This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/326130393a313430303a3a2f33302d3438203d3e203432343233.roa File: 326130393a313430303a3a2f33302d3438203d3e203432343233.roa (raw, json) Hash identifier: KDfR1V2UoejJ74UBdinPDWKyqJ4/KuZMx4XTA0d6YHA= Subject key identifier: 12:9C:00:F0:1E:56:E2:0A:51:C8:38:1D:80:49:68:7E:4F:23:39:8F Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 5C12BC3A658916F55F46FA414F105F00FB68E755 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/326130393a313430303a3a2f33302d3438203d3e203432343233.roa Signing time: Wed 28 Jan 2026 13:00:53 +0000 ROA not before: Wed 28 Jan 2026 12:55:53 +0000 ROA not after: Wed 27 Jan 2027 13:00:53 +0000 asID: 42423 IP address blocks: 2a09:1400::/30 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:12:bc:3a:65:89:16:f5:5f:46:fa:41:4f:10:5f:00:fb:68:e7:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:53 2026 GMT Not After : Jan 27 13:00:53 2027 GMT Subject: CN=129C00F01E56E20A51C8381D8049687E4F23398F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ca:21:f7:dc:21:0c:81:f8:a4:ac:ae:e3:a6: 1f:ac:76:73:65:a7:85:2a:b7:db:92:16:b7:34:e3: 43:8e:7e:54:71:c6:1d:cd:bb:40:70:9f:b9:2b:d9: 7c:d8:9a:0c:e1:12:6c:45:2b:b9:bb:fd:f4:cb:51: 9a:db:d1:75:0b:ff:24:9f:d6:9b:81:03:22:bc:e7: 80:ae:d4:b3:2d:80:3b:42:23:91:b2:ab:aa:d6:8b: 80:60:84:1e:0f:6d:8a:a9:2a:63:05:94:d5:98:cf: 31:82:54:3a:7f:8e:fe:88:2e:40:4b:ad:45:11:bf: aa:bc:bf:25:56:9a:c2:f6:a7:5e:07:2a:4b:03:eb: 7a:0b:4f:98:7e:ce:81:b8:8d:f9:68:c8:77:2c:b2: 91:03:72:c7:e9:f3:26:43:44:76:5d:86:3f:84:71: 83:78:98:d3:3f:df:a9:1a:a9:10:61:18:d6:7c:34: 50:ec:9f:6d:11:2b:ed:1c:f4:61:ce:42:2e:ec:1b: db:26:0d:0e:81:fc:ea:38:79:61:b8:c5:11:b0:92: 9e:c8:a8:03:a1:e6:19:2a:76:d7:39:ad:1c:05:bb: 7b:e8:ca:75:69:59:61:1e:f9:a7:bc:3c:92:73:b9: 94:e1:37:66:cb:82:bc:96:7a:b8:11:e0:bf:6a:c8: d4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9C:00:F0:1E:56:E2:0A:51:C8:38:1D:80:49:68:7E:4F:23:39:8F X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/326130393a313430303a3a2f33302d3438203d3e203432343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:1400::/30 Signature Algorithm: sha256WithRSAEncryption d4:0d:28:65:87:26:9b:26:68:25:85:87:83:04:a1:a1:84:ae: 13:b8:79:4d:bb:53:b5:fe:58:40:80:51:1e:82:d5:9a:2e:dc: 43:d4:a2:b8:de:d2:73:fd:fa:9a:c6:9a:6e:8f:27:62:bf:59: 8e:89:f6:76:45:69:ee:df:95:c7:67:d0:37:7e:11:d2:0a:9e: 10:e3:8d:28:74:e3:d9:9e:88:f6:0f:aa:69:04:c8:6d:09:e8: 6f:97:82:ef:7c:b1:07:be:83:88:3e:d5:80:2a:21:49:11:2e: 21:5c:d6:9a:e0:f5:fd:73:e0:5b:e6:22:f9:3c:b0:97:9e:84: 55:d6:ce:b5:06:f9:75:20:b2:c4:ed:e9:1c:42:c8:be:a0:72: 56:ca:db:75:97:2e:6b:f0:7c:55:0b:5b:55:fc:25:1d:73:4f: 24:75:04:f3:c0:23:cd:ae:1f:3d:95:6b:67:b5:fc:e0:91:15: f0:fa:33:7e:7a:44:9e:94:17:79:41:04:43:84:f2:94:b5:16: 0f:9f:90:40:0d:a4:92:6b:41:4c:53:a1:82:6a:ca:f0:05:a2: 27:6b:75:c5:d6:45:3d:34:ea:17:bd:4c:14:9a:78:28:2d:9e: b8:8a:78:ed:e6:89:78:c4:4f:92:b6:ce:fe:66:fe:9d:5c:ea: 24:50:f2:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXBK8OmWJFvVfRvpBTxBfAPto51UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTNaFw0yNzAxMjcxMzAwNTNaMDMxMTAvBgNV BAMTKDEyOUMwMEYwMUU1NkUyMEE1MUM4MzgxRDgwNDk2ODdFNEYyMzM5OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiyiH33CEMgfikrK7jph+sdnNl p4Uqt9uSFrc040OOflRxxh3Nu0Bwn7kr2XzYmgzhEmxFK7m7/fTLUZrb0XUL/ySf 1puBAyK854Cu1LMtgDtCI5Gyq6rWi4BghB4PbYqpKmMFlNWYzzGCVDp/jv6ILkBL rUURv6q8vyVWmsL2p14HKksD63oLT5h+zoG4jfloyHcsspEDcsfp8yZDRHZdhj+E cYN4mNM/36kaqRBhGNZ8NFDsn20RK+0c9GHOQi7sG9smDQ6B/Oo4eWG4xRGwkp7I qAOh5hkqdtc5rRwFu3voynVpWWEe+ae8PJJzuZThN2bLgryWergR4L9qyNQ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEpwA8B5W4gpRyDgdgElofk8jOY8wHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzI2MTMwMzkzYTMxMzQzMDMw M2EzYTJmMzMzMDJkMzQzODIwM2QzZTIwMzQzMjM0MzIzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAioJ FAAwDQYJKoZIhvcNAQELBQADggEBANQNKGWHJpsmaCWFh4MEoaGErhO4eU27U7X+ WECAUR6C1Zou3EPUorje0nP9+prGmm6PJ2K/WY6J9nZFae7flcdn0Dd+EdIKnhDj jSh049meiPYPqmkEyG0J6G+Xgu98sQe+g4g+1YAqIUkRLiFc1prg9f1z4FvmIvk8 sJeehFXWzrUG+XUgssTt6RxCyL6gclbK23WXLmvwfFULW1X8JR1zTyR1BPPAI82u Hz2Va2e1/OCRFfD6M356RJ6UF3lBBEOE8pS1Fg+fkEANpJJrQUxToYJqyvAFoidr dcXWRT006he9TBSaeCgtnriKeO3miXjET5K2zv5m/p1c6iRQ8kc= -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:48 2026 by rpki-client