This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/2/326130613a363034343a633131303a3a2f34342d3438203d3e20323134323233.roa File: 326130613a363034343a633131303a3a2f34342d3438203d3e20323134323233.roa (raw, json) Hash identifier: 9cQUu/vo+Gr2Ja3UT90AGyJF/DgqJm/btPERTb4/Mj0= Subject key identifier: 21:1C:DF:5A:91:E7:4A:39:74:19:D9:2E:F7:64:D6:51:56:A3:0B:C7 Certificate issuer: /CN=5A4616047B182390E89624F93C238F3F455C65B0 Certificate serial: 3DE938355EBC21CA081D86C2487B51B0B486E3EA Authority key identifier: 5A:46:16:04:7B:18:23:90:E8:96:24:F9:3C:23:8F:3F:45:5C:65:B0 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/5A4616047B182390E89624F93C238F3F455C65B0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/2/326130613a363034343a633131303a3a2f34342d3438203d3e20323134323233.roa Signing time: Fri 02 Jan 2026 19:17:00 +0000 ROA not before: Fri 02 Jan 2026 19:12:00 +0000 ROA not after: Fri 01 Jan 2027 19:17:00 +0000 asID: 214223 IP address blocks: 2a0a:6044:c110::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/2/5A4616047B182390E89624F93C238F3F455C65B0.crl rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/2/5A4616047B182390E89624F93C238F3F455C65B0.mft rsync://krill.47272.net/repo/HYEHOST/5/5A4616047B182390E89624F93C238F3F455C65B0.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 01:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e9:38:35:5e:bc:21:ca:08:1d:86:c2:48:7b:51:b0:b4:86:e3:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A4616047B182390E89624F93C238F3F455C65B0 Validity Not Before: Jan 2 19:12:00 2026 GMT Not After : Jan 1 19:17:00 2027 GMT Subject: CN=211CDF5A91E74A397419D92EF764D65156A30BC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5d:31:36:d9:de:9c:fa:1a:73:ce:c5:cb:d2: af:55:f4:f1:bd:d0:22:ae:5b:6a:95:b7:35:13:1d: 74:68:73:af:73:01:10:21:98:8e:4e:02:14:31:c7: 87:48:a2:b7:b3:d8:c9:8b:7d:fc:1c:d0:05:60:20: 3c:31:b6:69:62:7f:86:b4:e1:f7:5c:0a:69:ab:e7: 3f:a7:95:a2:2f:e9:2f:a4:3a:96:cb:d6:84:04:64: e8:e7:6a:05:d1:5d:d7:69:bf:47:6d:bf:59:89:a7: 3f:78:bb:a5:df:5e:05:f0:27:de:3c:9b:ae:e4:a1: 8f:56:4f:12:b3:16:b8:01:b9:d1:b2:45:7e:cc:ff: 57:b2:34:32:65:53:ca:79:0b:fa:a3:7b:42:86:a7: 08:73:6d:fe:0f:8f:86:14:9c:b5:3f:7c:4a:e3:7c: ea:7b:1e:76:03:a2:6d:8b:9d:26:a0:3c:bc:0f:4e: 20:03:24:20:05:66:58:df:fa:2b:5a:a0:24:f1:fa: 5d:a0:ff:eb:7b:c0:77:5a:db:d0:ff:2c:97:76:11: e4:81:50:23:2c:2c:cb:83:c9:e6:10:c6:83:1a:89: 9d:0b:2b:ec:b2:12:63:5d:2c:04:84:a2:72:12:c6: 58:58:11:bf:76:be:af:17:e9:a9:c4:ab:be:80:c3: 6f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1C:DF:5A:91:E7:4A:39:74:19:D9:2E:F7:64:D6:51:56:A3:0B:C7 X509v3 Authority Key Identifier: keyid:5A:46:16:04:7B:18:23:90:E8:96:24:F9:3C:23:8F:3F:45:5C:65:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/2/5A4616047B182390E89624F93C238F3F455C65B0.