This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130643a643930363a3a2f33322d3438203d3e20323134393239.roa File: 326130643a643930363a3a2f33322d3438203d3e20323134393239.roa (raw, json) Hash identifier: D6RZOojsGndN0vlTfP0QQUwSDXr1XyPrUaJBhshfYr4= Subject key identifier: 15:46:0A:66:AD:F9:63:62:9D:56:0E:54:F0:C9:8A:23:70:3F:31:EB Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 6717A2C0869CB57B4C4E813839C00AE6056CAB2A Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130643a643930363a3a2f33322d3438203d3e20323134393239.roa Signing time: Sun 18 Jan 2026 19:25:56 +0000 ROA not before: Sun 18 Jan 2026 19:20:56 +0000 ROA not after: Sun 17 Jan 2027 19:25:56 +0000 asID: 214929 IP address blocks: 2a0d:d906::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:17:a2:c0:86:9c:b5:7b:4c:4e:81:38:39:c0:0a:e6:05:6c:ab:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Jan 18 19:20:56 2026 GMT Not After : Jan 17 19:25:56 2027 GMT Subject: CN=15460A66ADF963629D560E54F0C98A23703F31EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:af:ea:43:a1:3b:f2:bd:fe:78:b9:8f:e2:ba: 83:46:64:ee:30:2e:be:74:47:9c:a7:e8:bb:54:4d: a1:1b:f2:eb:11:2d:8f:14:21:0c:4c:a3:3e:60:1b: 9f:b1:2e:40:43:a8:f8:ff:94:dd:89:9f:1c:99:74: 88:0a:43:da:e7:5f:2d:44:87:81:27:9d:f5:6f:df: 5d:06:88:f7:0e:8e:15:d8:47:23:9e:dc:86:55:3d: d9:b9:b3:b1:78:2e:f7:67:d4:3f:35:ca:62:04:51: b6:30:5a:fc:65:ca:af:79:92:53:87:01:72:de:ca: 69:07:cd:00:3a:04:03:2c:43:26:74:d9:a1:9f:75: 75:4f:6e:16:8f:0b:64:0f:2a:14:ea:79:42:e8:dd: 21:38:c9:6a:ce:9c:2b:f4:8c:37:8f:03:93:93:2c: 18:18:08:53:ff:d6:12:42:d0:3a:b2:df:fa:2e:23: df:da:bb:8e:24:07:e6:27:30:f2:96:97:ea:ef:7e: 66:80:4f:19:ec:72:d1:dc:85:8b:9a:08:49:5a:8c: 08:c3:11:90:61:40:59:1c:11:88:ee:df:58:be:26: f5:16:6a:d7:b7:b8:00:92:ac:3e:6a:a4:71:3f:fe: 0d:b6:3b:4a:3a:bc:fd:09:fa:a6:fa:69:6b:bd:c2: 47:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:46:0A:66:AD:F9:63:62:9D:56:0E:54:F0:C9:8A:23:70:3F:31:EB X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130643a643930363a3a2f33322d3438203d3e20323134393239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d906::/32 Signature Algorithm: sha256WithRSAEncryption 13:fd:b2:29:b4:8e:59:4f:1a:ac:d4:61:21:c1:cd:21:0c:44: a0:37:f2:c5:e7:70:59:68:af:32:12:fe:22:2b:71:bc:7e:e7: 48:6e:f8:98:6f:0f:1a:c2:3a:9d:2c:01:62:fe:12:54:c6:fa: e6:32:a8:3b:69:03:f0:27:f4:ca:d8:7b:1e:49:28:fe:78:a2: c6:82:b3:07:ec:db:08:e8:f4:a3:28:f8:35:6e:31:b9:08:76: 2a:72:8c:f1:97:d1:4c:a3:3f:c3:a2:ff:a4:9a:e9:2e:eb:83: 6e:8b:5d:7b:42:9f:7f:f9:40:86:a0:af:8c:79:46:c7:be:d8: da:c7:1f:48:f9:76:be:05:c1:fc:40:01:47:d7:e1:3f:35:ef: c6:0c:c3:f7:4f:b2:9d:0c:b5:1d:85:ea:d3:d6:a7:8a:58:1e: de:d5:e9:4a:bf:90:ba:85:2c:dc:4d:0e:be:d6:38:48:7d:7b: cb:0b:bd:a2:51:55:6c:af:d9:5b:12:5d:9d:f5:ee:b7:55:a3: 38:bf:38:33:69:c3:e4:9f:6f:14:b2:e4:28:74:b3:f9:8d:a5: 89:83:47:9a:d5:08:c9:0f:f9:d4:6a:07:0d:7b:77:e3:96:03: ba:a2:62:dd:fa:c1:16:66:10:5c:98:41:99:45:3b:88:ee:59: 86:f9:87:77 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIUZxeiwIactXtMToE4OcAK5gVsqyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNjAxMTgxOTIwNTZaFw0yNzAxMTcxOTI1NTZaMDMxMTAvBgNV BAMTKDE1NDYwQTY2QURGOTYzNjI5RDU2MEU1NEYwQzk4QTIzNzAzRjMxRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEr+pDoTvyvf54uY/iuoNGZO4w Lr50R5yn6LtUTaEb8usRLY8UIQxMoz5gG5+xLkBDqPj/lN2JnxyZdIgKQ9rnXy1E h4EnnfVv310GiPcOjhXYRyOe3IZVPdm5s7F4Lvdn1D81ymIEUbYwWvxlyq95klOH AXLeymkHzQA6BAMsQyZ02aGfdXVPbhaPC2QPKhTqeULo3SE4yWrOnCv0jDePA5OT LBgYCFP/1hJC0Dqy3/ouI9/au44kB+YnMPKWl+rvfmaATxnsctHchYuaCElajAjD EZBhQFkcEYju31i+JvUWate3uACSrD5qpHE//g22O0o6vP0J+qb6aWu9wkf3AgMB AAGjggJuMIICajAdBgNVHQ4EFgQUFUYKZq35Y2KdVg5U8MmKI3A/MeswHwYDVR0j BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx NDJGNS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQt N2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2YWJmLzIvMzI2MTMwNjQzYTY0MzkzMDM2 M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzMTM0MzkzMjM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA Kg3ZBjANBgkqhkiG9w0BAQsFAAOCAQEAE/2yKbSOWU8arNRhIcHNIQxEoDfyxedw WWivMhL+IitxvH7nSG74mG8PGsI6nSwBYv4SVMb65jKoO2kD8Cf0yth7Hkko/nii xoKzB+zbCOj0oyj4NW4xuQh2KnKM8ZfRTKM/w6L/pJrpLuuDbotde0Kff/lAhqCv jHlGx77Y2scfSPl2vgXB/EABR9fhPzXvxgzD90+ynQy1HYXq09anilge3tXpSr+Q uoUs3E0OvtY4SH17ywu9olFVbK/ZWxJdnfXut1WjOL84M2nD5J9vFLLkKHSz+Y2l iYNHmtUIyQ/51GoHDXt345YDuqJi3frBFmYQXJhBmUU7iO5ZhvmHdw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:56 2026 by rpki-client