This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/326130623a346530373a6138303a3a2f34382d3438203d3e20323133343133.roa File: 326130623a346530373a6138303a3a2f34382d3438203d3e20323133343133.roa (raw, json) Hash identifier: WcvSssrcz6p3j3RDnhY3rE0tKoRiuN7l2GAwNqPEpJ8= Subject key identifier: 5D:1E:71:1B:6A:2D:D8:70:8B:8E:1B:0D:DF:04:57:25:70:8C:8F:25 Certificate issuer: /CN=497EA28AB98266097873E53DF89DA97C44267B14 Certificate serial: 5D6C6F5FBECD858B4AFBE0F20566C22852028D8B Authority key identifier: 49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/326130623a346530373a6138303a3a2f34382d3438203d3e20323133343133.roa Signing time: Thu 04 Dec 2025 13:58:05 +0000 ROA not before: Thu 04 Dec 2025 13:53:05 +0000 ROA not after: Thu 03 Dec 2026 13:58:05 +0000 asID: 213413 IP address blocks: 2a0b:4e07:a80::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.crl rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 04:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6c:6f:5f:be:cd:85:8b:4a:fb:e0:f2:05:66:c2:28:52:02:8d:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=497EA28AB98266097873E53DF89DA97C44267B14 Validity Not Before: Dec 4 13:53:05 2025 GMT Not After : Dec 3 13:58:05 2026 GMT Subject: CN=5D1E711B6A2DD8708B8E1B0DDF045725708C8F25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c1:2a:59:b3:0f:a4:1b:d5:20:36:1c:f2:a4: ea:83:5f:30:c8:e9:9c:0d:94:18:41:98:1c:7d:d2: a3:41:3e:f7:4d:b3:fb:1f:d7:5d:75:7f:0a:58:f3: 5d:63:c3:95:5e:7e:7d:9d:48:71:33:55:23:b1:4a: 2d:00:b4:8c:77:0b:72:88:f2:81:c2:e7:7c:ad:d6: b5:70:6d:0c:51:c7:3f:a0:ca:a4:90:68:49:f9:fe: f0:91:d5:ab:83:79:95:01:2a:8d:04:6f:f0:12:05: 88:c9:1f:0d:8c:a5:a8:0c:9d:de:f7:7b:5e:a5:88: 43:35:dc:86:61:40:67:05:3b:23:e2:ea:96:50:60: 72:5b:99:79:6e:c9:9e:99:fe:a7:f7:cf:8e:7c:c5: a9:f1:4e:df:77:62:52:08:36:bc:4d:05:67:15:50: 3a:d9:36:98:6e:db:81:86:89:ab:25:f4:15:38:1d: 23:fb:ab:1d:56:21:67:dc:7e:52:45:47:1c:cc:1f: 60:85:f9:dd:d7:20:19:28:0f:da:8f:f1:c5:e0:bd: 76:75:b7:93:35:a4:06:1e:4a:c1:05:97:61:63:2b: 4a:b6:4e:9e:76:a6:9f:41:3b:f4:a9:8b:66:9e:9a: 63:46:43:7b:4f:84:36:e0:ad:5a:6f:46:02:f1:48: 40:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1E:71:1B:6A:2D:D8:70:8B:8E:1B:0D:DF:04:57:25:70:8C:8F:25 X509v3 Authority Key Identifier: keyid:49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/326130623a346530373a6138303a3a2f34382d3438203d3e20323133343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:a80::/48 Signature Algorithm: sha256WithRSAEncryption 5f:41:a7:9e:bb:d9:94:d2:c7:af:d0:0c:e6:bf:f2:3d:f8:69: 