This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a3a2f34382d3438203d3e203436373636.roa File: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (raw, json) Hash identifier: UAkAddbwt9iFm85K1ELuBkLomLKwc7hMpyyYhhtNJsY= Subject key identifier: 9B:4F:AF:4F:EB:15:32:01:39:EC:CA:43:E6:13:28:61:5E:84:53:C2 Certificate issuer: /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Certificate serial: 5BF4C9713A2F5F73576EF15D2E7D1C53C4DECB5C Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a3a2f34382d3438203d3e203436373636.roa Signing time: Thu 04 Dec 2025 21:16:06 +0000 ROA not before: Thu 04 Dec 2025 21:11:06 +0000 ROA not after: Thu 03 Dec 2026 21:16:06 +0000 asID: 46766 IP address blocks: 2602:f9a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 10:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f4:c9:71:3a:2f:5f:73:57:6e:f1:5d:2e:7d:1c:53:c4:de:cb:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Validity Not Before: Dec 4 21:11:06 2025 GMT Not After : Dec 3 21:16:06 2026 GMT Subject: CN=9B4FAF4FEB15320139ECCA43E61328615E8453C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:36:d1:c3:1b:e8:59:fc:02:43:a7:e2:e8:ad: db:c4:d1:ed:4c:86:39:38:71:e5:30:be:22:39:8f: 07:ea:14:c8:f7:05:bd:ad:7b:ae:bf:2b:3d:be:bb: cc:73:2d:f6:f5:83:7e:01:75:d7:36:0d:8f:98:a7: 3a:c5:74:f0:3c:8e:0e:0f:90:2a:98:f2:da:c9:32: 54:2b:b5:ca:f2:7b:35:b7:f0:29:ef:cb:30:bf:f8: 40:91:63:38:bc:2d:2f:85:6a:a3:1f:8f:6e:e5:ab: fc:d9:32:6f:54:67:aa:5d:2a:f2:d8:84:c2:48:02: cf:a8:dd:32:40:49:41:9d:40:0a:82:7c:29:12:ee: 3a:86:f0:d0:26:09:04:21:a9:d2:4c:3d:1f:a0:58: c7:d1:c8:65:c9:6f:30:f7:22:0f:6a:0b:06:95:9b: 09:94:43:ae:22:38:28:6c:0f:ec:04:34:28:cd:74: 04:d2:3f:c8:0b:9f:80:1e:04:d2:51:e2:bd:d0:8c: 04:86:02:24:d5:95:ef:01:a1:ec:5b:81:76:62:0e: 10:5e:0e:40:34:30:ce:c9:36:17:65:0b:3b:af:03: e6:26:a6:43:b2:43:06:b6:a6:6b:af:b2:3f:be:76: cd:cb:6d:02:46:00:bd:ee:fb:91:c8:14:0f:a9:6f: 5d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4F:AF:4F:EB:15:32:01:39:EC:CA:43:E6:13:28:61:5E:84:53:C2 X509v3 Authority Key Identifier: keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/323630323a663961323a3a2f34382d3438203d3e203436373636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f9a2::/48 Signature Algorithm: sha256WithRSAEncryption b1:63:d3:c9:34:21:c0:c5:ac:4a:0e:41:da:1b:71:e1:43:5d: 0f:a1:71:0b:95:c2:db:9c:b5:77:2b:04:21:79:28:e1:3e:f1: a6:21:a9:e1:bb:34:aa:b1:5f:57:6e:a0:a5:0c:99:04:91:8c: