This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/326130643a643930353a3a2f33322d3332203d3e20323038393135.roa File: 326130643a643930353a3a2f33322d3332203d3e20323038393135.roa (raw, json) Hash identifier: 2xUP0qecdhpogJJIXpKqaPO0rpU4gp47dCbQRpKimlY= Subject key identifier: 66:33:88:DC:61:AA:A3:12:14:91:6C:C1:FA:41:F5:66:DF:B1:2D:48 Certificate issuer: /CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Certificate serial: 5F3D8FD98D20DC7B6106622E0509615876B72023 Authority key identifier: AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/326130643a643930353a3a2f33322d3332203d3e20323038393135.roa Signing time: Wed 10 Dec 2025 01:04:21 +0000 ROA not before: Wed 10 Dec 2025 00:59:21 +0000 ROA not after: Wed 09 Dec 2026 01:04:21 +0000 asID: 208915 IP address blocks: 2a0d:d905::/32 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 04:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3d:8f:d9:8d:20:dc:7b:61:06:62:2e:05:09:61:58:76:b7:20:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Validity Not Before: Dec 10 00:59:21 2025 GMT Not After : Dec 9 01:04:21 2026 GMT Subject: CN=663388DC61AAA31214916CC1FA41F566DFB12D48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3b:d3:c6:6c:30:b1:2a:fe:28:05:58:67:ad: 8e:0e:62:fb:17:6a:51:ac:22:c8:16:7d:d1:71:26: 74:04:51:d3:18:76:78:bd:40:31:e1:7e:21:1c:77: a0:3e:1d:b3:ff:f9:df:eb:cc:06:cd:69:f4:c7:b1: 1f:a8:93:ba:3b:ae:6c:b4:42:92:46:11:e5:d9:09: f9:8a:e7:c3:38:f8:11:96:7c:86:37:09:c0:44:22: a9:99:15:fe:fd:49:39:b1:de:8f:5b:0f:02:04:30: 18:17:63:9f:17:a0:39:29:a5:ac:c8:3b:7f:f9:91: 2b:c1:5e:09:6e:6f:50:9a:54:a6:c1:52:7f:9c:1d: 20:f4:58:f6:17:13:7e:4b:1e:2f:05:3a:b9:98:ca: 1c:96:9c:4e:73:c9:f0:72:a9:34:e7:10:20:a7:92: 00:f2:3a:fd:41:9e:81:cc:f5:cc:6d:f5:cf:c7:af: 1a:3b:50:c8:2d:68:8d:ef:b6:9e:0b:33:6e:b7:3a: 2e:e0:c5:d6:2b:e9:00:07:58:74:0c:6c:b7:b6:36: ed:56:f7:96:48:b8:8e:2d:05:cd:55:00:30:46:3b: 75:7a:83:66:5f:e7:71:db:0f:bd:b9:97:9c:98:ae: e3:8a:63:cd:6f:8c:b0:48:b6:1d:3f:93:8b:99:28: b3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:33:88:DC:61:AA:A3:12:14:91:6C:C1:FA:41:F5:66:DF:B1:2D:48 X509v3 Authority Key Identifier: keyid:AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/326130643a643930353a3a2f33322d3332203d3e20323038393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d905::/32 Signature Algorithm: sha256WithRSAEncryption 49:4d:c9:bc:e7:77:41:b2:cc:b6:26:22:c8:1d:5a:18:96:ff: e9:8c:6b:b4:ad:99:b6:fe:ba:e4:63:8a:21:ad:bc:3c:84:36: d4:fb:f0:ff:d7:94:25:8c:2b:e0:07:3e:e2:85:c4:b2:ec:f1: 82:3a:8a:70:55:25:54:70:91:e3:03:55:a8:d1:d0:e3:76:9a: f2:17:47:5c:3c:71:c3:5e:05:d0:44:2d:9b:e4:43:dc:f4:5f: 83:03:6f:5a:df:a4:d0:8b:3e:82:46:da:fa:32:d1:80:94:db: d2:d1:65:61:62:7d:ab:eb:00:b6:f5:ad:44:d0:5e:c8:7b:74: c3:77:24:00:f7:9d:d4:9c:a3:78:4d:79:ac:b1:44:95:a3:c6: ed:5b:05:0e:3a:31:22:3b:d8:30:3e:f7:45:30:96:b9:2c:b8: c5:dd:13:a6:b6:f7:59:63:58:2f:41:50:b2:71:ed:07:b1:bb: 53:07:36:b5:b0:f4:ca:ff:a2:22:00:88:55:5c:69:c2:72:46: 43:0c:12:aa:ee:27:74:b1:8f:69:b3:66:cc:b2:db:59:8c:a2: 77:5c:1e:53:71:82:d3:4d:07:44:60:2d:91:05:13:4a:3f:41: 1f:5c:e5:cb:1d:d3:14:e4:c9:b2:8b:3b:06:b9:15:53:cf:69: f8:18:77:7c -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIUXz2P2Y0g3HthBmIuBQlhWHa3ICMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0Ex QTI4QjMyNDAeFw0yNTEyMTAwMDU5MjFaFw0yNjEyMDkwMTA0MjFaMDMxMTAvBgNV BAMTKDY2MzM4OERDNjFBQUEzMTIxNDkxNkNDMUZBNDFGNTY2REZCMTJENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkO9PGbDCxKv4oBVhnrY4OYvsX alGsIsgWfdFxJnQEUdMYdni9QDHhfiEcd6A+HbP/+d/rzAbNafTHsR+ok7o7rmy0 QpJGEeXZCfmK58M4+BGWfIY3CcBEIqmZFf79STmx3o9bDwIEMBgXY58XoDkppazI O3/5kSvBXglub1CaVKbBUn+cHSD0WPYXE35LHi8FOrmYyhyWnE5zyfByqTTnECCn kgDyOv1BnoHM9cxt9c/Hrxo7UMgtaI3vtp4LM263Oi7gxdYr6QAHWHQMbLe2Nu1W 95ZIuI4tBc1VADBGO3V6g2Zf53HbD725l5yYruOKY81vjLBIth0/k4uZKLPBAgMB AAGjggJuMIICajAdBgNVHQ4EFgQUZjOI3GGqoxIUkWzB+kH1Zt+xLUgwHwYDVR0j BBgwFoAUrH+bwwwEs6I2vfikMIaeyhoosyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAtZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5 MTE2LzEvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4QjMyNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4 QjMyNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAt ZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5MTE2LzEvMzI2MTMwNjQzYTY0MzkzMDM1 M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzMDM4MzkzMTM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA Kg3ZBTANBgkqhkiG9w0BAQsFAAOCAQEASU3JvOd3QbLMtiYiyB1aGJb/6YxrtK2Z tv665GOKIa28PIQ21Pvw/9eUJYwr4Ac+4oXEsuzxgjqKcFUlVHCR4wNVqNHQ43aa 8hdHXDxxw14F0EQtm+RD3PRfgwNvWt+k0Is+gkba+jLRgJTb0tFlYWJ9q+sAtvWt RNBeyHt0w3ckAPed1JyjeE15rLFElaPG7VsFDjoxIjvYMD73RTCWuSy4xd0Tprb3 WWNYL0FQsnHtB7G7Uwc2tbD0yv+iIgCIVVxpwnJGQwwSqu4ndLGPabNmzLLbWYyi d1weU3GC000HRGAtkQUTSj9BH1zlyx3TFOTJsos7BrkVU89p+Bh3fA== -----END CERTIFICATE-----Generated at Wed Dec 10 21:40:38 2025 by rpki-client