This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/326130623a346530373a3930303a3a2f34302d3430203d3e20323032313932.roa File: 326130623a346530373a3930303a3a2f34302d3430203d3e20323032313932.roa (raw, json) Hash identifier: EJC2hIlnRT4fGm8BiWu+mKtkuG7C8nqqr/7ojxbQkQQ= Subject key identifier: C3:2B:A0:3A:C9:7C:99:3F:09:F2:14:E5:D1:D8:16:DC:86:60:D9:10 Certificate issuer: /CN=7362A987ABB0200A1FC035126DEA767619F0F15F Certificate serial: 4631631F124CDF364D7C6B4EED35469FDB5C6B6F Authority key identifier: 73:62:A9:87:AB:B0:20:0A:1F:C0:35:12:6D:EA:76:76:19:F0:F1:5F Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/7362A987ABB0200A1FC035126DEA767619F0F15F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/326130623a346530373a3930303a3a2f34302d3430203d3e20323032313932.roa Signing time: Tue 20 Jan 2026 09:35:52 +0000 ROA not before: Tue 20 Jan 2026 09:30:52 +0000 ROA not after: Tue 19 Jan 2027 09:35:52 +0000 asID: 202192 IP address blocks: 2a0b:4e07:900::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/7362A987ABB0200A1FC035126DEA767619F0F15F.crl rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/7362A987ABB0200A1FC035126DEA767619F0F15F.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/7362A987ABB0200A1FC035126DEA767619F0F15F.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:31:63:1f:12:4c:df:36:4d:7c:6b:4e:ed:35:46:9f:db:5c:6b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7362A987ABB0200A1FC035126DEA767619F0F15F Validity Not Before: Jan 20 09:30:52 2026 GMT Not After : Jan 19 09:35:52 2027 GMT Subject: CN=C32BA03AC97C993F09F214E5D1D816DC8660D910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:94:33:45:8c:09:3f:59:6f:8b:e3:92:65:2d: eb:f6:ae:42:a7:8b:60:83:f2:2b:4e:03:7e:e0:60: b7:d6:0a:34:52:c8:e9:f5:b2:05:46:dd:24:ba:79: 57:27:de:91:a5:15:9b:f3:99:42:f8:01:d5:94:12: f7:24:3b:65:c7:1f:c1:f2:ae:5d:8b:4c:7d:d2:11: 2a:9b:66:df:15:9d:9e:fe:9f:8e:73:1a:ed:e4:bb: ba:5f:19:99:ea:32:98:b7:5d:1a:fe:ea:33:fa:e1: 95:6a:8a:65:1e:af:fc:21:50:32:11:bc:ff:64:f1: 17:9d:f6:a4:28:46:73:db:80:1a:71:fb:ee:06:f0: 18:48:de:c3:98:d4:fe:6c:26:d2:26:15:68:15:a8: 78:56:76:4f:a0:2c:ed:f7:48:d5:8b:fe:ae:1f:c6: 22:b7:8c:33:be:35:57:c2:f8:90:bd:56:e3:99:77: 7d:29:61:b0:9c:d7:c7:f7:19:73:04:68:fb:f2:72: 56:72:df:e2:d1:65:c7:6b:2c:cd:e1:a2:34:ec:30: e6:ad:7d:2e:34:bd:cf:ea:4d:95:e3:73:48:ee:9e: 6e:2f:bb:ff:00:83:c7:4c:bc:4c:6f:f3:9f:30:e2: df:31:13:f3:10:ab:54:7e:2a:e2:ad:ce:1a:2e:4d: 6f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2B:A0:3A:C9:7C:99:3F:09:F2:14:E5:D1:D8:16:DC:86:60:D9:10 X509v3 Authority Key Identifier: keyid:73:62:A9:87:AB:B0:20:0A:1F:C0:35:12:6D:EA:76:76:19:F0:F1:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/7362A987ABB0200A1FC035126DEA767619F0F15F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/7362A987ABB0200A1FC035126DEA767619F0F15F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/326130623a346530373a3930303a3a2f34302d3430203d3e20323032313932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:900::/40 