This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/326130623a346530373a6138333a3a2f34382d3438203d3e203534343937.roa File: 326130623a346530373a6138333a3a2f34382d3438203d3e203534343937.roa (raw, json) Hash identifier: ol46rLGaupl8698MsUXVt/+STdQLGSQrmvRqgsULKh4= Subject key identifier: C9:68:21:0A:98:1E:E0:9B:01:F6:CA:74:63:C8:59:82:53:FE:16:B8 Certificate issuer: /CN=497EA28AB98266097873E53DF89DA97C44267B14 Certificate serial: 5EA9DCA0A79355F36CC15C9EA1B8F747ADB46B02 Authority key identifier: 49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/326130623a346530373a6138333a3a2f34382d3438203d3e203534343937.roa Signing time: Thu 04 Dec 2025 13:58:43 +0000 ROA not before: Thu 04 Dec 2025 13:53:43 +0000 ROA not after: Thu 03 Dec 2026 13:58:43 +0000 asID: 54497 IP address blocks: 2a0b:4e07:a83::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.crl rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 04:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a9:dc:a0:a7:93:55:f3:6c:c1:5c:9e:a1:b8:f7:47:ad:b4:6b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=497EA28AB98266097873E53DF89DA97C44267B14 Validity Not Before: Dec 4 13:53:43 2025 GMT Not After : Dec 3 13:58:43 2026 GMT Subject: CN=C968210A981EE09B01F6CA7463C8598253FE16B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a2:51:94:fd:3c:a0:08:f4:f8:7d:a9:e4:5c: 8f:2a:ed:20:fa:b2:f0:f7:3c:2a:fe:64:96:4c:ac: 30:8c:b3:4d:9a:5e:21:a8:18:59:d8:b5:65:ad:f2: c0:5d:90:5f:d3:6b:1e:38:31:94:dd:e1:66:49:75: 0e:0d:81:82:da:d6:b9:8a:d2:e6:12:99:6a:1c:a4: 24:46:48:99:51:5b:68:4e:d7:bb:fa:11:44:b7:af: 02:51:99:a2:00:e3:0e:fe:5e:c6:ff:90:cc:43:1a: 54:e8:e8:cc:18:1d:c4:47:e1:84:88:05:90:c5:80: 7c:3c:2c:5d:2a:c3:42:75:65:91:28:d6:09:8b:60: 26:b2:1f:b7:b4:59:76:be:81:94:da:11:da:f2:43: 3c:44:99:39:6c:bd:a0:f8:31:6d:2f:08:00:28:a1: d9:e3:34:c6:09:de:30:9e:a3:62:b1:e2:63:f1:d6: b5:d1:6b:7f:65:95:7d:29:56:50:18:58:3c:4a:7b: 7c:93:da:2a:b2:d2:1e:37:eb:a8:fd:a0:d4:f3:e6: 71:2c:ac:f9:37:85:f8:5a:d1:a1:ed:67:e7:b4:2b: 1b:36:b9:33:6b:b2:cd:82:f0:03:8e:6d:88:0b:d7: 6c:48:7d:46:8d:fc:e5:d7:77:99:41:00:a0:be:c9: 08:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:68:21:0A:98:1E:E0:9B:01:F6:CA:74:63:C8:59:82:53:FE:16:B8 X509v3 Authority Key Identifier: keyid:49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/326130623a346530373a6138333a3a2f34382d3438203d3e203534343937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:a83::/48 Signature Algorithm: sha256WithRSAEncryption 