This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa File: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (raw, json) Hash identifier: 0PI46warPOAGZrQe90bl3lA4fAE4MCISdbWQKd8cmUk= Subject key identifier: 68:97:C1:75:95:AA:D4:91:2A:23:7A:98:CA:54:83:2A:2F:1F:42:D0 Certificate issuer: /CN=3537F961668E4765578095AB33A4351BB72C9A63 Certificate serial: 132C80CDC8304ACAD80DBC7CD659CABD10612976 Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa Signing time: Wed 31 Dec 2025 21:18:47 +0000 ROA not before: Wed 31 Dec 2025 21:13:47 +0000 ROA not after: Wed 30 Dec 2026 21:18:47 +0000 asID: 205848 IP address blocks: 2a06:1282:10::/44 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2c:80:cd:c8:30:4a:ca:d8:0d:bc:7c:d6:59:ca:bd:10:61:29:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63 Validity Not Before: Dec 31 21:13:47 2025 GMT Not After : Dec 30 21:18:47 2026 GMT Subject: CN=6897C17595AAD4912A237A98CA54832A2F1F42D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:1a:af:49:8a:fb:7a:14:6d:e5:f3:13:77: ef:53:96:74:c0:13:f8:1f:b5:cb:15:e8:02:93:02: bc:68:ab:9c:03:43:e3:0d:75:6a:bf:a3:b6:04:43: 46:29:28:62:ba:08:9f:b7:b3:00:fc:89:1d:83:e5: 82:06:69:46:f0:f0:30:0b:7c:f8:b1:a9:ad:94:19: 37:fc:5d:fa:03:f4:6a:af:8c:3d:19:7d:94:51:7d: c6:ce:c6:48:11:34:99:1a:c2:d7:ff:3d:a6:44:07: a1:5a:ef:80:bf:be:ed:e0:6a:a2:62:8f:e0:9c:a7: f1:50:78:66:37:32:31:a3:d1:fc:5a:28:21:b2:6a: f7:9a:67:27:da:4c:3a:98:87:e7:0f:14:a9:de:6a: 52:5a:e3:e8:9e:41:be:f8:99:ff:7c:02:8a:80:6a: 26:47:45:5a:36:ce:fa:df:55:9a:2f:2a:f8:65:69: a5:63:c4:65:b5:3c:34:d3:8e:de:b0:34:0c:22:49: 93:bd:5f:99:52:cb:56:02:a6:c7:a3:ba:8e:d5:c2: 5e:c1:02:8c:48:35:07:77:9d:ae:51:7a:16:c7:f3: a7:50:20:09:34:56:0c:9b:1d:6e:81:fe:5b:01:4f: 53:d6:4e:f2:97:15:d1:aa:6d:70:77:cd:06:19:5e: 54:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:97:C1:75:95:AA:D4:91:2A:23:7A:98:CA:54:83:2A:2F:1F:42:D0 X509v3 Authority Key Identifier: keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1282:10::/44 Signature Algorithm: sha256WithRSAEncryption 99:84:b7:b7:98:7a:5b:9c:9f:d4:38:b6:f9:85:eb:df:34:87: e4:79:36:7b:80:6a:84:17:2c:10:03:03:6b:7b:84:4b:46:2c: e2:23:a6:a5:41:2c:ae:81:0b:93:b9:a4:14:97:4c:44:80:73: 9b:b4:da:7c:1c:29:dd:e5:31:03:18:20:32:4a:b6:fd:5f:fa: 71:fb:30:53:a2:6c:86:7d:b0:8f:92:05:c2:6e:b6:f8:c1:74: 1f:e1:11:77:34:31:89:61:43:7f:96:9e:5c:a1:10:22:0b:c6: c8:74:8d:9e:9c:18:1d:e6:21:7c:b7:d1:3b:11:67:e7:2a:e8: 29:93:3c:2b:f6:19:b0:aa:5f:e4:f3:84:4a:25:e8:df:00:8f: aa:71:93:78:b5:3d:1f:fb:5e:d0:c4:6a:c3:15:ce:12:00:e7: 7e:6d:7c:09:c4:f5:67:15:44:fc:9c:98:3f:90:a2:bb:a8:c3: cb:e1:31:04:23:e5:30:b8:c5:a6:6f:9a:64:c0:11:46:ff:b8: 24:a7:20:7b:d2:b2:b8:23:88:16:f3:7e:30:59:6c:5a:5b:18: 2c:d1:5a:fb:c3:4e:d9:62:59:bc:44:f7:0b:f9:d2:3b:61:fb: 24:1c:a1:7f:4d:7b:2f:af:e3:1a:47:a2:b7:be:ef:e3:19:3e: f7:1b:5d:fc -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUEyyAzcgwSsrYDbx81lnKvRBhKXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJC NzJDOUE2MzAeFw0yNTEyMzEyMTEzNDdaFw0yNjEyMzAyMTE4NDdaMDMxMTAvBgNV BAMTKDY4OTdDMTc1OTVBQUQ0OTEyQTIzN0E5OENBNTQ4MzJBMkYxRjQyRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxehqvSYr7ehRt5fMTd+9TlnTA E/gftcsV6AKTArxoq5wDQ+MNdWq/o7YEQ0YpKGK6CJ+3swD8iR2D5YIGaUbw8DAL fPixqa2UGTf8XfoD9GqvjD0ZfZRRfcbOxkgRNJkawtf/PaZEB6Fa74C/vu3gaqJi j+Ccp/FQeGY3MjGj0fxaKCGyaveaZyfaTDqYh+cPFKnealJa4+ieQb74mf98AoqA aiZHRVo2zvrfVZovKvhlaaVjxGW1PDTTjt6wNAwiSZO9X5lSy1YCpsejuo7Vwl7B AoxINQd3na5RehbH86dQIAk0VgybHW6B/lsBT1PWTvKXFdGqbXB3zQYZXlRXAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUaJfBdZWq1JEqI3qYylSDKi8fQtAwHwYDVR0j BBgwFoAUNTf5YWaOR2VXgJWrM6Q1G7csmmMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYtZTU5MC00YTRmLTg0NjMtODMxN2MyYTFj MDQ4LzEvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJDOUE2My5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJD OUE2My5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYt ZTU5MC00YTRmLTg0NjMtODMxN2MyYTFjMDQ4LzEvMzI2MTMwMzYzYTMxMzIzODMy M2EzMTMwM2EzYTJmMzQzNDJkMzEzMjM4MjAzZDNlMjAzMjMwMzUzODM0Mzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwQqBhKCABAwDQYJKoZIhvcNAQELBQADggEBAJmEt7eYelucn9Q4tvmF 6980h+R5NnuAaoQXLBADA2t7hEtGLOIjpqVBLK6BC5O5pBSXTESAc5u02nwcKd3l MQMYIDJKtv1f+nH7MFOibIZ9sI+SBcJutvjBdB/hEXc0MYlhQ3+WnlyhECILxsh0 jZ6cGB3mIXy30TsRZ+cq6CmTPCv2GbCqX+TzhEol6N8Aj6pxk3i1PR/7XtDEasMV zhIA535tfAnE9WcVRPycmD+Qoruow8vhMQQj5TC4xaZvmmTAEUb/uCSnIHvSsrgj iBbzfjBZbFpbGCzRWvvDTtliWbxE9wv50jth+yQcoX9Ney+v4xpHore+7+MZPvcb Xfw= -----END CERTIFICATE-----Generated at Sat Jan 10 22:07:04 2026 by rpki-client