This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930313a3a2f34382d3438203d3e20323134323035.roa File: 326130363a313238333a383930313a3a2f34382d3438203d3e20323134323035.roa (raw, json) Hash identifier: cPNCLrbwdymPiqlNCY/iKCMb0/zZMwnLL5M7UNRh5H0= Subject key identifier: EA:29:AB:71:85:A7:50:FE:B7:38:05:FA:B6:A3:8E:81:06:00:1B:B4 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 782A074602AF12860326DB89358CE289005B79F5 Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930313a3a2f34382d3438203d3e20323134323035.roa Signing time: Fri 28 Nov 2025 23:38:20 +0000 ROA not before: Fri 28 Nov 2025 23:33:20 +0000 ROA not after: Fri 27 Nov 2026 23:38:20 +0000 asID: 214205 IP address blocks: 2a06:1283:8901::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:2a:07:46:02:af:12:86:03:26:db:89:35:8c:e2:89:00:5b:79:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Nov 28 23:33:20 2025 GMT Not After : Nov 27 23:38:20 2026 GMT Subject: CN=EA29AB7185A750FEB73805FAB6A38E8106001BB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:38:f1:2a:c0:d3:a5:0f:9d:b9:08:c1:56:a8: 58:ae:4e:18:98:69:c7:da:68:67:ba:e7:d6:b8:93: 5f:b7:02:cb:73:95:32:23:44:3f:fa:12:d9:98:74: f5:30:56:1e:69:66:de:ca:1c:9e:4d:74:c9:18:f0: d1:69:62:ab:5f:e2:bc:6b:53:86:54:b9:62:3e:66: b3:e0:9e:89:b3:e7:fa:95:25:c0:a8:fc:0d:b7:32: cb:f4:77:fe:f6:3e:df:6d:0b:df:64:65:fe:d1:88: 54:75:d1:f9:a3:a2:1d:b9:e9:6f:c5:c0:17:da:96: b2:fe:c5:07:11:55:cc:bb:a7:62:f3:b5:92:9f:5a: 1a:fd:c5:4e:69:7d:75:e4:35:7b:a3:b7:51:7b:9a: 1d:f2:a0:0b:6c:da:43:1f:e0:4f:1e:7e:9f:47:15: 27:7c:42:3a:b3:d9:b3:8b:99:f9:55:26:10:c6:e9: 87:ec:fd:e7:36:19:f9:75:91:96:33:c5:ad:6a:1d: 57:97:df:f0:dc:36:63:1b:a0:88:b7:96:e0:48:1b: 59:7a:02:61:37:87:46:94:f5:e2:83:1e:88:b0:de: 88:be:4d:e6:f5:7d:29:65:4b:7b:43:ab:3f:c5:9e: b7:ab:ca:a9:28:e0:e0:63:6a:17:d7:72:f1:f0:51: 75:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:29:AB:71:85:A7:50:FE:B7:38:05:FA:B6:A3:8E:81:06:00:1B:B4 X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930313a3a2f34382d3438203d3e20323134323035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8901::/48 Signature Algorithm: sha256WithRSAEncryption 1c:ee:77:39:6c:93:81:f3:df:86:16:88:b4:c7:84:63:c0:dc: 0d:77:1b:ac:9b:f4:f6:6b:81:44:7a:ff:0a:d6:a3:64:4a:7d: 80:21:d9:59:80:18:af:2e:0c:b6:d3:36:8f:63:68:cf:cd:f9: ba:7d:25:ce:ed:32:0e:d3:0c:72:17:fc:c0:bc:81:70:19:5c: c8:93:c6:41:3c:4e:31:82:df:5d:52:b2:14:57:f2:73:c9:c2: 15:76:b8:c2:2c:68:ab:5e:f5:ad:f3:00:c6:4e:dd:f4:5e:c3: e6:9e:0d:04:ac:c3:42:fd:ce:98:c5:a7:66:0c:bc:0f:d0:24: 7d:25:33:a9:61:b3:a0:b8:b5:81:86:e3:6a:a7:9c:79:93:b6: a1:51:da:38:91:8b:cc:a9:d0:e6:0b:b5:da:d5:eb:0c:52:80: a3:62:c0:51:ee:17:82:ab:af:93:68:77:ce:fe:4e:c7:ae:f2: e7:73:05:54:a0:ce:6f:5b:78:b4:41:01:30:18:3a:82:2e:71: 1d:f0:e8:ad:98:d1:8d:dc:0b:c7:4e:e5:02:81:2c:8c:ad:74: a1:0e:eb:ae:c7:ba:f6:7c:04:a0:39:b9:20:c1:17:09:90:01: c9:83:fe:5a:a8:ac:64:cf:ed:77:5a:20:cf:01:bd:e3:10:7e: b3:7e:54:22 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUeCoHRgKvEoYDJtuJNYziiQBbefUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNTExMjgyMzMzMjBaFw0yNjExMjcyMzM4MjBaMDMxMTAvBgNV BAMTKEVBMjlBQjcxODVBNzUwRkVCNzM4MDVGQUI2QTM4RTgxMDYwMDFCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEOPEqwNOlD525CMFWqFiuThiY acfaaGe659a4k1+3AstzlTIjRD/6EtmYdPUwVh5pZt7KHJ5NdMkY8NFpYqtf4rxr U4ZUuWI+ZrPgnomz5/qVJcCo/A23Msv0d/72Pt9tC99kZf7RiFR10fmjoh256W/F wBfalrL+xQcRVcy7p2LztZKfWhr9xU5pfXXkNXujt1F7mh3yoAts2kMf4E8efp9H FSd8Qjqz2bOLmflVJhDG6Yfs/ec2Gfl1kZYzxa1qHVeX3/DcNmMboIi3luBIG1l6 AmE3h0aU9eKDHoiw3oi+Teb1fSllS3tDqz/Fnreryqko4OBjahfXcvHwUXV1AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU6imrcYWnUP63OAX6tqOOgQYAG7QwHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzIzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kBMA0GCSqGSIb3DQEBCwUAA4IBAQAc 7nc5bJOB89+GFoi0x4RjwNwNdxusm/T2a4FEev8K1qNkSn2AIdlZgBivLgy20zaP Y2jPzfm6fSXO7TIO0wxyF/zAvIFwGVzIk8ZBPE4xgt9dUrIUV/JzycIVdrjCLGir XvWt8wDGTt30XsPmng0ErMNC/c6YxadmDLwP0CR9JTOpYbOguLWBhuNqp5x5k7ah Udo4kYvMqdDmC7Xa1esMUoCjYsBR7heCq6+TaHfO/k7HrvLncwVUoM5vW3i0QQEw GDqCLnEd8OitmNGN3AvHTuUCgSyMrXShDuuux7r2fASgObkgwRcJkAHJg/5aqKxk z+13WiDPAb3jEH6zflQi -----END CERTIFICATE-----Generated at Thu Dec 4 09:20:11 2025 by rpki-client