This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/326130623a346530373a6138313a3a2f34382d3438203d3e20323036363034.roa File: 326130623a346530373a6138313a3a2f34382d3438203d3e20323036363034.roa (raw, json) Hash identifier: S61Lzy+ER9+PYL/15hZfM6Wz3/4ZpjIU1q+7uDcU8nU= Subject key identifier: 4B:94:A6:B8:BD:85:82:65:81:BF:75:11:45:CF:9A:70:A0:F7:36:EB Certificate issuer: /CN=497EA28AB98266097873E53DF89DA97C44267B14 Certificate serial: 4C971BD1EB7358F42A494061DA09D3E89F5D0762 Authority key identifier: 49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/326130623a346530373a6138313a3a2f34382d3438203d3e20323036363034.roa Signing time: Tue 16 Dec 2025 14:26:25 +0000 ROA not before: Tue 16 Dec 2025 14:21:25 +0000 ROA not after: Tue 15 Dec 2026 14:26:25 +0000 asID: 206604 IP address blocks: 2a0b:4e07:a81::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.crl rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:97:1b:d1:eb:73:58:f4:2a:49:40:61:da:09:d3:e8:9f:5d:07:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=497EA28AB98266097873E53DF89DA97C44267B14 Validity Not Before: Dec 16 14:21:25 2025 GMT Not After : Dec 15 14:26:25 2026 GMT Subject: CN=4B94A6B8BD85826581BF751145CF9A70A0F736EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4e:48:9e:a5:9d:9b:bf:6d:4a:60:16:b1:eb: 5f:eb:66:cd:b7:8e:98:64:7d:10:aa:98:ac:16:9a: 55:3a:55:7a:d6:cd:16:54:8f:31:f4:68:cb:8b:55: 71:b6:c1:0c:b2:0d:11:11:70:6e:f4:59:0b:57:ef: d7:13:b1:4e:89:b7:e4:63:1e:5a:28:9e:62:f2:3a: 20:cc:4b:b5:9c:ed:ce:df:01:4a:6d:4e:ad:7f:2b: 2c:31:8d:a4:5b:68:ac:fc:90:f6:08:a5:b7:56:51: 14:e6:db:61:2b:01:60:97:0c:da:11:1d:67:7e:1b: 59:ab:21:17:a2:37:10:66:51:ec:7f:26:16:00:1a: 9a:f7:de:2a:78:39:a1:fd:18:29:f1:f4:01:b5:1f: 4a:11:d3:a3:f4:68:97:2f:bb:a7:06:f2:96:29:98: 6e:a3:5d:c8:e5:d8:f7:63:ef:6c:d3:06:43:61:13: 0d:59:de:2b:ba:17:10:ac:01:81:0e:8f:93:ce:a3: 06:85:36:d9:81:a4:de:3b:a9:f3:a0:67:9b:e3:f8: 40:f7:2f:cd:5e:57:13:96:5c:5e:99:8a:12:c2:8c: 28:c2:6b:42:cd:3e:86:05:15:f2:e6:db:17:43:48: 37:83:d5:8b:8f:b8:23:fd:d0:f1:8f:e7:a7:9c:72: 32:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:94:A6:B8:BD:85:82:65:81:BF:75:11:45:CF:9A:70:A0:F7:36:EB X509v3 Authority Key Identifier: keyid:49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/326130623a346530373a6138313a3a2f34382d3438203d3e20323036363034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:a81::/48 Signature Algorithm: sha256WithRSAEncryption 1c:45:9b:de:94:13:4b:7e:67:6e:c5:10:26:d1:8f:e8:c7:eb: c5:ca:b2:97:aa:67:f8:e3:e4:f3:64:61:d5:20:89:4a:f6:6a: f2:8b:7d:f6:e5:a3:eb:7a:74:e5:01:b5:5b:b4:c5:15:52:48: 1d:a3:9f:85:45:52:d4:e8:4f:7d:e8:62:a5:1b:27:e4:61:bc: 2c:e8:e4:62:23:21:b6:a8:85:3e:ac:6f:60:61:a8:7a:c0:99: 66:f9:9b:fb:d3:4e:0c:f3:6b:97:77:01:c4:af:39:6b:fe:3a: 3b:73:3e:27:d6:6e:1b:3b:dc:a8:50:3a:ef:5f:ed:82:db:93: e0:6a:8a:27:f4:28:dd:ad:a2:ef:75:d6:d1:d2:d3:11:13:05: e4:cd:0b:fa:60:d0:dd:83:b6:35:01:aa:66:b4:54:ca:c2:bf: c0:8f:c7:80:4b:57:c3:df:f0:50:72:33:ea:7d:62:46:eb:2e: 3e:e2:2c:96:03:d9:50:7c:fa:bc:bd:d2:99:5c:a4:0c:7a:fd: f6:3c:cc:5d:8c:d5:26:9e:d6:e4:f3:70:9f:5f:72:ee:80:06: db:bc:52:1a:64:ae:53:27:c8:57:29:2a:68:d9:62:07:28:1f: fc:1c:98:ea:a7:59:37:8d:fd:61:a4:90:13:e6:0f:a8:c7:c0: d9:e9:e9:e9 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUTJcb0etzWPQqSUBh2gnT6J9dB2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0 NDI2N0IxNDAeFw0yNTEyMTYxNDIxMjVaFw0yNjEyMTUxNDI2MjVaMDMxMTAvBgNV BAMTKDRCOTRBNkI4QkQ4NTgyNjU4MUJGNzUxMTQ1Q0Y5QTcwQTBGNzM2RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQTkiepZ2bv21KYBax61/rZs23 jphkfRCqmKwWmlU6VXrWzRZUjzH0aMuLVXG2wQyyDRERcG70WQtX79cTsU6Jt+Rj HloonmLyOiDMS7Wc7c7fAUptTq1/KywxjaRbaKz8kPYIpbdWURTm22ErAWCXDNoR HWd+G1mrIReiNxBmUex/JhYAGpr33ip4OaH9GCnx9AG1H0oR06P0aJcvu6cG8pYp mG6jXcjl2Pdj72zTBkNhEw1Z3iu6FxCsAYEOj5POowaFNtmBpN47qfOgZ5vj+ED3 L81eVxOWXF6ZihLCjCjCa0LNPoYFFfLm2xdDSDeD1YuPuCP90PGP56eccjLNAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUS5SmuL2FgmWBv3URRc+acKD3NuswHwYDVR0j BBgwFoAUSX6iirmCZgl4c+U9+J2pfEQmexQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjkwZTY4NjAtMzcyMS00OGM0LWEzZmUtMTFiMWYyYzBk ZjVmLzEvNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2N0IxNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2 N0IxNC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjkwZTY4NjAt MzcyMS00OGM0LWEzZmUtMTFiMWYyYzBkZjVmLzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2E2MTM4MzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzYzNjMwMzQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAqC04HCoEwDQYJKoZIhvcNAQELBQADggEBABxFm96UE0t+Z27FECbR j+jH68XKspeqZ/jj5PNkYdUgiUr2avKLffblo+t6dOUBtVu0xRVSSB2jn4VFUtTo T33oYqUbJ+RhvCzo5GIjIbaohT6sb2BhqHrAmWb5m/vTTgzza5d3AcSvOWv+Ojtz PifWbhs73KhQOu9f7YLbk+Bqiif0KN2tou911tHS0xETBeTNC/pg0N2DtjUBqma0 VMrCv8CPx4BLV8Pf8FByM+p9YkbrLj7iLJYD2VB8+ry90plcpAx6/fY8zF2M1Sae 1uTzcJ9fcu6ABtu8UhpkrlMnyFcpKmjZYgcoH/wcmOqnWTeN/WGkkBPmD6jHwNnp 6ek= -----END CERTIFICATE-----Generated at Sun Dec 21 04:48:29 2025 by rpki-client