This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/326130623a346530373a6138323a3a2f34382d3438203d3e20323133343133.roa File: 326130623a346530373a6138323a3a2f34382d3438203d3e20323133343133.roa (raw, json) Hash identifier: Yk5Z2QdQDj75jwwjlnGFiqmjFqH+3db4GUAOQQkmNYQ= Subject key identifier: 31:6D:49:05:F0:0E:BB:90:89:06:10:03:9C:BA:13:7E:7C:19:48:31 Certificate issuer: /CN=497EA28AB98266097873E53DF89DA97C44267B14 Certificate serial: 3085E9D101F7553156ECD9EC283AA449E49526FA Authority key identifier: 49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/326130623a346530373a6138323a3a2f34382d3438203d3e20323133343133.roa Signing time: Thu 04 Dec 2025 13:58:28 +0000 ROA not before: Thu 04 Dec 2025 13:53:28 +0000 ROA not after: Thu 03 Dec 2026 13:58:28 +0000 asID: 213413 IP address blocks: 2a0b:4e07:a82::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.crl rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 04:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:85:e9:d1:01:f7:55:31:56:ec:d9:ec:28:3a:a4:49:e4:95:26:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=497EA28AB98266097873E53DF89DA97C44267B14 Validity Not Before: Dec 4 13:53:28 2025 GMT Not After : Dec 3 13:58:28 2026 GMT Subject: CN=316D4905F00EBB90890610039CBA137E7C194831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:13:12:4d:75:77:dc:69:2b:d1:95:64:78:cd: cc:58:c0:a7:ec:eb:55:5f:86:d8:22:1b:08:17:b5: 56:11:da:42:41:4c:43:8b:57:3d:6a:63:20:cf:59: d4:c6:22:a2:fc:2a:50:4f:ca:dc:74:b3:68:fc:34: 40:53:99:0b:6f:3f:93:e7:8c:34:48:9c:72:83:36: da:67:16:61:52:3a:ba:32:42:64:40:d7:63:18:01: c8:84:88:e1:9c:26:8f:86:9e:eb:05:17:72:d8:b8: 65:97:83:48:61:12:bb:da:d3:64:1a:9c:d7:0e:9b: 43:22:d6:fc:4c:b8:af:42:00:61:11:4f:37:36:82: 43:c6:b8:58:89:46:79:35:57:d2:84:fb:3e:9e:7e: 50:4f:2d:d1:9c:67:99:51:ad:fc:93:4e:19:d4:cf: dd:23:2e:6f:b7:63:1e:85:56:5b:6f:4f:c4:89:cc: af:3a:b0:84:43:0d:43:45:13:e3:b6:83:56:27:01: fa:bc:21:78:ad:66:b7:88:67:8f:0b:eb:c1:c8:8f: fe:b6:15:b7:dc:9c:3d:d9:da:11:10:a0:31:64:33: da:7e:1e:8e:27:19:8c:9d:92:d8:28:18:96:0a:e9: b0:bb:88:79:95:6e:80:38:9f:19:f1:44:fe:d3:5e: 4c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6D:49:05:F0:0E:BB:90:89:06:10:03:9C:BA:13:7E:7C:19:48:31 X509v3 Authority Key Identifier: keyid:49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/326130623a346530373a6138323a3a2f34382d3438203d3e20323133343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:a82::/48 Signature Algorithm: sha256WithRSAEncryption 05:b7:39:f3:7b:08:db:55:8d:71:1b:20:76:b6:00:e2:46:e0: 