This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930643a3a2f34382d3438203d3e20323136333637.roa File: 326130363a313238333a383930643a3a2f34382d3438203d3e20323136333637.roa (raw, json) Hash identifier: FnSpyT9OnuvPM/GugFyozsjtsmrHeVUUgj2NyDK1wuc= Subject key identifier: 12:D9:39:7D:60:33:EF:C3:E7:E8:F5:B1:E8:B4:D0:A4:B0:3F:07:AB Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 6B9C8860D96F06D2449D3D3507AE52E2658845 Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930643a3a2f34382d3438203d3e20323136333637.roa Signing time: Sat 27 Dec 2025 16:03:57 +0000 ROA not before: Sat 27 Dec 2025 15:58:57 +0000 ROA not after: Sat 26 Dec 2026 16:03:57 +0000 asID: 216367 IP address blocks: 2a06:1283:890d::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:9c:88:60:d9:6f:06:d2:44:9d:3d:35:07:ae:52:e2:65:88:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Dec 27 15:58:57 2025 GMT Not After : Dec 26 16:03:57 2026 GMT Subject: CN=12D9397D6033EFC3E7E8F5B1E8B4D0A4B03F07AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ff:10:2a:c2:14:c7:38:26:d2:9b:bc:58:05: d1:69:64:c8:64:49:2b:7a:b6:c4:f2:7d:5b:84:ae: db:db:bc:08:32:f8:57:5b:f2:ee:3d:b1:a4:64:a9: f5:eb:4a:9f:40:52:71:34:f6:22:15:a7:06:87:47: 1e:65:77:3e:84:e2:3f:bb:69:ee:54:96:59:e9:f0: d6:6b:d8:d8:77:63:6b:ee:97:49:ea:85:02:ab:7a: 5d:35:e7:c3:e5:41:a1:51:93:66:2f:e1:44:26:30: c3:0a:72:18:d0:87:a2:a8:81:66:b1:ec:77:84:96: 2c:c4:44:ee:09:ab:84:f4:db:97:38:b8:68:3d:47: c7:4a:9e:ab:5d:8c:45:f9:3d:99:65:66:17:68:35: 3a:47:aa:29:66:53:03:ac:02:f9:20:40:46:5f:d5: 94:b7:42:19:0e:e5:93:5b:8a:5d:d6:1c:62:5c:b5: 0e:ac:87:19:76:7c:6d:5d:66:58:59:be:7a:a7:6d: 00:e9:59:78:ed:25:69:5c:de:67:b5:c3:64:3d:2e: a8:6d:1a:f1:8a:8a:5a:8d:4a:19:20:c8:21:c3:eb: c9:87:00:29:0a:91:eb:b8:f4:0c:a6:1e:44:a7:75: b3:6a:7a:8b:ab:02:4f:59:df:83:ff:3a:01:49:a9: c3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D9:39:7D:60:33:EF:C3:E7:E8:F5:B1:E8:B4:D0:A4:B0:3F:07:AB X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930643a3a2f34382d3438203d3e20323136333637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:890d::/48 Signature Algorithm: sha256WithRSAEncryption 63:cf:7d:a8:36:3c:8c:d0:dc:4d:c3:c6:94:89:a5:3b:58:3a: 05:d3:34:08:e9:94:e6:03:6b:7a:77:60:ea:72:70:eb:93:3c: 94:b9:7e:3d:26:cb:77:9c:fc:c9:03:58:81:51:ed:21:bc:8f: 54:90:79:a2:ba:25:3b:97:91:c4:3d:33:04:0a:2d:65:98:7c: 53:9b:4f:a5:68:3f:7f:81:46:31:3b:1b:2c:63:62:0c:b0:4f: 