This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931313a3a2f34382d3438203d3e20323134333138.roa File: 326130363a313238333a383931313a3a2f34382d3438203d3e20323134333138.roa (raw, json) Hash identifier: nxTxBfayiVQT25dQojMI7kQmseMMilAT7TuM473ASuo= Subject key identifier: B4:47:FC:F0:4A:8A:90:40:97:3A:14:BD:81:61:8E:DC:1F:5A:79:80 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 6D1485F75DCF516A0EDE77E556316937FCFEE57A Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931313a3a2f34382d3438203d3e20323134333138.roa Signing time: Thu 01 Jan 2026 18:14:03 +0000 ROA not before: Thu 01 Jan 2026 18:09:03 +0000 ROA not after: Thu 31 Dec 2026 18:14:03 +0000 asID: 214318 IP address blocks: 2a06:1283:8911::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:14:85:f7:5d:cf:51:6a:0e:de:77:e5:56:31:69:37:fc:fe:e5:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Jan 1 18:09:03 2026 GMT Not After : Dec 31 18:14:03 2026 GMT Subject: CN=B447FCF04A8A9040973A14BD81618EDC1F5A7980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:75:32:3b:80:8d:eb:d1:1d:46:76:d4:e1:e7: 16:7a:c1:fe:cd:14:5c:73:35:8a:b4:e7:98:ed:ac: f6:e7:a0:85:51:00:b6:9c:73:a8:24:d4:46:d9:77: 9e:27:03:a2:bc:4b:4b:98:7e:84:1c:88:2f:e3:3b: da:f7:ad:c6:66:5f:a3:fb:98:81:16:d5:f0:82:38: a9:53:3b:2a:e3:a6:3a:d6:7d:e7:62:5d:59:87:45: ef:22:66:77:93:70:47:a2:6f:80:a9:d8:d7:09:80: 48:3c:31:a7:01:7b:91:2f:60:d0:80:b3:53:cb:a5: e5:f0:10:db:a9:fc:f4:22:13:a6:1c:46:d4:02:1b: 3f:5b:2c:db:2f:b5:14:a5:1c:c9:12:9f:0f:7d:3c: 4b:97:09:33:86:10:ed:99:4d:4b:07:84:71:ec:45: ba:84:54:ef:17:32:2d:df:9d:f2:ce:c3:31:bf:9a: 73:57:c8:7a:c2:aa:a6:6a:97:37:2f:ce:36:8d:31: 9b:5d:a5:3b:49:28:ed:4f:d3:8f:ac:ee:9f:d1:42: cf:09:81:4d:e6:11:11:9f:4f:e7:2e:31:ab:07:22: ae:4d:78:fd:7e:54:87:3d:ee:e9:e1:bd:b3:4f:7d: 29:fe:15:a0:7b:8e:11:72:f9:3d:8d:a5:ac:49:96: bd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:47:FC:F0:4A:8A:90:40:97:3A:14:BD:81:61:8E:DC:1F:5A:79:80 X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931313a3a2f34382d3438203d3e20323134333138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8911::/48 Signature Algorithm: sha256WithRSAEncryption 38:3d:dc:bf:1b:de:a6:ef:bf:60:7d:96:80:e1:2d:79:71:db: 3c:f6:48:21:19:be:19:74:79:53:05:ae:a0:4a:aa:d7:88:9c: 5f:5b:e1:99:e6:5c:2e:f9:ff:a2:98:de:bc:16:38:a4:e7:6d: 7d:3b:07:40:d0:a6:66:46:b6:c2:c7:23:0d:7c:88:59:ed:52: 9f:8d:95:84:b6:1c:6c:bf:f5:28:6f:d6:dc:30:90:b7:e8:16: 26:a1:48:a1:cd:c8:80:ff:fe:49:5d:8f:df:bd:94:a8:9a:6d: 62:f7:c9:98:28:28:37:f9:fd:3d:3a:88:6d:cc:3a:97:52:6c: 1c:c6:fa:fd:e4:d3:96:39:b6:cc:0b:76:0b:77:57:11:6e:06: 28:bc:e8:49:86:c2:c2:d6:2f:ca:6d:33:f3:ac:b7:bf:a5:dc: c8:90:14:de:30:ec:70:ec:c4:29:17:30:c4:6b:64:4d:7e:b6: 55:c8:4c:a7:22:2f:b9:d5:77:fa:4a:0b:e0:9b:f8:3b:14:7d: a6:53:7f:36:80:4a:b7:23:81:c4:52:b8:b0:f1:51:ef:a2:7c: 31:b8:9a:79:86:89:74:11:c1:8f:4e:ab:2b:9c:2a:50:a9:b0: ee:ea:91:76:eb:f7:56:fe:4c:4f:f9:d8:32:f6:2b:d5:30:aa: 1f:e0:08:99 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUbRSF913PUWoO3nflVjFpN/z+5XowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNjAxMDExODA5MDNaFw0yNjEyMzExODE0MDNaMDMxMTAvBgNV BAMTKEI0NDdGQ0YwNEE4QTkwNDA5NzNBMTRCRDgxNjE4RURDMUY1QTc5ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2dTI7gI3r0R1GdtTh5xZ6wf7N FFxzNYq055jtrPbnoIVRALacc6gk1EbZd54nA6K8S0uYfoQciC/jO9r3rcZmX6P7 mIEW1fCCOKlTOyrjpjrWfediXVmHRe8iZneTcEeib4Cp2NcJgEg8MacBe5EvYNCA s1PLpeXwENup/PQiE6YcRtQCGz9bLNsvtRSlHMkSnw99PEuXCTOGEO2ZTUsHhHHs RbqEVO8XMi3fnfLOwzG/mnNXyHrCqqZqlzcvzjaNMZtdpTtJKO1P04+s7p/RQs8J gU3mERGfT+cuMasHIq5NeP1+VIc97unhvbNPfSn+FaB7jhFy+T2NpaxJlr1pAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUtEf88EqKkECXOhS9gWGO3B9aeYAwHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMTMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kRMA0GCSqGSIb3DQEBCwUAA4IBAQA4 Pdy/G96m779gfZaA4S15cds89kghGb4ZdHlTBa6gSqrXiJxfW+GZ5lwu+f+imN68 Fjik5219OwdA0KZmRrbCxyMNfIhZ7VKfjZWEthxsv/Uob9bcMJC36BYmoUihzciA //5JXY/fvZSomm1i98mYKCg3+f09OohtzDqXUmwcxvr95NOWObbMC3YLd1cRbgYo vOhJhsLC1i/KbTPzrLe/pdzIkBTeMOxw7MQpFzDEa2RNfrZVyEynIi+51Xf6Sgvg m/g7FH2mU382gEq3I4HEUriw8VHvonwxuJp5hol0EcGPTqsrnCpQqbDu6pF26/dW /kxP+dgy9ivVMKof4AiZ -----END CERTIFICATE-----Generated at Sun Jan 18 13:14:03 2026 by rpki-client