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/5A4616047B182390E89624F93C238F3F455C65B0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/2/326130613a363034343a633131303a3a2f34342d3438203d3e20323134323233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:c110::/44 Signature Algorithm: sha256WithRSAEncryption 13:ea:f6:9a:45:00:68:cf:0e:7e:c8:00:9a:0a:8b:c1:55:e3: d8:ec:ad:7f:85:89:5d:4c:20:2f:8f:9c:ca:d9:b7:46:a9:ae: 1e:64:22:76:9b:f2:6c:1b:2e:1b:d2:a6:e7:28:1a:90:5d:cc: f6:3e:3d:bd:8a:ed:9a:5e:ae:4a:ba:84:ee:0f:ad:8d:c6:4f: d4:a9:ed:e8:49:29:49:b1:70:fb:2d:ce:9f:62:18:c8:62:88: a1:57:ac:35:72:4e:12:35:5f:98:bd:e2:c2:0f:20:aa:c3:92: 76:3a:44:a2:af:10:3e:c3:47:4c:9c:46:25:7e:87:06:eb:91: 3e:55:87:97:fc:84:34:9c:ed:9c:d0:32:8c:f2:53:1d:da:65: 28:76:fa:24:b7:9c:b3:f6:a4:ab:6d:3a:8c:da:27:c8:84:d8: 36:07:3a:48:10:4c:26:07:db:4a:c2:7f:cc:8a:5e:98:63:5f: 38:9a:ae:76:3c:35:35:bb:a7:f3:bb:5e:41:c7:2e:64:60:a1: 93:ae:f4:dd:2b:cd:17:ca:ce:4b:b9:d6:e9:42:26:77:90:3f: 27:83:e5:58:1e:4f:50:04:cf:3d:bd:5a:03:90:a0:8e:68:f8: 26:2f:1e:9e:25:e2:70:3f:f0:2f:94:ae:25:a9:cb:96:33:34: d1:0e:6b:e2 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgIUPek4NV68IcoIHYbCSHtRsLSG4+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0NjE2MDQ3QjE4MjM5MEU4OTYyNEY5M0MyMzhGM0Y0 NTVDNjVCMDAeFw0yNjAxMDIxOTEyMDBaFw0yNzAxMDExOTE3MDBaMDMxMTAvBgNV BAMTKDIxMUNERjVBOTFFNzRBMzk3NDE5RDkyRUY3NjRENjUxNTZBMzBCQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcXTE22d6c+hpzzsXL0q9V9PG9 0CKuW2qVtzUTHXRoc69zARAhmI5OAhQxx4dIorez2MmLffwc0AVgIDwxtmlif4a0 4fdcCmmr5z+nlaIv6S+kOpbL1oQEZOjnagXRXddpv0dtv1mJpz94u6XfXgXwJ948 m67koY9WTxKzFrgBudGyRX7M/1eyNDJlU8p5C/qje0KGpwhzbf4Pj4YUnLU/fErj fOp7HnYDom2LnSagPLwPTiADJCAFZljf+itaoCTx+l2g/+t7wHda29D/LJd2EeSB UCMsLMuDyeYQxoMaiZ0LK+yyEmNdLASEonISxlhYEb92vq8X6anEq76Aw28rAgMB AAGjggJVMIICUTAdBgNVHQ4EFgQUIRzfWpHnSjl0Gdku92TWUVajC8cwHwYDVR0j BBgwFoAUWkYWBHsYI5DoliT5PCOPP0VcZbAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGE2MjE3M2UtZTZhZi00MGJjLWFiYTgtMWY2ODFiMTI0 MGY4LzIvNUE0NjE2MDQ3QjE4MjM5MEU4OTYyNEY5M0MyMzhGM0Y0NTVDNjVCMC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS81QTQ2MTYwNDdCMTgyMzkwRTg5NjI0Rjkz QzIzOEYzRjQ1NUM2NUIwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS80YTYyMTczZS1lNmFmLTQwYmMtYWJhOC0xZjY4MWIxMjQwZjgvMi8zMjYxMzA2 MTNhMzYzMDM0MzQzYTYzMzEzMTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM0MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKgpgRMEQMA0GCSqGSIb3DQEBCwUAA4IBAQAT 6vaaRQBozw5+yACaCovBVePY7K1/hYldTCAvj5zK2bdGqa4eZCJ2m/JsGy4b0qbn KBqQXcz2Pj29iu2aXq5KuoTuD62Nxk/Uqe3oSSlJsXD7Lc6fYhjIYoihV6w1ck4S NV+YveLCDyCqw5J2OkSirxA+w0dMnEYlfocG65E+VYeX/IQ0nO2c0DKM8lMd2mUo dvokt5yz9qSrbTqM2ifIhNg2BzpIEEwmB9tKwn/Mil6YY184mq52PDU1u6fzu15B xy5kYKGTrvTdK80Xys5LudbpQiZ3kD8ng+VYHk9QBM89vVoDkKCOaPgmLx6eJeJw P/AvlK4lqcuWMzTRDmvi -----END CERTIFICATE-----Generated at Sun Jan 11 13:16:57 2026 by rpki-client