This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/326130623a346530373a6130303a3a2f34302d3438203d3e20323036363034.roa File: 326130623a346530373a6130303a3a2f34302d3438203d3e20323036363034.roa (raw, json) Hash identifier: Z0wiDwjOy/qJoPdM0vEBmhECeV0C4KD9VuGJR2rdeyQ= Subject key identifier: 3F:88:59:2F:91:D4:1C:20:55:E4:65:CB:52:D5:3C:18:CE:FA:73:0D Certificate issuer: /CN=497EA28AB98266097873E53DF89DA97C44267B14 Certificate serial: 3BAEB1CB877FDEFEF8279EE2A3BD6DE9D814E80B Authority key identifier: 49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/326130623a346530373a6130303a3a2f34302d3438203d3e20323036363034.roa Signing time: Thu 04 Dec 2025 13:57:39 +0000 ROA not before: Thu 04 Dec 2025 13:52:39 +0000 ROA not after: Thu 03 Dec 2026 13:57:39 +0000 asID: 206604 IP address blocks: 2a0b:4e07:a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.crl rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 04:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ae:b1:cb:87:7f:de:fe:f8:27:9e:e2:a3:bd:6d:e9:d8:14:e8:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=497EA28AB98266097873E53DF89DA97C44267B14 Validity Not Before: Dec 4 13:52:39 2025 GMT Not After : Dec 3 13:57:39 2026 GMT Subject: CN=3F88592F91D41C2055E465CB52D53C18CEFA730D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6c:d9:df:9a:80:ef:6f:af:1a:ab:cb:bf:a5: 9d:f4:3a:e2:28:60:61:9a:4c:be:2f:e0:a0:f1:2a: a9:68:4e:7c:c5:93:fb:4d:3a:aa:4f:67:9e:27:e1: 36:d9:3d:d9:e8:86:1e:95:bd:11:eb:96:f7:1f:4a: 2a:26:26:ab:3d:cc:f1:6e:40:13:69:7f:da:b7:cb: 5d:db:50:11:10:3f:e9:75:6e:9c:f0:4c:bd:2e:c6: eb:89:4a:18:e5:47:38:a2:ad:75:4d:13:65:dd:a6: 40:6b:02:aa:15:6b:07:c9:ac:88:83:d0:12:32:8c: 7f:15:e9:33:ec:e4:60:38:35:6a:16:c7:6c:08:e7: d4:b2:b5:44:b2:f5:ec:9a:eb:b8:a8:89:11:e2:f5: a4:32:57:7e:c3:23:d2:c7:2d:cf:e4:d0:98:25:6b: 60:38:97:26:96:04:54:45:fe:f8:b0:f2:cf:6f:fd: d4:ca:18:05:b4:84:b6:59:b5:2d:af:93:68:88:3c: 3d:ee:6c:ec:97:c9:1d:5d:ee:df:42:bd:2c:5c:9c: 66:fb:7b:af:3d:74:65:45:08:e9:17:d9:d7:ac:e1: 63:f2:a5:23:99:29:a0:03:37:8a:49:ad:ce:25:77: 5f:7c:f5:84:8f:f2:fb:a0:15:c8:2c:9c:a3:5e:2c: ee:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:88:59:2F:91:D4:1C:20:55:E4:65:CB:52:D5:3C:18:CE:FA:73:0D X509v3 Authority Key Identifier: keyid:49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/326130623a346530373a6130303a3a2f34302d3438203d3e20323036363034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:a00::/40 Signature Algorithm: sha256WithRSAEncryption 95:52:10:68:02:a8:e8:db:23:c2:6b:55:5a:8c:a6:4f:e5:1f: