This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa File: 326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa (raw, json) Hash identifier: 9OCqZ/d+1rU6CR9p3YDhWbf8ZADN9O93ycDA5zxlgcg= Subject key identifier: 98:8C:96:77:44:46:EF:BB:AB:A1:84:E9:34:42:8B:9B:F8:16:7B:12 Certificate issuer: /CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Certificate serial: 3022D538081D3B2D1231DF4B07245DD1B08DED4F Authority key identifier: D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa Signing time: Sun 18 Jan 2026 06:38:06 +0000 ROA not before: Sun 18 Jan 2026 06:33:06 +0000 ROA not after: Sun 17 Jan 2027 06:38:06 +0000 asID: 211575 IP address blocks: 2a0f:1cc5:fff::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:22:d5:38:08:1d:3b:2d:12:31:df:4b:07:24:5d:d1:b0:8d:ed:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Validity Not Before: Jan 18 06:33:06 2026 GMT Not After : Jan 17 06:38:06 2027 GMT Subject: CN=988C96774446EFBBABA184E934428B9BF8167B12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:23:84:05:b8:db:fe:39:8a:b1:5b:a8:ec:f5: e1:f1:d6:a9:1a:7c:ce:cf:47:02:19:27:e2:77:59: 35:76:da:a3:de:5a:25:e8:95:8a:9c:cf:f8:93:74: 55:9c:47:af:fa:3a:70:b6:64:30:fb:27:64:49:dc: 0d:80:27:e4:58:6d:80:19:c6:c7:07:d8:56:2f:5d: bd:f8:97:6c:de:97:75:b5:2e:f0:e1:e6:2c:fa:b7: 4b:b9:5c:3d:ee:f9:65:05:c0:1c:95:bd:05:07:e8: 7a:bf:03:33:9a:ef:62:50:bb:2b:66:dd:e7:5f:00: d3:8c:58:20:66:88:52:b1:98:ec:f8:6a:ff:ae:ff: c4:f7:fe:e9:7f:7b:bc:1e:26:91:40:6b:f8:21:6c: 91:37:5a:ad:fb:7f:15:af:29:f2:86:40:03:af:dc: 87:fe:51:8e:22:20:e6:22:a7:3e:c1:64:50:df:a6: f8:01:d5:ee:ca:b4:9e:72:f9:a0:ca:32:a1:6e:1f: 45:31:d6:a2:46:77:0d:fc:07:46:5f:8f:96:96:b3: 79:92:d8:19:84:64:cc:2c:7a:9a:57:0d:d9:d5:4f: cf:22:3d:16:f2:61:ba:e3:1b:db:58:ce:ee:c7:44: 5c:e3:4c:cc:e0:c8:9b:64:b6:bf:77:24:da:5b:55: f8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8C:96:77:44:46:EF:BB:AB:A1:84:E9:34:42:8B:9B:F8:16:7B:12 X509v3 Authority Key Identifier: keyid:D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:fff::/48 Signature Algorithm: sha256WithRSAEncryption 7f:41:c6:54:da:d1:4c:79:38:53:79:de:a0:f6:9c:10:d8:6e: d4:3e:07:5a:69:90:be:f7:e1:a3:07:6d:4f:74:c2:ab:48:0a: 58:5c:d6:57:0b:7f:fe:13:1c:5a:62:b5:18:42:7e:ca:05:0d: ad:df:a3:2c:43:56:c6:c7:5b:ea:ae:4a:91:c5:1c:d5:78:eb: 40:9a:b4:dc:75:89:14:de:41:90:db:b7:4a:c5:a1:b3:25:d6: 03:1f:18:36:e5:83:20:94:5a:fc:e7:7a:e2:2c:15:70:c1:26: 91:09:71:b3:5a:e0:7e:21:f6:10:7f:87:02:bc:f7:2b:d0:cc: 5f:8c:39:c0:cb:cf:8a:d4:25:68:2f:2d:61:36:f3:34:3e:4a: 65:5b:f2:d9:73:13:db:b9:42:6c:6f:32:3b:36:93:07:8a:be: 71:31:6b:eb:43:1b:04:c9:86:c2:f8:85:85:a6:15:c3:51:d1: 3b:c5:72:c4:3c:08:e9:ef:60:71:3c:56:f0:69:0d:a6:4c:bb: 9a:09:1b:44:3b:fd:85:a5:66:8b:87:4d:1b:62:b7:45:62:df: e6:c4:05:fa:bd:fa:a8:b2:9f:6a:21:d7:77:9c:08:12:b4:ac: f1:20:6d:9b:e9:41:74:00:bd:69:32:03:00:3c:01:98:46:e6: 7e:9e:13:de -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUMCLVOAgdOy0SMd9LByRd0bCN7U8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0 NENGMzdFOTAeFw0yNjAxMTgwNjMzMDZaFw0yNzAxMTcwNjM4MDZaMDMxMTAvBgNV BAMTKDk4OEM5Njc3NDQ0NkVGQkJBQkExODRFOTM0NDI4QjlCRjgxNjdCMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2I4QFuNv+OYqxW6js9eHx1qka fM7PRwIZJ+J3WTV22qPeWiXolYqcz/iTdFWcR6/6OnC2ZDD7J2RJ3A2AJ+RYbYAZ xscH2FYvXb34l2zel3W1LvDh5iz6t0u5XD3u+WUFwByVvQUH6Hq/AzOa72JQuytm 3edfANOMWCBmiFKxmOz4av+u/8T3/ul/e7weJpFAa/ghbJE3Wq37fxWvKfKGQAOv 3If+UY4iIOYipz7BZFDfpvgB1e7KtJ5y+aDKMqFuH0Ux1qJGdw38B0Zfj5aWs3mS 2BmEZMwseppXDdnVT88iPRbyYbrjG9tYzu7HRFzjTMzgyJtktr93JNpbVfjNAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUmIyWd0RG77uroYTpNEKLm/gWexIwHwYDVR0j BBgwFoAU1e5j2bHS1cb63JoWnptK9kTPN+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzQvRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0NENGMzdFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9ENUVFNjNEOUIxRDJENUM2RkFEQzlBMTY5 RTlCNEFGNjQ0Q0YzN0U5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xNTE3YjVkMC0zMzE3LTRiNDktOGVjNS1iZTkwYmM3MDA2MmYvNC8zMjYxMzA2 NjNhMzE2MzYzMzUzYTY2NjY2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz MTM1MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPHMUP/zANBgkqhkiG9w0BAQsFAAOCAQEAf0HG VNrRTHk4U3neoPacENhu1D4HWmmQvvfhowdtT3TCq0gKWFzWVwt//hMcWmK1GEJ+ ygUNrd+jLENWxsdb6q5KkcUc1XjrQJq03HWJFN5BkNu3SsWhsyXWAx8YNuWDIJRa /Od64iwVcMEmkQlxs1rgfiH2EH+HArz3K9DMX4w5wMvPitQlaC8tYTbzND5KZVvy 2XMT27lCbG8yOzaTB4q+cTFr60MbBMmGwviFhaYVw1HRO8VyxDwI6e9gcTxW8GkN pky7mgkbRDv9haVmi4dNG2K3RWLf5sQF+r36qLKfaiHXd5wIErSs8SBtm+lBdAC9 aTIDADwBmEbmfp4T3g== -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:18 2026 by rpki-client