91:61:c4:f3:63:00:d7:d9:fa:e6:80:cb:4d:40:e7:92:1c:ef: 4f:db:db:1a:5e:07:73:8b:c1:ae:8d:93:3e:9e:05:a6:23:31: f1:2b:4e:52:ff:21:4e:35:73:89:cc:42:41:51:27:f2:6a:df: a4:69:85:64:88:8e:c1:28:e9:5b:76:2d:3b:50:24:48:64:78: ef:da:6f:32:7c:2b:b4:53:32:f6:3f:51:3c:81:18:9f:50:ea: 23:c5:67:6f:2b:fb:ac:96:63:a1:b6:7b:d6:8f:ac:cc:9d:98: 2a:c3:72:d9:9b:d3:1d:eb:6e:94:ee:66:01:fa:0a:5b:5f:0d: d9:81:c6:a5:6a:57:7b:59:fe:68:1d:f4:6a:72:e2:b2:a1:f0: 91:17:6c:a5:cc:56:b5:9f:7f:ac:44:18:2c:0d:1f:2f:54:d1: 70:05:b2:24:17:66:02:24:37:15:91:d7:d7:6d:c4:e7:dd:3b: 98:b1:24:fa:6d:f0:d2:04:57:43:72:32:ad:20:dd:a7:1d:6c: 28:ab:7a:5f:bc:28:e5:85:ed:ab:80:f3:f4:16:94:a1:3f:bd: 36:12:99:da:2a:d7:c8:de:89:0d:e4:a8:ac:cb:a7:34:d1:3a: 58:84:6b:7c -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUMIXp0QH3VTFW7NnsKDqkSeSVJvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0 NDI2N0IxNDAeFw0yNTEyMDQxMzUzMjhaFw0yNjEyMDMxMzU4MjhaMDMxMTAvBgNV BAMTKDMxNkQ0OTA1RjAwRUJCOTA4OTA2MTAwMzlDQkExMzdFN0MxOTQ4MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMExJNdXfcaSvRlWR4zcxYwKfs 61VfhtgiGwgXtVYR2kJBTEOLVz1qYyDPWdTGIqL8KlBPytx0s2j8NEBTmQtvP5Pn jDRInHKDNtpnFmFSOroyQmRA12MYAciEiOGcJo+GnusFF3LYuGWXg0hhErva02Qa nNcOm0Mi1vxMuK9CAGERTzc2gkPGuFiJRnk1V9KE+z6eflBPLdGcZ5lRrfyTThnU z90jLm+3Yx6FVltvT8SJzK86sIRDDUNFE+O2g1YnAfq8IXitZreIZ48L68HIj/62 FbfcnD3Z2hEQoDFkM9p+Ho4nGYydktgoGJYK6bC7iHmVboA4nxnxRP7TXkx/AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUMW1JBfAOu5CJBhADnLoTfnwZSDEwHwYDVR0j BBgwFoAUSX6iirmCZgl4c+U9+J2pfEQmexQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjkwZTY4NjAtMzcyMS00OGM0LWEzZmUtMTFiMWYyYzBk ZjVmLzEvNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2N0IxNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2 N0IxNC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjkwZTY4NjAt MzcyMS00OGM0LWEzZmUtMTFiMWYyYzBkZjVmLzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2E2MTM4MzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzMzNDMxMzMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAqC04HCoIwDQYJKoZIhvcNAQELBQADggEBAAW3OfN7CNtVjXEbIHa2 AOJG4JFhxPNjANfZ+uaAy01A55Ic70/b2xpeB3OLwa6Nkz6eBaYjMfErTlL/IU41 c4nMQkFRJ/Jq36RphWSIjsEo6Vt2LTtQJEhkeO/abzJ8K7RTMvY/UTyBGJ9Q6iPF Z28r+6yWY6G2e9aPrMydmCrDctmb0x3rbpTuZgH6CltfDdmBxqVqV3tZ/mgd9Gpy 4rKh8JEXbKXMVrWff6xEGCwNHy9U0XAFsiQXZgIkNxWR19dtxOfdO5ixJPpt8NIE V0NyMq0g3acdbCirel+8KOWF7auA8/QWlKE/vTYSmdoq18jeiQ3kqKzLpzTROliE a3w= -----END CERTIFICATE-----Generated at Fri Dec 5 21:06:22 2025 by rpki-client