:2d:64:b1:00:e6:c7:25:29:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Validity Not Before: Jan 14 11:29:10 2026 GMT Not After : Jan 13 11:34:10 2027 GMT Subject: CN=3BAF30935F063A8A6EE08E3696E6B19171534D6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:0f:c2:82:93:5e:0b:a4:98:73:3e:6a:ca: 1e:a2:e4:fe:60:f3:26:79:e2:ab:58:a6:c0:b4:53: 56:45:b0:f4:ee:1c:19:c6:90:11:76:ab:a7:9f:10: 0c:8c:4a:51:76:b4:b3:92:7b:17:05:a1:5d:31:a7: 3f:0d:71:2f:ac:cf:76:4f:86:21:b0:2f:fe:8a:8e: 44:14:fd:ab:4b:12:35:d5:84:99:03:fe:a8:24:76: 2c:26:db:c9:28:56:8c:26:21:13:39:ce:12:ad:9e: 35:dd:fd:ff:f4:08:a7:0b:02:90:7d:ab:33:b4:86: e8:a1:e6:35:6f:2c:23:c1:98:fd:83:d3:dd:39:fd: cc:df:f8:3b:d6:79:bf:2c:27:68:b1:a8:27:41:95: 38:33:05:9a:ee:90:9c:14:cd:34:77:dd:b1:e5:ca: 0a:aa:a5:22:96:61:b7:f7:8b:ab:8c:d0:65:00:27: 97:36:de:18:0f:e4:7e:1b:6a:e1:0c:bc:21:07:c6: c9:01:35:cf:3e:1e:3b:83:a3:5a:3e:3a:2d:20:28: 57:15:bd:ad:9d:46:68:04:79:fa:47:f5:70:9b:99: d6:21:b2:f1:40:12:ea:cc:40:c5:d1:82:4f:1d:13: df:1b:25:d9:c9:df:29:1d:f9:27:d6:ea:19:bc:45: 1e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AF:30:93:5F:06:3A:8A:6E:E0:8E:36:96:E6:B1:91:71:53:4D:6E X509v3 Authority Key Identifier: keyid:87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/326130623a346530373a6330303a3a2f33382d3438203d3e20323135373630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:c00::/38 Signature Algorithm: sha256WithRSAEncryption 65:40:32:97:89:da:26:a6:d1:31:61:2f:96:c8:89:8e:b4:77: 96:60:58:6a:cc:e0:e6:a8:6c:27:a1:38:be:dd:8f:bf:a6:c8: d8:7f:ed:0a:cb:00:22:fc:a3:de:7b:0a:8e:27:b2:58:2d:7c: 7c:48:61:f4:8f:4a:4f:dd:98:18:0c:a7:1e:94:c9:f6:da:7a: 24:2b:35:6a:af:af:31:a6:72:fd:e0:4c:52:a8:e1:02:37:fe: d1:91:c1:bc:c9:60:40:d6:61:71:d8:63:5c:ca:37:d7:2e:c6: e6:be:79:47:7f:6b:a0:31:68:65:4a:e5:fb:50:d9:a9:9c:31: 0d:f3:10:f2:93:9b:8d:bb:d5:a2:7d:1f:90:08:b5:ab:ef:86: 1d:f4:f4:ee:1e:be:94:5c:23:32:98:7b:1e:1d:9d:ae:71:75: b6:e1:f8:ab:04:dc:05:ab:39:4a:ac:24:b2:17:14:8b:5b:b3: b4:f0:90:49:de:12:89:98:6a:ae:28:8a:dd:8a:a0:38:87:b8: da:ca:41:e8:0b:ac:50:18:93:4a:8a:1b:51:5a:75:77:3f:75: 6e:c2:e2:07:1b:e4:4f:1d:86:77:77:c7:05:e6:7f:6e:6e:80: bd:09:fc:e9:a0:58:e1:d3:58:54:dc:c0:fa:d2:70:2e:05:97: 4e:c4:48:1d -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUIh+w1+Bw8JVAgZYtZLEA5sclKdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNF MzgyMzE4NTAeFw0yNjAxMTQxMTI5MTBaFw0yNzAxMTMxMTM0MTBaMDMxMTAvBgNV BAMTKDNCQUYzMDkzNUYwNjNBOEE2RUUwOEUzNjk2RTZCMTkxNzE1MzRENkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvUg/CgpNeC6SYcz5qyh6i5P5g 8yZ54qtYpsC0U1ZFsPTuHBnGkBF2q6efEAyMSlF2tLOSexcFoV0xpz8NcS+sz3ZP hiGwL/6KjkQU/atLEjXVhJkD/qgkdiwm28koVowmIRM5zhKtnjXd/f/0CKcLApB9 qzO0huih5jVvLCPBmP2D0905/czf+DvWeb8sJ2ixqCdBlTgzBZrukJwUzTR33bHl ygqqpSKWYbf3i6uM0GUAJ5c23hgP5H4bauEMvCEHxskBNc8+HjuDo1o+Oi0gKFcV va2dRmgEefpH9XCbmdYhsvFAEurMQMXRgk8dE98bJdnJ3ykd+SfW6hm8RR6hAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUO68wk18GOopu4I42luaxkXFTTW4wHwYDVR0j BBgwFoAUh5KAp9nm3d3Msp6ad4GdXOOCMYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgyMzE4NS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgy MzE4NS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgt MjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2ZDAzLzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2E2MzMwMzAzYTNhMmYzMzM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzNzM2MzAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgIqC04HDDANBgkqhkiG9w0BAQsFAAOCAQEAZUAyl4naJqbRMWEvlsiJ jrR3lmBYaszg5qhsJ6E4vt2Pv6bI2H/tCssAIvyj3nsKjieyWC18fEhh9I9KT92Y GAynHpTJ9tp6JCs1aq+vMaZy/eBMUqjhAjf+0ZHBvMlgQNZhcdhjXMo31y7G5r55 R39roDFoZUrl+1DZqZwxDfMQ8pObjbvVon0fkAi1q++GHfT07h6+lFwjMph7Hh2d rnF1tuH4qwTcBas5SqwkshcUi1uztPCQSd4SiZhqriiK3YqgOIe42spB6AusUBiT SoobUVp1dz91bsLiBxvkTx2Gd3fHBeZ/bm6AvQn86aBY4dNYVNzA+tJwLgWXTsRI HQ== -----END CERTIFICATE-----Generated at Sat Jan 17 10:16:38 2026 by rpki-client