This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/326130623a346530373a323a3a2f34382d3438203d3e20323032313932.roa File: 326130623a346530373a323a3a2f34382d3438203d3e20323032313932.roa (raw, json) Hash identifier: 2Q78hs9dDRNLVJzlGxzW9WgXODF3/8z4QP/om6m2wzs= Subject key identifier: D4:CF:19:EB:1D:E6:B2:45:C1:DF:48:D4:23:9F:8F:FF:A0:7B:B2:2C Certificate issuer: /CN=7362A987ABB0200A1FC035126DEA767619F0F15F Certificate serial: 4AE633DF7393CD9DEA0382585B10D233937C0037 Authority key identifier: 73:62:A9:87:AB:B0:20:0A:1F:C0:35:12:6D:EA:76:76:19:F0:F1:5F Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/7362A987ABB0200A1FC035126DEA767619F0F15F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/326130623a346530373a323a3a2f34382d3438203d3e20323032313932.roa Signing time: Tue 20 Jan 2026 09:34:08 +0000 ROA not before: Tue 20 Jan 2026 09:29:08 +0000 ROA not after: Tue 19 Jan 2027 09:34:08 +0000 asID: 202192 IP address blocks: 2a0b:4e07:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/7362A987ABB0200A1FC035126DEA767619F0F15F.crl rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/7362A987ABB0200A1FC035126DEA767619F0F15F.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/7362A987ABB0200A1FC035126DEA767619F0F15F.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e6:33:df:73:93:cd:9d:ea:03:82:58:5b:10:d2:33:93:7c:00:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7362A987ABB0200A1FC035126DEA767619F0F15F Validity Not Before: Jan 20 09:29:08 2026 GMT Not After : Jan 19 09:34:08 2027 GMT Subject: CN=D4CF19EB1DE6B245C1DF48D4239F8FFFA07BB22C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8b:eb:aa:0f:41:01:c4:a2:da:0d:ec:57:eb: 6e:9c:ba:47:e8:7b:6e:e6:d4:53:cd:e6:3c:e8:a2: a3:35:19:12:a1:e0:62:4b:55:61:95:a5:bd:90:26: 2a:c0:76:f3:34:24:ff:dc:e6:17:f1:45:5c:08:58: fe:91:7e:ca:a9:63:15:c6:3e:f6:81:e5:e0:81:f6: 56:85:91:75:d0:79:1c:87:e8:32:06:be:db:57:35: 57:b9:7b:16:74:6d:a5:7b:90:dc:e5:2e:58:6f:97: 0a:09:68:7f:21:b6:e5:7e:40:8d:f1:21:61:fd:ff: f1:34:e2:2e:63:d4:79:9c:85:e1:fa:76:de:f7:70: 7e:1d:41:61:c9:16:ac:30:f8:45:ed:73:62:46:4c: 86:92:c8:06:d5:0a:b9:81:75:63:44:0a:cc:c8:75: 3f:cd:3f:10:8d:2e:ab:43:af:52:ac:51:a4:44:17: 6c:04:ea:fb:28:33:7d:10:79:88:00:dd:ea:8a:97: cf:c2:81:f5:7c:00:47:72:3c:84:e2:18:81:2d:02: c7:a7:61:b5:25:f7:ee:35:db:a2:e2:db:89:f1:35: 1b:06:c8:aa:60:aa:69:a1:fb:fd:bc:f7:26:84:6b: b4:62:4e:49:b1:4d:c1:51:45:90:e8:7e:64:fb:cf: 17:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CF:19:EB:1D:E6:B2:45:C1:DF:48:D4:23:9F:8F:FF:A0:7B:B2:2C X509v3 Authority Key Identifier: keyid:73:62:A9:87:AB:B0:20:0A:1F:C0:35:12:6D:EA:76:76:19:F0:F1:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/7362A987ABB0200A1FC035126DEA767619F0F15F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/7362A987ABB0200A1FC035126DEA767619F0F15F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/326130623a346530373a323a3a2f34382d3438203d3e20323032313932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:2::/48 