This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/326130623a346530373a6330313a3a2f34382d3438203d3e20333936393832.roa File: 326130623a346530373a6330313a3a2f34382d3438203d3e20333936393832.roa (raw, json) Hash identifier: amuSE4i9t9DaOJdYKo1/xaDKOQ7B4vsylmXS8WFFM8U= Subject key identifier: 5C:1A:93:7C:FB:66:A4:18:BE:83:E2:5C:69:4F:3C:19:51:B8:48:C7 Certificate issuer: /CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Certificate serial: 6FB388C5C405EC2A0E70FE6897358F986359EC8E Authority key identifier: 87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/326130623a346530373a6330313a3a2f34382d3438203d3e20333936393832.roa Signing time: Wed 14 Jan 2026 15:07:37 +0000 ROA not before: Wed 14 Jan 2026 15:02:37 +0000 ROA not after: Wed 13 Jan 2027 15:07:37 +0000 asID: 396982 IP address blocks: 2a0b:4e07:c01::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 23:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:b3:88:c5:c4:05:ec:2a:0e:70:fe:68:97:35:8f:98:63:59:ec:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Validity Not Before: Jan 14 15:02:37 2026 GMT Not After : Jan 13 15:07:37 2027 GMT Subject: CN=5C1A937CFB66A418BE83E25C694F3C1951B848C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e1:89:5e:42:28:90:20:ae:e6:14:a5:c7:63: 02:e0:82:5b:c8:b4:60:44:39:63:20:0f:f9:92:c9: 68:fb:c5:79:06:78:90:a2:bc:43:51:97:4c:6a:3c: 31:00:fe:e2:44:84:e9:39:40:4a:8a:ec:79:ca:63: 10:d0:9d:bf:b2:c9:10:60:f8:33:0c:c8:ff:85:c6: ee:e3:7e:4c:66:68:42:22:8f:a9:88:ed:97:3c:22: 5f:5e:69:e7:ef:24:44:4f:f3:13:1d:e1:cb:05:9e: 03:20:16:d7:50:6c:f3:9d:7c:1f:14:59:a4:49:72: ea:ed:a5:ce:91:e1:5f:56:92:98:90:f9:84:50:14: 2f:fb:10:40:f1:1f:44:06:bb:05:3b:5a:f7:91:92: 84:ea:8c:bb:d0:30:90:ad:b6:4a:a6:3a:d1:11:cd: ae:39:fe:f8:2b:d1:ae:be:a2:2d:aa:6d:9f:5a:4e: 22:91:3b:72:8a:f3:3c:e8:8e:1c:e7:9e:1c:7b:ec: d1:ea:2b:dd:32:c0:01:5b:ad:fc:49:d2:83:3d:8d: d8:58:5a:b6:6c:0c:db:79:04:f6:b8:13:7a:01:48: 6b:d1:4e:9e:f2:84:68:79:f2:b2:48:97:53:f1:2d: ff:66:6d:5b:46:3b:5d:c8:e0:dc:b6:04:45:46:bb: 5b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1A:93:7C:FB:66:A4:18:BE:83:E2:5C:69:4F:3C:19:51:B8:48:C7 X509v3 Authority Key Identifier: keyid:87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/326130623a346530373a6330313a3a2f34382d3438203d3e20333936393832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:c01::/48 Signature Algorithm: sha256WithRSAEncryption a9:99:fc:e2:71:49:d3:08:ec:6f:cb:a8:02:af:11:6b:12:a2: 88:0f:63:55:26:f0:c4:61:2c:e4:1c:6b:98:f8:c6:38:fd:b7: 80:16:47:52:81:1f:0e:8f:54:4a:5b:02:d5:23:0e:05:ca:1a: 5b:5e:4f:1d:dd:e3:21:1b:7e:06:9b:80:fd:86:c8:d5:a1:08: 58:90:ae:e1:b6:f6:ea:ea:3c:97:36:dc:cb:fe:b9:b2:97:e2: dd:91:cc:79:a8:b5:84:a5:6f:02:54:16:78:5c:90:c9:73:11: 91:db:b9:df:83:5a:02:6e:93:c4:87:d3:1d:61:82:91:7a:a6: e5:16:da:97:3a:da:c0:5c:e3:55:66:48:ce:9d:9b:d8:8f:ac: 76:ef:90:30:49:e2:e9:14:3b:4c:95:ba:3d:3e:41:0c:da:7a: 1f:d4:e5:a0:cb:fe:96:dc:df:fc:4a:95:67:a6:df:98:3b:36: 7a:13:47:9a:46:1b:99:7f:ad:09:f1:6c:97:88:6b:b5:50:0d: 3a:22:0c:68:f6:b1:61:17:d3:74:c7:87:83:34:77:fb:37:5f: 8f:24:ba:c5:70:63:99:24:f5:4e:d4:22:30:da:da:c5:af:3b: 56:40:70:28:e2:10:7d:ee:68:4e:83:88:cb:ac:0a:02:0e:e7: ad:4b:ff:d7 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUb7OIxcQF7CoOcP5olzWPmGNZ7I4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNF MzgyMzE4NTAeFw0yNjAxMTQxNTAyMzdaFw0yNzAxMTMxNTA3MzdaMDMxMTAvBgNV BAMTKDVDMUE5MzdDRkI2NkE0MThCRTgzRTI1QzY5NEYzQzE5NTFCODQ4QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO4YleQiiQIK7mFKXHYwLgglvI tGBEOWMgD/mSyWj7xXkGeJCivENRl0xqPDEA/uJEhOk5QEqK7HnKYxDQnb+yyRBg +DMMyP+Fxu7jfkxmaEIij6mI7Zc8Il9eaefvJERP8xMd4csFngMgFtdQbPOdfB8U WaRJcurtpc6R4V9WkpiQ+YRQFC/7EEDxH0QGuwU7WveRkoTqjLvQMJCttkqmOtER za45/vgr0a6+oi2qbZ9aTiKRO3KK8zzojhznnhx77NHqK90ywAFbrfxJ0oM9jdhY WrZsDNt5BPa4E3oBSGvRTp7yhGh58rJIl1PxLf9mbVtGO13I4Ny2BEVGu1snAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUXBqTfPtmpBi+g+JcaU88GVG4SMcwHwYDVR0j BBgwFoAUh5KAp9nm3d3Msp6ad4GdXOOCMYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgyMzE4NS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgy MzE4NS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgt MjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2ZDAzLzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2E2MzMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM5MzYzOTM4MzIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAqC04HDAEwDQYJKoZIhvcNAQELBQADggEBAKmZ/OJxSdMI7G/LqAKv EWsSoogPY1Um8MRhLOQca5j4xjj9t4AWR1KBHw6PVEpbAtUjDgXKGlteTx3d4yEb fgabgP2GyNWhCFiQruG29urqPJc23Mv+ubKX4t2RzHmotYSlbwJUFnhckMlzEZHb ud+DWgJuk8SH0x1hgpF6puUW2pc62sBc41VmSM6dm9iPrHbvkDBJ4ukUO0yVuj0+ QQzaeh/U5aDL/pbc3/xKlWem35g7NnoTR5pGG5l/rQnxbJeIa7VQDToiDGj2sWEX 03THh4M0d/s3X48kusVwY5kk9U7UIjDa2sWvO1ZAcCjiEH3uaE6DiMusCgIO561L /9c= -----END CERTIFICATE-----Generated at Sat Jan 17 10:16:38 2026 by rpki-client