This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930633a3a2f34382d3438203d3e20323134373632.roa File: 326130363a313238333a383930633a3a2f34382d3438203d3e20323134373632.roa (raw, json) Hash identifier: 2rCozjaLN+ORp+rF15yl0cLwnMgwxsdIwkSr5DBlLzo= Subject key identifier: C4:A0:B4:F5:98:49:D7:D4:B2:9B:E6:4B:BD:B6:EC:21:50:C1:10:7B Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 7549548E601E139541315A08612D4C69F8C7C3DF Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930633a3a2f34382d3438203d3e20323134373632.roa Signing time: Thu 25 Dec 2025 13:57:05 +0000 ROA not before: Thu 25 Dec 2025 13:52:05 +0000 ROA not after: Thu 24 Dec 2026 13:57:05 +0000 asID: 214762 IP address blocks: 2a06:1283:890c::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 17:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:49:54:8e:60:1e:13:95:41:31:5a:08:61:2d:4c:69:f8:c7:c3:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Dec 25 13:52:05 2025 GMT Not After : Dec 24 13:57:05 2026 GMT Subject: CN=C4A0B4F59849D7D4B29BE64BBDB6EC2150C1107B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:69:da:40:d1:b2:65:17:a4:00:0b:c8:18:04: a5:be:f0:00:4c:34:7d:b9:9c:f1:95:67:c3:d2:14: 72:2f:7a:96:59:43:91:3e:4e:39:8a:a1:00:b7:07: 0a:25:ac:44:a9:55:ba:30:4a:99:15:88:c2:3e:0c: 6e:e4:08:98:cd:68:ee:12:34:80:6c:4a:f2:30:1f: 92:fc:4e:45:7f:bd:15:d6:f5:cd:b1:d4:6f:e6:66: 5b:43:9b:d4:97:c1:5e:e4:ee:6c:c2:91:d7:9e:a0: 2b:86:8a:5e:ce:79:4d:3a:88:45:0d:59:ff:6f:d6: db:8c:5a:5e:2f:45:4a:62:88:95:86:2e:b1:ea:8e: ea:e6:56:12:ca:b1:28:39:0c:d3:9e:49:59:27:e3: 1d:b4:fc:23:4a:e0:a4:3f:2a:a3:08:1f:ab:4b:1a: cd:a3:e5:a3:31:ab:0e:7a:84:20:56:3a:0a:88:68: 4c:04:95:f0:fe:6e:d6:0a:91:05:9a:b8:ea:e3:21: 72:77:77:03:61:cc:9d:b0:a3:ff:19:b3:5b:80:c0: a8:33:eb:da:36:87:32:fe:5d:11:c0:9f:76:87:a1: 9a:36:a1:ec:9f:93:2a:5f:46:d8:07:a5:ad:1d:d1: 98:b8:1b:0b:e5:a6:0b:50:80:f5:d8:3e:ca:e4:a5: 99:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A0:B4:F5:98:49:D7:D4:B2:9B:E6:4B:BD:B6:EC:21:50:C1:10:7B X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930633a3a2f34382d3438203d3e20323134373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:890c::/48 Signature Algorithm: sha256WithRSAEncryption 43:9c:c1:7e:f1:d4:f4:18:89:0d:17:fd:86:3f:6f:87:15:e9: 43:09:4f:83:ae:21:ac:23:53:d2:f9:0b:30:3f:5a:cc:d1:6a: c7:f8:32:8b:10:d6:0c:06:1a:9d:be:c0:e1:e8:f6:7c:a1:ec: bf:cf:da:8e:5d:62:a3:01:23:cd:3e:e5:36:2b:e5:68:88:d5: e9:5f:25:83:2c:45:3e:d4:db:21:24:5e:b0:da:21:6d:88:99: 88:dc:d0:38:92:68:4f:e9:97:1a:91:fb:4c:3d:ee:b9:c3:d3: ce:0e:3c:a1:f2:41:b8:22:7e:b4:70:de:78:44:97:40:54:83: 3b:9a:86:89:e3:b8:66:db:fe:1c:90:2c:f6:f1:4a:72:71:f5: 51:f4:35:09:5f:61:a9:91:62:7f:6d:34:5f:51:e6:60:69:b8: a3:9f:e0:ef:a6:04:b4:a5:7f:60:9a:de:96:b0:b1:ec:cc:31: af:0b:fd:cd:c8:49:9c:f7:24:8c:76:52:29:0c:7d:32:df:21: 55:dd:b4:01:7b:66:19:16:80:ca:e6:54:16:29:35:3c:3f:d4: d8:f7:27:20:3e:07:a1:71:74:8f:7b:58:74:2c:b9:4a:28:bc: 57:dc:f1:4a:47:e3:19:81:8c:f6:52:1f:8d:4f:6d:21:36:a6: c8:d5:9a:34 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUdUlUjmAeE5VBMVoIYS1MafjHw98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNTEyMjUxMzUyMDVaFw0yNjEyMjQxMzU3MDVaMDMxMTAvBgNV BAMTKEM0QTBCNEY1OTg0OUQ3RDRCMjlCRTY0QkJEQjZFQzIxNTBDMTEwN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNadpA0bJlF6QAC8gYBKW+8ABM NH25nPGVZ8PSFHIvepZZQ5E+TjmKoQC3BwolrESpVbowSpkViMI+DG7kCJjNaO4S NIBsSvIwH5L8TkV/vRXW9c2x1G/mZltDm9SXwV7k7mzCkdeeoCuGil7OeU06iEUN Wf9v1tuMWl4vRUpiiJWGLrHqjurmVhLKsSg5DNOeSVkn4x20/CNK4KQ/KqMIH6tL Gs2j5aMxqw56hCBWOgqIaEwElfD+btYKkQWauOrjIXJ3dwNhzJ2wo/8Zs1uAwKgz 69o2hzL+XRHAn3aHoZo2oeyfkypfRtgHpa0d0Zi4GwvlpgtQgPXYPsrkpZljAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUxKC09ZhJ19Sym+ZLvbbsIVDBEHswHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMDYzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzczNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kMMA0GCSqGSIb3DQEBCwUAA4IBAQBD nMF+8dT0GIkNF/2GP2+HFelDCU+DriGsI1PS+QswP1rM0WrH+DKLENYMBhqdvsDh 6PZ8oey/z9qOXWKjASPNPuU2K+VoiNXpXyWDLEU+1NshJF6w2iFtiJmI3NA4kmhP 6ZcakftMPe65w9PODjyh8kG4In60cN54RJdAVIM7moaJ47hm2/4ckCz28UpycfVR 9DUJX2GpkWJ/bTRfUeZgabijn+DvpgS0pX9gmt6WsLHszDGvC/3NyEmc9ySMdlIp DH0y3yFV3bQBe2YZFoDK5lQWKTU8P9TY9ycgPgehcXSPe1h0LLlKKLxX3PFKR+MZ gYz2Uh+NT20hNqbI1Zo0 -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:24 2026 by rpki-client