This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/326130623a346530373a6166303a3a2f34342d3438203d3e20323035393431.roa File: 326130623a346530373a6166303a3a2f34342d3438203d3e20323035393431.roa (raw, json) Hash identifier: /Qq1CCzeUDnpMPkGTcBOVvwEcVcmDJJcPUGetJPLC3A= Subject key identifier: 97:84:5C:2D:15:5E:53:01:2E:66:D9:7F:29:5C:74:05:86:74:50:68 Certificate issuer: /CN=497EA28AB98266097873E53DF89DA97C44267B14 Certificate serial: 79BD03CEDE42E055A8BD606A829DFBB099F03F6E Authority key identifier: 49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/326130623a346530373a6166303a3a2f34342d3438203d3e20323035393431.roa Signing time: Thu 04 Dec 2025 13:59:30 +0000 ROA not before: Thu 04 Dec 2025 13:54:30 +0000 ROA not after: Thu 03 Dec 2026 13:59:30 +0000 asID: 205941 IP address blocks: 2a0b:4e07:af0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.crl rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 04:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:bd:03:ce:de:42:e0:55:a8:bd:60:6a:82:9d:fb:b0:99:f0:3f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=497EA28AB98266097873E53DF89DA97C44267B14 Validity Not Before: Dec 4 13:54:30 2025 GMT Not After : Dec 3 13:59:30 2026 GMT Subject: CN=97845C2D155E53012E66D97F295C740586745068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:df:f0:cc:66:77:d7:ee:10:6d:84:06:20:62: 89:b8:2f:a5:6f:a0:ea:b5:b7:05:8c:b4:3a:0d:f0: db:e1:78:89:84:42:0d:83:c9:7f:d7:78:f2:88:23: e5:cb:3c:7a:65:53:59:7a:58:b9:89:f0:91:40:28: 48:67:f6:94:8e:06:2d:1c:4f:7e:f5:a6:e9:25:81: d7:6b:c0:c4:7a:41:ae:5f:56:f0:ed:d7:56:e6:70: 75:2c:92:0f:26:e3:83:ce:ba:12:55:72:b0:e2:bc: d5:51:8e:6d:5c:37:a7:97:26:cd:0f:0d:0e:6e:61: 20:e0:ca:a1:25:ec:66:1c:91:e5:82:a8:86:2a:1c: ac:f3:53:ee:bf:83:74:a0:ac:97:0c:fb:2f:04:05: 5e:7e:15:39:69:46:87:18:a1:27:55:33:fd:b3:67: 44:72:16:01:ee:82:f9:17:33:fe:66:6c:54:eb:d6: c7:cc:15:d5:93:27:6b:42:0b:fe:be:14:9b:fd:ea: 34:a3:3f:03:90:29:40:ad:21:32:a7:c5:a0:6c:7c: ff:60:49:3f:cf:ae:6a:4d:79:87:57:78:3a:8b:3c: 74:7a:97:7e:05:a7:f7:2c:7e:67:4e:84:ee:e6:ea: ac:33:1d:fe:d9:f1:92:50:b1:fd:86:f7:7a:f3:76: db:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:84:5C:2D:15:5E:53:01:2E:66:D9:7F:29:5C:74:05:86:74:50:68 X509v3 Authority Key Identifier: keyid:49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/326130623a346530373a6166303a3a2f34342d3438203d3e20323035393431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:af0::/44 Signature Algorithm: sha256WithRSAEncryption 7c:bf:f8:ca:ed:e3:25:eb:da:01:5b:91:87:67:9e:57:55:e4: