This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/326130663a353663343a3a2f34382d3438203d3e203331363035.roa File: 326130663a353663343a3a2f34382d3438203d3e203331363035.roa (raw, json) Hash identifier: nfK3Oh82QFuzgzLmrXwdOwaNHES0nJdgirL5wE5TU04= Subject key identifier: F0:76:D9:E2:C6:BA:A6:73:03:85:A3:B5:B6:F8:28:E6:FA:B9:F9:1D Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 0EDEE453CE29CDFF091ACE221E3278711BA21008 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/326130663a353663343a3a2f34382d3438203d3e203331363035.roa Signing time: Wed 28 Jan 2026 13:00:52 +0000 ROA not before: Wed 28 Jan 2026 12:55:52 +0000 ROA not after: Wed 27 Jan 2027 13:00:52 +0000 asID: 31605 IP address blocks: 2a0f:56c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:de:e4:53:ce:29:cd:ff:09:1a:ce:22:1e:32:78:71:1b:a2:10:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:52 2026 GMT Not After : Jan 27 13:00:52 2027 GMT Subject: CN=F076D9E2C6BAA6730385A3B5B6F828E6FAB9F91D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ea:e5:b2:e3:32:b6:39:07:8a:f8:df:74:64: 4c:3d:3c:cd:1d:43:f9:06:2f:0c:bf:d7:fe:aa:5d: fa:77:e1:d0:fb:da:d4:3d:50:56:5a:d8:95:39:c7: fc:a4:9f:ca:e6:29:a4:c0:56:70:0b:3a:2b:59:ec: af:72:2a:3c:5a:de:0a:d0:8e:e2:49:93:85:65:d9: ed:0a:a1:1c:32:74:5a:ab:94:1e:38:28:b5:b5:18: 4f:8a:b0:9c:2d:31:78:27:0b:2a:65:b2:ea:6e:e0: bf:12:26:c8:30:37:16:52:82:a9:cc:d0:9d:8c:dc: b9:22:cc:af:4a:f8:9e:ae:6b:03:c8:69:c7:2d:f1: ca:4c:f5:37:df:81:6e:d8:34:b2:38:79:b4:7f:49: e0:e7:05:50:a3:96:bc:26:64:c9:d5:25:26:aa:81: ef:bc:5c:6f:1b:c2:5a:aa:fc:a0:f5:0d:b9:f0:1b: 17:50:c2:bc:82:46:48:aa:ce:67:0e:42:3b:f1:57: 92:02:12:31:6e:98:13:35:bf:4b:11:6a:fd:23:11: 2d:95:97:60:ab:60:4d:89:e0:35:a8:cc:8b:7c:ad: 39:fc:25:19:e5:80:ba:50:af:1a:50:fc:0f:87:5d: 76:3b:4d:0d:eb:37:29:3e:d6:bb:56:1d:29:7d:b8: 44:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:76:D9:E2:C6:BA:A6:73:03:85:A3:B5:B6:F8:28:E6:FA:B9:F9:1D X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/326130663a353663343a3a2f34382d3438203d3e203331363035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:56c4::/48 Signature Algorithm: sha256WithRSAEncryption 9b:13:8d:61:a6:f9:4b:c6:af:ef:9c:c0:e1:14:6e:df:3f:27: 9e:b9:48:aa:a5:f8:32:91:93:54:b6:19:35:e0:41:71:f9:0f: e7:7b:f5:55:bf:15:20:9a:24:a0:cf:cc:16:99:e0:2e:c5:54: 7e:30:ae:a9:81:06:73:ef:9d:c1:3f:23:c2:b0:38:4d:2c:21: 59:ca:bc:e1:45:34:54:15:40:de:f7:bc:52:44:0e:0c:6f:f2: c8:d3:aa:de:da:98:56:53:29:98:ec:5d:8e:12:e0:cc:af:a2: 57:8a:b2:08:e0:d2:5f:fc:8e:5d:5f:ec:b4:a0:30:2b:1a:17: 39:0a:62:dd:6c:ed:1d:a4:fe:00:c9:ff:cd:ec:50:6c:96:18: 5e:39:a0:fe:87:3f:54:47:e0:44:bb:36:53:5f:f5:89:c3:b0: 79:e9:6d:5d:71:1f:5b:f4:08:02:ca:62:28:4a:c1:0d:b6:67: 56:f6:50:75:63:c0:9e:ae:7e:bb:0e:dc:e9:e4:0c:cc:4f:0e: 16:46:c2:74:df:57:07:ff:58:c3:e2:3b:2a:46:a9:e7:68:f5: 36:8f:f8:df:e7:ef:09:1a:b9:f5:de:d9:9f:b4:5c:23:cc:0c: 25:44:db:78:7e:6c:a1:18:47:5a:03:75:9f:61:1b:48:4e:a0: 69:68:12:3c -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUDt7kU84pzf8JGs4iHjJ4cRuiEAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTJaFw0yNzAxMjcxMzAwNTJaMDMxMTAvBgNV BAMTKEYwNzZEOUUyQzZCQUE2NzMwMzg1QTNCNUI2RjgyOEU2RkFCOUY5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi6uWy4zK2OQeK+N90ZEw9PM0d Q/kGLwy/1/6qXfp34dD72tQ9UFZa2JU5x/ykn8rmKaTAVnALOitZ7K9yKjxa3grQ juJJk4Vl2e0KoRwydFqrlB44KLW1GE+KsJwtMXgnCyplsupu4L8SJsgwNxZSgqnM 0J2M3LkizK9K+J6uawPIacct8cpM9TffgW7YNLI4ebR/SeDnBVCjlrwmZMnVJSaq ge+8XG8bwlqq/KD1DbnwGxdQwryCRkiqzmcOQjvxV5ICEjFumBM1v0sRav0jES2V l2CrYE2J4DWozIt8rTn8JRnlgLpQrxpQ/A+HXXY7TQ3rNyk+1rtWHSl9uES7AgMB AAGjggI+MIICOjAdBgNVHQ4EFgQU8HbZ4sa6pnMDhaO1tvgo5vq5+R0wHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzI2MTMwNjYzYTM1MzY2MzM0 M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzMzMTM2MzAzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoP VsQAADANBgkqhkiG9w0BAQsFAAOCAQEAmxONYab5S8av75zA4RRu3z8nnrlIqqX4 MpGTVLYZNeBBcfkP53v1Vb8VIJokoM/MFpngLsVUfjCuqYEGc++dwT8jwrA4TSwh Wcq84UU0VBVA3ve8UkQODG/yyNOq3tqYVlMpmOxdjhLgzK+iV4qyCODSX/yOXV/s tKAwKxoXOQpi3WztHaT+AMn/zexQbJYYXjmg/oc/VEfgRLs2U1/1icOweeltXXEf W/QIAspiKErBDbZnVvZQdWPAnq5+uw7c6eQMzE8OFkbCdN9XB/9Yw+I7Kkap52j1 No/43+fvCRq59d7Zn7RcI8wMJUTbeH5soRhHWgN1n2EbSE6gaWgSPA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:20 2026 by rpki-client