This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930333a3a2f34382d3438203d3e20323133343133.roa File: 326130363a313238333a383930333a3a2f34382d3438203d3e20323133343133.roa (raw, json) Hash identifier: hfsX7O4ssow2aXydnwN9zYa6SNNgkh4xqDb4M6RjByw= Subject key identifier: A3:6E:F4:CB:44:35:96:32:5B:8C:5A:BA:1A:6C:DC:A6:D2:55:40:51 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 53C17AB69887DD372B60536FEE7BEB8EB8E84056 Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930333a3a2f34382d3438203d3e20323133343133.roa Signing time: Fri 28 Nov 2025 23:38:20 +0000 ROA not before: Fri 28 Nov 2025 23:33:20 +0000 ROA not after: Fri 27 Nov 2026 23:38:20 +0000 asID: 213413 IP address blocks: 2a06:1283:8903::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c1:7a:b6:98:87:dd:37:2b:60:53:6f:ee:7b:eb:8e:b8:e8:40:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Nov 28 23:33:20 2025 GMT Not After : Nov 27 23:38:20 2026 GMT Subject: CN=A36EF4CB443596325B8C5ABA1A6CDCA6D2554051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5e:a9:5e:fa:58:99:20:1d:68:a4:76:63:7f: 5c:1a:66:d5:88:c4:a2:99:7c:17:ea:ea:3b:51:6c: 7b:5d:30:44:06:40:cf:b2:d4:13:93:15:88:6c:22: 74:f7:d8:df:08:ef:02:ef:e6:dd:29:36:c5:4b:dd: e5:c8:0b:ac:98:2b:e1:05:cb:07:4b:b5:ed:17:08: 3a:30:cb:94:8a:39:db:db:24:8e:95:0c:18:b2:ef: fe:84:5d:98:b3:b1:d5:2f:47:20:d2:71:7e:97:a0: 6d:4d:dd:d9:f3:86:c6:28:e1:3c:9a:5c:b2:2b:44: 20:25:37:1d:e1:54:25:d0:ae:c2:d8:8a:a9:ec:bd: ea:10:90:a3:75:10:c5:fe:8c:fe:bc:f4:86:ed:d4: f1:81:b2:c8:e0:22:b5:0f:45:b4:97:fe:15:37:c8: 56:be:2b:91:ac:cf:7a:1e:36:76:9a:06:5b:10:86: 60:88:dd:fe:21:95:05:9a:79:01:6b:37:53:de:c7: 70:b5:44:9e:28:a6:85:31:00:f5:43:f0:db:44:66: 3c:12:64:a8:10:af:96:76:0a:c6:f5:5c:f7:e0:d9: 89:ca:e1:23:8d:4b:75:33:73:7c:c9:b4:ba:bb:07: 4d:05:9c:30:6e:89:d3:72:8d:5a:5f:76:ca:f8:93: 8b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6E:F4:CB:44:35:96:32:5B:8C:5A:BA:1A:6C:DC:A6:D2:55:40:51 X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930333a3a2f34382d3438203d3e20323133343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8903::/48 Signature Algorithm: sha256WithRSAEncryption 48:89:f7:d3:c1:49:de:57:b8:db:98:14:c0:e7:4b:9d:83:11: 0a:97:59:28:73:29:2a:6d:f8:dc:03:40:49:e7:dd:02:30:14: 19:52:32:da:de:da:fc:fa:1b:7d:ef:fe:1b:7e:26:e7:7f:75: 66:83:3b:6b:05:17:0b:64:1d:ad:2d:f2:40:31:fa:9f:e0:d1: f0:de:bd:a2:ac:2d:88:fd:5b:36:52:1e:0f:83:43:10:83:8a: cc:48:b1:fb:57:e4:ef:80:37:df:0d:44:ba:d8:fe:ea:3d:93: 6b:8c:d0:19:9f:41:a1:e8:b6:cd:c5:fc:08:0e:95:8f:c3:e7: 5c:d8:78:cd:fd:f9:77:b1:c8:03:38:7d:fc:92:89:5f:73:c3: da:06:5d:53:29:8c:c4:0e:23:45:fc:ba:95:24:d9:2b:81:f3: a5:6d:eb:b6:57:df:d4:ab:90:0c:b3:f6:87:e9:f7:be:83:55: ca:76:0d:31:dd:fd:ed:2d:a8:9b:e0:3a:4a:e2:01:0d:c8:dd: 9d:fb:f3:d9:db:59:65:9f:12:37:a7:26:6f:06:c7:3c:9d:50: bb:74:3b:45:71:4a:7b:21:16:4c:fb:5b:a2:bc:a3:67:08:d2: 12:18:94:69:8e:e5:62:1c:40:ac:56:d6:2d:97:e6:16:37:60: 3f:d9:0c:ab -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUU8F6tpiH3TcrYFNv7nvrjrjoQFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNTExMjgyMzMzMjBaFw0yNjExMjcyMzM4MjBaMDMxMTAvBgNV BAMTKEEzNkVGNENCNDQzNTk2MzI1QjhDNUFCQTFBNkNEQ0E2RDI1NTQwNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClXqle+liZIB1opHZjf1waZtWI xKKZfBfq6jtRbHtdMEQGQM+y1BOTFYhsInT32N8I7wLv5t0pNsVL3eXIC6yYK+EF ywdLte0XCDowy5SKOdvbJI6VDBiy7/6EXZizsdUvRyDScX6XoG1N3dnzhsYo4Tya XLIrRCAlNx3hVCXQrsLYiqnsveoQkKN1EMX+jP689Ibt1PGBssjgIrUPRbSX/hU3 yFa+K5Gsz3oeNnaaBlsQhmCI3f4hlQWaeQFrN1Pex3C1RJ4opoUxAPVD8NtEZjwS ZKgQr5Z2Csb1XPfg2YnK4SONS3Uzc3zJtLq7B00FnDBuidNyjVpfdsr4k4uhAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUo270y0Q1ljJbjFq6GmzcptJVQFEwHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTMzMzQzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kDMA0GCSqGSIb3DQEBCwUAA4IBAQBI iffTwUneV7jbmBTA50udgxEKl1kocykqbfjcA0BJ590CMBQZUjLa3tr8+ht97/4b fibnf3VmgztrBRcLZB2tLfJAMfqf4NHw3r2irC2I/Vs2Uh4Pg0MQg4rMSLH7V+Tv gDffDUS62P7qPZNrjNAZn0Gh6LbNxfwIDpWPw+dc2HjN/fl3scgDOH38kolfc8Pa Bl1TKYzEDiNF/LqVJNkrgfOlbeu2V9/Uq5AMs/aH6fe+g1XKdg0x3f3tLaib4DpK 4gENyN2d+/PZ21llnxI3pyZvBsc8nVC7dDtFcUp7IRZM+1uivKNnCNISGJRpjuVi HECsVtYtl+YWN2A/2Qyr -----END CERTIFICATE-----Generated at Thu Dec 4 09:19:22 2025 by rpki-client