This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930343a3a2f34382d3438203d3e20323134373632.roa File: 326130363a313238333a383930343a3a2f34382d3438203d3e20323134373632.roa (raw, json) Hash identifier: +ucDYfCsKINgleLYp642WIR5LEPN0kWQYDVnDQaA83s= Subject key identifier: F1:55:70:FE:DF:CA:02:58:69:7C:C6:45:9D:74:4F:BA:F5:D8:28:E2 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 504952A13118DEFC36E42D2A1EB5C6DACD3B4FD0 Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930343a3a2f34382d3438203d3e20323134373632.roa Signing time: Fri 28 Nov 2025 23:38:20 +0000 ROA not before: Fri 28 Nov 2025 23:33:20 +0000 ROA not after: Fri 27 Nov 2026 23:38:20 +0000 asID: 214762 IP address blocks: 2a06:1283:8904::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 14:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:49:52:a1:31:18:de:fc:36:e4:2d:2a:1e:b5:c6:da:cd:3b:4f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Nov 28 23:33:20 2025 GMT Not After : Nov 27 23:38:20 2026 GMT Subject: CN=F15570FEDFCA0258697CC6459D744FBAF5D828E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fd:47:8a:ea:6e:21:aa:2f:9d:3e:29:d7:ec: b8:89:83:c0:8d:40:cd:40:03:c9:bf:3d:4b:2f:41: ee:ff:3a:72:1e:34:0a:57:45:f0:45:b4:24:ba:5d: eb:87:cc:b7:a8:6b:db:b7:4e:1d:5a:be:c3:92:6a: 74:7d:a3:0b:c0:53:26:b1:41:1d:83:c4:87:64:1f: 92:72:8f:1f:50:6f:97:96:03:a4:5f:40:a3:95:3f: 34:02:53:a6:1f:1b:0a:8d:dc:df:37:58:e2:4a:27: 47:10:c5:e5:2a:81:51:f6:1f:45:cf:bc:dc:d7:56: 30:15:21:72:34:82:fa:d0:8d:d0:83:71:db:2c:b3: ac:9f:dc:40:0c:65:5d:6d:96:18:94:2c:fc:bc:f0: d2:fc:1f:38:57:db:73:92:37:0e:a2:d2:23:6d:bc: 32:68:ec:b2:84:cf:5d:d4:78:c6:b8:76:f9:15:83: 8b:f3:c7:25:4a:9e:12:84:26:4f:df:73:8a:9c:44: d4:59:28:bd:96:12:1a:f0:8f:9a:56:d5:e1:df:62: 8a:3e:b9:f1:86:4d:82:81:6e:9f:28:55:fb:5e:41: 85:89:0b:67:6e:db:52:f0:a8:af:42:f8:fb:a6:58: 61:e5:7d:57:33:26:be:90:41:3e:c5:89:a9:52:49: fe:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:55:70:FE:DF:CA:02:58:69:7C:C6:45:9D:74:4F:BA:F5:D8:28:E2 X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930343a3a2f34382d3438203d3e20323134373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8904::/48 Signature Algorithm: sha256WithRSAEncryption 84:b1:59:e4:db:b2:f6:22:ab:42:17:64:06:0b:d0:44:d0:6f: 45:ba:bc:56:db:22:3f:02:c8:fd:5e:85:d2:9d:35:9a:ec:4a: 5b:d8:64:f7:2c:23:aa:7c:f7:2f:26:6e:5d:4c:38:85:7d:01: cf:f1:d4:29:48:84:c0:b0:49:63:7c:26:21:cd:85:08:e2:9e: 6f:0e:91:c5:23:64:1b:24:1f:c4:fb:e3:96:11:91:19:ae:5f: e1:55:f9:3d:59:11:6a:82:32:72:c2:50:b1:f9:6e:b7:b6:dc: 2a:0b:b7:c3:80:b4:85:ba:2d:42:08:02:8b:e4:3e:87:7b:de: ed:a8:3a:31:a9:ae:6c:01:70:35:31:86:25:d3:11:ca:9f:eb: c6:ef:04:0f:cc:d6:a6:ec:4d:06:2f:66:22:02:03:1f:5f:14: 0e:d7:6a:3d:86:29:42:91:03:f0:5c:68:3a:01:12:5a:ae:63: 7f:d1:62:a6:dd:f4:3f:7c:ee:f5:2b:6e:ea:fb:5a:d0:68:16: be:0a:88:9c:88:f4:56:72:89:f3:d0:a1:cc:bb:a8:f0:cc:23: 9d:01:b2:f1:9d:d5:bb:90:ad:ce:47:94:1b:c1:7c:30:e6:27: 3e:18:60:49:3b:3d:00:43:89:d3:9b:4c:7e:a8:86:de:da:f7: a5:0a:21:49 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUUElSoTEY3vw25C0qHrXG2s07T9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNTExMjgyMzMzMjBaFw0yNjExMjcyMzM4MjBaMDMxMTAvBgNV BAMTKEYxNTU3MEZFREZDQTAyNTg2OTdDQzY0NTlENzQ0RkJBRjVEODI4RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY/UeK6m4hqi+dPinX7LiJg8CN QM1AA8m/PUsvQe7/OnIeNApXRfBFtCS6XeuHzLeoa9u3Th1avsOSanR9owvAUyax QR2DxIdkH5Jyjx9Qb5eWA6RfQKOVPzQCU6YfGwqN3N83WOJKJ0cQxeUqgVH2H0XP vNzXVjAVIXI0gvrQjdCDcdsss6yf3EAMZV1tlhiULPy88NL8HzhX23OSNw6i0iNt vDJo7LKEz13UeMa4dvkVg4vzxyVKnhKEJk/fc4qcRNRZKL2WEhrwj5pW1eHfYoo+ ufGGTYKBbp8oVfteQYWJC2du21LwqK9C+PumWGHlfVczJr6QQT7FialSSf4nAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU8VVw/t/KAlhpfMZFnXRPuvXYKOIwHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzczNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kEMA0GCSqGSIb3DQEBCwUAA4IBAQCE sVnk27L2IqtCF2QGC9BE0G9FurxW2yI/Asj9XoXSnTWa7Epb2GT3LCOqfPcvJm5d TDiFfQHP8dQpSITAsEljfCYhzYUI4p5vDpHFI2QbJB/E++OWEZEZrl/hVfk9WRFq gjJywlCx+W63ttwqC7fDgLSFui1CCAKL5D6He97tqDoxqa5sAXA1MYYl0xHKn+vG 7wQPzNam7E0GL2YiAgMfXxQO12o9hilCkQPwXGg6ARJarmN/0WKm3fQ/fO71K27q +1rQaBa+CoiciPRWconz0KHMu6jwzCOdAbLxndW7kK3OR5QbwXww5ic+GGBJOz0A Q4nTm0x+qIbe2velCiFJ -----END CERTIFICATE-----Generated at Thu Dec 4 07:32:15 2025 by rpki-client