This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa File: 326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa (raw, json) Hash identifier: ib4ImjZeR/tjrdRWs2Z2Xtcq0lxhnT9KoS6I+V5ukmg= Subject key identifier: 66:EE:41:15:82:16:B5:90:28:D0:3D:00:E9:0B:2F:29:44:AB:3D:5C Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Certificate serial: 62EE5FA9775774661AC8208A26953210E0A42F02 Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa Signing time: Mon 19 Jan 2026 05:37:14 +0000 ROA not before: Mon 19 Jan 2026 05:32:14 +0000 ROA not after: Mon 18 Jan 2027 05:37:14 +0000 asID: 154185 IP address blocks: 2a0f:1cc6:b110::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 21:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ee:5f:a9:77:57:74:66:1a:c8:20:8a:26:95:32:10:e0:a4:2f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Validity Not Before: Jan 19 05:32:14 2026 GMT Not After : Jan 18 05:37:14 2027 GMT Subject: CN=66EE41158216B59028D03D00E90B2F2944AB3D5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:43:c7:ca:ab:24:be:00:94:62:dc:3e:d6: bd:04:8d:09:1f:f2:d1:14:70:35:1b:be:2e:66:13: b8:78:18:35:88:d0:a3:57:b6:c1:b3:35:ac:93:f5: 31:f6:16:ec:32:01:65:61:6d:84:c3:c1:fd:84:9d: 25:fb:cd:17:ef:fd:8f:71:9d:36:f6:4c:cd:af:da: 2c:5f:3d:57:3d:45:5e:78:b7:a8:c5:fb:52:30:fc: 2f:c3:d3:60:8f:ed:97:4e:63:f6:0a:0b:ee:fb:10: fd:b5:1d:c9:b6:27:df:f6:f5:06:5f:6e:6d:dd:d8: 4f:6e:f0:72:08:31:7f:09:0b:59:d2:5c:79:81:9c: 6c:02:ad:4f:86:91:79:4f:04:4c:3d:cf:91:c3:9d: af:2a:b4:6d:2c:ea:3c:36:fe:ea:a6:32:b5:f9:b7: f0:fe:d7:08:42:6d:ce:fe:d3:52:c1:03:18:9d:b2: 30:82:80:bd:35:7e:97:9e:e6:ba:af:6a:aa:d6:96: 4a:63:73:1e:7a:0f:5b:2e:b8:79:f2:6d:22:87:0a: ce:2d:cf:47:42:fd:67:e8:d4:69:86:d1:c7:91:c1: 15:3c:65:6d:50:5f:fa:4a:3a:43:58:d3:a2:aa:25: 54:e6:db:3d:9d:8d:28:0c:66:73:77:55:59:59:e4: c5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EE:41:15:82:16:B5:90:28:D0:3D:00:E9:0B:2F:29:44:AB:3D:5C X509v3 Authority Key Identifier: keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc6:b110::/44 Signature Algorithm: sha256WithRSAEncryption 11:ca:c9:a0:bc:12:a0:44:51:dd:a3:1c:66:66:00:a9:63:a9: 89:db:c8:c7:78:4e:40:c3:7d:c4:e6:b9:37:56:e6:a5:24:46: 33:6f:0e:b7:bc:2e:1f:b8:a3:46:39:b0:50:03:5f:34:b8:d9: 41:cf:43:75:4d:3e:fb:b1:c0:ea:1a:f0:80:dd:8f:9d:14:ee: a0:b6:93:6a:38:f6:13:38:d7:2e:50:d8:b6:a5:a8:39:ea:56: 18:5d:2a:27:18:e0:9c:01:38:35:47:6c:90:5c:23:03:1e:35: 63:09:c4:10:1c:5f:90:2a:d2:84:39:54:03:f9:09:37:4e:9f: 51:41:6d:d4:5e:97:b4:8f:dd:8c:ae:b6:67:01:22:3d:72:71: 57:52:ca:58:bb:e9:63:cc:f5:01:95:fb:31:56:0b:91:f5:c2: cf:33:7b:56:6b:7d:0d:35:4a:cd:e9:84:14:d2:4c:f7:fb:88: 82:5c:ce:ec:85:8e:47:6c:a9:1f:82:7f:62:8e:f4:3b:a4:84: 19:c4:e9:63:08:50:2d:9e:f9:fa:96:7f:f2:09:b4:02:39:e9: 9c:89:f4:d4:ea:76:a0:1a:a6:95:82:33:13:aa:b7:b9:31:27: 67:f5:4b:7f:40:65:3a:91:74:bc:2b:34:43:d8:b0:cb:27:54: cf:72:35:03 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUYu5fqXdXdGYayCCKJpUyEOCkLwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRD QUE1RDMzRjAeFw0yNjAxMTkwNTMyMTRaFw0yNzAxMTgwNTM3MTRaMDMxMTAvBgNV BAMTKDY2RUU0MTE1ODIxNkI1OTAyOEQwM0QwMEU5MEIyRjI5NDRBQjNENUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wEPHyqskvgCUYtw+1r0EjQkf 8tEUcDUbvi5mE7h4GDWI0KNXtsGzNayT9TH2FuwyAWVhbYTDwf2EnSX7zRfv/Y9x nTb2TM2v2ixfPVc9RV54t6jF+1Iw/C/D02CP7ZdOY/YKC+77EP21Hcm2J9/29QZf bm3d2E9u8HIIMX8JC1nSXHmBnGwCrU+GkXlPBEw9z5HDna8qtG0s6jw2/uqmMrX5 t/D+1whCbc7+01LBAxidsjCCgL01fpee5rqvaqrWlkpjcx56D1suuHnybSKHCs4t z0dC/Wfo1GmG0ceRwRU8ZW1QX/pKOkNY06KqJVTm2z2djSgMZnN3VVlZ5MVFAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUZu5BFYIWtZAo0D0A6QsvKUSrPVwwHwYDVR0j BBgwFoAUUpv8bdMGssSWKaps6zExlMql0z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx MTA2LzIvNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRDQUE1RDMzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNF QjMxMzE5NENBQTVEMzNGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTJkMTZmMi05YjQ2LTRhMTEtYWM1OS00MmIzZGRlZTExMDYvMi8zMjYxMzA2 NjNhMzE2MzYzMzYzYTYyMzEzMTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEz NTM0MzEzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKg8cxrEQMA0GCSqGSIb3DQEBCwUAA4IBAQAR ysmgvBKgRFHdoxxmZgCpY6mJ28jHeE5Aw33E5rk3VualJEYzbw63vC4fuKNGObBQ A180uNlBz0N1TT77scDqGvCA3Y+dFO6gtpNqOPYTONcuUNi2pag56lYYXSonGOCc ATg1R2yQXCMDHjVjCcQQHF+QKtKEOVQD+Qk3Tp9RQW3UXpe0j92MrrZnASI9cnFX UspYu+ljzPUBlfsxVguR9cLPM3tWa30NNUrN6YQU0kz3+4iCXM7shY5HbKkfgn9i jvQ7pIQZxOljCFAtnvn6ln/yCbQCOemcifTU6nagGqaVgjMTqre5MSdn9Ut/QGU6 kXS8KzRD2LDLJ1TPcjUD -----END CERTIFICATE-----Generated at Wed Jan 21 10:14:49 2026 by rpki-client