This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/323630323a663764653a3a2f34302d3438203d3e203331383938.roa File: 323630323a663764653a3a2f34302d3438203d3e203331383938.roa (raw, json) Hash identifier: D9VdjvhOYF09b5z9awGHcc1wRjsMlbsTgh+JB0uGMwY= Subject key identifier: 32:FB:66:44:08:31:9E:20:0B:A1:BB:33:53:8B:F7:A7:A0:9B:B0:44 Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 34123CCF11762606084302C9C3486F4C1B10A699 Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/323630323a663764653a3a2f34302d3438203d3e203331383938.roa Signing time: Wed 31 Dec 2025 14:27:21 +0000 ROA not before: Wed 31 Dec 2025 14:22:21 +0000 ROA not after: Wed 30 Dec 2026 14:27:21 +0000 asID: 31898 IP address blocks: 2602:f7de::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 09:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:12:3c:cf:11:76:26:06:08:43:02:c9:c3:48:6f:4c:1b:10:a6:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Dec 31 14:22:21 2025 GMT Not After : Dec 30 14:27:21 2026 GMT Subject: CN=32FB664408319E200BA1BB33538BF7A7A09BB044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f0:19:2f:33:a7:5c:bd:c8:28:de:f1:c6:a2: 02:02:30:16:ce:70:a4:87:32:71:40:3a:eb:1a:86: a6:b2:97:c2:a2:cd:fe:93:bc:c0:9d:c8:96:c8:30: 18:b4:12:cc:c1:56:2f:c0:ff:9a:c4:02:cf:ab:1b: a0:90:90:ec:b8:8d:17:7b:54:18:81:b5:20:71:ca: 65:45:c7:68:a0:af:75:86:d5:df:90:82:86:02:0f: c4:46:0c:9c:ab:eb:7f:a6:95:f7:e2:6a:ae:4a:34: 17:14:92:f0:a7:53:f4:86:d1:cc:40:af:f4:ba:c3: a7:bc:35:c8:b4:95:60:2a:f6:74:9b:37:11:c1:2e: 92:73:bd:dd:9e:20:09:a3:6d:10:59:92:6b:5b:94: 59:e0:90:c6:71:2c:af:5e:29:9e:5d:b2:05:53:cb: d0:92:a8:15:5a:26:ad:39:4b:b6:51:25:a2:fe:68: d4:07:73:fe:b3:8d:e8:67:52:03:96:9d:42:6f:d4: 66:6e:97:e3:c6:c4:07:2a:28:c2:ee:ca:89:ed:01: ff:c6:6d:a8:3a:83:36:9f:8a:29:2d:e3:ed:af:94: 22:f3:5f:76:82:0c:bd:5a:ec:8d:5a:1c:c5:b8:c4: 17:c5:a6:d5:57:82:42:03:2f:09:64:b1:b0:50:41: 53:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FB:66:44:08:31:9E:20:0B:A1:BB:33:53:8B:F7:A7:A0:9B:B0:44 X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/323630323a663764653a3a2f34302d3438203d3e203331383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f7de::/40 Signature Algorithm: sha256WithRSAEncryption 9c:71:d2:b6:66:8f:62:42:5e:e0:3c:0d:8e:3a:b1:a8:69:a3: 43:d8:93:b7:ab:9a:76:90:3c:b7:78:40:dc:e0:68:bc:68:c8: fc:29:16:23:8c:e5:79:1f:c7:09:88:cd:3d:ec:0a:2a:b7:c2: 3d:0f:53:d1:ac:cb:15:af:8d:c0:92:df:99:61:30:bc:e0:e3: ee:af:f6:4e:03:e2:b3:a4:ce:a4:d5:b2:76:bf:00:1b:6a:61: 48:af:8f:66:fe:1d:61:ae:4f:60:2c:97:10:fc:be:33:06:44: d9:7b:f3:db:0f:76:7c:96:80:5d:bf:ad:c5:d9:aa:0c:1c:6d: c0:46:ce:9c:b5:fd:f3:9b:fb:65:44:03:bd:44:a0:ca:42:dd: 8a:7f:88:bc:b1:8b:4a:15:6b:93:bc:0e:a3:a1:86:3b:1f:2d: f7:21:e9:63:30:55:e0:7f:92:72:67:cf:69:ce:fb:c1:3c:29: 77:3f:eb:68:8d:5a:a0:9b:a7:e6:78:14:c8:d5:5f:80:cb:98: 7c:43:be:43:a8:cd:a0:1c:25:fa:9a:f5:59:0a:83:d0:b6:57: de:42:04:92:fa:cf:cf:f3:90:7c:9b:cd:5e:97:c0:64:64:d3: 3b:c2:2a:a4:ea:4f:c8:21:8f:64:65:f0:1c:9b:ba:99:c4:1f: 6f:33:93:55 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIUNBI8zxF2JgYIQwLJw0hvTBsQppkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjUxMjMxMTQyMjIxWhcNMjYxMjMwMTQyNzIx WjAzMTEwLwYDVQQDEygzMkZCNjY0NDA4MzE5RTIwMEJBMUJCMzM1MzhCRjdBN0Ew OUJCMDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PAZLzOnXL3I KN7xxqICAjAWznCkhzJxQDrrGoamspfCos3+k7zAnciWyDAYtBLMwVYvwP+axALP qxugkJDsuI0Xe1QYgbUgccplRcdooK91htXfkIKGAg/ERgycq+t/ppX34mquSjQX FJLwp1P0htHMQK/0usOnvDXItJVgKvZ0mzcRwS6Sc73dniAJo20QWZJrW5RZ4JDG cSyvXimeXbIFU8vQkqgVWiatOUu2USWi/mjUB3P+s43oZ1IDlp1Cb9RmbpfjxsQH KijC7sqJ7QH/xm2oOoM2n4opLePtr5Qi8192ggy9WuyNWhzFuMQXxabVV4JCAy8J ZLGwUEFTmQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFDL7ZkQIMZ4gC6G7M1OL96eg m7BEMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUH MAuGgYtyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4MTViYi8xLzMyMzYzMDMy M2E2NjM3NjQ2NTNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMzMzEzODM5Mzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAmAvfeADANBgkqhkiG9w0BAQsFAAOCAQEAnHHStmaPYkJe4DwNjjqx qGmjQ9iTt6uadpA8t3hA3OBovGjI/CkWI4zleR/HCYjNPewKKrfCPQ9T0azLFa+N wJLfmWEwvODj7q/2TgPis6TOpNWydr8AG2phSK+PZv4dYa5PYCyXEPy+MwZE2Xvz 2w92fJaAXb+txdmqDBxtwEbOnLX985v7ZUQDvUSgykLdin+IvLGLShVrk7wOo6GG Ox8t9yHpYzBV4H+ScmfPac77wTwpdz/raI1aoJun5ngUyNVfgMuYfEO+Q6jNoBwl +pr1WQqD0LZX3kIEkvrPz/OQfJvNXpfAZGTTO8IqpOpPyCGPZGXwHJu6mcQfbzOT VQ== -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:45 2026 by rpki-client