This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa File: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (raw, json) Hash identifier: VD8/e5WUGI5SMs1h4LuaM43eCjUy2NSH/je82Dvnymo= Subject key identifier: CC:40:CD:BC:08:CE:28:3A:E0:E0:A2:B5:BF:E3:FD:9F:69:A0:E6:45 Certificate issuer: /CN=3537F961668E4765578095AB33A4351BB72C9A63 Certificate serial: 7ECA8BE5F08CCF37EA9686DD4902E8F4C6DF2EFC Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa Signing time: Wed 31 Dec 2025 21:19:02 +0000 ROA not before: Wed 31 Dec 2025 21:14:02 +0000 ROA not after: Wed 30 Dec 2026 21:19:02 +0000 asID: 205848 IP address blocks: 2a06:1282:20::/44 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ca:8b:e5:f0:8c:cf:37:ea:96:86:dd:49:02:e8:f4:c6:df:2e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63 Validity Not Before: Dec 31 21:14:02 2025 GMT Not After : Dec 30 21:19:02 2026 GMT Subject: CN=CC40CDBC08CE283AE0E0A2B5BFE3FD9F69A0E645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:be:30:73:e5:87:80:a7:af:05:14:6d:2e:6e: cd:bd:8d:56:52:82:b9:25:8b:a2:cb:77:13:bb:79: 73:f0:22:20:60:5a:1f:7a:ce:ed:5c:2d:46:90:61: 6f:f5:89:c2:74:93:09:d6:ff:47:6b:e5:8f:d8:f3: 56:e1:6a:be:4c:f7:13:0d:02:80:b7:b2:d0:9b:0f: 88:37:fc:ae:45:91:dc:20:3e:85:3a:bc:13:ab:1f: 13:b2:a3:7b:20:55:b7:a9:e3:f4:53:8e:a1:44:a3: 35:7f:ff:7e:0b:f8:ee:a9:30:d3:f5:08:37:4f:de: 6e:d9:ec:db:7b:b9:d8:7e:2d:f8:dd:69:30:65:6b: 95:4e:4c:a1:11:7f:61:43:ba:bd:38:6a:e0:25:82: 53:4e:04:06:5d:57:b3:10:fc:7c:1e:65:8b:03:c8: 7c:be:6d:8d:df:fe:52:74:ab:c0:3e:ba:95:f2:c4: 27:61:88:1a:54:27:41:64:12:b1:e5:c2:ca:cc:02: c5:64:3f:f2:da:97:67:3b:82:59:61:a3:df:b8:92: 2c:b7:eb:f5:51:60:c7:ea:cc:7c:3e:2c:c7:eb:83: 99:40:97:43:fe:53:bb:89:cb:03:35:f8:23:b4:f1: 6f:7d:ca:5d:c2:ad:3e:3c:e9:f7:ed:8e:e1:85:24: 94:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:40:CD:BC:08:CE:28:3A:E0:E0:A2:B5:BF:E3:FD:9F:69:A0:E6:45 X509v3 Authority Key Identifier: keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1282:20::/44 Signature Algorithm: sha256WithRSAEncryption 18:cf:a4:74:05:fd:92:37:5c:f5:73:ad:a7:86:79:59:17:b8: 00:1c:36:53:21:f0:d5:1a:51:0a:23:06:77:46:82:ff:d0:37: e4:35:24:dd:c4:7e:9a:94:17:c6:12:22:d0:0c:c2:a3:09:ad: c3:d5:19:1d:a7:c8:17:64:74:31:28:91:15:87:dd:85:08:6c: 7d:72:ec:c0:36:16:79:ff:1c:7a:f3:10:2b:8a:f4:f6:b7:f8: cc:75:d5:94:2a:95:ba:77:55:71:f8:07:17:b2:3d:e3:8e:2e: ff:10:2c:82:77:bb:62:34:46:2b:fc:01:e0:88:b0:2a:2d:92: f8:95:14:b2:02:ca:f2:75:4b:52:be:63:0a:36:61:0c:b3:aa: 38:f4:55:51:ff:b3:f9:1c:63:7b:c0:23:40:dc:05:ed:7e:b4: 22:06:5c:2b:f6:0a:ef:3c:c5:b7:2d:ac:cf:09:20:b3:62:9a: ca:fd:fd:90:dc:7b:e1:0b:51:60:5d:e7:4c:13:d1:78:0e:38: e3:42:e6:7d:0a:15:1c:d8:8d:4a:bd:05:62:b1:7a:ab:1a:de: cf:3f:8b:73:d6:2f:1a:9a:bd:0b:82:66:82:2b:0d:51:04:e8: 5d:e9:27:d0:9f:dc:33:1c:64:b0:ae:55:95:25:2d:7d:37:bf: 73:63:5d:86 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUfsqL5fCMzzfqlobdSQLo9MbfLvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJC NzJDOUE2MzAeFw0yNTEyMzEyMTE0MDJaFw0yNjEyMzAyMTE5MDJaMDMxMTAvBgNV BAMTKENDNDBDREJDMDhDRTI4M0FFMEUwQTJCNUJGRTNGRDlGNjlBMEU2NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZvjBz5YeAp68FFG0ubs29jVZS grkli6LLdxO7eXPwIiBgWh96zu1cLUaQYW/1icJ0kwnW/0dr5Y/Y81bhar5M9xMN AoC3stCbD4g3/K5FkdwgPoU6vBOrHxOyo3sgVbep4/RTjqFEozV//34L+O6pMNP1 CDdP3m7Z7Nt7udh+LfjdaTBla5VOTKERf2FDur04auAlglNOBAZdV7MQ/HweZYsD yHy+bY3f/lJ0q8A+upXyxCdhiBpUJ0FkErHlwsrMAsVkP/Lal2c7gllho9+4kiy3 6/VRYMfqzHw+LMfrg5lAl0P+U7uJywM1+CO08W99yl3CrT486fftjuGFJJQHAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUzEDNvAjOKDrg4KK1v+P9n2mg5kUwHwYDVR0j BBgwFoAUNTf5YWaOR2VXgJWrM6Q1G7csmmMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYtZTU5MC00YTRmLTg0NjMtODMxN2MyYTFj MDQ4LzEvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJDOUE2My5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJD OUE2My5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYt ZTU5MC00YTRmLTg0NjMtODMxN2MyYTFjMDQ4LzEvMzI2MTMwMzYzYTMxMzIzODMy M2EzMjMwM2EzYTJmMzQzNDJkMzEzMjM4MjAzZDNlMjAzMjMwMzUzODM0Mzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwQqBhKCACAwDQYJKoZIhvcNAQELBQADggEBABjPpHQF/ZI3XPVzraeG eVkXuAAcNlMh8NUaUQojBndGgv/QN+Q1JN3EfpqUF8YSItAMwqMJrcPVGR2nyBdk dDEokRWH3YUIbH1y7MA2Fnn/HHrzECuK9Pa3+Mx11ZQqlbp3VXH4BxeyPeOOLv8Q LIJ3u2I0Riv8AeCIsCotkviVFLICyvJ1S1K+Ywo2YQyzqjj0VVH/s/kcY3vAI0Dc Be1+tCIGXCv2Cu88xbctrM8JILNimsr9/ZDce+ELUWBd50wT0XgOOONC5n0KFRzY jUq9BWKxeqsa3s8/i3PWLxqavQuCZoIrDVEE6F3pJ9Cf3DMcZLCuVZUlLX03v3Nj XYY= -----END CERTIFICATE-----Generated at Sat Jan 10 22:07:05 2026 by rpki-client