82:e5:6e:c8:82:7e:77:9f:3e:05:53:6e:49:3b:3c:b9:2c:35: b2:32:8f:3e:ba:d6:ea:2f:c9:44:32:e3:e2:46:a1:6f:a5:fc: ba:8f:fb:c6:27:39:16:a3:98:2b:40:45:c2:cd:50:26:d9:b9: 51:95:92:66:9e:25:5a:02:0e:4a:41:6a:52:d6:6f:44:9e:0e: 85:e2:52:27:91:d2:d1:fa:a3:45:00:ba:40:56:e1:2c:b2:06: a3:84:1c:9f:96:73:47:0f:20:15:1c:d6:96:72:55:4e:1c:46: 0b:e5:56:a8:b1:26:ad:e7:33:72:01:57:e7:19:d4:ad:16:2c: 08:52:7f:be:68:bd:7c:a2:74:7b:ed:7f:01:f4:55:93:19:87: a4:f3:8e:e8:e5:4d:64:04:ed:87:84:3e:f9:f3:d9:40:6a:57: 08:92:43:48:ac:52:7b:cb:68:52:a9:a3:6d:be:6a:64:7d:39: 13:19:97:62:dd:e3:d5:d7:d5:de:7d:1e:2d:8e:c3:c2:ce:cc: 86:f5:e5:cf:0f:5d:ad:34:98:9d:02:a3:4f:9e:47:cb:c3:62: 22:7b:59:fa:47:40:c2:ba:3f:8b:e2:56:fa:57:f0:27:92:3a: 52:b2:60:39:ce:96:c9:0a:e2:db:e4:eb:e7:90:02:36:42:f9: 42:77:29:92 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUXqncoKeTVfNswVyeobj3R620awIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0 NDI2N0IxNDAeFw0yNTEyMDQxMzUzNDNaFw0yNjEyMDMxMzU4NDNaMDMxMTAvBgNV BAMTKEM5NjgyMTBBOTgxRUUwOUIwMUY2Q0E3NDYzQzg1OTgyNTNGRTE2QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDColGU/TygCPT4fankXI8q7SD6 svD3PCr+ZJZMrDCMs02aXiGoGFnYtWWt8sBdkF/Tax44MZTd4WZJdQ4NgYLa1rmK 0uYSmWocpCRGSJlRW2hO17v6EUS3rwJRmaIA4w7+Xsb/kMxDGlTo6MwYHcRH4YSI BZDFgHw8LF0qw0J1ZZEo1gmLYCayH7e0WXa+gZTaEdryQzxEmTlsvaD4MW0vCAAo odnjNMYJ3jCeo2Kx4mPx1rXRa39llX0pVlAYWDxKe3yT2iqy0h4366j9oNTz5nEs rPk3hfha0aHtZ+e0Kxs2uTNrss2C8AOObYgL12xIfUaN/OXXd5lBAKC+yQgLAgMB AAGjggJ2MIICcjAdBgNVHQ4EFgQUyWghCpge4JsB9sp0Y8hZglP+FrgwHwYDVR0j BBgwFoAUSX6iirmCZgl4c+U9+J2pfEQmexQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjkwZTY4NjAtMzcyMS00OGM0LWEzZmUtMTFiMWYyYzBk ZjVmLzEvNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2N0IxNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2 N0IxNC5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjkwZTY4NjAt MzcyMS00OGM0LWEzZmUtMTFiMWYyYzBkZjVmLzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2E2MTM4MzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM0MzQzOTM3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAKgtOBwqDMA0GCSqGSIb3DQEBCwUAA4IBAQCC5W7Ign53nz4FU25JOzy5 LDWyMo8+utbqL8lEMuPiRqFvpfy6j/vGJzkWo5grQEXCzVAm2blRlZJmniVaAg5K QWpS1m9Eng6F4lInkdLR+qNFALpAVuEssgajhByflnNHDyAVHNaWclVOHEYL5Vao sSat5zNyAVfnGdStFiwIUn++aL18onR77X8B9FWTGYek847o5U1kBO2HhD7589lA alcIkkNIrFJ7y2hSqaNtvmpkfTkTGZdi3ePV19XefR4tjsPCzsyG9eXPD12tNJid AqNPnkfLw2Iie1n6R0DCuj+L4lb6V/AnkjpSsmA5zpbJCuLb5OvnkAI2QvlCdymS -----END CERTIFICATE-----Generated at Fri Dec 5 21:06:59 2025 by rpki-client