This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa File: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (raw, json) Hash identifier: Uw0Yd63FHiLbrVWXi+u/Khr5x1SAZF46bRDWajH7ZJ4= Subject key identifier: 82:FC:7E:5E:64:FA:63:0B:88:3E:EE:B6:4D:82:FA:55:CF:B2:88:B2 Certificate issuer: /CN=D36546790928F44FF74C564231471FA1D8D2A97B Certificate serial: 08CD6275095C5989B2F4D8F06318E971FC4CFA24 Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa Signing time: Sat 08 Nov 2025 18:46:07 +0000 ROA not before: Sat 08 Nov 2025 18:41:07 +0000 ROA not after: Sat 07 Nov 2026 18:46:07 +0000 asID: 210796 IP address blocks: 2a06:1283:bd40::/42 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:cd:62:75:09:5c:59:89:b2:f4:d8:f0:63:18:e9:71:fc:4c:fa:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B Validity Not Before: Nov 8 18:41:07 2025 GMT Not After : Nov 7 18:46:07 2026 GMT Subject: CN=82FC7E5E64FA630B883EEEB64D82FA55CFB288B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:aa:d1:6a:f3:2c:7e:22:04:90:ba:9e:a9:66: a5:30:ab:16:48:45:87:b6:5d:4a:68:c2:45:8f:f8: 29:3e:06:e6:24:26:22:99:c2:da:3d:e9:3a:36:69: d5:ac:22:eb:ac:4f:f5:e9:46:9d:46:6e:d2:4c:ee: 5f:ea:78:c2:b1:4f:c9:cf:b2:dc:ca:16:84:19:e8: 4c:16:d4:fd:59:c3:d3:cf:a1:98:21:1f:39:f5:6f: 6f:6a:1a:23:0a:bd:11:11:33:ae:3c:99:95:f8:86: 96:37:66:a7:cf:2a:fd:a3:4e:99:6e:52:96:a9:48: d4:ab:6f:59:2c:50:b2:d7:05:30:4c:d0:7f:1b:c5: 57:48:ea:8a:ca:5e:35:59:c7:8a:dc:2f:1e:e2:fc: 0b:38:e4:7f:e9:be:bf:9b:0a:8b:51:0e:56:2a:81: 28:a8:76:b7:53:e5:b6:3f:ab:c3:e7:06:cb:2c:76: b7:4b:97:fc:76:1a:b9:ee:76:09:56:19:b9:3d:2e: 8f:d8:cb:73:b6:8c:c0:86:b0:9f:98:af:47:dc:ff: 85:43:63:9f:82:ed:9f:a0:83:c1:bf:a1:ae:bb:df: 04:78:a8:fb:0e:e3:3a:85:63:bd:80:66:d6:c3:a4: 04:c5:3e:24:75:66:d6:c5:b6:c1:ef:b8:08:72:a1: 1d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FC:7E:5E:64:FA:63:0B:88:3E:EE:B6:4D:82:FA:55:CF:B2:88:B2 X509v3 Authority Key Identifier: keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:bd40::/42 Signature Algorithm: sha256WithRSAEncryption 69:41:7f:63:4e:11:b4:ae:44:b5:6a:d0:76:2d:1f:08:75:74: 99:cb:2c:41:d2:05:5d:ab:b7:0d:95:a3:1a:32:2d:ee:1e:ac: d0:57:eb:f1:28:8d:a5:1f:79:ad:38:df:de:6e:47:a7:26:ea: 38:81:76:5d:8f:6c:ad:7f:d6:4c:b6:89:fc:94:2f:54:fb:cf: 30:66:bf:25:5e:0d:c7:74:24:84:2e:ae:1c:9e:5c:51:51:86: b6:87:3b:1f:b2:72:ac:61:07:00:90:2a:32:7e:7e:9e:5b:50: e8:ba:a0:f3:32:3f:c9:a7:de:b1:d8:89:d8:40:cb:b6:5e:fa: 2a:d4:b6:5f:1e:b8:ef:c0:df:26:63:dd:c0:61:29:38:c8:d6: 4d:16:84:e2:6c:e1:10:70:9b:e0:e2:df:0e:eb:ab:11:0a:de: 24:01:c7:4c:09:86:81:45:98:62:f0:40:1f:8d:92:84:f1:2f: bd:3e:5c:ef:54:11:23:0f:3a:d7:57:45:61:86:2a:bb:77:90: cc:e1:87:dd:b5:64:8f:f7:a5:96:d6:46:c0:43:41:63:5c:16: 84:52:48:a1:f5:6c:b3:52:9f:20:8f:7f:40:37:f9:c0:39:b0: 92:e7:f5:db:9a:fa:8d:2d:da:f7:05:a7:9b:51:30:dd:28:0f: 5d:46:1a:1b -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUCM1idQlcWYmy9NjwYxjpcfxM+iQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFE OEQyQTk3QjAeFw0yNTExMDgxODQxMDdaFw0yNjExMDcxODQ2MDdaMDMxMTAvBgNV BAMTKDgyRkM3RTVFNjRGQTYzMEI4ODNFRUVCNjREODJGQTU1Q0ZCMjg4QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXqtFq8yx+IgSQup6pZqUwqxZI RYe2XUpowkWP+Ck+BuYkJiKZwto96To2adWsIuusT/XpRp1GbtJM7l/qeMKxT8nP stzKFoQZ6EwW1P1Zw9PPoZghHzn1b29qGiMKvRERM648mZX4hpY3ZqfPKv2jTplu UpapSNSrb1ksULLXBTBM0H8bxVdI6orKXjVZx4rcLx7i/As45H/pvr+bCotRDlYq gSiodrdT5bY/q8PnBsssdrdLl/x2GrnudglWGbk9Lo/Yy3O2jMCGsJ+Yr0fc/4VD Y5+C7Z+gg8G/oa673wR4qPsO4zqFY72AZtbDpATFPiR1ZtbFtsHvuAhyoR2lAgMB AAGjggKHMIICgzAdBgNVHQ4EFgQUgvx+XmT6YwuIPu62TYL6Vc+yiLIwHwYDVR0j BBgwFoAU02VGeQko9E/3TFZCMUcfodjSqXswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjg4NDQzMTgtMzVkNy00ODJlLWJiZDUtYjYyNGNmMGIy MDQxLzEvRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFEOEQyQTk3Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9EMzY1NDY3OTA5MjhGNDRGRjc0QzU2NDIz MTQ3MUZBMUQ4RDJBOTdCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iODg0NDMxOC0zNWQ3LTQ4MmUtYmJkNS1iNjI0Y2YwYjIwNDEvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTYyNjQzNDMwM2EzYTJmMzQzMjJkMzEzMjM4MjAzZDNlMjAz MjMxMzAzNzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwYqBhKDvUAwDQYJKoZIhvcNAQELBQADggEB AGlBf2NOEbSuRLVq0HYtHwh1dJnLLEHSBV2rtw2VoxoyLe4erNBX6/EojaUfea04 395uR6cm6jiBdl2PbK1/1ky2ifyUL1T7zzBmvyVeDcd0JIQurhyeXFFRhraHOx+y cqxhBwCQKjJ+fp5bUOi6oPMyP8mn3rHYidhAy7Ze+irUtl8euO/A3yZj3cBhKTjI 1k0WhOJs4RBwm+Di3w7rqxEK3iQBx0wJhoFFmGLwQB+NkoTxL70+XO9UESMPOtdX RWGGKrt3kMzhh921ZI/3pZbWRsBDQWNcFoRSSKH1bLNSnyCPf0A3+cA5sJLn9dua +o0t2vcFp5tRMN0oD11GGhs= -----END CERTIFICATE-----Generated at Thu Dec 4 10:24:02 2025 by rpki-client