This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/2/326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa File: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (raw, json) Hash identifier: BVWpAt8ZIeLv3s6mIqdwZBbEyrqDjG9Ei61FZc5gyMQ= Subject key identifier: 4A:3C:E7:63:7E:CA:00:88:17:E8:97:57:77:95:56:A9:3C:E1:1E:E1 Certificate issuer: /CN=65AC7E7FA39876E7BED5EC14ED195E3E9CBB7097 Certificate serial: 183D3D1738E34F29681A6D00154C3874FCE6E805 Authority key identifier: 65:AC:7E:7F:A3:98:76:E7:BE:D5:EC:14:ED:19:5E:3E:9C:BB:70:97 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/65AC7E7FA39876E7BED5EC14ED195E3E9CBB7097.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/2/326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa Signing time: Tue 30 Dec 2025 13:39:11 +0000 ROA not before: Tue 30 Dec 2025 13:34:11 +0000 ROA not after: Tue 29 Dec 2026 13:39:11 +0000 asID: 210352 IP address blocks: 2a0f:1cc5:f00::/40 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 18:3d:3d:17:38:e3:4f:29:68:1a:6d:00:15:4c:38:74:fc:e6:e8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65AC7E7FA39876E7BED5EC14ED195E3E9CBB7097 Validity Not Before: Dec 30 13:34:11 2025 GMT Not After : Dec 29 13:39:11 2026 GMT Subject: CN=4A3CE7637ECA008817E89757779556A93CE11EE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:66:fd:3b:4e:f4:be:28:a3:43:e2:f4:8f:bf: 4d:f9:d6:0c:03:bf:9e:78:1b:1f:81:5d:1e:22:24: 7f:b5:91:b9:0f:a1:96:53:4c:dd:61:64:57:c2:1b: b0:2b:28:07:cd:75:df:ea:3d:8a:fc:eb:bd:09:6a: a6:6e:27:4d:83:c5:4c:5c:b4:5f:00:11:de:d6:b9: 29:d5:52:d0:2d:1a:52:a9:79:e2:9f:9c:9f:59:6a: 3f:e1:00:e2:86:54:cd:ad:fe:fa:3c:19:e1:6d:9c: 9c:59:66:3a:29:88:94:11:47:00:1d:d8:53:41:1d: f2:cb:2e:b8:93:dc:8d:af:aa:a5:65:f8:a8:a1:68: 62:3b:4b:8e:38:25:b1:f4:3a:32:67:fe:1b:5b:a5: 8c:36:d5:89:a2:e8:62:97:15:9d:72:bf:52:f9:22: 2d:35:42:0c:b0:c5:57:08:e6:a1:71:6f:90:6b:12: 78:95:d1:e1:3e:a1:b9:af:68:e9:da:1c:ab:3c:9c: fa:56:d2:ff:ed:9d:f9:77:09:27:05:c4:2c:a4:49: 18:39:1b:6a:e8:11:fe:96:72:15:0e:0d:43:c8:6b: a3:91:41:ef:d3:de:3d:6b:ad:f3:3b:99:ff:06:a5: c9:d0:c6:d6:2e:fc:b7:4a:76:b2:d8:fb:56:03:d4: 07:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3C:E7:63:7E:CA:00:88:17:E8:97:57:77:95:56:A9:3C:E1:1E:E1 X509v3 Authority Key Identifier: keyid:65:AC:7E:7F:A3:98:76:E7:BE:D5:EC:14:ED:19:5E:3E:9C:BB:70:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/2/65AC7E7FA39876E7BED5EC14ED195E3E9CBB7097.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/65AC7E7FA39876E7BED5EC14ED195E3E9CBB7097.