This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623132303a3a2f34342d3438203d3e20323039353537.roa File: 326130663a316363363a623132303a3a2f34342d3438203d3e20323039353537.roa (raw, json) Hash identifier: scEe2IowhilowN4x+WVVH9irUBDlv+kjiHhElpwuSSI= Subject key identifier: 7B:27:EB:E1:5D:70:82:B6:0D:34:5C:97:94:4F:AB:B0:9A:3A:72:BC Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Certificate serial: 3BFF3ED41D92470A45C8559EA3695BEB2520ACF0 Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623132303a3a2f34342d3438203d3e20323039353537.roa Signing time: Tue 20 Jan 2026 09:02:19 +0000 ROA not before: Tue 20 Jan 2026 08:57:19 +0000 ROA not after: Tue 19 Jan 2027 09:02:19 +0000 asID: 209557 IP address blocks: 2a0f:1cc6:b120::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 21:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ff:3e:d4:1d:92:47:0a:45:c8:55:9e:a3:69:5b:eb:25:20:ac:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Validity Not Before: Jan 20 08:57:19 2026 GMT Not After : Jan 19 09:02:19 2027 GMT Subject: CN=7B27EBE15D7082B60D345C97944FABB09A3A72BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f8:86:b8:92:44:91:2d:c1:31:98:65:7f:4d: 75:99:a2:fd:0e:82:01:9e:0a:2b:42:c2:ac:af:14: d5:8d:09:41:8b:7a:11:7f:d2:e0:d2:55:16:b0:23: a5:41:f3:dd:4f:60:29:c6:f0:e9:3a:64:23:9d:de: 29:b4:0a:4f:12:24:31:ba:31:cb:e7:68:fe:17:e4: 65:3d:e6:2c:38:a5:11:62:fd:32:2e:a7:3d:86:3c: 85:5b:5a:48:ea:ab:4e:9c:8b:8b:85:c6:1d:19:9f: 9d:c3:0f:2b:ab:e6:3a:e9:7e:5a:5b:d2:63:35:5a: 9d:28:bd:c3:e8:d0:e3:e3:93:a3:50:8a:a5:be:ba: df:32:21:e9:45:8a:ee:93:fe:e4:6f:1d:2c:4c:2a: ae:72:80:47:41:57:20:9a:ee:80:19:ef:71:41:b9: 2e:fc:7c:38:6e:b8:27:2d:ff:0e:70:1f:26:06:67: 57:bb:46:18:7a:e3:13:73:08:74:f2:aa:be:fc:06: c5:83:e0:d4:fc:20:53:36:51:eb:bd:1d:a7:aa:df: 26:3d:72:05:7e:30:ae:95:d7:17:d3:0e:0b:c5:ca: cc:89:61:be:a8:41:ce:96:12:17:3d:fa:70:a0:f5: 9f:5e:68:1b:ce:53:a9:22:98:30:fb:8a:3f:97:a6: ed:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:27:EB:E1:5D:70:82:B6:0D:34:5C:97:94:4F:AB:B0:9A:3A:72:BC X509v3 Authority Key Identifier: keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623132303a3a2f34342d3438203d3e20323039353537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc6:b120::/44 Signature Algorithm: sha256WithRSAEncryption 07:bd:e9:d5:df:b7:e5:63:18:53:ac:6f:68:3f:3b:af:c6:6c: 4b:2a:d3:06:39:78:3c:bd:bd:b4:b2:eb:72:dc:0a:df:94:13: 79:fd:5a:02:b3:2c:52:f9:cc:91:a1:8f:3a:01:65:80:a7:e7: c6:80:e7:43:5f:31:b8:77:a3:ff:3d:41:ba:be:a6:a9:32:4f: 52:66:9f:66:a6:64:46:10:46:34:ac:b2:98:30:2e:53:a6:df: 04:3e:60:7d:26:58:3a:44:67:87:2e:29:0b:74:3a:09:44:72: 90:51:e1:c2:74:c7:f9:81:9d:cb:86:7d:26:98:97:13:e4:c5: 2f:4c:a4:62:cd:d1:c8:ed:19:17:53:d5:10:71:ee:06:06:02: ff:d3:02:18:3a:17:d6:3e:29:a4:f6:d4:b8:69:8a:6d:c0:11: 6a:4d:3d:64:7d:37:5f:76:f4:19:28:fb:13:bd:1f:b7:f2:71: 68:d4:2f:87:94:d3:73:76:27:81:10:6b:94:05:8d:37:cc:a8: 95:a0:f7:35:14:20:3b:e0:6f:3f:4b:7f:e0:46:f2:32:32:58: bf:9e:97:1c:f8:6a:c0:61:98:a6:ad:4f:f5:b7:fc:68:fb:40: ce:3a:35:99:cb:bc:bd:20:2f:40:1b:4a:d1:e5:cd:43:5d:98: 0c:04:ba:84 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUO/8+1B2SRwpFyFWeo2lb6yUgrPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRD QUE1RDMzRjAeFw0yNjAxMjAwODU3MTlaFw0yNzAxMTkwOTAyMTlaMDMxMTAvBgNV BAMTKDdCMjdFQkUxNUQ3MDgyQjYwRDM0NUM5Nzk0NEZBQkIwOUEzQTcyQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8+Ia4kkSRLcExmGV/TXWZov0O ggGeCitCwqyvFNWNCUGLehF/0uDSVRawI6VB891PYCnG8Ok6ZCOd3im0Ck8SJDG6 McvnaP4X5GU95iw4pRFi/TIupz2GPIVbWkjqq06ci4uFxh0Zn53DDyur5jrpflpb 0mM1Wp0ovcPo0OPjk6NQiqW+ut8yIelFiu6T/uRvHSxMKq5ygEdBVyCa7oAZ73FB uS78fDhuuCct/w5wHyYGZ1e7Rhh64xNzCHTyqr78BsWD4NT8IFM2Ueu9Haeq3yY9 cgV+MK6V1xfTDgvFysyJYb6oQc6WEhc9+nCg9Z9eaBvOU6kimDD7ij+Xpu1bAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUeyfr4V1wgrYNNFyXlE+rsJo6crwwHwYDVR0j BBgwFoAUUpv8bdMGssSWKaps6zExlMql0z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx MTA2LzIvNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRDQUE1RDMzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNF QjMxMzE5NENBQTVEMzNGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTJkMTZmMi05YjQ2LTRhMTEtYWM1OS00MmIzZGRlZTExMDYvMi8zMjYxMzA2 NjNhMzE2MzYzMzYzYTYyMzEzMjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MDM5MzUzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKg8cxrEgMA0GCSqGSIb3DQEBCwUAA4IBAQAH venV37flYxhTrG9oPzuvxmxLKtMGOXg8vb20suty3ArflBN5/VoCsyxS+cyRoY86 AWWAp+fGgOdDXzG4d6P/PUG6vqapMk9SZp9mpmRGEEY0rLKYMC5Tpt8EPmB9Jlg6 RGeHLikLdDoJRHKQUeHCdMf5gZ3Lhn0mmJcT5MUvTKRizdHI7RkXU9UQce4GBgL/ 0wIYOhfWPimk9tS4aYptwBFqTT1kfTdfdvQZKPsTvR+38nFo1C+HlNNzdieBEGuU BY03zKiVoPc1FCA74G8/S3/gRvIyMli/npcc+GrAYZimrU/1t/xo+0DOOjWZy7y9 IC9AG0rR5c1DXZgMBLqE -----END CERTIFICATE-----Generated at Wed Jan 21 10:14:36 2026 by rpki-client