This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/326130623a346530373a34323a3a2f34382d3438203d3e20323032313932.roa File: 326130623a346530373a34323a3a2f34382d3438203d3e20323032313932.roa (raw, json) Hash identifier: fquVfgp9MANaCnmZHU29EbjJoqDiozGaupPPXtG8uuA= Subject key identifier: F5:70:4F:B2:48:26:83:2C:DC:C9:8D:44:3F:6E:1D:B1:66:46:25:B4 Certificate issuer: /CN=7362A987ABB0200A1FC035126DEA767619F0F15F Certificate serial: 3BD7E1F7DD90495DE4C8F67E1BFC86C7427AD00A Authority key identifier: 73:62:A9:87:AB:B0:20:0A:1F:C0:35:12:6D:EA:76:76:19:F0:F1:5F Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/7362A987ABB0200A1FC035126DEA767619F0F15F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/326130623a346530373a34323a3a2f34382d3438203d3e20323032313932.roa Signing time: Tue 20 Jan 2026 09:35:30 +0000 ROA not before: Tue 20 Jan 2026 09:30:30 +0000 ROA not after: Tue 19 Jan 2027 09:35:30 +0000 asID: 202192 IP address blocks: 2a0b:4e07:42::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/7362A987ABB0200A1FC035126DEA767619F0F15F.crl rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/7362A987ABB0200A1FC035126DEA767619F0F15F.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/7362A987ABB0200A1FC035126DEA767619F0F15F.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d7:e1:f7:dd:90:49:5d:e4:c8:f6:7e:1b:fc:86:c7:42:7a:d0:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7362A987ABB0200A1FC035126DEA767619F0F15F Validity Not Before: Jan 20 09:30:30 2026 GMT Not After : Jan 19 09:35:30 2027 GMT Subject: CN=F5704FB24826832CDCC98D443F6E1DB1664625B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:2c:08:b3:10:26:ab:e7:67:18:aa:da:8e: 99:9f:61:5f:6c:55:20:ac:da:17:07:d3:0b:61:c1: 5d:39:4e:c8:bd:a4:aa:00:07:3c:41:3a:be:7f:db: 5f:e3:7c:cd:0f:18:1a:fa:94:67:52:d6:5c:a4:fc: b8:32:c1:22:da:00:6c:dc:9f:aa:60:09:ff:f3:3f: a8:0e:71:7d:be:51:15:ce:11:8a:c8:cf:be:e3:1d: 25:3f:53:7a:2a:b6:53:f5:d7:0f:ab:a4:4d:e6:c0: 65:27:83:5b:f0:ec:94:68:24:aa:6b:4c:3b:ab:31: 65:e4:b6:2f:18:50:e0:f2:73:04:cd:45:c5:11:e5: eb:0a:c0:2b:6b:51:52:0e:26:ce:70:cc:77:5f:1c: 38:d1:47:e2:48:38:2a:c0:c2:87:c6:10:72:08:8b: 1a:d2:19:7b:d6:39:1c:24:98:eb:97:8c:b5:d2:06: db:09:cd:16:60:de:aa:ba:61:91:cb:94:e5:cf:5b: 28:3e:8a:a7:cc:c5:36:8c:38:44:1b:fb:70:e8:f3: 75:90:ba:61:f1:96:30:7d:58:bb:2d:d3:09:32:e4: 9d:64:55:e1:fa:16:ec:b2:fe:08:e4:d5:1b:14:cf: cb:f7:9e:ac:04:aa:77:6e:4c:36:2d:38:ca:2c:0b: 21:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:70:4F:B2:48:26:83:2C:DC:C9:8D:44:3F:6E:1D:B1:66:46:25:B4 X509v3 Authority Key Identifier: keyid:73:62:A9:87:AB:B0:20:0A:1F:C0:35:12:6D:EA:76:76:19:F0:F1:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/7362A987ABB0200A1FC035126DEA767619F0F15F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/7362A987ABB0200A1FC035126DEA767619F0F15F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/326130623a346530373a34323a3a2f34382d3438203d3e20323032313932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:42::/48 