This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/323630323a663730343a3430303a3a2f33382d3338203d3e2030.roa File: 323630323a663730343a3430303a3a2f33382d3338203d3e2030.roa (raw, json) Hash identifier: VK4mFBiOqkQD1y9m/nfx5zbWBqpESEY5LRMhbXtnICw= Subject key identifier: 54:58:C7:DE:AA:6D:72:54:76:ED:08:C5:AC:7B:4F:EB:88:1C:40:54 Certificate issuer: /CN=22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca Certificate serial: 63DE8D18E617F184EE6F48F074E46D604C01B7FD Authority key identifier: C5:4C:55:4D:4B:0B:04:61:D9:A0:1E:2A:06:E5:5F:C0:EC:4E:D8:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/323630323a663730343a3430303a3a2f33382d3338203d3e2030.roa Signing time: Fri 02 Jan 2026 23:45:13 +0000 ROA not before: Fri 02 Jan 2026 23:40:13 +0000 ROA not after: Fri 01 Jan 2027 23:45:13 +0000 asID: 0 IP address blocks: 2602:f704:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Jan 2026 23:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:de:8d:18:e6:17:f1:84:ee:6f:48:f0:74:e4:6d:60:4c:01:b7:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca Validity Not Before: Jan 2 23:40:13 2026 GMT Not After : Jan 1 23:45:13 2027 GMT Subject: CN=5458C7DEAA6D725476ED08C5AC7B4FEB881C4054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d3:c7:2d:42:cf:30:a1:4c:45:af:b2:e4:d5: 34:7b:86:7e:73:d2:c1:d0:59:dd:96:9e:5c:7a:7d: 76:c7:75:d7:3a:a9:53:c7:cb:c4:77:d6:2a:50:2d: fd:44:c7:7f:3e:38:e9:82:3c:db:d8:85:cc:91:f1: 23:ba:4c:e4:13:87:0c:f2:2d:97:9c:72:02:2e:10: 08:f4:cd:11:ba:71:b5:0b:3f:7c:7e:b1:38:8e:5d: 17:1f:ad:5a:cf:50:2d:65:f2:ce:1c:f1:40:3b:18: 4b:76:45:d2:ec:25:af:0b:fe:13:42:5e:9d:89:bd: 34:25:e3:07:15:29:ba:55:71:8e:7d:69:aa:0c:a3: 7c:2e:04:18:58:55:d7:0f:68:54:5d:a4:93:80:3a: 28:1f:3b:cb:88:4d:72:e8:b3:c0:3a:12:e2:41:f7: 2d:13:b1:cf:f8:64:32:33:37:7e:c0:83:56:c5:65: 7a:60:a7:1e:26:1a:cd:a2:9a:b9:80:e6:93:d3:f1: 88:e3:ac:f6:05:aa:a8:28:43:74:b1:4e:7c:26:30: a3:c5:2d:06:54:0f:da:88:a5:c7:1c:6a:45:a4:5c: ad:d3:85:1f:cb:07:10:81:1b:52:95:a9:8b:09:2c: 5d:0b:3c:75:ca:cb:3a:74:8a:99:5e:fd:6f:c4:af: 65:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:58:C7:DE:AA:6D:72:54:76:ED:08:C5:AC:7B:4F:EB:88:1C:40:54 X509v3 Authority Key Identifier: keyid:C5:4C:55:4D:4B:0B:04:61:D9:A0:1E:2A:06:E5:5F:C0:EC:4E:D8:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/323630323a663730343a3430303a3a2f33382d3338203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f704:400::/38 Signature Algorithm: sha256WithRSAEncryption 65:47:4d:12:ad:23:3f:d3:2d:ed:9a:6c:eb:2b:bb:49:b2:7b: a1:f3:c9:3c:d1:1b:0a:c2:c9:91:48:93:ed:af:ac:9a:ea:23: 49:c7:9a:ab:4c:3f:0b:c3:6b:a5:6d:e3:3f:bb:d8:0e:f3:7e: