This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a313030303a3a2f34342d3438203d3e20323035383338.roa File: 326130363a396634313a313030303a3a2f34342d3438203d3e20323035383338.roa (raw, json) Hash identifier: AZY42IY279tP8q55kCb+OP1wLi+9ejrODI15M2jhRhg= Subject key identifier: 52:4F:CE:CD:FA:8D:0F:B7:34:86:CB:32:2A:F3:B3:0F:B9:68:31:3B Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 123EF6FD5DA3B529F3F42B69D55A3B25649A841B Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a313030303a3a2f34342d3438203d3e20323035383338.roa Signing time: Sun 23 Nov 2025 11:47:42 +0000 ROA not before: Sun 23 Nov 2025 11:42:42 +0000 ROA not after: Sun 22 Nov 2026 11:47:42 +0000 asID: 205838 IP address blocks: 2a06:9f41:1000::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:3e:f6:fd:5d:a3:b5:29:f3:f4:2b:69:d5:5a:3b:25:64:9a:84:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Nov 23 11:42:42 2025 GMT Not After : Nov 22 11:47:42 2026 GMT Subject: CN=524FCECDFA8D0FB73486CB322AF3B30FB968313B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6d:04:8c:43:1e:6a:24:2a:74:2d:1d:31:3a: 51:11:71:74:6b:d1:33:61:34:1a:6f:6e:91:15:18: 8e:87:05:cc:b5:54:07:da:2e:c5:52:31:eb:a4:49: a3:96:85:c6:41:6d:66:ed:00:dd:5a:89:54:ed:8b: db:ac:c2:7b:25:fc:e1:7a:fe:19:e1:b9:f4:d4:e2: d5:24:b6:2e:92:92:65:3a:c0:5b:61:0a:39:64:e2: bc:c0:07:68:23:d3:29:c9:4f:64:3e:68:b8:4a:48: 8a:8c:8a:bb:17:40:9b:f7:04:2b:ac:f6:2b:21:32: 77:ef:86:bc:48:48:34:99:db:46:83:6a:9c:51:1d: 5a:ca:cd:31:a7:c5:c1:5d:68:3a:6a:4c:47:de:ad: c9:f8:74:18:4e:39:eb:cc:15:3d:81:ce:31:24:87: f8:ec:cf:d9:7e:8e:a0:22:f0:2c:04:20:07:14:da: 71:1e:7b:fd:8b:94:e3:6a:d0:2f:c3:1f:ff:f1:4b: 6c:3e:98:36:f4:22:c3:c6:a4:75:0d:a9:c5:ad:a8: 17:fa:8c:17:c5:59:e6:bf:36:a5:58:d1:18:8d:76: fa:a5:c4:bf:79:69:79:bf:12:e3:56:b4:f6:d4:5b: 11:23:d2:ff:8d:35:7b:08:7a:76:3f:f0:22:4f:07: 84:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4F:CE:CD:FA:8D:0F:B7:34:86:CB:32:2A:F3:B3:0F:B9:68:31:3B X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a313030303a3a2f34342d3438203d3e20323035383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f41:1000::/44 Signature Algorithm: sha256WithRSAEncryption 83:5d:2c:2c:22:fb:4b:ad:bd:0d:0d:b9:ea:74:f2:fa:52:89: d2:cd:92:b5:c6:51:5e:a2:e6:8c:33:8d:f5:90:23:48:85:da: 2a:1b:45:24:37:0b:f0:5c:12:8e:02:fa:2b:e8:25:97:90:e0: 5f:b4:bc:bf:1b:7f:3c:3c:4d:be:c5:29:e9:59:56:84:f4:07: 20:40:3b:af:76:c1:e2:e2:82:f2:e4:d4:9a:b7:98:96:f0:49: 6b:5e:1e:2f:89:e4:0b:68:a8:ba:3f:0b:64:45:e3:8a:59:1e: 96:c4:c2:b2:b7:72:c9:73:59:ba:4e:d5:30:c9:20:9c:66:e9: ef:10:c4:f9:c5:f7:82:5d:8f:88:20:27:72:0f:80:06:c0:2a: 96:ae:4c:3b:cf:e6:e3:da:66:c3:8a:b5:b5:f0:13:5c:81:b3: 40:a9:d8:27:e4:fe:a7:f9:32:11:82:de:99:06:fc:01:67:11: e5:c9:d3:a9:7e:a6:48:28:40:2c:f9:3c:d7:83:7e:39:d5:07: 5b:4a:e3:b4:10:c5:91:6d:5a:db:eb:50:d5:53:7e:74:2b:ad: 64:e8:8f:21:77:db:fa:de:27:a2:f3:21:8b:e8:7f:a3:c1:73: fd:ed:49:c8:64:e5:e7:60:76:a1:3a:39:e3:b5:1d:13:38:ea: 78:74:54:26 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUEj72/V2jtSnz9Ctp1Vo7JWSahBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNTExMjMxMTQyNDJaFw0yNjExMjIxMTQ3NDJaMDMxMTAvBgNV BAMTKDUyNEZDRUNERkE4RDBGQjczNDg2Q0IzMjJBRjNCMzBGQjk2ODMxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZbQSMQx5qJCp0LR0xOlERcXRr 0TNhNBpvbpEVGI6HBcy1VAfaLsVSMeukSaOWhcZBbWbtAN1aiVTti9uswnsl/OF6 /hnhufTU4tUkti6SkmU6wFthCjlk4rzAB2gj0ynJT2Q+aLhKSIqMirsXQJv3BCus 9ishMnfvhrxISDSZ20aDapxRHVrKzTGnxcFdaDpqTEfercn4dBhOOevMFT2BzjEk h/jsz9l+jqAi8CwEIAcU2nEee/2LlONq0C/DH//xS2w+mDb0IsPGpHUNqcWtqBf6 jBfFWea/NqVY0RiNdvqlxL95aXm/EuNWtPbUWxEj0v+NNXsIenY/8CJPB4QTAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUUk/OzfqND7c0hssyKvOzD7loMTswHwYDVR0j BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx NDJGNS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQt N2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2YWJmLzIvMzI2MTMwMzYzYTM5NjYzNDMx M2EzMTMwMzAzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzAzNTM4MzMzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHBCoGn0EQADANBgkqhkiG9w0BAQsFAAOCAQEAg10sLCL7S629DQ25 6nTy+lKJ0s2StcZRXqLmjDON9ZAjSIXaKhtFJDcL8FwSjgL6K+gll5DgX7S8vxt/ PDxNvsUp6VlWhPQHIEA7r3bB4uKC8uTUmreYlvBJa14eL4nkC2iouj8LZEXjilke lsTCsrdyyXNZuk7VMMkgnGbp7xDE+cX3gl2PiCAncg+ABsAqlq5MO8/m49pmw4q1 tfATXIGzQKnYJ+T+p/kyEYLemQb8AWcR5cnTqX6mSChALPk814N+OdUHW0rjtBDF kW1a2+tQ1VN+dCutZOiPIXfb+t4novMhi+h/o8Fz/e1JyGTl52B2oTo547UdEzjq eHRUJg== -----END CERTIFICATE-----Generated at Thu Dec 4 07:30:37 2025 by rpki-client