This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3a2f33322d3332203d3e20323135303835.roa
File: 326130363a396634313a3a2f33322d3332203d3e20323135303835.roa (raw, json)
Hash identifier: oQiFmCDOiC8wMUPyhseeYgHp6yjZLGbjApAcNJ0LBoc=
Subject key identifier: 27:5E:F9:B6:79:3A:37:B1:BC:CC:E1:F6:17:51:93:47:59:FE:0F:70
Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial: 42E73D9245DA6480EC298414B396C09280662A12
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3a2f33322d3332203d3e20323135303835.roa
Signing time: Fri 14 Nov 2025 10:01:36 +0000
ROA not before: Fri 14 Nov 2025 09:56:36 +0000
ROA not after: Fri 13 Nov 2026 10:01:36 +0000
asID: 215085
IP address blocks: 2a06:9f41::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Dec 2025 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e7:3d:92:45:da:64:80:ec:29:84:14:b3:96:c0:92:80:66:2a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
Validity
Not Before: Nov 14 09:56:36 2025 GMT
Not After : Nov 13 10:01:36 2026 GMT
Subject: CN=275EF9B6793A37B1BCCCE1F61751934759FE0F70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:4d:02:4a:fc:f7:4a:13:e9:6b:98:a0:2f:
21:1c:eb:ba:ab:ff:da:79:d4:bc:30:ad:ce:2b:38:
1c:9f:49:7f:30:99:c9:45:a8:e7:91:2c:ff:91:8d:
9a:f8:82:78:37:ea:95:f1:9f:46:73:7c:f3:f4:18:
6e:5f:57:c0:62:bd:b3:7b:ec:a5:3f:31:8e:4d:a1:
7b:03:75:60:7c:61:08:ad:41:08:b1:5a:94:eb:c8:
09:f8:d9:e8:41:5f:d3:6d:5f:45:2c:df:77:68:80:
fb:07:1c:a6:1b:1a:c2:83:c0:bd:83:61:6a:c3:84:
1a:b0:6d:b6:2c:e8:c7:12:9c:d9:a6:4e:ad:51:42:
cb:c8:73:94:a6:da:37:96:75:f2:95:3d:ea:33:8d:
36:52:01:4d:6b:25:b8:d3:bb:fb:31:a2:e9:6f:48:
3f:ca:5a:dc:d7:32:c6:f3:c0:72:f6:7b:e9:e3:39:
4e:e8:c3:3b:e8:01:ce:d7:1f:49:e6:85:43:d7:83:
fd:d5:33:24:27:38:e9:c2:f8:60:92:a4:3e:ab:ee:
dd:5c:53:60:dc:3f:c6:ff:a9:2c:5e:69:12:ad:74:
9d:0d:e6:0f:0e:01:c2:70:e9:3f:df:0e:4b:09:4d:
6f:c2:76:12:5c:35:f1:e7:5a:af:ac:c7:46:ce:62:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5E:F9:B6:79:3A:37:B1:BC:CC:E1:F6:17:51:93:47:59:FE:0F:70
X509v3 Authority Key Identifier:
keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3a2f33322d3332203d3e20323135303835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f41::/32
Signature Algorithm: sha256WithRSAEncryption
6f:89:1c:38:89:40:9a:ac:0c:b1:55:a4:ce:8a:52:af:77:de:
79:b3:5a:2b:bc:60:4f:13:91:c9:b4:dc:19:52:b9:99:b5:74:
aa:0a:64:71:a3:6c:a4:ad:7a:87:72:16:04:c3:9e:95:71:9e:
86:13:7d:25:ef:8f:db:05:69:8c:ec:93:c6:0a:fe:55:e7:88:
d6:dc:c5:34:36:5a:ef:56:d5:00:dc:19:cc:a4:87:ab:df:8d:
5b:b1:8d:22:ad:91:43:dc:9f:38:d1:6c:b9:da:92:85:4f:c3:
2b:4a:d9:a6:23:3d:3a:aa:ed:5b:58:2a:52:d0:a2:79:f5:60:
89:ca:67:32:8d:1e:b2:df:11:1c:3b:a0:ad:66:14:01:5c:4c:
d9:19:3e:b7:ba:da:fc:26:0e:f8:59:8d:9a:f1:09:c1:95:9f:
6a:75:d2:e7:86:08:52:69:a2:b8:8d:cd:f4:fb:41:f9:af:53:
68:c8:11:3c:f5:ac:72:57:b0:32:2d:e5:6d:52:62:ec:cc:28:
55:da:79:d1:f8:63:a6:55:68:19:c3:93:0a:4e:92:67:6b:75:
7f:b9:23:5c:8b:d2:43:6a:6c:08:22:4b:5d:4e:2c:dc:40:91:
1f:08:89:64:38:cb:6e:e6:3b:24:f3:46:30:01:bf:17:a2:4e:
0f:8b:e8:27
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgIUQuc9kkXaZIDsKYQUs5bAkoBmKhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2
NzExNDJGNTAeFw0yNTExMTQwOTU2MzZaFw0yNjExMTMxMDAxMzZaMDMxMTAvBgNV
BAMTKDI3NUVGOUI2NzkzQTM3QjFCQ0NDRTFGNjE3NTE5MzQ3NTlGRTBGNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9g00CSvz3ShPpa5igLyEc67qr
/9p51Lwwrc4rOByfSX8wmclFqOeRLP+RjZr4gng36pXxn0ZzfPP0GG5fV8BivbN7
7KU/MY5NoXsDdWB8YQitQQixWpTryAn42ehBX9NtX0Us33dogPsHHKYbGsKDwL2D
YWrDhBqwbbYs6McSnNmmTq1RQsvIc5Sm2jeWdfKVPeozjTZSAU1rJbjTu/sxoulv
SD/KWtzXMsbzwHL2e+njOU7owzvoAc7XH0nmhUPXg/3VMyQnOOnC+GCSpD6r7t1c
U2DcP8b/qSxeaRKtdJ0N5g8OAcJw6T/fDksJTW/CdhJcNfHnWq+sx0bOYu31AgMB
AAGjggJuMIICajAdBgNVHQ4EFgQUJ175tnk6N7G8zOH2F1GTR1n+D3AwHwYDVR0j
BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2
YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx
NDJGNS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQt
N2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2YWJmLzIvMzI2MTMwMzYzYTM5NjYzNDMx
M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzMTM1MzAzODM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA
KgafQTANBgkqhkiG9w0BAQsFAAOCAQEAb4kcOIlAmqwMsVWkzopSr3feebNaK7xg
TxORybTcGVK5mbV0qgpkcaNspK16h3IWBMOelXGehhN9Je+P2wVpjOyTxgr+VeeI
1tzFNDZa71bVANwZzKSHq9+NW7GNIq2RQ9yfONFsudqShU/DK0rZpiM9OqrtW1gq
UtCiefVgicpnMo0est8RHDugrWYUAVxM2Rk+t7ra/CYO+FmNmvEJwZWfanXS54YI
UmmiuI3N9PtB+a9TaMgRPPWsclewMi3lbVJi7MwoVdp50fhjplVoGcOTCk6SZ2t1
f7kjXIvSQ2psCCJLXU4s3ECRHwiJZDjLbuY7JPNGMAG/F6JOD4voJw==
-----END CERTIFICATE-----
Generated at Thu Dec 4 09:03:41 2025 by rpki-client