ca:3b:45:6e:71:43:60:6d:d9:d0:50:94:ad:0f:f3:bb:53:f8: a6:be:b2:45:bf:b4:74:35:05:f3:70:9d:db:ab:45:36:0d:50: 11:eb:e5:c1:65:09:3b:85:71:bd:51:22:fc:40:d7:b8:90:f9: 27:8a:b6:50:6d:3e:c2:77:df:16:f6:85:0b:45:33:e6:72:d6: d3:4c:ba:11:24:98:a7:5b:c9:83:22:09:36:56:b8:5b:99:f0: 2f:c6:29:4e:99:c7:d2:29:c5:6a:2a:cd:52:27:1e:09:96:5a: 80:95:c7:8b:d9:ee:71:68:2d:10:95:4b:f8:b4:08:a8:37:3d: 1c:20:b4:13:97:4d:21:c0:3e:c1:2d:64:15:10:fa:96:5e:b8: dd:49:49:14:f5:6c:28:00:cd:33:52:3e:e9:8b:f5:0c:87:04: 8a:d6:d7:01:ec:25:d3:af:6f:5c:08:c0:15:9d:38:26:78:32: 8c:07:45:7e:89:43:06:9b:94:5c:2b:de:47:cd:3f:1b:25:28: 07:b6:0f:75 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIUY96NGOYX8YTub0jwdORtYEwBt/0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjJiMTM5MWEwMGUyZDhlOTUyZmFhNGRkNzgwZGU5MTc2 ZDY1ZjkzMmNiZDg2YTY5Y2EwHhcNMjYwMTAyMjM0MDEzWhcNMjcwMTAxMjM0NTEz WjAzMTEwLwYDVQQDEyg1NDU4QzdERUFBNkQ3MjU0NzZFRDA4QzVBQzdCNEZFQjg4 MUM0MDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9PHLULPMKFM Ra+y5NU0e4Z+c9LB0Fndlp5cen12x3XXOqlTx8vEd9YqUC39RMd/Pjjpgjzb2IXM kfEjukzkE4cM8i2XnHICLhAI9M0RunG1Cz98frE4jl0XH61az1AtZfLOHPFAOxhL dkXS7CWvC/4TQl6dib00JeMHFSm6VXGOfWmqDKN8LgQYWFXXD2hUXaSTgDooHzvL iE1y6LPAOhLiQfctE7HP+GQyMzd+wINWxWV6YKceJhrNopq5gOaT0/GI46z2Baqo KEN0sU58JjCjxS0GVA/aiKXHHGpFpFyt04UfywcQgRtSlamLCSxdCzx1yss6dIqZ Xv1vxK9l+QIDAQABo4ICzTCCAskwHQYDVR0OBBYEFFRYx96qbXJUdu0Ixax7T+uI HEBUMB8GA1UdIwQYMBaAFMVMVU1LCwRh2aAeKgblX8DsTtg9MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzZjNDNkM2E2LTdkMTMtNDg5NS05NTlk LTQxOWI5YTZlYjM0Yi8yL0M1NEM1NTRENEIwQjA0NjFEOUEwMUUyQTA2RTU1RkMw RUM0RUQ4M0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTct NDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83NGM1ZWFhNy03OGJiLTRjY2EtODM1YS0w ZGY4MTJmZjdkODcvMjJiMTM5MWEwMGUyZDhlOTUyZmFhNGRkNzgwZGU5MTc2ZDY1 ZjkzMmNiZDg2YTY5Y2EuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUH MAuGgYtyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZjNDNkM2E2LTdkMTMtNDg5NS05NTlkLTQxOWI5YTZlYjM0Yi8yLzMyMzYzMDMy M2E2NjM3MzAzNDNhMzQzMDMwM2EzYTJmMzMzODJkMzMzODIwM2QzZTIwMzAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgImAvcEBDANBgkqhkiG9w0BAQsFAAOCAQEAZUdNEq0jP9Mt7Zps6yu7 SbJ7ofPJPNEbCsLJkUiT7a+smuojSceaq0w/C8NrpW3jP7vYDvN+yjtFbnFDYG3Z 0FCUrQ/zu1P4pr6yRb+0dDUF83Cd26tFNg1QEevlwWUJO4VxvVEi/EDXuJD5J4q2 UG0+wnffFvaFC0Uz5nLW00y6ESSYp1vJgyIJNla4W5nwL8YpTpnH0inFairNUice CZZagJXHi9nucWgtEJVL+LQIqDc9HCC0E5dNIcA+wS1kFRD6ll643UlJFPVsKADN M1I+6Yv1DIcEitbXAewl069vXAjAFZ04JngyjAdFfolDBpuUXCveR80/GyUoB7YP dQ== -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:41 2026 by rpki-client