This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a393030303a3a2f33362d3336203d3e20323131303636.roa
File: 326130393a353463333a393030303a3a2f33362d3336203d3e20323131303636.roa (raw, json)
Hash identifier: /KjIFlpbNb1VbdyEsAMlwZ6y7EnP5aEMV+JQt9I/CYU=
Subject key identifier: E3:87:81:1D:39:51:60:E8:98:2F:18:2E:78:C2:92:84:85:2D:D7:CA
Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205
Certificate serial: 2BFBD6147CE60792F998F31F3E577B6925460543
Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a393030303a3a2f33362d3336203d3e20323131303636.roa
Signing time: Tue 06 Jan 2026 06:43:44 +0000
ROA not before: Tue 06 Jan 2026 06:38:44 +0000
ROA not after: Tue 05 Jan 2027 06:43:44 +0000
asID: 211066
IP address blocks: 2a09:54c3:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 11:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:fb:d6:14:7c:e6:07:92:f9:98:f3:1f:3e:57:7b:69:25:46:05:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912092CFA11F378852F52266C793AB678233205
Validity
Not Before: Jan 6 06:38:44 2026 GMT
Not After : Jan 5 06:43:44 2027 GMT
Subject: CN=E387811D395160E8982F182E78C29284852DD7CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:10:0f:d5:b1:94:84:3c:b4:37:06:89:8e:
32:f1:9b:24:f7:df:ae:f3:73:de:b0:b0:0a:ab:53:
5c:df:94:66:0f:14:1d:ea:9d:25:5c:55:24:94:53:
96:07:da:74:7d:44:e5:14:60:e7:96:8f:2b:71:69:
98:48:df:67:d6:fa:02:da:1e:d9:d9:85:6b:23:ea:
2f:93:63:8b:b8:5c:d3:8d:dc:fb:09:9d:8b:2b:e5:
fb:a6:a4:d7:8e:1d:8f:bf:58:72:01:4e:cb:78:ce:
5d:dc:e7:8d:c0:92:bb:6d:79:76:12:81:c6:b6:74:
d2:28:d5:98:65:77:35:48:8d:64:4e:9d:92:c4:ae:
eb:d7:1c:ef:9d:19:4e:da:b3:0b:f3:0d:b2:88:38:
d2:6c:be:63:51:c0:a5:3b:d0:dd:7d:2e:ef:33:d2:
d4:15:6d:4a:c3:9c:a9:71:3c:40:d8:10:11:f2:b9:
0f:ff:00:09:72:2d:fc:76:a0:1c:5b:c6:9e:45:3a:
a4:d2:9a:e3:00:98:c9:ec:04:83:90:bb:e5:38:97:
e2:da:cc:85:57:e3:6d:ee:ed:98:70:49:e2:a0:69:
14:63:b5:f4:7a:a6:5d:20:71:6f:1d:03:00:2b:aa:
19:e7:72:68:d4:bd:51:2e:e6:66:f8:10:89:7c:36:
36:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:87:81:1D:39:51:60:E8:98:2F:18:2E:78:C2:92:84:85:2D:D7:CA
X509v3 Authority Key Identifier:
keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a393030303a3a2f33362d3336203d3e20323131303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c3:9000::/36
Signature Algorithm: sha256WithRSAEncryption
08:5a:ff:1b:87:b5:8a:78:22:ae:69:4b:28:4b:e3:8b:18:6e:
73:43:bc:a4:fa:76:cb:dd:d3:2c:40:56:63:c5:fa:6e:49:f2:
1d:2a:75:55:13:e0:5e:ea:96:5b:43:c7:ff:5e:cd:3f:7c:af:
91:60:d2:4a:0c:cc:b0:ba:b1:ae:89:d3:16:72:10:8f:15:99:
4a:b9:52:a2:20:1a:bf:93:a5:d0:ab:f8:a3:12:b8:f8:11:09:
7e:fe:9b:eb:b6:53:2e:bc:98:15:ef:e2:cb:a6:f3:80:19:0c:
52:24:a1:ea:ea:2d:3a:86:d7:6b:23:57:3a:4e:2b:12:76:5d:
13:a1:eb:86:40:0e:f1:1b:dd:f1:da:c8:2a:ab:3d:8f:ca:f7:
4d:a3:76:03:42:b7:e2:02:8a:89:3c:3f:9f:ee:aa:9a:c3:6a:
38:bf:a7:39:af:93:61:67:fb:64:81:ec:f3:2f:29:a3:33:b0:
4f:87:00:ef:31:f5:75:ee:ed:02:31:56:79:17:cf:6e:3c:62:
25:a0:31:f9:ae:13:69:1f:d9:03:ac:bb:72:03:cd:f8:87:f7:
15:9c:95:4b:9f:84:7c:cf:4f:95:d9:f0:87:c9:e2:68:ef:c6:
5c:3d:91:14:1a:e3:ee:e8:19:22:99:ab:3e:07:7f:f9:8a:4c:
da:3a:a8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 18:18:35 2026 by rpki-client