This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613130343a3a2f34382d313238203d3e20323135313437.roa File: 326130393a353463333a613130343a3a2f34382d313238203d3e20323135313437.roa (raw, json) Hash identifier: mqZWFx8mEs19q6avxgn8ro9WrQffoF4FToEMy+hXzM0= Subject key identifier: 65:9D:38:87:10:85:29:93:51:40:CD:73:FF:71:BE:03:2D:7D:5A:43 Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 38F35FD7884B84FEE4221A9CB79D388926B2C4DF Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613130343a3a2f34382d313238203d3e20323135313437.roa Signing time: Tue 20 Jan 2026 08:08:08 +0000 ROA not before: Tue 20 Jan 2026 08:03:08 +0000 ROA not after: Tue 19 Jan 2027 08:08:08 +0000 asID: 215147 IP address blocks: 2a09:54c3:a104::/48 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f3:5f:d7:88:4b:84:fe:e4:22:1a:9c:b7:9d:38:89:26:b2:c4:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: Jan 20 08:03:08 2026 GMT Not After : Jan 19 08:08:08 2027 GMT Subject: CN=659D3887108529935140CD73FF71BE032D7D5A43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:a0:8c:0c:83:a4:5b:fa:28:9b:a6:1b:ab: 42:b4:5c:ff:eb:64:40:3a:56:90:45:7a:20:4c:f1: e6:fd:19:e2:4d:da:e6:df:f1:98:ba:2c:3e:38:ad: 41:bf:be:6d:99:7b:b1:f4:ad:22:11:1f:72:bd:77: a5:c5:5c:c5:f8:17:e0:e8:78:de:19:6e:6a:60:ac: dc:34:b8:d2:8c:18:47:46:96:d2:9f:9a:a4:40:96: 2e:7c:3e:42:0f:cb:c2:c5:d7:7b:9b:42:cd:86:8b: 2e:4f:a8:ef:7d:40:51:41:f9:5a:a3:7b:08:6c:80: e5:41:b9:31:e9:37:39:a5:2c:35:9d:6b:ec:71:75: c5:4f:f5:8b:72:91:d3:05:9f:d4:33:5f:ff:37:e5: 07:f5:c6:ea:66:95:2f:75:81:75:dc:ee:a9:71:2b: 48:d8:74:08:a5:49:69:90:98:fc:c4:f5:c5:ff:fb: 7e:d1:04:e6:3a:37:6c:4a:8c:0d:8c:a9:e7:e8:9b: 17:b3:07:a8:96:03:b3:67:60:61:52:84:f1:a1:64: 57:3f:b5:4a:e0:cf:72:77:93:00:49:1e:70:ab:0a: 7d:ec:99:36:ca:e6:46:3e:71:5e:1a:b8:f7:64:78: 29:09:5f:fd:b5:4c:2c:2e:88:a0:6d:6b:67:6c:31: 2f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9D:38:87:10:85:29:93:51:40:CD:73:FF:71:BE:03:2D:7D:5A:43 X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613130343a3a2f34382d313238203d3e20323135313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:a104::/48 Signature Algorithm: sha256WithRSAEncryption 46:d7:f3:1e:95:31:0e:b1:89:dd:e4:8e:04:96:02:a4:99:0c: 72:cb:f6:29:31:fc:20:3b:65:bc:b6:42:15:16:35:55:69:26: 63:07:b4:9b:ee:88:b0:5b:15:f4:d8:89:67:b0:c2:90:72:ee: 29:8e:49:b2:bb:9e:b3:d7:33:a6:2d:5c:12:7c:50:51:8c:ed: 5d:87:a9:e7:16:e6:4e:51:07:c3:bb:dd:62:44:e0:be:b2:90: ac:46:f2:9e:b3:30:9c:67:db:4a:85:91:99:b8:8f:0d:07:25: 3e:2a:37:15:2d:3c:b2:2e:fb:af:4a:87:f9:d5:22:7e:ca:23: 18:d2:34:63:a8:dd:1a:6d:b1:77:41:dc:b1:9a:4e:89:16:40: d0:b5:33:9e:30:1c:3f:29:46:5d:a9:0d:6e:de:52:31:0d:28: 6f:a1:ec:68:b2:dc:e5:86:8d:99:2a:80:e4:0b:05:95:a8:b0: 93:50:55:01:38:0c:5b:1f:33:2a:92:9f:3e:91:b5:8f:af:cf: bd:5c:e4:28:2b:c0:d2:21:20:50:f7:54:15:39:82:84:05:63: dc:e7:5d:bf:ff:62:78:71:d2:0c:ab:a3:80:5a:c2:4c:51:bc: 21:d9:c0:01:59:94:ea:a5:1c:c3:81:08:54:02:22:0a:40:d1: 6d:ec:67:b8 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUOPNf14hLhP7kIhqct504iSayxN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNjAxMjAwODAzMDhaFw0yNzAxMTkwODA4MDhaMDMxMTAvBgNV BAMTKDY1OUQzODg3MTA4NTI5OTM1MTQwQ0Q3M0ZGNzFCRTAzMkQ3RDVBNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8qCMDIOkW/oom6Ybq0K0XP/r ZEA6VpBFeiBM8eb9GeJN2ubf8Zi6LD44rUG/vm2Ze7H0rSIRH3K9d6XFXMX4F+Do eN4ZbmpgrNw0uNKMGEdGltKfmqRAli58PkIPy8LF13ubQs2Giy5PqO99QFFB+Vqj ewhsgOVBuTHpNzmlLDWda+xxdcVP9YtykdMFn9QzX/835Qf1xupmlS91gXXc7qlx K0jYdAilSWmQmPzE9cX/+37RBOY6N2xKjA2MqefomxezB6iWA7NnYGFShPGhZFc/ tUrgz3J3kwBJHnCrCn3smTbK5kY+cV4auPdkeCkJX/21TCwuiKBta2dsMS+bAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUZZ04hxCFKZNRQM1z/3G+Ay19WkMwHwYDVR0j BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz MzIwNS5jZXIwgbkGCCsGAQUFBwELBIGsMIGpMIGmBggrBgEFBQcwC4aBmXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmIt ZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzUvMzI2MTMwMzkzYTM1MzQ2MzMz M2E2MTMxMzAzNDNhM2EyZjM0MzgyZDMxMzIzODIwM2QzZTIwMzIzMTM1MzEzNDM3 LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw ETAPBAIAAjAJAwcAKglUw6EEMA0GCSqGSIb3DQEBCwUAA4IBAQBG1/MelTEOsYnd 5I4ElgKkmQxyy/YpMfwgO2W8tkIVFjVVaSZjB7Sb7oiwWxX02IlnsMKQcu4pjkmy u56z1zOmLVwSfFBRjO1dh6nnFuZOUQfDu91iROC+spCsRvKeszCcZ9tKhZGZuI8N ByU+KjcVLTyyLvuvSof51SJ+yiMY0jRjqN0abbF3Qdyxmk6JFkDQtTOeMBw/KUZd qQ1u3lIxDShvoexostzlho2ZKoDkCwWVqLCTUFUBOAxbHzMqkp8+kbWPr8+9XOQo K8DSISBQ91QVOYKEBWPc512//2J4cdIMq6OAWsJMUbwh2cABWZTqpRzDgQhUAiIK QNFt7Ge4 -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:13 2026 by rpki-client