63:cd:31:30:3e:97:a1:8f:3b:df:85:b1:18:11:74:e7:0b:76: a7:d2:df:f1:95:87:e7:5e:e2:f3:90:52:1d:9e:87:42:76:be: 42:4a:d9:0a:67:5c:5d:33:86:65:09:05:77:ff:4a:80:d6:b9: a9:77:a4:14:87:0a:40:f0:8d:5a:d2:2c:ab:6c:da:cf:1a:28: 47:c9:b8:4f:b6:56:3f:8e:8d:07:24:a3:e7:fc:bd:66:93:00: fb:bf:85:d5:9c:ec:c8:12:eb:b3:78:8d:26:32:d1:28:ea:8f: 0e:71:03:ae:e4:d9:c9:7d:68:f6:90:7e:37:85:24:56:0e:aa: 41:44:51:02:7b:ba:e0:29:40:16:79:65:f9:9d:59:c6:87:a9: f7:7a:52:3e:95:97:6b:b9:e1:61:0a:a5:3e:3f:54:de:be:b8: f2:10:8e:49 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgITa5yIYNlvBtJEnT01B65S4mWIRTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg1RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0QjY3ODM0REQz Q0QxM0M5MB4XDTI1MTIyNzE1NTg1N1oXDTI2MTIyNjE2MDM1N1owMzExMC8GA1UE AxMoMTJEOTM5N0Q2MDMzRUZDM0U3RThGNUIxRThCNEQwQTRCMDNGMDdBQjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAML/ECrCFMc4JtKbvFgF0WlkyGRJ K3q2xPJ9W4Su29u8CDL4V1vy7j2xpGSp9etKn0BScTT2IhWnBodHHmV3PoTiP7tp 7lSWWenw1mvY2Hdja+6XSeqFAqt6XTXnw+VBoVGTZi/hRCYwwwpyGNCHoqiBZrHs d4SWLMRE7gmrhPTblzi4aD1Hx0qeq12MRfk9mWVmF2g1OkeqKWZTA6wC+SBARl/V lLdCGQ7lk1uKXdYcYly1DqyHGXZ8bV1mWFm+eqdtAOlZeO0laVzeZ7XDZD0uqG0a 8YqKWo1KGSDIIcPryYcAKQqR67j0DKYeRKd1s2p6i6sCT1nfg/86AUmpw48CAwEA AaOCAoUwggKBMB0GA1UdDgQWBBQS2Tl9YDPvw+fo9bHotNCksD8HqzAfBgNVHSME GDAWgBRfu9Dz17geiv2Z5aNLZ4NN080TyTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5 NDIvMS81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0QjY3ODM0REQzQ0QxM0M5LmNy bDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY4YWJhYmJiLWYwNDgtNGRl MS05MjA2LThkNDBmMDcxODA4Yi82LzVGQkJEMEYzRDdCODFFOEFGRDk5RTVBMzRC Njc4MzRERDNDRDEzQzkuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzc4ZTYxNjExLTNiMGItNDFjZS04OGNkLWU1NjAzNTNmNjk0Mi8xLzMyNjEzMDM2 M2EzMTMyMzgzMzNhMzgzOTMwNjQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMx MzYzMzM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAqBhKDiQ0wDQYJKoZIhvcNAQELBQADggEBAGPP fag2PIzQ3E3DxpSJpTtYOgXTNAjplOYDa3p3YOpycOuTPJS5fj0my3ec/MkDWIFR 7SG8j1SQeaK6JTuXkcQ9MwQKLWWYfFObT6VoP3+BRjE7GyxjYgywT2PNMTA+l6GP O9+FsRgRdOcLdqfS3/GVh+de4vOQUh2eh0J2vkJK2QpnXF0zhmUJBXf/SoDWual3 pBSHCkDwjVrSLKts2s8aKEfJuE+2Vj+OjQcko+f8vWaTAPu/hdWc7MgS67N4jSYy 0Sjqjw5xA67k2cl9aPaQfjeFJFYOqkFEUQJ7uuApQBZ5ZfmdWcaHqfd6Uj6Vl2u5 4WEKpT4/VN6+uPIQjkk= -----END CERTIFICATE-----Generated at Sun Jan 18 13:14:04 2026 by rpki-client