This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/326130623a346530373a6330313a3a2f34382d3438203d3e20323135373630.roa File: 326130623a346530373a6330313a3a2f34382d3438203d3e20323135373630.roa (raw, json) Hash identifier: VZ809t+f84r83LSHeKOdVeXGx5vzv/VPIXYrF+SljkQ= Subject key identifier: 52:F8:7D:DF:AE:A2:AA:34:DD:01:D0:39:99:07:A9:38:B4:84:2A:8D Certificate issuer: /CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Certificate serial: 54A9E4FF1174D9C77AC729B5A521064D8D561104 Authority key identifier: 87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/326130623a346530373a6330313a3a2f34382d3438203d3e20323135373630.roa Signing time: Tue 20 Jan 2026 21:59:11 +0000 ROA not before: Tue 20 Jan 2026 21:54:11 +0000 ROA not after: Tue 19 Jan 2027 21:59:11 +0000 asID: 215760 IP address blocks: 2a0b:4e07:c01::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a9:e4:ff:11:74:d9:c7:7a:c7:29:b5:a5:21:06:4d:8d:56:11:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Validity Not Before: Jan 20 21:54:11 2026 GMT Not After : Jan 19 21:59:11 2027 GMT Subject: CN=52F87DDFAEA2AA34DD01D0399907A938B4842A8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:89:2e:f6:20:ff:32:dc:5f:6d:f4:7b:7c: 7b:49:21:b4:5f:f5:e7:6d:97:46:62:2b:fb:5c:54: 46:19:94:bb:66:c5:f2:52:dd:be:79:39:fa:34:c2: 7b:e1:a8:ca:56:e5:60:2a:83:14:39:40:5c:4e:eb: cc:aa:32:1d:25:eb:b5:21:93:63:bb:53:b0:27:ed: 31:74:99:77:77:20:1f:5d:71:dc:3b:30:20:30:b4: 64:26:48:b7:33:d4:74:cd:df:5b:7b:c4:37:e0:19: a3:b2:36:7f:1b:3c:4a:ec:fb:84:19:c5:ae:56:fc: e8:c1:88:5e:92:6d:6b:a1:fd:db:ca:28:b5:37:87: 17:91:dd:0e:12:01:dc:78:0f:ef:16:ff:e2:cd:38: e5:0d:9f:72:c8:a6:3c:70:9c:f5:22:b5:84:8b:c4: 97:98:56:48:7b:2f:9e:d4:72:c7:25:3b:a1:9a:ee: 28:fb:43:50:db:02:c6:7a:35:c0:3d:a6:12:ee:fd: a3:ac:bb:24:2f:d2:13:db:e2:dc:ef:9b:eb:55:17: 6c:c4:65:84:4b:bb:17:3e:0a:b9:29:76:38:b7:81: 4a:7e:59:42:bc:99:30:d2:d0:e4:a1:2b:ed:a3:73: 33:15:ef:79:3b:72:20:dd:eb:49:c7:ff:c7:9b:43: 96:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F8:7D:DF:AE:A2:AA:34:DD:01:D0:39:99:07:A9:38:B4:84:2A:8D X509v3 Authority Key Identifier: keyid:87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/326130623a346530373a6330313a3a2f34382d3438203d3e20323135373630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:c01::/48 Signature Algorithm: sha256WithRSAEncryption 17:d7:5b:4a:5d:e8:26:8c:c2:a1:1e:3c:80:7f:ad:f8:c0:16: 8d:c3:df:cd:5e:58:a5:9e:25:6f:51:a1:c5:94:22:ad:e2:5b: 4b:f2:01:51:da:f1:d5:50:99:13:ae:16:d6:3d:eb:b6:09:fe: 1f:5c:c5:a7:9b:78:db:af:70:42:3f:d6:fe:8c:5d:74:26:ed: 27:78:1c:bd:2c:c5:07:ae:4d:a0:01:03:46:29:5b:3d:44:f1: d5:5e:65:19:31:ef:41:3e:42:71:6d:23:9f:4d:a1:6b:64:4e: 09:3e:a2:f7:06:3a:3c:b8:ea:a9:03:c2:41:33:72:d6:9a:78: 26:44:9c:9f:08:1a:6f:61:dc:71:7c:e4:8a:88:f8:8a:91:19: 88:75:c7:98:b5:24:95:63:7d:ed:69:1d:19:1b:e9:d7:73:c1: 6f:f0:46:31:dc:aa:03:3b:09:4f:c1:a3:f2:4e:da:21:61:17: cd:a9:f9:3e:db:52:7c:40:10:ae:fd:53:78:3f:69:f7:fc:86: 2a:6b:50:ab:e2:fc:74:79:a0:ce:36:71:47:e8:5f:45:ae:92: 08:55:53:05:74:24:71:5a:4d:1a:13:b9:4d:14:14:c2:ec:02: 26:c6:66:92:f1:6d:1a:6d:de:1c:df:b4:0a:f9:5b:ff:84:e6: 74:a2:e2:7b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUVKnk/xF02cd6xym1pSEGTY1WEQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNF MzgyMzE4NTAeFw0yNjAxMjAyMTU0MTFaFw0yNzAxMTkyMTU5MTFaMDMxMTAvBgNV BAMTKDUyRjg3RERGQUVBMkFBMzRERDAxRDAzOTk5MDdBOTM4QjQ4NDJBOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjO4ku9iD/MtxfbfR7fHtJIbRf 9edtl0ZiK/tcVEYZlLtmxfJS3b55Ofo0wnvhqMpW5WAqgxQ5QFxO68yqMh0l67Uh k2O7U7An7TF0mXd3IB9dcdw7MCAwtGQmSLcz1HTN31t7xDfgGaOyNn8bPErs+4QZ xa5W/OjBiF6SbWuh/dvKKLU3hxeR3Q4SAdx4D+8W/+LNOOUNn3LIpjxwnPUitYSL xJeYVkh7L57UcsclO6Ga7ij7Q1DbAsZ6NcA9phLu/aOsuyQv0hPb4tzvm+tVF2zE ZYRLuxc+Crkpdji3gUp+WUK8mTDS0OShK+2jczMV73k7ciDd60nH/8ebQ5Z7AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUUvh9366iqjTdAdA5mQepOLSEKo0wHwYDVR0j BBgwFoAUh5KAp9nm3d3Msp6ad4GdXOOCMYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgyMzE4NS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgy MzE4NS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgt MjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2ZDAzLzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2E2MzMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzNzM2MzAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAqC04HDAEwDQYJKoZIhvcNAQELBQADggEBABfXW0pd6CaMwqEePIB/ rfjAFo3D381eWKWeJW9RocWUIq3iW0vyAVHa8dVQmROuFtY967YJ/h9cxaebeNuv cEI/1v6MXXQm7Sd4HL0sxQeuTaABA0YpWz1E8dVeZRkx70E+QnFtI59NoWtkTgk+ ovcGOjy46qkDwkEzctaaeCZEnJ8IGm9h3HF85IqI+IqRGYh1x5i1JJVjfe1pHRkb 6ddzwW/wRjHcqgM7CU/Bo/JO2iFhF82p+T7bUnxAEK79U3g/aff8hiprUKvi/HR5 oM42cUfoX0WukghVUwV0JHFaTRoTuU0UFMLsAibGZpLxbRpt3hzftAr5W/+E5nSi 4ns= -----END CERTIFICATE-----Generated at Sun Jan 25 10:11:20 2026 by rpki-client