This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930663a3a2f34382d3438203d3e20323133343133.roa File: 326130363a313238333a383930663a3a2f34382d3438203d3e20323133343133.roa (raw, json) Hash identifier: vOy3Hoo12y1MaF1xhG57rJd7z5CmXrBfc6rBSzJ2oUE= Subject key identifier: 0C:A0:2F:D1:F2:CA:D0:5E:FB:CC:07:F6:6A:F3:FE:7B:D6:B3:2C:E8 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 5B09A584E83013AFF023C57A1B28B25B93B2E1B7 Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930663a3a2f34382d3438203d3e20323133343133.roa Signing time: Sun 28 Dec 2025 21:05:05 +0000 ROA not before: Sun 28 Dec 2025 21:00:05 +0000 ROA not after: Sun 27 Dec 2026 21:05:05 +0000 asID: 213413 IP address blocks: 2a06:1283:890f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:09:a5:84:e8:30:13:af:f0:23:c5:7a:1b:28:b2:5b:93:b2:e1:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Dec 28 21:00:05 2025 GMT Not After : Dec 27 21:05:05 2026 GMT Subject: CN=0CA02FD1F2CAD05EFBCC07F66AF3FE7BD6B32CE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ab:77:94:f3:0d:cc:6b:12:1c:2c:ff:d1:b5: cb:44:d4:23:31:39:9d:73:8f:f8:83:d7:3c:f4:f5: af:02:a8:01:c3:6b:9c:a9:8b:d3:9f:70:8b:9c:37: e5:f8:2a:73:e9:38:c1:53:40:ca:d4:6b:f5:e1:48: 83:1a:fa:e0:04:3b:3e:4a:12:b8:d6:39:07:cb:7b: b1:7e:e8:82:38:96:b9:30:a9:c0:75:62:e3:80:f3: 62:00:25:91:ac:9a:69:a3:d1:c0:5c:ef:7b:9c:34: 66:b1:1c:95:a8:54:5f:b6:9e:02:3a:43:ed:a1:d6: 87:0f:61:10:1c:75:41:98:2d:2c:86:ff:8c:39:cb: a7:37:44:40:64:34:d3:71:88:0e:aa:77:e6:49:c3: ae:7a:f5:71:7a:6a:6a:82:79:3c:ab:af:7e:1d:94: 7c:87:8c:be:39:f2:a9:27:58:1a:f3:64:43:ad:e8: 16:ec:eb:34:41:81:a0:6b:df:fb:00:ea:5c:5e:44: 5e:b6:fa:9f:37:0d:f7:1b:6c:0a:07:58:9d:8e:c0: 44:b3:89:03:94:bd:b8:c5:aa:ee:01:5e:a2:0e:d0: 44:83:31:f8:34:89:09:8e:22:b7:ec:ec:9e:c3:23: 3f:e4:1d:87:3d:b0:3e:6d:42:e2:1d:15:d1:06:d1: 7d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A0:2F:D1:F2:CA:D0:5E:FB:CC:07:F6:6A:F3:FE:7B:D6:B3:2C:E8 X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930663a3a2f34382d3438203d3e20323133343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:890f::/48 Signature Algorithm: sha256WithRSAEncryption 0c:13:06:c4:08:f8:54:66:e0:7b:0f:76:c9:91:a6:4a:46:46: 2d:d7:dc:cb:db:0d:e4:c0:d3:7e:f5:c4:0f:72:1b:63:af:f0: 4a:c3:be:aa:92:f4:90:3d:7a:4a:4d:f4:22:da:70:83:fd:89: 22:12:dc:e5:fd:da:6a:2f:96:6b:08:38:23:4b:cb:a8:56:d5: e6:03:97:78:78:f0:b4:46:68:4e:e1:64:90:83:ae:f6:f0:d4: f9:96:0d:df:63:c5:b4:39:22:5a:fd:f2:18:ce:04:ac:ec:10: d9:8e:22:39:13:e0:29:ac:2a:4c:99:7f:41:55:7e:b0:21:c7: 93:ec:c4:f8:e5:92:3d:8b:28:e9:28:06:50:8f:46:e9:a0:4f: 1a:b7:d8:35:e7:78:e4:79:d6:72:70:35:bf:e9:a7:ef:98:33: 7e:66:b8:84:34:85:8b:1e:be:86:d2:9f:5b:53:d1:60:f6:9d: 5e:46:e5:ab:22:1d:6d:33:98:52:3a:e7:fb:2d:61:01:c4:c3: 13:f6:8d:a3:b2:8b:9e:9f:f8:08:04:98:f8:7c:a2:42:1e:9a: ee:00:82:d7:9c:96:a9:b3:ab:2f:36:46:07:59:af:01:f8:7e: 7a:68:15:0d:ca:46:79:fb:99:c4:fb:57:69:10:c2:9c:6d:c1: 78:a9:6b:c1 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUWwmlhOgwE6/wI8V6GyiyW5Oy4bcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNTEyMjgyMTAwMDVaFw0yNjEyMjcyMTA1MDVaMDMxMTAvBgNV BAMTKDBDQTAyRkQxRjJDQUQwNUVGQkNDMDdGNjZBRjNGRTdCRDZCMzJDRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdq3eU8w3MaxIcLP/RtctE1CMx OZ1zj/iD1zz09a8CqAHDa5ypi9OfcIucN+X4KnPpOMFTQMrUa/XhSIMa+uAEOz5K ErjWOQfLe7F+6II4lrkwqcB1YuOA82IAJZGsmmmj0cBc73ucNGaxHJWoVF+2ngI6 Q+2h1ocPYRAcdUGYLSyG/4w5y6c3REBkNNNxiA6qd+ZJw6569XF6amqCeTyrr34d lHyHjL458qknWBrzZEOt6Bbs6zRBgaBr3/sA6lxeRF62+p83DfcbbAoHWJ2OwESz iQOUvbjFqu4BXqIO0ESDMfg0iQmOIrfs7J7DIz/kHYc9sD5tQuIdFdEG0X3JAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUDKAv0fLK0F77zAf2avP+e9azLOgwHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMDY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTMzMzQzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kPMA0GCSqGSIb3DQEBCwUAA4IBAQAM EwbECPhUZuB7D3bJkaZKRkYt19zL2w3kwNN+9cQPchtjr/BKw76qkvSQPXpKTfQi 2nCD/YkiEtzl/dpqL5ZrCDgjS8uoVtXmA5d4ePC0RmhO4WSQg6728NT5lg3fY8W0 OSJa/fIYzgSs7BDZjiI5E+AprCpMmX9BVX6wIceT7MT45ZI9iyjpKAZQj0bpoE8a t9g153jkedZycDW/6afvmDN+ZriENIWLHr6G0p9bU9Fg9p1eRuWrIh1tM5hSOuf7 LWEBxMMT9o2jsouen/gIBJj4fKJCHpruAILXnJaps6svNkYHWa8B+H56aBUNykZ5 +5nE+1dpEMKcbcF4qWvB -----END CERTIFICATE-----Generated at Sun Jan 18 13:14:03 2026 by rpki-client