c8:b1:42:87:23:2e:9a:55:47:73:e9:0e:23:67:60:e2:ed:0b: e6:f8:3c:5b:09:9f:35:27:15:62:44:64:57:da:5c:79:c1:bb: 12:ee:1a:19:c1:a1:c1:7f:ea:fe:1b:58:fd:da:a6:29:3a:6a: 22:52:e1:27:e0:b7:24:7d:a9:ea:4a:54:0e:91:bd:cd:43:c3: 7c:79:01:32:4d:16:80:4d:28:4c:c0:06:23:9e:0a:8b:46:35: 87:6b:dc:21:6c:7b:bc:ee:a3:c0:c8:53:14:e3:0b:1b:cf:b9: de:a7:71:c0:09:a2:cc:25:2c:6a:25:20:85:cf:ad:df:98:54: 1e:8a:f9:16:21:cd:c0:4d:3c:d5:62:30:49:81:5f:6c:9d:7a: e8:16:41:51:bb:b3:a8:53:54:bb:80:e7:c4:20:4b:40:aa:9a: 81:e9:c9:92:31:d0:7e:71:65:d6:98:d1:6a:8a:31:77:01:b6: 44:c0:f8:52:e1:fb:98:87:2f:1a:38:62:ff:7f:cd:be:ba:b0: 6f:4c:4c:63 -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgIUW/TJcTovX3NXbvFdLn0cU8Tey1wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5 YWQwMzk1NTBmZWNjZjhkNjEwHhcNMjUxMjA0MjExMTA2WhcNMjYxMjAzMjExNjA2 WjAzMTEwLwYDVQQDEyg5QjRGQUY0RkVCMTUzMjAxMzlFQ0NBNDNFNjEzMjg2MTVF ODQ1M0MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9TbRwxvoWfwC Q6fi6K3bxNHtTIY5OHHlML4iOY8H6hTI9wW9rXuuvys9vrvMcy329YN+AXXXNg2P mKc6xXTwPI4OD5AqmPLayTJUK7XK8ns1t/Ap78swv/hAkWM4vC0vhWqjH49u5av8 2TJvVGeqXSry2ITCSALPqN0yQElBnUAKgnwpEu46hvDQJgkEIanSTD0foFjH0chl yW8w9yIPagsGlZsJlEOuIjgobA/sBDQozXQE0j/IC5+AHgTSUeK90IwEhgIk1ZXv AaHsW4F2Yg4QXg5ANDDOyTYXZQs7rwPmJqZDskMGtqZrr7I/vnbNy20CRgC97vuR yBQPqW9djQIDAQABo4ICzjCCAsowHQYDVR0OBBYEFJtPr0/rFTIBOezKQ+YTKGFe hFPCMB8GA1UdIwQYMBaAFCRylJs8I0kw2+mbG1zVGWqxbRUbMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3 LWI0MjgxOGNmNTBlOC82LzI0NzI5NDlCM0MyMzQ5MzBEQkU5OUIxQjVDRDUxOTZB QjE2RDE1MUIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1k YTZiNTlhMDE2MjUvODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5YWQw Mzk1NTBmZWNjZjhkNjEuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUH MAuGgYtyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC82LzMyMzYzMDMy M2E2NjM5NjEzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzYzNzM2MzYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAmAvmiAAAwDQYJKoZIhvcNAQELBQADggEBALFj08k0IcDFrEoOQdob ceFDXQ+hcQuVwtuctXcrBCF5KOE+8aYhqeG7NKqxX1duoKUMmQSRjMixQocjLppV R3PpDiNnYOLtC+b4PFsJnzUnFWJEZFfaXHnBuxLuGhnBocF/6v4bWP3apik6aiJS 4SfgtyR9qepKVA6Rvc1Dw3x5ATJNFoBNKEzABiOeCotGNYdr3CFse7zuo8DIUxTj CxvPud6nccAJoswlLGolIIXPrd+YVB6K+RYhzcBNPNViMEmBX2ydeugWQVG7s6hT VLuA58QgS0CqmoHpyZIx0H5xZdaY0WqKMXcBtkTA+FLh+5iHLxo4Yv9/zb66sG9M TGM= -----END CERTIFICATE-----Generated at Sat Dec 6 14:45:50 2025 by rpki-client