This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383966303a3a2f34342d3434203d3e20323134303333.roa File: 326130363a313238333a383966303a3a2f34342d3434203d3e20323134303333.roa (raw, json) Hash identifier: uXHhm0ZjjPodrKnjp4qW+YTDv1/Z29fczrFjmi+w+J4= Subject key identifier: A3:BA:7D:DA:43:21:BF:74:2E:4D:E3:0D:8C:63:F7:D7:14:B1:8A:DB Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 592768B1D683A473DFD0D54430B2E799EFB58110 Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383966303a3a2f34342d3434203d3e20323134303333.roa Signing time: Fri 28 Nov 2025 23:38:20 +0000 ROA not before: Fri 28 Nov 2025 23:33:20 +0000 ROA not after: Fri 27 Nov 2026 23:38:20 +0000 asID: 214033 IP address blocks: 2a06:1283:89f0::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:27:68:b1:d6:83:a4:73:df:d0:d5:44:30:b2:e7:99:ef:b5:81:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Nov 28 23:33:20 2025 GMT Not After : Nov 27 23:38:20 2026 GMT Subject: CN=A3BA7DDA4321BF742E4DE30D8C63F7D714B18ADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:81:4e:e4:0d:d0:5e:5e:0f:0d:e2:76:7a:0d: 23:54:be:53:2e:1f:20:1a:f6:1c:6e:5c:10:9b:a1: be:cc:9f:3b:64:a0:9d:c9:ce:f0:f8:53:71:96:38: 64:4f:26:96:d1:81:28:0f:9e:9a:bf:45:c1:f2:e6: 34:fd:4a:9a:1f:e5:c7:d5:9c:44:12:df:5f:e3:2f: c4:cb:f5:2f:95:0a:f6:72:cc:a8:83:04:ae:a1:92: bf:46:e2:9c:70:14:36:2b:c6:60:ee:43:da:33:1b: bd:80:59:2c:88:7a:d6:25:28:7e:74:19:27:23:24: 96:82:78:36:c9:25:4c:1d:8c:93:c6:09:49:53:bb: 54:11:c4:3e:ba:eb:2b:e0:d5:2a:45:1f:d4:dd:ef: 58:2f:10:73:2f:3b:1c:12:ca:7d:d8:71:be:2a:02: ae:2e:2f:c7:e5:06:6b:cf:24:4f:7c:4e:37:a7:71: 55:8a:7e:24:d6:df:6b:dc:5d:3a:8f:35:7d:26:92: b1:ee:7d:e4:94:84:d6:36:3e:1a:2e:1e:ef:5f:f8: ea:62:75:ac:f7:23:ba:64:4a:37:18:83:17:81:bd: 8d:a5:e3:b0:70:b0:e1:5c:3d:2c:a2:a0:ca:5d:2e: bc:74:19:bb:0c:5c:45:9d:c5:06:60:5c:92:e9:a0: 0f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BA:7D:DA:43:21:BF:74:2E:4D:E3:0D:8C:63:F7:D7:14:B1:8A:DB X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383966303a3a2f34342d3434203d3e20323134303333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:89f0::/44 Signature Algorithm: sha256WithRSAEncryption 61:79:9a:51:3d:c8:cd:df:02:a1:9e:1d:95:56:83:cb:d8:44: d7:c6:d2:d4:6b:5d:e9:d6:a7:85:4e:8f:bb:66:08:fc:da:23: 79:19:60:f1:20:ce:df:ee:dd:eb:8c:f6:5e:3d:e2:1e:d1:de: fb:12:dd:a9:3a:91:c0:0b:fe:1e:6d:1d:d0:98:0f:a5:a5:90: d2:63:c6:37:4a:91:57:27:7b:b4:d8:dd:39:6d:06:d2:de:e1: 69:4f:e6:70:b8:13:c5:d8:4f:79:e9:25:5b:df:58:5d:53:ec: 8e:71:4e:5e:11:dd:c4:dd:74:f0:05:c0:68:a4:77:06:fd:f3: 42:6e:a5:45:0c:a6:00:44:fa:94:9a:0d:a9:73:90:3a:7f:d9: 90:a1:45:3e:11:15:e9:c9:d1:bd:41:b5:58:64:01:fb:77:43: 2c:28:ae:01:bd:41:79:4b:a4:f4:01:04:8f:e8:e7:b2:95:5b: b7:67:21:d9:72:9b:2a:69:32:24:26:cf:41:19:71:19:d4:92: 7e:e3:3d:14:3a:a6:41:02:ba:68:64:58:bb:1c:0f:4f:38:bf: c7:09:aa:65:4b:0d:fd:91:4f:de:d6:a7:ba:d8:4e:f6:02:da: ba:a0:5d:6b:68:d7:0f:ec:6d:9d:44:74:0c:60:db:d1:ac:00: 24:a7:4a:fe -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUWSdosdaDpHPf0NVEMLLnme+1gRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNTExMjgyMzMzMjBaFw0yNjExMjcyMzM4MjBaMDMxMTAvBgNV BAMTKEEzQkE3RERBNDMyMUJGNzQyRTRERTMwRDhDNjNGN0Q3MTRCMThBREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCigU7kDdBeXg8N4nZ6DSNUvlMu HyAa9hxuXBCbob7MnztkoJ3JzvD4U3GWOGRPJpbRgSgPnpq/RcHy5jT9Spof5cfV nEQS31/jL8TL9S+VCvZyzKiDBK6hkr9G4pxwFDYrxmDuQ9ozG72AWSyIetYlKH50 GScjJJaCeDbJJUwdjJPGCUlTu1QRxD666yvg1SpFH9Td71gvEHMvOxwSyn3Ycb4q Aq4uL8flBmvPJE98TjencVWKfiTW32vcXTqPNX0mkrHufeSUhNY2PhouHu9f+Opi daz3I7pkSjcYgxeBvY2l47BwsOFcPSyioMpdLrx0GbsMXEWdxQZgXJLpoA+/AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUo7p92kMhv3QuTeMNjGP31xSxitswHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4Mzk2NjMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz MTM0MzAzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKgYSg4nwMA0GCSqGSIb3DQEBCwUAA4IBAQBh eZpRPcjN3wKhnh2VVoPL2ETXxtLUa13p1qeFTo+7Zgj82iN5GWDxIM7f7t3rjPZe PeIe0d77Et2pOpHAC/4ebR3QmA+lpZDSY8Y3SpFXJ3u02N05bQbS3uFpT+ZwuBPF 2E956SVb31hdU+yOcU5eEd3E3XTwBcBopHcG/fNCbqVFDKYARPqUmg2pc5A6f9mQ oUU+ERXpydG9QbVYZAH7d0MsKK4BvUF5S6T0AQSP6OeylVu3ZyHZcpsqaTIkJs9B GXEZ1JJ+4z0UOqZBArpoZFi7HA9POL/HCaplSw39kU/e1qe62E72Atq6oF1raNcP 7G2dRHQMYNvRrAAkp0r+ -----END CERTIFICATE-----Generated at Thu Dec 4 09:20:11 2025 by rpki-client