This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa File: 326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa (raw, json) Hash identifier: 29kVVWLYr7weidsqfKbNgXTNshpnIGiMJ62fMPFeOns= Subject key identifier: 7B:79:94:E5:CD:BD:28:12:04:EF:45:49:A0:50:8C:15:DE:5C:54:A4 Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Certificate serial: 43A9A7BC34BC2EE3F27ABFF73A48B2A3FEB3AA2F Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa Signing time: Mon 19 Jan 2026 05:37:14 +0000 ROA not before: Mon 19 Jan 2026 05:32:14 +0000 ROA not after: Mon 18 Jan 2027 05:37:14 +0000 asID: 204211 IP address blocks: 2a0f:1cc6:b100::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 21:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a9:a7:bc:34:bc:2e:e3:f2:7a:bf:f7:3a:48:b2:a3:fe:b3:aa:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Validity Not Before: Jan 19 05:32:14 2026 GMT Not After : Jan 18 05:37:14 2027 GMT Subject: CN=7B7994E5CDBD281204EF4549A0508C15DE5C54A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2d:30:f9:b7:69:2a:a9:6c:40:1f:43:5f:e7: a6:a1:32:2a:a4:bd:71:00:27:b5:16:ff:6a:6c:7e: b8:8a:a1:52:01:8b:4b:d7:8c:d4:bd:d8:42:f8:3c: 0c:2c:60:56:9d:6a:ca:a1:7c:c3:0a:b3:c0:8a:df: f4:66:18:b5:e6:f1:7a:3f:46:39:8e:9c:7f:4d:9b: 26:64:5a:d9:33:ba:06:15:2d:5f:3a:57:60:25:69: 0a:13:da:89:54:98:18:5a:99:cd:c2:ed:e6:22:b0: c9:5b:3f:f8:de:4a:8c:a6:66:f9:11:d0:68:56:17: 39:0c:b9:71:80:67:f3:0e:1d:44:9b:2f:d7:c3:82: 22:28:84:cb:36:50:81:43:bc:0c:c0:14:1c:a0:b0: 78:a1:df:1f:44:27:df:a4:9e:12:26:99:0c:02:d6: ee:ae:2b:5e:cd:6b:4b:09:ff:b7:39:1c:0c:94:6a: 8f:06:54:a2:4c:f3:e4:3a:86:31:83:cc:d4:68:70: 7e:e4:7c:9a:c8:2c:01:f3:a4:be:04:f8:d4:d1:7b: 1d:2a:2f:9b:8f:2c:4d:83:e0:35:f6:16:74:dd:df: 87:b3:18:5d:3b:86:23:6e:0e:5f:5e:84:45:55:88: 3e:20:a3:39:b4:a3:fd:6a:e3:cd:d7:df:f2:17:6e: 33:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:79:94:E5:CD:BD:28:12:04:EF:45:49:A0:50:8C:15:DE:5C:54:A4 X509v3 Authority Key Identifier: keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc6:b100::/44 Signature Algorithm: sha256WithRSAEncryption 10:ba:8a:a1:cc:12:3c:46:84:bb:27:17:9b:c5:72:74:2e:0f: 3f:d9:68:89:18:04:70:79:10:43:be:31:de:78:a6:57:76:eb: e9:60:da:06:d9:19:ee:f8:fc:7f:de:d7:29:aa:c3:81:e2:6a: c8:6b:14:b0:da:e2:99:76:bd:1b:a6:d9:78:9c:bf:79:8b:5c: 09:71:4f:7a:ab:5e:ae:83:b1:81:e2:87:ff:23:fe:e2:47:a7: 62:51:07:df:91:a5:0b:73:4a:83:a1:97:5f:95:79:68:4c:0d: f9:a6:79:d4:24:11:de:3f:9c:e3:0a:cf:b9:99:48:4c:40:1e: 19:c4:15:3f:92:f9:be:54:27:8a:34:63:a7:cc:3c:b7:a0:16: a7:16:07:2f:49:66:20:f5:ba:36:61:88:ea:c0:5e:e7:96:af: 27:f7:16:64:a4:24:55:05:78:41:d8:70:60:c0:57:be:98:36: f7:15:6a:66:57:6d:62:9b:a3:7f:f4:21:cb:4c:1f:4a:98:28: 5b:69:7c:71:46:d5:81:7f:29:95:1f:89:05:53:54:bd:a5:92: 94:d4:8b:3d:09:2b:b1:15:4f:22:07:33:4e:1d:f1:b1:0a:0f: a7:b3:4b:1b:87:c7:a5:cc:d9:ec:03:21:83:8c:ca:8c:fb:b6: aa:45:03:b4 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUQ6mnvDS8LuPyer/3Okiyo/6zqi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRD QUE1RDMzRjAeFw0yNjAxMTkwNTMyMTRaFw0yNzAxMTgwNTM3MTRaMDMxMTAvBgNV BAMTKDdCNzk5NEU1Q0RCRDI4MTIwNEVGNDU0OUEwNTA4QzE1REU1QzU0QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLTD5t2kqqWxAH0Nf56ahMiqk vXEAJ7UW/2psfriKoVIBi0vXjNS92EL4PAwsYFadasqhfMMKs8CK3/RmGLXm8Xo/ RjmOnH9NmyZkWtkzugYVLV86V2AlaQoT2olUmBhamc3C7eYisMlbP/jeSoymZvkR 0GhWFzkMuXGAZ/MOHUSbL9fDgiIohMs2UIFDvAzAFBygsHih3x9EJ9+knhImmQwC 1u6uK17Na0sJ/7c5HAyUao8GVKJM8+Q6hjGDzNRocH7kfJrILAHzpL4E+NTRex0q L5uPLE2D4DX2FnTd34ezGF07hiNuDl9ehEVViD4gozm0o/1q483X3/IXbjNPAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUe3mU5c29KBIE70VJoFCMFd5cVKQwHwYDVR0j BBgwFoAUUpv8bdMGssSWKaps6zExlMql0z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx MTA2LzIvNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRDQUE1RDMzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNF QjMxMzE5NENBQTVEMzNGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTJkMTZmMi05YjQ2LTRhMTEtYWM1OS00MmIzZGRlZTExMDYvMi8zMjYxMzA2 NjNhMzE2MzYzMzYzYTYyMzEzMDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKg8cxrEAMA0GCSqGSIb3DQEBCwUAA4IBAQAQ uoqhzBI8RoS7JxebxXJ0Lg8/2WiJGARweRBDvjHeeKZXduvpYNoG2Rnu+Px/3tcp qsOB4mrIaxSw2uKZdr0bptl4nL95i1wJcU96q16ug7GB4of/I/7iR6diUQffkaUL c0qDoZdflXloTA35pnnUJBHeP5zjCs+5mUhMQB4ZxBU/kvm+VCeKNGOnzDy3oBan FgcvSWYg9bo2YYjqwF7nlq8n9xZkpCRVBXhB2HBgwFe+mDb3FWpmV21im6N/9CHL TB9KmChbaXxxRtWBfymVH4kFU1S9pZKU1Is9CSuxFU8iBzNOHfGxCg+ns0sbh8el zNnsAyGDjMqM+7aqRQO0 -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:30 2026 by rpki-client