This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930303a3a2f34302d3430203d3e20323133343133.roa File: 326130363a313238333a383930303a3a2f34302d3430203d3e20323133343133.roa (raw, json) Hash identifier: 0gYE6skrisUrM06D53bvZrZFAv0EfqoV+nCI7G9OKOs= Subject key identifier: 14:EA:DE:24:D4:DF:CC:1C:C6:6B:B8:18:65:DB:71:F6:22:ED:BD:6E Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 6B80DD52157FDDF4249385E48412F37436836C Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930303a3a2f34302d3430203d3e20323133343133.roa Signing time: Fri 28 Nov 2025 23:38:20 +0000 ROA not before: Fri 28 Nov 2025 23:33:20 +0000 ROA not after: Fri 27 Nov 2026 23:38:20 +0000 asID: 213413 IP address blocks: 2a06:1283:8900::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:80:dd:52:15:7f:dd:f4:24:93:85:e4:84:12:f3:74:36:83:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Nov 28 23:33:20 2025 GMT Not After : Nov 27 23:38:20 2026 GMT Subject: CN=14EADE24D4DFCC1CC66BB81865DB71F622EDBD6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:29:bf:fb:6b:eb:7f:c4:af:bb:20:bc:24:8c: 6c:dd:44:1b:25:0c:fb:f2:62:64:ee:5d:76:74:d1: 28:ed:db:1a:41:31:3c:53:62:bc:32:30:f6:db:13: 83:d2:c2:6f:a3:ac:f4:19:15:eb:75:8b:c2:86:e0: be:50:14:f4:36:00:c6:5b:c4:ce:fa:30:7c:ea:6f: 46:d3:06:c8:7a:eb:3b:6d:d9:98:5f:19:c6:55:3d: bc:3c:f2:67:10:45:9d:60:d4:98:87:70:66:d4:6e: 3e:74:52:f7:a9:59:ba:6f:f9:35:c6:8b:ff:e1:61: 0e:68:18:58:32:2b:09:43:f2:96:cf:7f:fe:bd:3b: 8e:c3:90:1b:79:af:c9:92:0d:ab:95:c1:d9:36:ee: 5e:08:0e:99:a1:f0:12:5f:3d:cb:01:8a:87:87:0f: 0c:c6:1f:8b:59:2f:54:0c:c9:30:44:06:3c:39:07: c1:8d:cb:71:29:b6:f2:52:fd:03:34:96:73:9c:f3: 51:14:d8:30:a0:87:c5:45:27:3f:1c:e8:fa:bf:2f: 97:e2:aa:f5:33:1e:42:cf:41:4c:c0:9b:a4:07:77: b2:fa:33:4f:7f:8f:56:d4:bd:ba:5d:96:a8:18:65: 06:9e:e8:1b:a6:ab:be:33:82:3c:5b:96:b0:93:a6: e6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EA:DE:24:D4:DF:CC:1C:C6:6B:B8:18:65:DB:71:F6:22:ED:BD:6E X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930303a3a2f34302d3430203d3e20323133343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8900::/40 Signature Algorithm: sha256WithRSAEncryption 7a:36:be:63:a7:9b:3c:c5:32:e3:ef:9d:73:91:c3:5d:79:75: c5:da:db:5f:a0:2a:c1:99:3f:5e:12:d9:08:07:03:1d:b4:27: c1:02:67:d3:74:d4:09:64:ad:e2:3e:0f:8b:1f:ae:0f:6a:f4: a6:b6:c3:ec:8b:91:a1:ae:87:04:e3:43:0a:cf:62:42:d1:2a: 30:9d:c0:28:24:c5:e8:fc:a6:be:23:d7:53:5a:ff:49:4f:0e: 