This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386236303a3a2f34342d313238203d3e203131393637.roa File: 326130363a313238333a386236303a3a2f34342d313238203d3e203131393637.roa (raw, json) Hash identifier: WRoSZEYTQIxSRLQGq0/upYxyDMHhIPGlWdhsG56BZ7E= Subject key identifier: 32:BC:9E:27:4B:B0:0E:99:0B:48:88:8D:41:B5:2B:A8:77:39:C0:76 Certificate issuer: /CN=B113B31E9F01A2F41870E8C77492B18EBA830E07 Certificate serial: 3BA6F24C9BFFECB1E681AA119F40AE8A3B7CB88F Authority key identifier: B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386236303a3a2f34342d313238203d3e203131393637.roa Signing time: Tue 06 Jan 2026 18:54:36 +0000 ROA not before: Tue 06 Jan 2026 18:49:36 +0000 ROA not after: Tue 05 Jan 2027 18:54:36 +0000 asID: 11967 IP address blocks: 2a06:1283:8b60::/44 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a6:f2:4c:9b:ff:ec:b1:e6:81:aa:11:9f:40:ae:8a:3b:7c:b8:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B113B31E9F01A2F41870E8C77492B18EBA830E07 Validity Not Before: Jan 6 18:49:36 2026 GMT Not After : Jan 5 18:54:36 2027 GMT Subject: CN=32BC9E274BB00E990B48888D41B52BA87739C076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f2:ad:0d:08:4a:e8:d4:8d:d5:67:26:46:7e: b9:ef:6e:64:8a:b8:a8:91:32:45:e0:9c:c4:b3:2c: 31:67:0e:2f:f2:22:5d:ab:72:0c:4f:5b:0a:ec:86: 37:e2:73:99:a5:3a:4d:92:33:04:bb:68:31:09:0a: 19:ee:ec:39:37:84:7e:9e:be:d9:cc:29:2a:c5:c5: 80:d9:f7:a0:8f:05:90:83:df:ed:fd:b8:c6:59:1b: 47:a5:a4:e5:dd:39:e4:e1:dc:ef:6d:1f:84:e8:dc: 93:77:e3:e8:40:bb:0a:08:03:da:5a:cf:11:01:34: 59:44:a8:98:69:17:3f:6c:f4:e6:ef:07:db:b0:2d: a7:08:6f:b5:e3:a6:e6:9f:2d:5d:01:1f:f4:47:3a: a9:44:89:30:25:48:02:18:e8:96:fb:11:1c:ae:e2: 1c:5d:32:19:c3:9f:75:67:6f:c8:b6:60:ec:7f:62: 40:d4:f2:64:a8:e5:9d:e5:5b:c0:eb:b9:32:92:fc: 27:5f:b8:cc:40:59:97:ce:54:9d:74:ca:e3:08:a9: af:13:60:48:a8:c2:8a:bc:64:b3:74:f2:cb:de:9c: 84:ed:6b:3c:02:11:1c:d1:e5:1d:86:9e:5f:16:6c: 2e:54:16:8e:a5:95:78:66:98:a8:cc:05:c5:c3:85: a1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BC:9E:27:4B:B0:0E:99:0B:48:88:8D:41:B5:2B:A8:77:39:C0:76 X509v3 Authority Key Identifier: keyid:B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386236303a3a2f34342d313238203d3e203131393637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8b60::/44 Signature Algorithm: sha256WithRSAEncryption 3e:73:0c:08:4e:3f:48:99:04:2c:c5:f0:c9:c2:9a:6d:e2:81: 2e:9d:1f:25:a5:bd:d9:34:4f:89:8f:26:47:02:ac:3e:f0:9f: c5:d4:72:15:08:1a:7a:24:9d:60:f4:9e:86:70:15:6e:d0:2c: