This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa File: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (raw, json) Hash identifier: Qe+s8/fAnIQEeutwNPKlMCYxj4th5oSw8TX5K8siNS0= Subject key identifier: 80:87:9F:EE:47:81:BD:BB:CC:26:B4:00:5C:F2:44:FB:D1:2F:3C:FB Certificate issuer: /CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Certificate serial: 278C2B7C4298DD3AD3A64688CFCBA6C7410DB628 Authority key identifier: D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa Signing time: Sun 18 Jan 2026 06:38:06 +0000 ROA not before: Sun 18 Jan 2026 06:33:06 +0000 ROA not after: Sun 17 Jan 2027 06:38:06 +0000 asID: 210352 IP address blocks: 2a0f:1cc5:f00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:8c:2b:7c:42:98:dd:3a:d3:a6:46:88:cf:cb:a6:c7:41:0d:b6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Validity Not Before: Jan 18 06:33:06 2026 GMT Not After : Jan 17 06:38:06 2027 GMT Subject: CN=80879FEE4781BDBBCC26B4005CF244FBD12F3CFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:11:1a:13:81:b1:86:79:3b:c4:b7:96:e5:3a: 38:79:cf:7c:26:5c:9d:fa:af:64:23:40:a1:45:8f: 16:66:c2:35:22:d2:33:66:7a:d1:d2:28:ba:ce:e7: da:ec:eb:90:d9:fe:81:72:da:b0:d4:38:43:c8:3e: 14:98:e4:ba:88:da:a9:91:1b:c5:0f:18:eb:aa:76: 8b:a1:ec:47:5d:a4:71:f7:d2:34:51:a9:d9:8b:82: 06:0f:6c:6b:39:73:ba:9d:14:39:c2:5c:38:99:6e: be:2b:9b:20:af:11:3c:a5:5e:8e:bc:2c:d7:84:79: 62:97:e4:4f:ca:0f:31:ba:97:fc:ec:ae:f3:02:0e: 12:fc:4b:12:cb:8f:75:b9:44:6e:52:a3:84:c9:1b: 2d:52:e5:b9:eb:fa:07:2f:78:c7:b4:13:18:57:12: 95:29:ba:91:23:cd:fe:85:04:0b:6a:d2:20:38:a5: a4:bb:91:22:42:9f:93:1c:ff:71:8c:e4:54:f6:9d: 7f:ac:45:05:ff:92:1d:63:32:83:0c:05:e4:d9:70: 73:86:b5:5c:19:71:c8:a4:49:07:1d:5f:a0:93:03: 46:19:a1:de:20:ab:b7:72:23:03:84:5a:6b:93:1c: 0a:a6:bc:86:2d:f2:d2:21:a4:c8:97:a0:91:17:ab: 24:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:87:9F:EE:47:81:BD:BB:CC:26:B4:00:5C:F2:44:FB:D1:2F:3C:FB X509v3 Authority Key Identifier: keyid:D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:f00::/40 Signature Algorithm: sha256WithRSAEncryption 01:37:ea:0b:30:b0:f8:0c:fc:50:25:92:7f:78:93:91:ef:21: 3a:ff:61:9e:9a:d2:58:73:cd:21:fb:3d:97:f8:33:4d:9f:01: 9b:05:e6:94:cb:73:0c:55:e8:91:1e:76:5d:63:a5:ca:5c:be: e5:49:82:ba:d6:51:8a:ae:e2:81:42:79:32:0b:7c:c6:49:7d: 95:0a:34:88:3a:06:70:7e:49:f0:d7:60:dc:a4:ba:5a:29:13: d8:44:f6:08:83:e0:81:86:48:9d:3a:07:4e:6d:60:98:7c:4b: d8:01:1b:02:85:73:10:ae:e7:9c:26:af:30:7a:13:4e:41:84: 5c:6e:e7:ec:fc:79:6b:ae:a9:8b:55:29:75:9d:f6:10:47:6e: b8:1a:8e:3b:c2:e1:39:8b:15:81:32:9d:f8:e5:50:ed:8c:0e: dc:82:e9:3f:cd:b8:8f:64:7e:a7:81:54:17:3b:3f:4d:c3:c6: e9:02:ee:c4:36:f4:4a:1e:b2:61:f1:39:e3:e0:87:92:a3:d3: 2e:4e:5d:95:e9:a3:b0:04:5e:a1:b5:46:57:d3:8c:04:c7:4f: a0:4a:89:fc:ae:43:c1:a1:ec:4b:aa:f4:79:e5:2d:ec:77:cb: 9d:64:59:9b:b7:f1:77:13:1f:19:2a:fa:82:e2:0d:35:b7:08: 9f:c2:1c:b4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJ4wrfEKY3TrTpkaIz8umx0ENtigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0 NENGMzdFOTAeFw0yNjAxMTgwNjMzMDZaFw0yNzAxMTcwNjM4MDZaMDMxMTAvBgNV BAMTKDgwODc5RkVFNDc4MUJEQkJDQzI2QjQwMDVDRjI0NEZCRDEyRjNDRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYERoTgbGGeTvEt5blOjh5z3wm XJ36r2QjQKFFjxZmwjUi0jNmetHSKLrO59rs65DZ/oFy2rDUOEPIPhSY5LqI2qmR G8UPGOuqdouh7EddpHH30jRRqdmLggYPbGs5c7qdFDnCXDiZbr4rmyCvETylXo68 LNeEeWKX5E/KDzG6l/zsrvMCDhL8SxLLj3W5RG5So4TJGy1S5bnr+gcveMe0ExhX EpUpupEjzf6FBAtq0iA4paS7kSJCn5Mc/3GM5FT2nX+sRQX/kh1jMoMMBeTZcHOG tVwZccikSQcdX6CTA0YZod4gq7dyIwOEWmuTHAqmvIYt8tIhpMiXoJEXqySdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUgIef7keBvbvMJrQAXPJE+9EvPPswHwYDVR0j BBgwFoAU1e5j2bHS1cb63JoWnptK9kTPN+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzQvRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0NENGMzdFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9ENUVFNjNEOUIxRDJENUM2RkFEQzlBMTY5 RTlCNEFGNjQ0Q0YzN0U5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xNTE3YjVkMC0zMzE3LTRiNDktOGVjNS1iZTkwYmM3MDA2MmYvNC8zMjYxMzA2 NjNhMzE2MzYzMzUzYTY2MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEz MDMzMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoPHMUPMA0GCSqGSIb3DQEBCwUAA4IBAQABN+oL MLD4DPxQJZJ/eJOR7yE6/2GemtJYc80h+z2X+DNNnwGbBeaUy3MMVeiRHnZdY6XK XL7lSYK61lGKruKBQnkyC3zGSX2VCjSIOgZwfknw12DcpLpaKRPYRPYIg+CBhkid OgdObWCYfEvYARsChXMQruecJq8wehNOQYRcbufs/HlrrqmLVSl1nfYQR264Go47 wuE5ixWBMp345VDtjA7cguk/zbiPZH6ngVQXOz9Nw8bpAu7ENvRKHrJh8Tnj4IeS o9MuTl2V6aOwBF6htUZX04wEx0+gSon8rkPBoexLqvR55S3sd8udZFmbt/F3Ex8Z KvqC4g01twifwhy0 -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:21 2026 by rpki-client