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/2/326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:f00::/40 Signature Algorithm: sha256WithRSAEncryption 92:65:f7:7a:0f:82:8e:5f:df:23:28:1a:d7:28:03:d9:10:41: 12:6f:e5:81:f5:72:8f:01:85:35:78:72:0b:09:82:94:ad:0f: dd:7b:f8:f7:b7:47:55:02:f8:d9:27:ca:42:b2:72:a0:27:c3: 51:cc:e2:36:de:32:7c:78:cb:84:fc:82:ae:a9:dd:3f:b5:d7: 45:66:ad:e7:27:ba:da:e3:ef:20:79:4d:d2:26:0b:74:79:5f: f6:9e:cf:13:82:8f:f7:d4:95:67:74:84:03:1c:a4:82:c3:35: 86:1d:6f:fe:86:3f:20:4e:e0:1d:3f:d7:27:c7:32:00:ec:11: 5c:15:93:cd:b3:7a:d7:c6:43:23:9a:fa:1c:79:07:9b:e7:37: e7:11:d4:4f:44:6e:bd:05:bd:8c:be:94:a4:4a:df:18:ef:6b: 7c:7f:4a:de:74:97:38:e0:7b:27:54:48:30:94:59:03:6e:20: bf:6f:7f:58:1d:25:13:e3:03:70:57:4e:c3:99:92:63:67:2f: 49:f7:ed:12:40:96:17:d8:b4:cb:5b:0b:a1:e6:55:e3:f1:67: 8e:c9:50:76:c4:69:8d:a4:e9:a1:03:e3:37:14:d5:06:a4:65: 86:26:75:06:c2:0f:84:c2:8e:44:ed:f4:f2:e1:7f:a6:35:75: af:94:ad:55 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGD09FzjjTyloGm0AFUw4dPzm6AUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVBQzdFN0ZBMzk4NzZFN0JFRDVFQzE0RUQxOTVFM0U5 Q0JCNzA5NzAeFw0yNTEyMzAxMzM0MTFaFw0yNjEyMjkxMzM5MTFaMDMxMTAvBgNV BAMTKDRBM0NFNzYzN0VDQTAwODgxN0U4OTc1Nzc3OTU1NkE5M0NFMTFFRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Zv07TvS+KKND4vSPv0351gwD v554Gx+BXR4iJH+1kbkPoZZTTN1hZFfCG7ArKAfNdd/qPYr8670JaqZuJ02DxUxc tF8AEd7WuSnVUtAtGlKpeeKfnJ9Zaj/hAOKGVM2t/vo8GeFtnJxZZjopiJQRRwAd 2FNBHfLLLriT3I2vqqVl+KihaGI7S444JbH0OjJn/htbpYw21Ymi6GKXFZ1yv1L5 Ii01QgywxVcI5qFxb5BrEniV0eE+obmvaOnaHKs8nPpW0v/tnfl3CScFxCykSRg5 G2roEf6WchUODUPIa6ORQe/T3j1rrfM7mf8GpcnQxtYu/LdKdrLY+1YD1AfBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUSjznY37KAIgX6JdXd5VWqTzhHuEwHwYDVR0j BBgwFoAUZax+f6OYdue+1ewU7RlePpy7cJcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzIvNjVBQzdFN0ZBMzk4NzZFN0JFRDVFQzE0RUQxOTVFM0U5Q0JCNzA5Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC82NUFDN0U3RkEzOTg3NkU3QkVENUVDMTRF RDE5NUUzRTlDQkI3MDk3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xNTE3YjVkMC0zMzE3LTRiNDktOGVjNS1iZTkwYmM3MDA2MmYvMi8zMjYxMzA2 NjNhMzE2MzYzMzUzYTY2MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEz MDMzMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoPHMUPMA0GCSqGSIb3DQEBCwUAA4IBAQCSZfd6 D4KOX98jKBrXKAPZEEESb+WB9XKPAYU1eHILCYKUrQ/de/j3t0dVAvjZJ8pCsnKg J8NRzOI23jJ8eMuE/IKuqd0/tddFZq3nJ7ra4+8geU3SJgt0eV/2ns8Tgo/31JVn dIQDHKSCwzWGHW/+hj8gTuAdP9cnxzIA7BFcFZPNs3rXxkMjmvoceQeb5zfnEdRP RG69Bb2MvpSkSt8Y72t8f0redJc44HsnVEgwlFkDbiC/b39YHSUT4wNwV07DmZJj Zy9J9+0SQJYX2LTLWwuh5lXj8WeOyVB2xGmNpOmhA+M3FNUGpGWGJnUGwg+Ewo5E 7fTy4X+mNXWvlK1V -----END CERTIFICATE-----Generated at Mon Jan 26 12:57:58 2026 by rpki-client