Signature Algorithm: sha256WithRSAEncryption 2b:4a:97:e6:0c:11:69:1b:0e:1d:9a:c2:ad:23:31:56:81:d4: 59:8f:f5:67:6b:ab:5e:6b:c3:fb:a5:f9:92:8a:bd:60:27:06: 98:b0:ad:31:4f:f5:c5:b5:5a:33:f6:91:90:c4:03:75:d4:9b: 39:6e:58:99:be:b7:2f:83:99:cd:c6:3f:23:7d:1b:d9:14:a8: 3c:cd:28:88:ff:ad:8c:3e:da:ac:81:67:48:0a:9b:ab:38:19: 52:af:5a:19:e2:a4:b9:9b:ef:a5:8d:d4:aa:4d:42:c3:da:14: f4:7d:b3:4e:82:4f:d6:5c:1d:5f:74:59:2d:a2:64:b1:60:77: 9a:30:e4:cd:98:a8:cb:79:a2:e2:9d:f8:bb:8e:3a:55:1f:52: 8c:17:9b:3a:be:b8:f7:26:db:46:ac:5f:fa:04:3f:fa:ed:4f: f1:3b:ca:41:ee:0a:63:5d:cb:c9:18:21:a3:04:c3:2e:a5:5b: 7f:16:4c:4b:e2:98:8e:d5:2c:d3:18:21:c8:35:b0:a2:67:e1: 4e:9c:85:0d:a0:89:3c:eb:d4:54:7d:ef:95:9d:94:62:07:4e: e4:87:74:2c:93:d6:77:68:21:47:1a:f6:c1:ce:ae:a9:19:ac: d5:0d:bb:d7:6f:54:fa:ad:d6:dc:a9:5f:ef:e0:92:9b:85:bb: 48:90:cd:b4 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIURjFjHxJM3zZNfGtO7TVGn9tca28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM2MkE5ODdBQkIwMjAwQTFGQzAzNTEyNkRFQTc2NzYx OUYwRjE1RjAeFw0yNjAxMjAwOTMwNTJaFw0yNzAxMTkwOTM1NTJaMDMxMTAvBgNV BAMTKEMzMkJBMDNBQzk3Qzk5M0YwOUYyMTRFNUQxRDgxNkRDODY2MEQ5MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDglDNFjAk/WW+L45JlLev2rkKn i2CD8itOA37gYLfWCjRSyOn1sgVG3SS6eVcn3pGlFZvzmUL4AdWUEvckO2XHH8Hy rl2LTH3SESqbZt8VnZ7+n45zGu3ku7pfGZnqMpi3XRr+6jP64ZVqimUer/whUDIR vP9k8Red9qQoRnPbgBpx++4G8BhI3sOY1P5sJtImFWgVqHhWdk+gLO33SNWL/q4f xiK3jDO+NVfC+JC9VuOZd30pYbCc18f3GXMEaPvyclZy3+LRZcdrLM3hojTsMOat fS40vc/qTZXjc0junm4vu/8Ag8dMvExv858w4t8xE/MQq1R+KuKtzhouTW+3AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUwyugOsl8mT8J8hTl0dgW3IZg2RAwHwYDVR0j BBgwFoAUc2Kph6uwIAofwDUSbep2dhnw8V8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmZjNmZkOGYtNDZjMy00NjViLTk4MTAtZDhmNzViODE1 ZjdiLzAvNzM2MkE5ODdBQkIwMjAwQTFGQzAzNTEyNkRFQTc2NzYxOUYwRjE1Ri5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNzM2MkE5ODdBQkIwMjAwQTFGQzAzNTEyNkRFQTc2NzYxOUYw RjE1Ri5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmZjNmZkOGYt NDZjMy00NjViLTk4MTAtZDhmNzViODE1ZjdiLzAvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzOTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjMwMzIzMTM5MzIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAqC04HCTANBgkqhkiG9w0BAQsFAAOCAQEAK0qX5gwRaRsOHZrCrSMx VoHUWY/1Z2urXmvD+6X5koq9YCcGmLCtMU/1xbVaM/aRkMQDddSbOW5Ymb63L4OZ zcY/I30b2RSoPM0oiP+tjD7arIFnSAqbqzgZUq9aGeKkuZvvpY3Uqk1Cw9oU9H2z ToJP1lwdX3RZLaJksWB3mjDkzZioy3mi4p34u446VR9SjBebOr649ybbRqxf+gQ/ +u1P8TvKQe4KY13LyRghowTDLqVbfxZMS+KYjtUs0xghyDWwomfhTpyFDaCJPOvU VH3vlZ2UYgdO5Id0LJPWd2ghRxr2wc6uqRms1Q27129U+q3W3Klf7+CSm4W7SJDN tA== -----END CERTIFICATE-----Generated at Wed Jan 21 08:21:12 2026 by rpki-client