24:00:41:8a:a3:8a:45:eb:ae:5a:1b:19:fe:6c:b2:58:ab:2e: fb:18:4c:6b:49:5b:e6:47:ea:ea:65:ff:f5:51:7e:53:8a:94: d0:d8:d6:d9:48:23:4a:93:a3:1c:0d:0f:8c:fc:8b:9f:b8:61: 8e:a5:9a:69:15:14:e2:75:59:47:4a:8b:c0:72:e9:b7:be:7a: 01:37:00:29:b2:6c:93:37:77:16:af:41:d0:95:e0:26:91:ad: 65:17:f8:fc:25:52:27:69:2f:ac:16:19:00:69:8b:ec:19:99: 5d:07:dc:47:68:f9:3e:fe:f3:fa:c3:69:86:ae:b2:9c:05:c2: ed:78:57:86:75:70:40:63:23:af:75:cc:73:1d:4f:e4:97:6b: e3:d9:fb:5e:31:24:8e:71:57:f5:30:39:5f:b6:94:f9:00:50: 0d:86:14:60:21:82:d6:b9:3d:a0:93:9a:42:54:9f:69:64:96: 68:6b:67:6e:d1:36:11:b3:de:bb:f6:fb:a8:d2:54:86:39:6e: e9:ad:9e:e5:11:02:99:29:bc:dc:56:21:fc:98:61:49:91:99: 52:39:fc:db:95:39:6d:82:e8:10:ec:2d:43:b6:c0:80:a2:8d: a7:ad:68:84 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUXWxvX77NhYtK++DyBWbCKFICjYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0 NDI2N0IxNDAeFw0yNTEyMDQxMzUzMDVaFw0yNjEyMDMxMzU4MDVaMDMxMTAvBgNV BAMTKDVEMUU3MTFCNkEyREQ4NzA4QjhFMUIwRERGMDQ1NzI1NzA4QzhGMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvwSpZsw+kG9UgNhzypOqDXzDI 6ZwNlBhBmBx90qNBPvdNs/sf1111fwpY811jw5Vefn2dSHEzVSOxSi0AtIx3C3KI 8oHC53yt1rVwbQxRxz+gyqSQaEn5/vCR1auDeZUBKo0Eb/ASBYjJHw2MpagMnd73 e16liEM13IZhQGcFOyPi6pZQYHJbmXluyZ6Z/qf3z458xanxTt93YlIINrxNBWcV UDrZNphu24GGiasl9BU4HSP7qx1WIWfcflJFRxzMH2CF+d3XIBkoD9qP8cXgvXZ1 t5M1pAYeSsEFl2FjK0q2Tp52pp9BO/Spi2aemmNGQ3tPhDbgrVpvRgLxSED7AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUXR5xG2ot2HCLjhsN3wRXJXCMjyUwHwYDVR0j BBgwFoAUSX6iirmCZgl4c+U9+J2pfEQmexQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjkwZTY4NjAtMzcyMS00OGM0LWEzZmUtMTFiMWYyYzBk ZjVmLzEvNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2N0IxNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2 N0IxNC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjkwZTY4NjAt MzcyMS00OGM0LWEzZmUtMTFiMWYyYzBkZjVmLzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2E2MTM4MzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzMzNDMxMzMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAqC04HCoAwDQYJKoZIhvcNAQELBQADggEBAF9Bp5672ZTSx6/QDOa/ 8j34aSQAQYqjikXrrlobGf5sslirLvsYTGtJW+ZH6upl//VRflOKlNDY1tlII0qT oxwND4z8i5+4YY6lmmkVFOJ1WUdKi8By6be+egE3ACmybJM3dxavQdCV4CaRrWUX +PwlUidpL6wWGQBpi+wZmV0H3Edo+T7+8/rDaYauspwFwu14V4Z1cEBjI691zHMd T+SXa+PZ+14xJI5xV/UwOV+2lPkAUA2GFGAhgta5PaCTmkJUn2lklmhrZ27RNhGz 3rv2+6jSVIY5bumtnuURApkpvNxWIfyYYUmRmVI5/NuVOW2C6BDsLUO2wICijaet aIQ= -----END CERTIFICATE-----Generated at Fri Dec 5 21:06:18 2025 by rpki-client