This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa File: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (raw, json) Hash identifier: nWVf9Vd1/pxv69WaHKM1e/8vQ/po0I7aidbKnzISSgo= Subject key identifier: 84:C2:02:11:A1:88:57:65:52:E4:B0:C2:D3:C8:A9:4E:B1:C1:50:F6 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 50AC7D91E44DB77D3542EADE4DFC645EF0A03FD5 Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa Signing time: Wed 07 Jan 2026 03:02:02 +0000 ROA not before: Wed 07 Jan 2026 02:57:02 +0000 ROA not after: Wed 06 Jan 2027 03:02:02 +0000 asID: 215617 IP address blocks: 2a0f:85c1:363::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ac:7d:91:e4:4d:b7:7d:35:42:ea:de:4d:fc:64:5e:f0:a0:3f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Jan 7 02:57:02 2026 GMT Not After : Jan 6 03:02:02 2027 GMT Subject: CN=84C20211A188576552E4B0C2D3C8A94EB1C150F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:55:82:ea:37:c6:19:e9:6a:d8:9e:61:e2:cc: 77:20:0b:2f:c5:06:ea:41:b4:6f:5d:66:8d:28:0f: eb:f0:17:91:52:70:ae:39:06:2c:b0:65:03:9f:5b: 66:ec:1a:49:c2:80:42:38:45:fd:2d:25:b5:3b:d8: 88:8d:bc:5a:b7:f3:22:a9:7f:29:2f:64:9f:6a:ae: 00:6d:13:07:f0:dd:99:cd:ae:bb:3e:37:27:9a:bc: 9d:50:02:57:e4:90:f6:ee:a1:e8:e1:4a:2a:39:30: 3d:1a:bb:cb:18:47:50:30:19:4a:0e:4b:ad:45:54: f2:25:7c:0d:87:a7:00:99:c0:a5:94:1a:50:27:07: 9b:19:f5:e1:61:c9:fa:9c:59:03:69:c2:e5:72:8e: 79:59:ee:ce:44:83:cb:cf:5c:85:26:53:83:85:c1: 0a:c5:45:b3:03:03:5d:a2:31:79:2f:8f:18:64:4e: f6:37:b1:7c:ec:67:6f:0d:52:a8:fa:9d:f0:96:48: 3f:ed:ff:40:92:27:13:aa:b5:b9:59:b9:49:58:82: 66:8c:9b:53:4f:d6:c8:62:6b:02:92:0c:c6:d1:84: 80:2a:35:cb:ec:40:85:31:c2:15:58:e1:4a:a2:8b: 2a:9c:50:a4:3e:ed:96:03:c8:a1:13:f1:33:c2:5d: 86:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C2:02:11:A1:88:57:65:52:E4:B0:C2:D3:C8:A9:4E:B1:C1:50:F6 X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:363::/48 Signature Algorithm: sha256WithRSAEncryption 92:e0:fb:2a:eb:fd:70:74:52:01:ec:f1:c6:47:e3:50:07:83: ea:af:cd:3e:25:c5:4a:39:76:4e:26:fb:01:d2:13:87:5a:80: 74:4b:c4:d9:00:42:4f:95:98:cb:26:d1:c6:4f:19:90:9b:c2: 2f:76:12:68:fc:e6:3a:32:45:1c:72:1f:ef:92:cb:92:42:0f: e2:c4:6e:cf:d7:43:47:ef:4c:60:34:cb:fc:ab:ab:30:f7:1a: d6:5e:43:ed:da:2a:4d:5e:55:00:b2:83:8e:8b:d9:84:08:ae: de:e4:8f:95:a4:0f:e6:7c:b7:6d:e3:d4:81:9e:2c:0e:ad:88: 81:8e:dd:63:b6:f6:80:02:f1:cd:55:60:b5:66:5c:3d:b0:21: 33:38:3c:b0:ca:51:ad:d9:58:37:7d:d0:dc:3e:8a:0c:5d:c7: 91:e2:0a:17:ff:e6:4a:1e:96:99:62:d1:06:21:8a:73:8b:88: 2b:d7:48:6f:6c:03:84:33:d1:58:6f:fa:91:99:f0:43:81:75: 77:fd:31:47:43:51:a0:fb:85:ca:79:fc:9a:ee:ab:e1:42:9e: 23:38:79:af:e1:3b:a3:03:ef:ef:8d:e2:f5:93:cf:5f:64:97: 84:fc:55:1b:80:71:31:79:06:5c:e1:14:4b:2c:7f:ef:24:77: d4:c5:b9:c4 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUUKx9keRNt301QureTfxkXvCgP9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNjAxMDcwMjU3MDJaFw0yNzAxMDYwMzAyMDJaMDMxMTAvBgNV BAMTKDg0QzIwMjExQTE4ODU3NjU1MkU0QjBDMkQzQzhBOTRFQjFDMTUwRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZVYLqN8YZ6WrYnmHizHcgCy/F BupBtG9dZo0oD+vwF5FScK45BiywZQOfW2bsGknCgEI4Rf0tJbU72IiNvFq38yKp fykvZJ9qrgBtEwfw3ZnNrrs+NyeavJ1QAlfkkPbuoejhSio5MD0au8sYR1AwGUoO S61FVPIlfA2HpwCZwKWUGlAnB5sZ9eFhyfqcWQNpwuVyjnlZ7s5Eg8vPXIUmU4OF wQrFRbMDA12iMXkvjxhkTvY3sXzsZ28NUqj6nfCWSD/t/0CSJxOqtblZuUlYgmaM m1NP1shiawKSDMbRhIAqNcvsQIUxwhVY4UqiiyqcUKQ+7ZYDyKET8TPCXYYpAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUhMICEaGIV2VS5LDC08ipTrHBUPYwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMi8zMjYxMzA2 NjNhMzgzNTYzMzEzYTMzMzYzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTM2MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEDYzANBgkqhkiG9w0BAQsFAAOCAQEAkuD7 Kuv9cHRSAezxxkfjUAeD6q/NPiXFSjl2Tib7AdITh1qAdEvE2QBCT5WYyybRxk8Z kJvCL3YSaPzmOjJFHHIf75LLkkIP4sRuz9dDR+9MYDTL/KurMPca1l5D7doqTV5V ALKDjovZhAiu3uSPlaQP5ny3bePUgZ4sDq2IgY7dY7b2gALxzVVgtWZcPbAhMzg8 sMpRrdlYN33Q3D6KDF3HkeIKF//mSh6WmWLRBiGKc4uIK9dIb2wDhDPRWG/6kZnw Q4F1d/0xR0NRoPuFynn8mu6r4UKeIzh5r+E7owPv743i9ZPPX2SXhPxVG4BxMXkG XOEUSyx/7yR31MW5xA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:27 2026 by rpki-client