Signature Algorithm: sha256WithRSAEncryption 61:e1:09:9d:55:a8:a5:45:66:6d:b2:ea:cb:43:89:a5:6e:d2: 79:3f:2d:81:ef:8c:ab:44:5f:be:af:9d:47:ab:1a:34:7a:b0: 01:76:28:f9:f9:f8:59:86:54:d4:b8:bb:6f:7f:0c:b7:01:0a: 84:1e:ae:94:e4:05:b9:a2:b5:0e:83:79:4f:d1:bf:69:e8:d7: 2a:22:c5:0f:ed:7a:be:da:c7:a3:3e:78:90:69:8c:e6:66:44: 47:88:7b:61:76:b3:fe:3a:14:d5:c1:c9:18:94:08:74:cf:3b: 55:20:2e:e7:3b:0b:e6:2a:40:f1:80:c6:b5:84:60:07:89:8c: b8:57:e5:69:a3:b3:d7:cc:f8:fb:cf:95:e1:1c:3b:4a:f3:69: 2f:0c:35:7c:4b:2f:85:e6:63:9c:a9:dc:e6:39:73:9a:96:4a: 73:a5:55:f3:c5:20:a1:fd:92:20:f0:3c:a6:76:0d:6d:2a:47: 57:07:b9:3a:a5:b3:5a:61:fa:13:16:cd:0a:b3:23:09:45:22: 11:81:75:ea:e6:69:a0:1a:2c:98:24:8e:3d:37:ab:b6:1a:de: 23:d1:09:98:05:8e:1f:a6:3c:d3:06:67:6e:9c:c5:ff:38:30: b5:8a:03:24:49:27:dd:1f:66:b1:8a:01:7a:5c:64:73:10:d8: 81:83:eb:9e -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUSuYz33OTzZ3qA4JYWxDSM5N8ADcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM2MkE5ODdBQkIwMjAwQTFGQzAzNTEyNkRFQTc2NzYx OUYwRjE1RjAeFw0yNjAxMjAwOTI5MDhaFw0yNzAxMTkwOTM0MDhaMDMxMTAvBgNV BAMTKEQ0Q0YxOUVCMURFNkIyNDVDMURGNDhENDIzOUY4RkZGQTA3QkIyMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9i+uqD0EBxKLaDexX626cukfo e27m1FPN5jzooqM1GRKh4GJLVWGVpb2QJirAdvM0JP/c5hfxRVwIWP6RfsqpYxXG PvaB5eCB9laFkXXQeRyH6DIGvttXNVe5exZ0baV7kNzlLlhvlwoJaH8htuV+QI3x IWH9//E04i5j1HmcheH6dt73cH4dQWHJFqww+EXtc2JGTIaSyAbVCrmBdWNECszI dT/NPxCNLqtDr1KsUaREF2wE6vsoM30QeYgA3eqKl8/CgfV8AEdyPITiGIEtAsen YbUl9+4126Li24nxNRsGyKpgqmmh+/289yaEa7RiTkmxTcFRRZDofmT7zxe7AgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQU1M8Z6x3mskXB30jUI5+P/6B7siwwHwYDVR0j BBgwFoAUc2Kph6uwIAofwDUSbep2dhnw8V8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmZjNmZkOGYtNDZjMy00NjViLTk4MTAtZDhmNzViODE1 ZjdiLzAvNzM2MkE5ODdBQkIwMjAwQTFGQzAzNTEyNkRFQTc2NzYxOUYwRjE1Ri5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNzM2MkE5ODdBQkIwMjAwQTFGQzAzNTEyNkRFQTc2NzYxOUYw RjE1Ri5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmZjNmZkOGYt NDZjMy00NjViLTk4MTAtZDhmNzViODE1ZjdiLzAvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzMjMxMzkzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACoLTgcAAjANBgkqhkiG9w0BAQsFAAOCAQEAYeEJnVWopUVmbbLqy0OJpW7S eT8tge+Mq0Rfvq+dR6saNHqwAXYo+fn4WYZU1Li7b38MtwEKhB6ulOQFuaK1DoN5 T9G/aejXKiLFD+16vtrHoz54kGmM5mZER4h7YXaz/joU1cHJGJQIdM87VSAu5zsL 5ipA8YDGtYRgB4mMuFflaaOz18z4+8+V4Rw7SvNpLww1fEsvheZjnKnc5jlzmpZK c6VV88Ugof2SIPA8pnYNbSpHVwe5OqWzWmH6ExbNCrMjCUUiEYF16uZpoBosmCSO PTerthreI9EJmAWOH6Y80wZnbpzF/zgwtYoDJEkn3R9msYoBelxkcxDYgYPrng== -----END CERTIFICATE-----Generated at Wed Jan 21 08:20:24 2026 by rpki-client