This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa File: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (raw, json) Hash identifier: 292hBxtVOQ3Gd5+8ak4aSN6nAB9tGh6AJvrUIN5uGbs= Subject key identifier: 82:C0:48:27:A8:29:D0:F5:33:40:05:07:AA:F3:36:6C:56:A1:8F:39 Certificate issuer: /CN=3537F961668E4765578095AB33A4351BB72C9A63 Certificate serial: 037D160A88367D6EC59B94C6C5B07EC581021256 Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa Signing time: Wed 31 Dec 2025 21:19:21 +0000 ROA not before: Wed 31 Dec 2025 21:14:21 +0000 ROA not after: Wed 30 Dec 2026 21:19:21 +0000 asID: 205848 IP address blocks: 2a06:1282:30::/44 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:7d:16:0a:88:36:7d:6e:c5:9b:94:c6:c5:b0:7e:c5:81:02:12:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63 Validity Not Before: Dec 31 21:14:21 2025 GMT Not After : Dec 30 21:19:21 2026 GMT Subject: CN=82C04827A829D0F533400507AAF3366C56A18F39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:80:a7:28:de:d3:08:ef:7f:1a:22:1c:83:84: 84:8a:46:74:1b:93:39:a6:76:d6:4e:d4:e4:44:38: e9:23:74:36:11:eb:67:88:1e:49:63:7a:af:3f:ff: ce:71:34:fa:39:da:ac:bd:58:d3:dc:ba:72:83:ff: 56:22:e9:e7:ed:45:2d:be:76:db:da:4e:a9:d6:0d: f6:19:1b:d2:94:6c:18:dd:83:65:b1:96:26:62:aa: 5b:e6:ff:84:6a:9e:89:7f:99:b1:0b:5c:13:9c:23: e0:67:8e:5e:98:4d:d8:88:39:ee:11:e5:31:d0:c1: 09:15:e8:34:f3:72:fb:45:4f:2d:1a:4e:9b:ee:7d: 48:a0:04:78:14:76:f4:cf:4a:a8:a2:5d:c5:c0:bc: cd:5e:ee:a5:6a:61:66:70:ef:bd:6c:cf:32:db:27: d8:2c:9b:8d:87:11:24:63:5b:d9:9c:a2:16:56:3c: 7c:15:91:6d:e0:ed:b0:ce:a1:4b:90:33:66:32:ed: 34:f9:38:fe:e9:34:49:59:5a:25:72:0d:7b:94:21: 95:4f:24:95:1e:c9:f3:2b:21:3b:e9:77:45:6b:d9: 9f:77:a8:fc:e7:0c:0b:d2:0e:90:42:ad:b5:88:57: b2:35:57:ed:42:2a:5c:a8:f7:48:04:40:16:26:ef: 7b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C0:48:27:A8:29:D0:F5:33:40:05:07:AA:F3:36:6C:56:A1:8F:39 X509v3 Authority Key Identifier: keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1282:30::/44 Signature Algorithm: sha256WithRSAEncryption b8:b2:1b:a7:86:ad:6c:cb:6d:03:d6:a6:e9:5b:99:70:48:29: 1c:91:07:e9:e5:6c:b7:79:5d:c2:ce:c6:ee:b9:1b:43:3b:78: c2:b7:6b:23:a0:be:a1:ed:4b:bb:63:1c:0f:43:b9:cc:f5:ec: 2c:8b:26:61:1f:f1:b8:14:ab:e0:e1:50:b0:13:73:70:c1:e1: d2:c5:01:ba:0f:c5:ed:09:87:26:40:9c:58:e3:59:d9:95:c8: ee:ac:11:c3:60:2a:13:50:91:a6:89:3c:74:69:59:bf:f2:a0: eb:cd:8d:90:ea:a8:2b:e9:cd:9c:f6:33:e2:e7:3e:b0:e0:b9: 70:bf:68:ee:78:d6:77:dd:0c:6f:93:e1:c5:02:84:06:2d:be: 7f:57:4a:ba:37:4d:56:8f:c2:dc:fd:e8:26:18:d9:87:95:3c: 0a:97:1e:c3:6c:9a:ee:2e:47:83:f8:05:91:c5:64:88:ce:63: ee:74:88:23:fe:5d:3a:8f:e8:b0:e4:d0:94:12:7e:4f:ff:91: 4c:e9:dd:09:41:43:bf:62:8f:05:e0:e2:9e:3a:f4:dd:5d:b4: aa:60:64:1a:9c:a6:0d:9c:49:14:17:1d:54:fa:49:f8:e2:00: 20:55:83:29:07:08:e7:b6:b7:52:39:6d:49:9b:8c:dc:57:72: 5e:13:ad:8e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUA30WCog2fW7Fm5TGxbB+xYECElYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJC NzJDOUE2MzAeFw0yNTEyMzEyMTE0MjFaFw0yNjEyMzAyMTE5MjFaMDMxMTAvBgNV BAMTKDgyQzA0ODI3QTgyOUQwRjUzMzQwMDUwN0FBRjMzNjZDNTZBMThGMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbgKco3tMI738aIhyDhISKRnQb kzmmdtZO1OREOOkjdDYR62eIHkljeq8//85xNPo52qy9WNPcunKD/1Yi6eftRS2+ dtvaTqnWDfYZG9KUbBjdg2WxliZiqlvm/4Rqnol/mbELXBOcI+Bnjl6YTdiIOe4R 5THQwQkV6DTzcvtFTy0aTpvufUigBHgUdvTPSqiiXcXAvM1e7qVqYWZw771szzLb J9gsm42HESRjW9mcohZWPHwVkW3g7bDOoUuQM2Yy7TT5OP7pNElZWiVyDXuUIZVP JJUeyfMrITvpd0Vr2Z93qPznDAvSDpBCrbWIV7I1V+1CKlyo90gEQBYm73sVAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUgsBIJ6gp0PUzQAUHqvM2bFahjzkwHwYDVR0j BBgwFoAUNTf5YWaOR2VXgJWrM6Q1G7csmmMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYtZTU5MC00YTRmLTg0NjMtODMxN2MyYTFj MDQ4LzEvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJDOUE2My5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJD OUE2My5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYt ZTU5MC00YTRmLTg0NjMtODMxN2MyYTFjMDQ4LzEvMzI2MTMwMzYzYTMxMzIzODMy M2EzMzMwM2EzYTJmMzQzNDJkMzEzMjM4MjAzZDNlMjAzMjMwMzUzODM0Mzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwQqBhKCADAwDQYJKoZIhvcNAQELBQADggEBALiyG6eGrWzLbQPWpulb mXBIKRyRB+nlbLd5XcLOxu65G0M7eMK3ayOgvqHtS7tjHA9Ducz17CyLJmEf8bgU q+DhULATc3DB4dLFAboPxe0JhyZAnFjjWdmVyO6sEcNgKhNQkaaJPHRpWb/yoOvN jZDqqCvpzZz2M+LnPrDguXC/aO541nfdDG+T4cUChAYtvn9XSro3TVaPwtz96CYY 2YeVPAqXHsNsmu4uR4P4BZHFZIjOY+50iCP+XTqP6LDk0JQSfk//kUzp3QlBQ79i jwXg4p469N1dtKpgZBqcpg2cSRQXHVT6SfjiACBVgykHCOe2t1I5bUmbjNxXcl4T rY4= -----END CERTIFICATE-----Generated at Sat Jan 10 22:06:41 2026 by rpki-client