08:a7:0a:0c:c0:92:22:52:f5:a0:48:8a:bf:e1:1a:3d:88:a7: e4:74:ce:f6:55:ab:f8:5e:0e:be:df:09:b5:ab:f8:54:68:f8: de:da:07:d9:c0:8e:8c:5f:e8:e5:c5:69:db:a8:fd:1a:87:3f: ed:8c:f5:90:97:2e:dc:1c:f5:ec:24:e0:6e:33:a8:e1:b5:f9: 51:fb:8d:f2:ab:57:0c:65:a4:24:11:d4:da:88:e1:6a:61:85: 29:85:d8:a6:87:30:31:a7:6d:68:9f:53:0f:f3:0e:85:e8:3f: 14:87:06:71:76:b3:df:1e:1f:dd:a0:0b:c8:8e:52:fd:39:f9: c5:3a:33:14:33:1f:ea:86:0c:e5:43:d0:48:3b:17:a9:b7:49: c7:48:70:19:5b:c5:f6:28:78:00:0b:23:b4:c8:a6:d4:7b:b1: bd:ad:f6:f6 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgITa4DdUhV/3fQkk4XkhBLzdDaDbDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg1RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0QjY3ODM0REQz Q0QxM0M5MB4XDTI1MTEyODIzMzMyMFoXDTI2MTEyNzIzMzgyMFowMzExMC8GA1UE AxMoMTRFQURFMjRENERGQ0MxQ0M2NkJCODE4NjVEQjcxRjYyMkVEQkQ2RTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIopv/tr63/Er7sgvCSMbN1EGyUM +/JiZO5ddnTRKO3bGkExPFNivDIw9tsTg9LCb6Os9BkV63WLwobgvlAU9DYAxlvE zvowfOpvRtMGyHrrO23ZmF8ZxlU9vDzyZxBFnWDUmIdwZtRuPnRS96lZum/5NcaL /+FhDmgYWDIrCUPyls9//r07jsOQG3mvyZINq5XB2TbuXggOmaHwEl89ywGKh4cP DMYfi1kvVAzJMEQGPDkHwY3LcSm28lL9AzSWc5zzURTYMKCHxUUnPxzo+r8vl+Kq 9TMeQs9BTMCbpAd3svozT3+PVtS9ul2WqBhlBp7oG6arvjOCPFuWsJOm5vsCAwEA AaOCAoQwggKAMB0GA1UdDgQWBBQU6t4k1N/MHMZruBhl23H2Iu29bjAfBgNVHSME GDAWgBRfu9Dz17geiv2Z5aNLZ4NN080TyTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5 NDIvMS81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0QjY3ODM0REQzQ0QxM0M5LmNy bDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY4YWJhYmJiLWYwNDgtNGRl MS05MjA2LThkNDBmMDcxODA4Yi82LzVGQkJEMEYzRDdCODFFOEFGRDk5RTVBMzRC Njc4MzRERDNDRDEzQzkuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzc4ZTYxNjExLTNiMGItNDFjZS04OGNkLWU1NjAzNTNmNjk0Mi8xLzMyNjEzMDM2 M2EzMTMyMzgzMzNhMzgzOTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjMx MzMzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqBhKDiTANBgkqhkiG9w0BAQsFAAOCAQEAeja+ Y6ebPMUy4++dc5HDXXl1xdrbX6AqwZk/XhLZCAcDHbQnwQJn03TUCWSt4j4Pix+u D2r0prbD7IuRoa6HBONDCs9iQtEqMJ3AKCTF6PymviPXU1r/SU8OCKcKDMCSIlL1 oEiKv+EaPYin5HTO9lWr+F4Ovt8Jtav4VGj43toH2cCOjF/o5cVp26j9Goc/7Yz1 kJcu3Bz17CTgbjOo4bX5UfuN8qtXDGWkJBHU2ojhamGFKYXYpocwMadtaJ9TD/MO heg/FIcGcXaz3x4f3aALyI5S/Tn5xTozFDMf6oYM5UPQSDsXqbdJx0hwGVvF9ih4 AAsjtMim1Huxva329g== -----END CERTIFICATE-----Generated at Thu Dec 4 09:19:22 2025 by rpki-client