This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930613a3a2f34382d3438203d3e20323136333637.roa File: 326130363a313238333a383930613a3a2f34382d3438203d3e20323136333637.roa (raw, json) Hash identifier: HuUH/JYH1vthyPEN3kexTHE/fhKQ1xn353p6qv+mYJg= Subject key identifier: AF:AA:A8:4B:0A:5B:C8:51:E7:60:1B:03:B5:A6:53:D0:6F:28:C4:4F Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 6BE76FC765849119DF4959EEF7C8B96097628CD6 Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930613a3a2f34382d3438203d3e20323136333637.roa Signing time: Fri 28 Nov 2025 23:40:11 +0000 ROA not before: Fri 28 Nov 2025 23:35:11 +0000 ROA not after: Fri 27 Nov 2026 23:40:11 +0000 asID: 216367 IP address blocks: 2a06:1283:890a::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e7:6f:c7:65:84:91:19:df:49:59:ee:f7:c8:b9:60:97:62:8c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Nov 28 23:35:11 2025 GMT Not After : Nov 27 23:40:11 2026 GMT Subject: CN=AFAAA84B0A5BC851E7601B03B5A653D06F28C44F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4a:0f:9f:9a:96:55:35:c2:0a:24:fb:0c:04: 77:48:a7:0f:9f:5c:dd:95:9b:a4:06:db:bc:5b:4c: 05:eb:ab:ac:b8:6a:10:c5:ec:25:e8:2f:9f:9b:41: 22:51:0a:7a:14:0c:5d:de:5a:b3:b5:60:6e:27:ad: 0d:6e:23:1a:bf:89:23:d4:ab:0d:ca:52:db:83:80: 72:1b:07:52:14:55:b8:00:2e:d1:ca:ed:ff:d6:37: 9a:78:cd:71:2a:c6:83:60:cd:27:ea:46:02:3c:67: 81:4d:db:33:92:24:4d:9a:bd:8e:3a:c0:c2:83:55: a1:2d:87:69:80:86:df:87:c5:b5:2c:a2:78:95:18: f9:a6:bf:47:74:a6:6c:85:4b:56:ae:4b:a4:f4:4a: 82:ba:87:b3:49:27:1f:eb:53:00:d8:41:d2:cd:a2: a1:b5:10:40:d4:07:a7:70:46:54:5e:7e:52:f4:b4: 0e:0b:eb:48:4a:e3:09:1c:01:65:8f:ce:52:21:2c: 3e:0b:94:ba:23:c2:c3:da:17:5a:0b:a0:d8:f4:f6: 3c:91:7c:88:ae:92:62:d0:a6:ab:9c:37:7a:db:2a: e5:0f:27:cc:48:b3:22:e4:14:9a:c0:77:b3:f2:88: 0e:2a:11:38:5a:c7:79:99:7d:34:49:73:f1:f0:0a: 81:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AA:A8:4B:0A:5B:C8:51:E7:60:1B:03:B5:A6:53:D0:6F:28:C4:4F X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930613a3a2f34382d3438203d3e20323136333637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:890a::/48 Signature Algorithm: sha256WithRSAEncryption 4e:0e:ca:7b:c1:9c:f9:b0:05:5b:72:fe:7b:c2:8e:fc:32:36: 45:6a:60:2a:10:26:35:4a:55:03:8d:1d:15:ab:d2:3f:f6:d2: 17:92:c3:b1:10:a7:31:7c:f8:18:7d:7b:d3:a7:eb:08:51:b5: 86:66:a2:33:e9:17:19:d7:fe:aa:30:df:29:9c:7c:40:8f:b6: e1:93:41:b6:1c:07:6a:51:02:52:85:63:35:3f:e4:fd:6a:84: 4c:d5:57:be:1f:30:17:7f:a3:54:1e:68:1a:1f:9b:5a:de:44: e7:9d:64:d3:de:9b:fb:86:e7:38:c1:da:84:82:16:08:42:ae: 80:92:e2:e1:8c:95:fb:a6:d3:ea:4b:6f:0b:b0:d4:56:1b:7f: 1b:ae:be:ad:8a:4d:2c:20:13:7e:c6:96:88:b8:55:33:9e:fe: af:0d:75:41:f8:78:f9:6b:3f:08:f8:8e:dc:15:d7:6c:dc:1a: 30:4e:66:b7:52:c3:56:e0:98:65:14:53:0f:dd:37:99:e2:87: 55:2c:54:ab:cd:d0:7c:24:18:0c:eb:c5:d1:c7:7a:60:1a:24: 54:cb:f8:ea:14:ff:f4:f8:df:ba:06:d3:cb:ed:27:a6:b2:3d: 6a:20:26:7a:70:48:19:b2:b4:3f:ad:63:df:3d:60:10:06:04: 5f:e5:b5:1f -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUa+dvx2WEkRnfSVnu98i5YJdijNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNTExMjgyMzM1MTFaFw0yNjExMjcyMzQwMTFaMDMxMTAvBgNV BAMTKEFGQUFBODRCMEE1QkM4NTFFNzYwMUIwM0I1QTY1M0QwNkYyOEM0NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUSg+fmpZVNcIKJPsMBHdIpw+f XN2Vm6QG27xbTAXrq6y4ahDF7CXoL5+bQSJRCnoUDF3eWrO1YG4nrQ1uIxq/iSPU qw3KUtuDgHIbB1IUVbgALtHK7f/WN5p4zXEqxoNgzSfqRgI8Z4FN2zOSJE2avY46 wMKDVaEth2mAht+HxbUsoniVGPmmv0d0pmyFS1auS6T0SoK6h7NJJx/rUwDYQdLN oqG1EEDUB6dwRlReflL0tA4L60hK4wkcAWWPzlIhLD4LlLojwsPaF1oLoNj09jyR fIiukmLQpqucN3rbKuUPJ8xIsyLkFJrAd7PyiA4qEThax3mZfTRJc/HwCoFrAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUr6qoSwpbyFHnYBsDtaZT0G8oxE8wHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMDYxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM2MzMzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kKMA0GCSqGSIb3DQEBCwUAA4IBAQBO Dsp7wZz5sAVbcv57wo78MjZFamAqECY1SlUDjR0Vq9I/9tIXksOxEKcxfPgYfXvT p+sIUbWGZqIz6RcZ1/6qMN8pnHxAj7bhk0G2HAdqUQJShWM1P+T9aoRM1Ve+HzAX f6NUHmgaH5ta3kTnnWTT3pv7huc4wdqEghYIQq6AkuLhjJX7ptPqS28LsNRWG38b rr6tik0sIBN+xpaIuFUznv6vDXVB+Hj5az8I+I7cFdds3BowTma3UsNW4JhlFFMP 3TeZ4odVLFSrzdB8JBgM68XRx3pgGiRUy/jqFP/0+N+6BtPL7Semsj1qICZ6cEgZ srQ/rWPfPWAQBgRf5bUf -----END CERTIFICATE-----Generated at Thu Dec 4 09:19:23 2025 by rpki-client