Signature Algorithm: sha256WithRSAEncryption 86:11:1f:ef:44:1b:19:fc:67:d6:2d:ad:1a:7f:ca:20:02:40: 7d:2d:57:d4:ca:86:ca:c8:ff:bd:e7:9a:5e:00:05:d6:d3:a6: 7f:90:89:c4:40:76:c9:5f:fa:bb:75:ac:fc:fe:23:08:b5:f9: db:99:9e:e1:5d:bf:ed:16:28:75:98:36:61:94:7b:7c:92:8a: 7f:a8:c7:f4:08:9b:af:21:e3:fa:e3:16:19:38:af:5f:d8:c6: ea:45:29:55:1f:dc:03:91:3f:9d:49:f1:a4:5e:23:eb:8f:6e: 16:1f:f2:ef:e7:61:b1:98:d2:6b:d4:6e:25:bd:80:76:d5:b4: ee:49:2c:34:57:b7:e3:7b:3a:7f:7c:5d:ad:93:03:fa:df:58: 4f:22:33:ed:c9:e6:a2:01:80:5b:18:84:ef:7b:f8:70:16:ec: a5:a8:18:a2:7c:d5:1a:b5:2b:9b:fa:7b:a3:2e:50:0b:4a:c6: 18:3c:ac:40:8b:f8:ac:1b:fb:8d:52:d2:6f:64:a8:fc:ee:21: f8:03:a8:85:bc:8e:9f:1a:5a:4f:36:af:97:41:11:99:fb:1c: ae:8a:83:91:e4:a4:db:be:c0:22:58:2c:c7:68:21:3c:a4:15: 08:1d:ae:d2:5b:15:fb:28:d8:3c:46:c8:4e:71:ad:99:f3:68: 1c:8c:63:e9 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUO9fh992QSV3kyPZ+G/yGx0J60AowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM2MkE5ODdBQkIwMjAwQTFGQzAzNTEyNkRFQTc2NzYx OUYwRjE1RjAeFw0yNjAxMjAwOTMwMzBaFw0yNzAxMTkwOTM1MzBaMDMxMTAvBgNV BAMTKEY1NzA0RkIyNDgyNjgzMkNEQ0M5OEQ0NDNGNkUxREIxNjY0NjI1QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2SwIsxAmq+dnGKrajpmfYV9s VSCs2hcH0wthwV05Tsi9pKoABzxBOr5/21/jfM0PGBr6lGdS1lyk/LgywSLaAGzc n6pgCf/zP6gOcX2+URXOEYrIz77jHSU/U3oqtlP11w+rpE3mwGUng1vw7JRoJKpr TDurMWXkti8YUODycwTNRcUR5esKwCtrUVIOJs5wzHdfHDjRR+JIOCrAwofGEHII ixrSGXvWORwkmOuXjLXSBtsJzRZg3qq6YZHLlOXPWyg+iqfMxTaMOEQb+3Do83WQ umHxljB9WLst0wky5J1kVeH6Fuyy/gjk1RsUz8v3nqwEqnduTDYtOMosCyFrAgMB AAGjggJ2MIICcjAdBgNVHQ4EFgQU9XBPskgmgyzcyY1EP24dsWZGJbQwHwYDVR0j BBgwFoAUc2Kph6uwIAofwDUSbep2dhnw8V8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmZjNmZkOGYtNDZjMy00NjViLTk4MTAtZDhmNzViODE1 ZjdiLzAvNzM2MkE5ODdBQkIwMjAwQTFGQzAzNTEyNkRFQTc2NzYxOUYwRjE1Ri5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNzM2MkE5ODdBQkIwMjAwQTFGQzAzNTEyNkRFQTc2NzYxOUYw RjE1Ri5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmZjNmZkOGYt NDZjMy00NjViLTk4MTAtZDhmNzViODE1ZjdiLzAvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzNDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDMyMzEzOTMyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAKgtOBwBCMA0GCSqGSIb3DQEBCwUAA4IBAQCGER/vRBsZ/GfWLa0af8og AkB9LVfUyobKyP+955peAAXW06Z/kInEQHbJX/q7daz8/iMItfnbmZ7hXb/tFih1 mDZhlHt8kop/qMf0CJuvIeP64xYZOK9f2MbqRSlVH9wDkT+dSfGkXiPrj24WH/Lv 52GxmNJr1G4lvYB21bTuSSw0V7fjezp/fF2tkwP631hPIjPtyeaiAYBbGITve/hw FuylqBiifNUatSub+nujLlALSsYYPKxAi/isG/uNUtJvZKj87iH4A6iFvI6fGlpP Nq+XQRGZ+xyuioOR5KTbvsAiWCzHaCE8pBUIHa7SWxX7KNg8RshOca2Z82gcjGPp -----END CERTIFICATE-----Generated at Wed Jan 21 08:21:12 2026 by rpki-client