d4:d4:ed:d0:41:a9:a1:9d:fa:0f:98:0b:d9:66:8b:fb:c9:51: 52:ab:50:c3:cd:a4:d5:0d:9e:bc:25:07:bd:e0:f2:db:52:17: 5f:5f:f7:17:bd:a9:5f:e7:f1:ea:a1:2d:c4:a1:ef:dc:cd:25: ea:a1:8a:a5:7d:9c:94:9e:81:da:4e:4f:e2:73:a2:30:a0:0c: 10:32:b5:8e:59:33:96:02:64:a9:5f:a2:0c:22:34:73:1a:b8: 45:9c:00:c9:66:1d:e8:e5:9c:32:8e:06:60:7d:7d:fe:83:3d: 8e:b9:52:b5:10:a4:b1:18:27:da:da:30:14:30:a7:74:17:1d: 3e:89:f9:a3:ed:b8:2b:d2:42:b8:66:e1:f2:fe:c4:65:8d:20: 52:71:64:8b:40:69:d8:c2:a8:3d:c0:41:30:ed:a9:d8:09:78: 23:61:29:e2:6e:6b:f7:cd:8a:17:41:7e:14:e2:37:2f:0d:e4: 3f:d2:6f:27:a5:24:b5:41:72:b5:bd:d1:9d:71:2c:2a:3c:f3: f3:89:6c:c2 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUO6byTJv/7LHmgaoRn0Cuijt8uI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExM0IzMUU5RjAxQTJGNDE4NzBFOEM3NzQ5MkIxOEVC QTgzMEUwNzAeFw0yNjAxMDYxODQ5MzZaFw0yNzAxMDUxODU0MzZaMDMxMTAvBgNV BAMTKDMyQkM5RTI3NEJCMDBFOTkwQjQ4ODg4RDQxQjUyQkE4NzczOUMwNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC38q0NCEro1I3VZyZGfrnvbmSK uKiRMkXgnMSzLDFnDi/yIl2rcgxPWwrshjfic5mlOk2SMwS7aDEJChnu7Dk3hH6e vtnMKSrFxYDZ96CPBZCD3+39uMZZG0elpOXdOeTh3O9tH4To3JN34+hAuwoIA9pa zxEBNFlEqJhpFz9s9ObvB9uwLacIb7XjpuafLV0BH/RHOqlEiTAlSAIY6Jb7ERyu 4hxdMhnDn3Vnb8i2YOx/YkDU8mSo5Z3lW8DruTKS/CdfuMxAWZfOVJ10yuMIqa8T YEiowoq8ZLN08svenITtazwCERzR5R2Gnl8WbC5UFo6llXhmmKjMBcXDhaGJAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUMryeJ0uwDpkLSIiNQbUrqHc5wHYwHwYDVR0j BBgwFoAUsROzHp8BovQYcOjHdJKxjrqDDgcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzc5YTc5MDMtMmVkYi00OGFkLWFiZWItZWUzOWE3OWY4 NTA3LzIvQjExM0IzMUU5RjAxQTJGNDE4NzBFOEM3NzQ5MkIxOEVCQTgzMEUwNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9CMTEzQjMxRTlGMDFBMkY0MTg3MEU4Qzc3 NDkyQjE4RUJBODMwRTA3LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83NzlhNzkwMy0yZWRiLTQ4YWQtYWJlYi1lZTM5YTc5Zjg1MDcvMi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4NjIzNjMwM2EzYTJmMzQzNDJkMzEzMjM4MjAzZDNlMjAz MTMxMzkzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKgYSg4tgMA0GCSqGSIb3DQEBCwUAA4IBAQA+ cwwITj9ImQQsxfDJwppt4oEunR8lpb3ZNE+JjyZHAqw+8J/F1HIVCBp6JJ1g9J6G cBVu0CzU1O3QQamhnfoPmAvZZov7yVFSq1DDzaTVDZ68JQe94PLbUhdfX/cXvalf 5/HqoS3Eoe/czSXqoYqlfZyUnoHaTk/ic6IwoAwQMrWOWTOWAmSpX6IMIjRzGrhF nADJZh3o5ZwyjgZgfX3+gz2OuVK1EKSxGCfa2jAUMKd0Fx0+ifmj7bgr0kK4ZuHy /sRljSBScWSLQGnYwqg9wEEw7anYCXgjYSnibmv3zYoXQX4U4jcvDeQ/0m8npSS1 QXK1vdGdcSwqPPPziWzC -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:25 2026 by rpki-client