This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3230303a3a2f34302d3438203d3e20323134393239.roa
File: 326130363a396634313a3230303a3a2f34302d3438203d3e20323134393239.roa (raw, json)
Hash identifier: QtN9SLO6BSjzyIiwoZRqiVH48LS9HyuRs3lqnsdDiKs=
Subject key identifier: 24:27:24:1A:87:DE:0B:0C:F9:18:F5:86:41:A5:F9:F7:89:1A:00:A9
Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial: 5D84D94428BDFA84E7E52532BBB952EAB67E072E
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3230303a3a2f34302d3438203d3e20323134393239.roa
Signing time: Sun 28 Dec 2025 19:41:04 +0000
ROA not before: Sun 28 Dec 2025 19:36:04 +0000
ROA not after: Sun 27 Dec 2026 19:41:04 +0000
asID: 214929
IP address blocks: 2a06:9f41:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:84:d9:44:28:bd:fa:84:e7:e5:25:32:bb:b9:52:ea:b6:7e:07:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
Validity
Not Before: Dec 28 19:36:04 2025 GMT
Not After : Dec 27 19:41:04 2026 GMT
Subject: CN=2427241A87DE0B0CF918F58641A5F9F7891A00A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f9:50:6b:25:d8:35:4e:30:63:c7:f5:12:8a:
4d:d0:7d:7e:02:29:ac:5c:91:d9:86:32:dd:5a:fb:
78:ee:e3:b6:ac:0a:48:91:96:3f:cc:f3:6e:ea:3a:
7f:fa:6d:0f:b5:1c:b8:48:f8:76:70:59:5b:60:e3:
07:ff:ba:b4:e2:1a:8d:5e:02:c1:13:f2:34:b3:09:
5a:8f:4a:ab:94:28:67:52:54:82:1b:8b:86:a7:42:
1c:70:bd:b2:3f:28:fc:ae:bd:73:4e:4c:af:66:c3:
40:38:44:80:0c:00:03:35:a8:00:2e:aa:ca:9f:56:
0b:3a:e6:00:9a:11:8b:4e:23:af:c3:4d:4d:ee:bc:
ff:16:3f:b4:43:08:7c:36:db:1f:37:89:d3:51:bb:
73:03:e1:2b:19:2f:c8:cc:37:eb:04:99:5d:a5:05:
bb:e1:1b:c1:42:7d:fa:ba:60:6b:cd:bc:25:3f:a7:
44:a3:80:a2:4e:67:65:59:4a:33:e2:be:30:77:f2:
15:98:a5:80:3e:18:2b:ea:75:1c:3f:3d:23:38:70:
3b:0e:c9:b1:1e:a0:4f:b3:e2:8e:cc:16:43:ce:a0:
0a:18:4a:54:91:a6:e1:29:d3:a7:71:e2:a4:f2:20:
34:2f:6b:3f:b1:73:8f:8c:07:2b:1e:52:d8:5c:41:
2c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:27:24:1A:87:DE:0B:0C:F9:18:F5:86:41:A5:F9:F7:89:1A:00:A9
X509v3 Authority Key Identifier:
keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3230303a3a2f34302d3438203d3e20323134393239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f41:200::/40
Signature Algorithm: sha256WithRSAEncryption
49:4d:a0:02:66:8a:53:8d:8f:ed:07:b2:47:b5:2f:88:03:0a:
7c:fe:87:80:d0:cd:97:23:9f:9f:d9:36:f9:2f:39:e5:14:27:
a2:e6:19:40:ef:3a:21:81:a1:e3:60:53:8f:60:b6:d3:e4:65:
c7:bd:b0:d6:26:91:ad:20:c6:31:bd:62:4f:6c:09:ec:95:72:
26:5f:73:fc:cf:e1:6f:4b:0e:84:b3:4e:5f:f9:f9:c3:a8:3d:
3f:e1:bb:6a:3a:19:60:ec:dd:80:c8:af:46:95:db:a8:05:30:
17:69:e9:88:87:b8:4d:7b:55:18:97:a1:84:c5:91:46:39:13:
cc:16:a0:08:cf:9d:18:56:b0:88:09:7b:39:0a:7d:eb:c4:3d:
07:76:6a:35:13:82:d2:13:74:84:8f:d3:37:6c:e2:61:28:3f:
9d:cb:c4:4f:0f:24:4d:db:c2:06:05:f4:98:b4:b8:19:cc:28:
8c:6c:bd:cc:9c:a7:4e:a5:a3:ea:6f:0f:fa:9d:db:8e:2d:eb:
59:39:ae:a0:d1:01:70:2c:3c:eb:51:93:f9:b7:b1:45:c0:36:
c3:ec:d8:5e:21:5f:a1:5d:9e:7a:3d:f7:0c:9a:d8:8e:41:7f:
5e:15:c8:40:8f:2c:92:16:5f:50:c8:5b:01:46:66:9b:7f:27:
fb:db:c7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 13:58:39 2026 by rpki-client