This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/326130363a313238323a3a2f34342d313238203d3e20323035383438.roa File: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (raw, json) Hash identifier: e6xgcJdZcTjLmV7L7mIIS0ZbS4iA5+TX8cpRfsgZaUk= Subject key identifier: 9E:B8:3E:A8:E3:1E:96:C8:89:B1:AA:93:B4:D1:2E:CB:88:5A:4E:C5 Certificate issuer: /CN=3537F961668E4765578095AB33A4351BB72C9A63 Certificate serial: 07801B4EB7AB4B70933DF52968FA9B6C94156AA7 Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/326130363a313238323a3a2f34342d313238203d3e20323035383438.roa Signing time: Wed 31 Dec 2025 21:18:30 +0000 ROA not before: Wed 31 Dec 2025 21:13:30 +0000 ROA not after: Wed 30 Dec 2026 21:18:30 +0000 asID: 205848 IP address blocks: 2a06:1282::/44 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:80:1b:4e:b7:ab:4b:70:93:3d:f5:29:68:fa:9b:6c:94:15:6a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63 Validity Not Before: Dec 31 21:13:30 2025 GMT Not After : Dec 30 21:18:30 2026 GMT Subject: CN=9EB83EA8E31E96C889B1AA93B4D12ECB885A4EC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:44:ba:35:21:cc:7e:69:fd:85:16:ca:8a:93: 1c:08:32:86:67:23:0d:9d:19:d8:51:cf:ad:90:70: de:76:35:c9:70:3f:12:b4:c1:28:1a:f2:ae:2d:74: 22:2c:88:98:d6:87:e8:e3:9d:11:29:f4:58:c1:d2: 40:72:7a:4d:da:5d:dc:7d:59:4f:60:42:d8:04:20: 89:90:77:fe:ac:91:ed:a4:9d:55:44:45:b7:88:ab: 9c:a6:23:ce:3a:49:fe:de:c0:8d:54:4f:8a:94:43: 14:24:f3:3c:88:7a:c5:3c:14:ce:df:37:f0:8c:f1: d2:ce:94:80:95:53:7e:de:19:79:8e:bc:7f:46:3d: bb:55:3e:8c:89:d1:06:3c:20:af:1d:3d:83:8c:fa: df:34:6d:ec:3e:67:ae:5c:f5:30:8a:d2:c3:22:10: 22:b3:e1:a9:23:b7:ba:48:90:3a:61:15:2c:8a:55: 39:27:15:a4:89:79:e0:e3:33:40:cf:10:2e:14:fb: 4c:55:54:54:b9:20:3f:e9:e9:a8:de:98:6e:88:b0: 40:d6:e3:5c:9a:4d:ad:e3:a1:53:02:09:f2:71:b0: d7:47:e8:2d:e7:4f:97:82:ec:5e:86:38:45:73:25: 7e:67:74:bc:33:99:36:92:20:1d:ee:fc:e9:ca:60: 1d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B8:3E:A8:E3:1E:96:C8:89:B1:AA:93:B4:D1:2E:CB:88:5A:4E:C5 X509v3 Authority Key Identifier: keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/326130363a313238323a3a2f34342d313238203d3e20323035383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1282::/44 Signature Algorithm: sha256WithRSAEncryption 3f:4c:a4:70:ce:12:89:49:27:b3:d6:de:cb:8d:5b:39:94:21: 8c:95:b8:7b:8e:33:11:53:b1:43:92:a9:f9:fa:9e:fe:a5:29: 