This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa File: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (raw, json) Hash identifier: JwzUDkANLXs6XgTehrq1Pd6d6jeZ2m35Wq5ZDkXHhLE= Subject key identifier: EC:44:90:61:FC:A9:55:FE:90:AA:53:4F:73:B1:8E:73:E1:7B:0A:69 Certificate issuer: /CN=3537F961668E4765578095AB33A4351BB72C9A63 Certificate serial: 0FC7D8CE3A09C4FF5E781F2E0C39C4848B4EA54A Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa Signing time: Wed 31 Dec 2025 21:19:34 +0000 ROA not before: Wed 31 Dec 2025 21:14:34 +0000 ROA not after: Wed 30 Dec 2026 21:19:34 +0000 asID: 205848 IP address blocks: 2a06:1282:40::/44 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c7:d8:ce:3a:09:c4:ff:5e:78:1f:2e:0c:39:c4:84:8b:4e:a5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63 Validity Not Before: Dec 31 21:14:34 2025 GMT Not After : Dec 30 21:19:34 2026 GMT Subject: CN=EC449061FCA955FE90AA534F73B18E73E17B0A69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d9:ed:89:b9:b4:e6:75:3d:35:e0:54:f1:42: 8d:61:cb:a7:1c:77:2a:41:f3:e1:27:fe:90:aa:3c: ce:97:61:fa:9a:37:dc:47:04:c5:39:2a:08:d2:45: d7:6c:3d:d8:08:17:8e:88:ee:de:cd:3d:fa:64:3c: e7:6f:dd:2c:63:cf:d0:ad:79:61:e1:95:ab:3b:52: 35:46:d3:8e:b8:d0:a6:c8:ec:0f:84:a5:ff:64:a8: ac:28:93:4a:9f:68:65:ca:c1:79:c7:38:9f:be:65: 7d:d8:8f:6a:c6:12:95:da:5e:98:5f:ab:ae:0c:d8: 84:e4:e9:88:26:82:ac:19:a9:f6:5e:34:63:16:f6: 81:9f:a3:17:d3:56:99:40:f7:6d:e7:8f:71:49:af: 27:03:25:74:33:83:29:d0:dd:1d:a3:da:2b:53:c7: 1d:f5:1f:f4:05:4f:28:40:16:17:27:96:9f:e2:68: fe:c8:9d:ea:12:d1:4f:c6:f6:bd:e0:93:98:b8:b5: 28:8e:f4:b6:9e:ac:aa:5f:bc:6f:1a:6c:6e:4d:7a: 91:d4:e9:59:4c:36:58:e2:89:56:91:b8:22:2b:b5: 99:fe:bf:e7:1b:43:b1:5e:69:41:98:05:ed:de:67: 2b:ec:17:94:85:91:b8:0b:d5:11:7e:fc:ff:ac:ed: c3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:44:90:61:FC:A9:55:FE:90:AA:53:4F:73:B1:8E:73:E1:7B:0A:69 X509v3 Authority Key Identifier: keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1282:40::/44 Signature Algorithm: sha256WithRSAEncryption 23:1c:f3:b9:b2:9c:31:78:40:9e:8e:b4:e2:ba:9f:28:ed:b4: 12:bc:58:1b:d3:e3:d1:6e:f7:f3:e3:28:9a:bf:c9:2e:13:45: a1:f9:a0:95:a1:cd:ba:29:28:9f:d6:b5:31:88:00:ed:e0:d7: d4:2c:80:82:6f:d2:ca:9e:ce:42:50:1b:e8:b6:e9:88:81:7b: 66:a7:01:62:be:63:5e:3c:95:2e:5a:e3:ee:20:43:06:00:23: 46:97:74:5b:4c:5d:90:e9:6f:75:ab:51:45:98:8b:6d:ea:d0: 0a:76:83:32:97:00:2b:2b:fd:70:02:94:31:31:1f:06:43:5a: b4:83:b7:5c:09:8b:3f:d7:60:10:44:0d:4d:c7:3b:7e:19:25: db:fa:4e:fa:ef:b9:44:02:87:6b:85:fa:16:60:0e:82:be:fd: 6b:f5:a7:96:d5:45:15:12:61:aa:0c:e5:44:f9:70:f6:14:55: de:48:39:e2:fe:e8:7f:d0:c4:fb:b0:85:dc:60:30:6f:a3:a1: 52:59:10:11:8a:67:6f:07:dd:5f:19:a8:52:03:48:91:46:62: 1c:b0:68:2f:ce:22:61:9d:55:86:76:1b:44:16:34:e8:d4:f0: 19:94:ef:61:6f:db:fe:76:88:e1:87:45:12:16:95:f2:15:b5: b9:9d:70:94 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUD8fYzjoJxP9eeB8uDDnEhItOpUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJC NzJDOUE2MzAeFw0yNTEyMzEyMTE0MzRaFw0yNjEyMzAyMTE5MzRaMDMxMTAvBgNV BAMTKEVDNDQ5MDYxRkNBOTU1RkU5MEFBNTM0RjczQjE4RTczRTE3QjBBNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm2e2JubTmdT014FTxQo1hy6cc dypB8+En/pCqPM6XYfqaN9xHBMU5KgjSRddsPdgIF46I7t7NPfpkPOdv3Sxjz9Ct eWHhlas7UjVG04640KbI7A+Epf9kqKwok0qfaGXKwXnHOJ++ZX3Yj2rGEpXaXphf q64M2ITk6YgmgqwZqfZeNGMW9oGfoxfTVplA923nj3FJrycDJXQzgynQ3R2j2itT xx31H/QFTyhAFhcnlp/iaP7IneoS0U/G9r3gk5i4tSiO9LaerKpfvG8abG5NepHU 6VlMNljiiVaRuCIrtZn+v+cbQ7FeaUGYBe3eZyvsF5SFkbgL1RF+/P+s7cNZAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU7ESQYfypVf6QqlNPc7GOc+F7CmkwHwYDVR0j BBgwFoAUNTf5YWaOR2VXgJWrM6Q1G7csmmMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYtZTU5MC00YTRmLTg0NjMtODMxN2MyYTFj MDQ4LzEvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJDOUE2My5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJD OUE2My5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYt ZTU5MC00YTRmLTg0NjMtODMxN2MyYTFjMDQ4LzEvMzI2MTMwMzYzYTMxMzIzODMy M2EzNDMwM2EzYTJmMzQzNDJkMzEzMjM4MjAzZDNlMjAzMjMwMzUzODM0Mzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwQqBhKCAEAwDQYJKoZIhvcNAQELBQADggEBACMc87mynDF4QJ6OtOK6 nyjttBK8WBvT49Fu9/PjKJq/yS4TRaH5oJWhzbopKJ/WtTGIAO3g19QsgIJv0sqe zkJQG+i26YiBe2anAWK+Y148lS5a4+4gQwYAI0aXdFtMXZDpb3WrUUWYi23q0Ap2 gzKXACsr/XAClDExHwZDWrSDt1wJiz/XYBBEDU3HO34ZJdv6TvrvuUQCh2uF+hZg DoK+/Wv1p5bVRRUSYaoM5UT5cPYUVd5IOeL+6H/QxPuwhdxgMG+joVJZEBGKZ28H 3V8ZqFIDSJFGYhywaC/OImGdVYZ2G0QWNOjU8BmU72Fv2/52iOGHRRIWlfIVtbmd cJQ= -----END CERTIFICATE-----Generated at Sat Jan 10 22:07:04 2026 by rpki-client