b4:31:ae:fb:b7:b9:66:59:70:c5:9a:36:7c:2c:17:d3:a8:be: 76:e4:dc:c5:49:2c:6e:b8:21:7e:22:36:aa:9c:6c:90:15:2b: b4:84:fd:15:d8:2e:17:75:9c:a0:5e:5a:e4:71:51:78:3e:bd: fd:f5:a7:33:18:c2:bc:26:d0:83:b0:3b:6c:de:12:76:68:5e: e3:08:e6:f0:22:d2:03:bb:a7:e0:42:59:84:00:3e:86:36:f3: 01:5a:d5:65:f4:38:df:a2:83:93:35:ed:b2:87:26:08:10:d2: d1:bc:2e:a7:fe:d5:7b:db:04:3b:1c:97:8a:bc:a5:7e:ab:be: 1d:0c:92:dd:0f:70:35:79:0a:ff:08:81:4e:b1:94:71:b9:9e: ec:0f:a2:56:3d:49:1e:2f:a0:fa:4f:3e:a8:bf:ae:52:f5:99: f2:b4:ce:97:1e:0d:30:e3:a3:9f:54:99:0b:27:fc:bb:e3:eb: 9d:79:89:65:d8:fb:8d:49:c8:22:f3:22:1e:3f:c8:69:3e:3b: 98:1a:8c:1c:bb:67:c8:9d:6f:86:96:c2:88:c6:dc:fa:2d:6d: e5:7b:ef:0a:56:b7:f9:1b:f8:7f:85:21:54:74:67:13:e1:b2: ae:d7:41:79 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUeb0Dzt5C4FWovWBqgp37sJnwP24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0 NDI2N0IxNDAeFw0yNTEyMDQxMzU0MzBaFw0yNjEyMDMxMzU5MzBaMDMxMTAvBgNV BAMTKDk3ODQ1QzJEMTU1RTUzMDEyRTY2RDk3RjI5NUM3NDA1ODY3NDUwNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3/DMZnfX7hBthAYgYom4L6Vv oOq1twWMtDoN8NvheImEQg2DyX/XePKII+XLPHplU1l6WLmJ8JFAKEhn9pSOBi0c T371puklgddrwMR6Qa5fVvDt11bmcHUskg8m44POuhJVcrDivNVRjm1cN6eXJs0P DQ5uYSDgyqEl7GYckeWCqIYqHKzzU+6/g3SgrJcM+y8EBV5+FTlpRocYoSdVM/2z Z0RyFgHugvkXM/5mbFTr1sfMFdWTJ2tCC/6+FJv96jSjPwOQKUCtITKnxaBsfP9g ST/PrmpNeYdXeDqLPHR6l34Fp/csfmdOhO7m6qwzHf7Z8ZJQsf2G93rzdtsjAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUl4RcLRVeUwEuZtl/KVx0BYZ0UGgwHwYDVR0j BBgwFoAUSX6iirmCZgl4c+U9+J2pfEQmexQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjkwZTY4NjAtMzcyMS00OGM0LWEzZmUtMTFiMWYyYzBk ZjVmLzEvNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2N0IxNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2 N0IxNC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjkwZTY4NjAt MzcyMS00OGM0LWEzZmUtMTFiMWYyYzBkZjVmLzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2E2MTY2MzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjMwMzUzOTM0MzEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwQqC04HCvAwDQYJKoZIhvcNAQELBQADggEBAHy/+Mrt4yXr2gFbkYdn nldV5LQxrvu3uWZZcMWaNnwsF9Oovnbk3MVJLG64IX4iNqqcbJAVK7SE/RXYLhd1 nKBeWuRxUXg+vf31pzMYwrwm0IOwO2zeEnZoXuMI5vAi0gO7p+BCWYQAPoY28wFa 1WX0ON+ig5M17bKHJggQ0tG8Lqf+1XvbBDscl4q8pX6rvh0Mkt0PcDV5Cv8IgU6x lHG5nuwPolY9SR4voPpPPqi/rlL1mfK0zpceDTDjo59UmQsn/Lvj6515iWXY+41J yCLzIh4/yGk+O5gajBy7Z8idb4aWwojG3PotbeV77wpWt/kb+H+FIVR0ZxPhsq7X QXk= -----END CERTIFICATE-----Generated at Fri Dec 5 21:06:19 2025 by rpki-client