d3:3d:cc:17:fe:57:d0:49:99:db:9a:e4:43:ce:a3:82:af:38: a5:c7:d7:39:ad:36:7d:9b:9d:57:c9:bf:17:57:81:5c:7f:3f: d1:4a:30:57:d2:5f:7b:39:58:ca:64:a8:f6:a1:f5:a7:9a:b2: 5a:ff:6f:81:f9:8e:cd:fe:65:a6:f2:52:21:4d:73:00:cc:92: 87:c4:12:fd:92:48:dd:8c:fa:5b:bc:48:94:19:87:42:b7:27: 0d:16:58:26:42:c6:29:2e:97:3b:88:7e:1d:8e:f0:a5:90:f4: f8:a7:5a:fa:62:00:4c:b9:10:4f:13:61:d1:c7:9c:e8:11:27: 48:6a:48:ba:d6:44:d4:0a:95:e6:b1:76:e1:9b:dd:a0:48:bd: 8b:da:2e:46:32:7c:51:32:74:8d:ee:5d:5b:0c:21:70:c8:b0: 6f:c0:75:c9:f4:d0:ad:61:01:ec:09:65:4d:b9:5a:9c:8a:80: 8a:9f:1c:1f:14:95:9d:e9:dd:2f:52:0b:bb:99:d7:e1:1f:a3: 90:cf:d4:ef:b4:b5:43:64:bf:33:ec:45:cb:ea:bb:c2:fa:0e: dc:fa:27:9f:a0:63:29:9f:6d:b4:0e:60:f2:c9:09:de:85:a0: 61:27:6c:18 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUO66xy4d/3v74J57io71t6dgU6AswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0 NDI2N0IxNDAeFw0yNTEyMDQxMzUyMzlaFw0yNjEyMDMxMzU3MzlaMDMxMTAvBgNV BAMTKDNGODg1OTJGOTFENDFDMjA1NUU0NjVDQjUyRDUzQzE4Q0VGQTczMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbbNnfmoDvb68aq8u/pZ30OuIo YGGaTL4v4KDxKqloTnzFk/tNOqpPZ54n4TbZPdnohh6VvRHrlvcfSiomJqs9zPFu QBNpf9q3y13bUBEQP+l1bpzwTL0uxuuJShjlRziirXVNE2XdpkBrAqoVawfJrIiD 0BIyjH8V6TPs5GA4NWoWx2wI59SytUSy9eya67ioiRHi9aQyV37DI9LHLc/k0Jgl a2A4lyaWBFRF/viw8s9v/dTKGAW0hLZZtS2vk2iIPD3ubOyXyR1d7t9CvSxcnGb7 e689dGVFCOkX2des4WPypSOZKaADN4pJrc4ld1989YSP8vugFcgsnKNeLO6dAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUP4hZL5HUHCBV5GXLUtU8GM76cw0wHwYDVR0j BBgwFoAUSX6iirmCZgl4c+U9+J2pfEQmexQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjkwZTY4NjAtMzcyMS00OGM0LWEzZmUtMTFiMWYyYzBk ZjVmLzEvNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2N0IxNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2 N0IxNC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjkwZTY4NjAt MzcyMS00OGM0LWEzZmUtMTFiMWYyYzBkZjVmLzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2E2MTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMwMzYzNjMwMzQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAqC04HCjANBgkqhkiG9w0BAQsFAAOCAQEAlVIQaAKo6NsjwmtVWoym T+Uf0z3MF/5X0EmZ25rkQ86jgq84pcfXOa02fZudV8m/F1eBXH8/0UowV9JfezlY ymSo9qH1p5qyWv9vgfmOzf5lpvJSIU1zAMySh8QS/ZJI3Yz6W7xIlBmHQrcnDRZY JkLGKS6XO4h+HY7wpZD0+Kda+mIATLkQTxNh0cec6BEnSGpIutZE1AqV5rF24Zvd oEi9i9ouRjJ8UTJ0je5dWwwhcMiwb8B1yfTQrWEB7AllTblanIqAip8cHxSVnend L1ILu5nX4R+jkM/U77S1Q2S/M+xFy+q7wvoO3Ponn6BjKZ9ttA5g8skJ3oWgYSds GA== -----END CERTIFICATE-----Generated at Fri Dec 5 21:06:59 2025 by rpki-client