This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663733303a3a2f34342d3438203d3e20313431343039.roa File: 326131343a316563373a663733303a3a2f34342d3438203d3e20313431343039.roa (raw, json) Hash identifier: TPn5Qje9HW3EcfDEdBb6Zdaos4imk6wTDX53NehQb3o= Subject key identifier: 8D:3D:61:98:72:1B:FD:40:6B:BE:51:2C:05:D9:FA:56:07:6E:F9:2D Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434 Certificate serial: 366D2C0F4AE1EFD8F5344EFC058E466A53C555BC Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663733303a3a2f34342d3438203d3e20313431343039.roa Signing time: Sat 03 Jan 2026 19:39:58 +0000 ROA not before: Sat 03 Jan 2026 19:34:58 +0000 ROA not after: Sat 02 Jan 2027 19:39:58 +0000 asID: 141409 IP address blocks: 2a14:1ec7:f730::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:6d:2c:0f:4a:e1:ef:d8:f5:34:4e:fc:05:8e:46:6a:53:c5:55:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434 Validity Not Before: Jan 3 19:34:58 2026 GMT Not After : Jan 2 19:39:58 2027 GMT Subject: CN=8D3D6198721BFD406BBE512C05D9FA56076EF92D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:14:92:cb:81:65:85:0e:be:04:4b:5d:a6:b5: f0:66:a0:dc:08:65:57:33:80:55:5b:50:6f:6f:74: 81:f5:b2:68:33:3a:12:04:80:5e:3d:9a:7c:c3:c7: 5d:f6:16:07:4d:d5:8d:8e:c8:ea:a5:bc:14:80:c2: f5:bd:c7:a4:f7:c5:f7:42:5c:f5:93:a5:a4:6b:28: b6:32:96:36:a5:26:98:fa:56:e0:80:ab:6e:98:b6: 20:4a:e9:3a:49:e6:bd:39:22:14:08:2b:98:6a:7b: 10:a1:d2:55:bf:a3:67:e8:88:fd:2f:4c:0c:4b:2a: e3:f0:5f:47:c0:6c:2a:09:12:b3:70:c0:d3:81:94: 70:e2:61:81:34:ee:61:da:55:89:ba:55:78:25:e6: 0d:e0:e5:ec:7d:ab:0a:28:1e:7f:8a:f1:b7:4e:82: d0:8b:eb:c3:94:3c:fe:b5:aa:e5:63:b7:c1:78:ea: 2f:4b:e6:54:c8:c6:3a:72:5c:a3:74:a6:e0:c8:28: c3:e5:67:88:2e:d9:28:fc:fd:fc:81:fd:9e:1e:b1: da:63:7d:ec:1e:28:30:ef:d7:4d:92:d9:9c:b3:4f: b3:f8:38:2f:ea:f3:04:03:7e:0a:2e:53:d8:85:de: 76:51:01:ee:2f:4e:0b:d3:65:fc:85:3f:fc:47:7c: bd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3D:61:98:72:1B:FD:40:6B:BE:51:2C:05:D9:FA:56:07:6E:F9:2D X509v3 Authority Key Identifier: keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663733303a3a2f34342d3438203d3e20313431343039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1ec7:f730::/44 Signature Algorithm: sha256WithRSAEncryption 8d:44:cd:90:e0:53:c3:71:39:d5:b6:50:2d:c1:ad:d1:61:87: b8:ce:ed:c3:66:13:fb:b2:9b:1f:5d:63:2a:c6:2c:ee:e9:21: 6c:71:1b:c8:2e:76:de:34:3b:8c:cc:a1:7e:f7:bf:e0:b3:da: 25:18:56:05:1e:d9:10:74:c9:b0:99:be:1b:e0:2c:a5:bb:64: f7:da:c3:ba:74:04:78:ac:05:a4:ee:7e:f9:59:47:f2:94:e4: f6:c1:ad:93:b4:da:d2:e6:44:e0:bd:ac:bb:3f:3a:c7:0a:0c: f9:07:fa:67:97:15:e5:0e:26:ad:c9:74:72:33:01:18:ea:ec: 38:f0:47:ef:a4:e3:25:26:b4:b4:55:b7:ae:78:8d:30:fe:02: 95:14:27:f9:57:ce:21:e2:1b:41:e8:0f:02:fb:2a:ff:8a:ce: 8a:61:7d:61:ab:46:32:fa:29:e4:cb:e3:6c:44:a4:fd:c0:99: 5b:d4:2e:5e:eb:e6:ec:dc:a1:df:58:01:9f:fd:35:06:c0:22: 5c:4e:5f:28:16:9e:97:e4:02:f5:9c:9c:41:7b:78:fe:55:f5: bb:23:51:0e:58:ef:5f:56:d1:69:70:6a:ae:34:6b:76:65:cf: 2a:2e:4d:09:4f:ce:ed:62:4c:01:99:48:77:f4:c4:80:fd:b6: 7e:7d:c2:4a -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUNm0sD0rh79j1NE78BY5GalPFVbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj NGYzNTQzNDAeFw0yNjAxMDMxOTM0NThaFw0yNzAxMDIxOTM5NThaMDMxMTAvBgNV BAMTKDhEM0Q2MTk4NzIxQkZENDA2QkJFNTEyQzA1RDlGQTU2MDc2RUY5MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFJLLgWWFDr4ES12mtfBmoNwI ZVczgFVbUG9vdIH1smgzOhIEgF49mnzDx132FgdN1Y2OyOqlvBSAwvW9x6T3xfdC XPWTpaRrKLYyljalJpj6VuCAq26YtiBK6TpJ5r05IhQIK5hqexCh0lW/o2foiP0v TAxLKuPwX0fAbCoJErNwwNOBlHDiYYE07mHaVYm6VXgl5g3g5ex9qwooHn+K8bdO gtCL68OUPP61quVjt8F46i9L5lTIxjpyXKN0puDIKMPlZ4gu2Sj8/fyB/Z4esdpj feweKDDv102S2ZyzT7P4OC/q8wQDfgouU9iF3nZRAe4vTgvTZfyFP/xHfL19AgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUjT1hmHIb/UBrvlEsBdn6Vgdu+S0wHwYDVR0j BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4 NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U elZEUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWEzYmI5M2Yt OThhNC00YzdlLWEwZTEtODA1N2E0ZjA4NmM5LzAvMzI2MTMxMzQzYTMxNjU2MzM3 M2E2NjM3MzMzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMxMzQzMTM0MzAzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHBCoUHsf3MDANBgkqhkiG9w0BAQsFAAOCAQEAjUTNkOBTw3E51bZQ LcGt0WGHuM7tw2YT+7KbH11jKsYs7ukhbHEbyC523jQ7jMyhfve/4LPaJRhWBR7Z EHTJsJm+G+Aspbtk99rDunQEeKwFpO5++VlH8pTk9sGtk7Ta0uZE4L2suz86xwoM +Qf6Z5cV5Q4mrcl0cjMBGOrsOPBH76TjJSa0tFW3rniNMP4ClRQn+VfOIeIbQegP Avsq/4rOimF9YatGMvop5MvjbESk/cCZW9QuXuvm7Nyh31gBn/01BsAiXE5fKBae l+QC9ZycQXt4/lX1uyNRDljvX1bRaXBqrjRrdmXPKi5NCU/O7WJMAZlId/TEgP22 fn3CSg== -----END CERTIFICATE-----Generated at Sun Jan 18 06:41:34 2026 by rpki-client