This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a643430303a3a2f33382d3438203d3e20323136333330.roa File: 326130363a313238333a643430303a3a2f33382d3438203d3e20323136333330.roa (raw, json) Hash identifier: qD7O5dX4a6NOka2K/Q+sZ8a1nTzOISkauqMbZdx1tjE= Subject key identifier: A7:90:BB:BA:C0:E7:F1:D9:9D:63:80:E9:2B:8D:77:0A:46:AB:EF:80 Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Certificate serial: 29B2A2F139B0624B316ED3C0B80264EB2A848A7F Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a643430303a3a2f33382d3438203d3e20323136333330.roa Signing time: Fri 05 Dec 2025 21:11:24 +0000 ROA not before: Fri 05 Dec 2025 21:06:24 +0000 ROA not after: Fri 04 Dec 2026 21:11:24 +0000 asID: 216330 IP address blocks: 2a06:1283:d400::/38 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b2:a2:f1:39:b0:62:4b:31:6e:d3:c0:b8:02:64:eb:2a:84:8a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Validity Not Before: Dec 5 21:06:24 2025 GMT Not After : Dec 4 21:11:24 2026 GMT Subject: CN=A790BBBAC0E7F1D99D6380E92B8D770A46ABEF80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:89:f1:86:7c:01:11:6a:6f:78:ba:73:87:11: e9:4a:a0:54:a8:0d:23:cb:25:ce:88:87:bf:b1:a9: 87:1f:65:f6:a1:b9:2c:e3:e1:4e:b5:3f:6f:9f:2e: 71:40:e6:da:d5:ee:d8:51:58:79:28:b2:25:55:a1: e8:de:91:b7:a1:c9:1e:37:15:ca:10:d0:2a:89:c1: fa:d1:03:6e:07:bb:45:7d:42:b1:ed:9e:6e:08:36: 05:f6:9b:ff:07:0f:bb:d9:bb:6a:53:69:4b:ce:61: e2:30:14:ee:53:f2:37:39:f3:e9:a7:59:e8:5f:ed: 4b:e5:45:07:10:bc:54:00:b9:3b:53:e9:be:03:2a: 09:81:f5:0c:d4:04:86:6c:37:3e:bb:c4:40:9d:4b: ea:db:6c:1f:ef:ec:f2:e0:e1:5c:b2:ee:12:24:29: 91:94:6f:19:12:4b:10:49:b0:a2:9a:52:ac:50:02: f7:e6:7a:61:5c:0c:cf:c4:95:50:cf:33:d2:0c:e0: 01:bb:bb:fe:db:da:c5:b3:ee:a3:68:4a:8e:d3:48: 4a:a3:37:fe:e1:85:e2:7d:5a:b8:fe:ac:01:13:eb: e3:59:07:ec:73:06:b6:4e:76:da:78:37:2e:f9:40: 83:d4:fc:b6:e4:1d:4c:d6:1c:af:80:f0:e1:65:00: 39:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:90:BB:BA:C0:E7:F1:D9:9D:63:80:E9:2B:8D:77:0A:46:AB:EF:80 X509v3 Authority Key Identifier: keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a643430303a3a2f33382d3438203d3e20323136333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:d400::/38 Signature Algorithm: sha256WithRSAEncryption 7e:be:ca:b2:df:c7:84:40:3c:cf:87:82:90:11:20:8e:1c:7f: 85:45:59:e9:1a:54:ca:0e:3a:14:78:3b:24:16:45:0b:7f:19: e4:27:fe:6e:03:78:75:c6:f3:8e:4d:33:3f:5e:c3:c6:21:06: 1d:a3:fa:ab:ef:9d:6a:fa:f6:c0:7e:9b:fc:3a:88:df:83:9e: 2f:21:b0:da:65:28:94:6c:17:ac:d7:11:95:9e:99:4c:ae:4b: 46:38:6a:41:64:1f:b0:aa:79:13:b8:0a:e1:1f:00:f8:eb:3a: 02:a0:0f:1b:c4:66:01:2b:0e:86:91:fa:41:34:ac:be:6c:c7: 8a:04:2c:20:93:8e:d8:c8:4a:d6:11:3a:ef:13:fd:0a:01:75: cc:c1:a8:fb:ca:a8:a9:87:f0:ba:d0:ac:3e:f1:e5:fe:08:97: 69:fd:d5:b9:7e:96:c4:a2:25:6a:bc:49:48:52:34:d9:cc:f8: 79:24:d6:ac:8d:18:0d:72:6c:2c:e5:b2:7a:0c:37:e8:00:1e: f1:d1:30:2f:41:79:66:fb:90:25:d8:21:22:77:3a:a8:18:8f: df:c7:c4:8c:8a:59:b5:0e:2d:4c:f4:40:aa:0f:4a:f9:c7:03: f0:71:ae:1c:70:96:d0:86:d0:00:23:e2:97:da:cc:55:8c:b9: e9:d7:e6:db -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUKbKi8TmwYksxbtPAuAJk6yqEin8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0 RjI5QzNGQjAeFw0yNTEyMDUyMTA2MjRaFw0yNjEyMDQyMTExMjRaMDMxMTAvBgNV BAMTKEE3OTBCQkJBQzBFN0YxRDk5RDYzODBFOTJCOEQ3NzBBNDZBQkVGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuifGGfAERam94unOHEelKoFSo DSPLJc6Ih7+xqYcfZfahuSzj4U61P2+fLnFA5trV7thRWHkosiVVoejekbehyR43 FcoQ0CqJwfrRA24Hu0V9QrHtnm4INgX2m/8HD7vZu2pTaUvOYeIwFO5T8jc58+mn Wehf7UvlRQcQvFQAuTtT6b4DKgmB9QzUBIZsNz67xECdS+rbbB/v7PLg4Vyy7hIk KZGUbxkSSxBJsKKaUqxQAvfmemFcDM/ElVDPM9IM4AG7u/7b2sWz7qNoSo7TSEqj N/7hheJ9Wrj+rAET6+NZB+xzBrZOdtp4Ny75QIPU/LbkHUzWHK+A8OFlADmPAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUp5C7usDn8dmdY4DpK413Ckar74AwHwYDVR0j BBgwFoAUSAfBGL00iTS1zFmz6KeowU8pw/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzQvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5QzNGQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5 QzNGQi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzQvMzI2MTMwMzYzYTMxMzIzODMz M2E2NDM0MzAzMDNhM2EyZjMzMzgyZDM0MzgyMDNkM2UyMDMyMzEzNjMzMzMzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGAioGEoPUMA0GCSqGSIb3DQEBCwUAA4IBAQB+vsqy38eEQDzPh4KQ ESCOHH+FRVnpGlTKDjoUeDskFkULfxnkJ/5uA3h1xvOOTTM/XsPGIQYdo/qr751q +vbAfpv8Oojfg54vIbDaZSiUbBes1xGVnplMrktGOGpBZB+wqnkTuArhHwD46zoC oA8bxGYBKw6GkfpBNKy+bMeKBCwgk47YyErWETrvE/0KAXXMwaj7yqiph/C60Kw+ 8eX+CJdp/dW5fpbEoiVqvElIUjTZzPh5JNasjRgNcmws5bJ6DDfoAB7x0TAvQXlm +5Al2CEidzqoGI/fx8SMilm1Di1M9ECqD0r5xwPwca4ccJbQhtAAI+KX2sxVjLnp 1+bb -----END CERTIFICATE-----Generated at Sat Dec 6 16:34:13 2025 by rpki-client