7e:4c:9a:4e:29:29:7b:78:9c:bb:43:0f:09:0f:9d:41:44:e5: e6:c1:c7:55:5e:4c:90:75:c9:65:6e:69:8e:d7:a0:3c:0d:e8: 37:97:92:42:c4:e7:fe:80:28:2b:a4:c8:da:c2:5a:cb:f0:d6: 33:8d:64:60:31:c6:ed:7c:f7:01:ef:27:fd:22:65:f8:f2:b0: 40:92:26:fb:2f:02:0f:74:8e:d5:8d:1b:42:ef:ec:73:27:98: b9:4d:19:42:7b:f5:fd:94:8d:ba:17:db:a3:b3:2e:f4:9a:5c: 98:f0:19:1c:87:79:a2:00:e3:40:ed:69:59:c7:90:da:ed:2b: dd:d1:d5:22:05:0c:23:19:d2:cb:cb:92:6f:f5:2a:66:6f:7f: b5:5f:21:4b:b5:db:5a:82:92:2a:d8:8d:9d:61:41:e4:27:9b: 25:6b:c4:0b:ea:37:20:51:b6:94:bc:d3:c7:c2:fa:f3:92:e0: 9c:0b:33:54:4b:d7:8f:93:e0:72:a3:ce:55:5d:56:bd:55:51: a8:23:90:db:38:ca:c5:cd:b5:97:2c:c6:59:81:e0:40:45:fc: d0:c4:72:de -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgIUB4AbTrerS3CTPfUpaPqbbJQVaqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJC NzJDOUE2MzAeFw0yNTEyMzEyMTEzMzBaFw0yNjEyMzAyMTE4MzBaMDMxMTAvBgNV BAMTKDlFQjgzRUE4RTMxRTk2Qzg4OUIxQUE5M0I0RDEyRUNCODg1QTRFQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeRLo1Icx+af2FFsqKkxwIMoZn Iw2dGdhRz62QcN52NclwPxK0wSga8q4tdCIsiJjWh+jjnREp9FjB0kByek3aXdx9 WU9gQtgEIImQd/6ske2knVVERbeIq5ymI846Sf7ewI1UT4qUQxQk8zyIesU8FM7f N/CM8dLOlICVU37eGXmOvH9GPbtVPoyJ0QY8IK8dPYOM+t80bew+Z65c9TCK0sMi ECKz4akjt7pIkDphFSyKVTknFaSJeeDjM0DPEC4U+0xVVFS5ID/p6ajemG6IsEDW 41yaTa3joVMCCfJxsNdH6C3nT5eC7F6GOEVzJX5ndLwzmTaSIB3u/OnKYB2bAgMB AAGjggJyMIICbjAdBgNVHQ4EFgQUnrg+qOMelsiJsaqTtNEuy4haTsUwHwYDVR0j BBgwFoAUNTf5YWaOR2VXgJWrM6Q1G7csmmMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYtZTU5MC00YTRmLTg0NjMtODMxN2MyYTFj MDQ4LzEvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJDOUE2My5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJD OUE2My5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYt ZTU5MC00YTRmLTg0NjMtODMxN2MyYTFjMDQ4LzEvMzI2MTMwMzYzYTMxMzIzODMy M2EzYTJmMzQzNDJkMzEzMjM4MjAzZDNlMjAzMjMwMzUzODM0Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwQqBhKCAAAwDQYJKoZIhvcNAQELBQADggEBAD9MpHDOEolJJ7PW3suNWzmUIYyV uHuOMxFTsUOSqfn6nv6lKX5Mmk4pKXt4nLtDDwkPnUFE5ebBx1VeTJB1yWVuaY7X oDwN6DeXkkLE5/6AKCukyNrCWsvw1jONZGAxxu189wHvJ/0iZfjysECSJvsvAg90 jtWNG0Lv7HMnmLlNGUJ79f2UjboX26OzLvSaXJjwGRyHeaIA40DtaVnHkNrtK93R 1SIFDCMZ0svLkm/1KmZvf7VfIUu121qCkirYjZ1hQeQnmyVrxAvqNyBRtpS808fC +vOS4JwLM1RL14+T4HKjzlVdVr1VUagjkNs4ysXNtZcsxlmB4EBF/NDEct4= -----END CERTIFICATE-----Generated at Sat Jan 10 22:06:52 2026 by rpki-client