This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a326635303a3a2f34382d3634203d3e203439393831.roa File: 326130653a666434353a326635303a3a2f34382d3634203d3e203439393831.roa (raw, json) Hash identifier: zpE8O6QFgOcjidzEd8zc2djpSlwttC8o8DmDYuakobQ= Subject key identifier: 1A:E5:0C:B4:6F:3B:7D:44:FB:E2:EC:2E:75:D9:A4:8A:A6:7B:8B:89 Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Certificate serial: 365F428C7F1CD2E7934CA20B1924155C8B286BD4 Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a326635303a3a2f34382d3634203d3e203439393831.roa Signing time: Tue 30 Dec 2025 12:34:45 +0000 ROA not before: Tue 30 Dec 2025 12:29:45 +0000 ROA not after: Tue 29 Dec 2026 12:34:45 +0000 asID: 49981 IP address blocks: 2a0e:fd45:2f50::/48 maxlen: 64 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:5f:42:8c:7f:1c:d2:e7:93:4c:a2:0b:19:24:15:5c:8b:28:6b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Validity Not Before: Dec 30 12:29:45 2025 GMT Not After : Dec 29 12:34:45 2026 GMT Subject: CN=1AE50CB46F3B7D44FBE2EC2E75D9A48AA67B8B89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:69:9b:5c:2c:8b:8b:a3:82:47:cc:fb:1d: 2f:66:54:75:80:99:6c:46:03:24:e0:79:0c:70:d8: 90:9e:5a:10:05:cf:52:e3:76:7e:32:12:24:e5:a8: c1:0f:7d:67:54:2e:05:1f:0a:8e:c5:eb:b5:34:a4: bf:34:f7:d5:49:69:75:b1:60:32:7e:21:85:13:6a: c7:27:f0:f4:4b:5e:88:5d:90:c5:13:4a:fb:da:bd: e6:2b:8e:ad:bd:91:49:fc:62:a9:b6:6e:c3:0b:65: 84:1d:30:8e:d0:08:80:b2:ec:8a:13:09:da:15:cd: b6:45:0b:89:f7:14:d9:e2:36:89:8f:5b:51:51:ea: 76:e2:f2:82:a2:b5:b7:00:e2:be:8c:b8:9c:c0:2d: 8b:fc:ed:5b:19:28:44:ce:29:e4:2d:5a:e4:ac:17: 2c:74:b6:65:ed:a2:09:10:4f:7b:b7:12:62:db:86: 12:a3:e2:e6:a2:c2:ee:d3:f2:f8:11:39:cc:20:05: 3a:3e:14:23:99:96:23:65:44:5d:14:e0:20:d5:7a: fa:f2:7e:36:4f:28:25:e0:ac:ed:d8:10:3e:50:b9: 95:79:d4:80:d1:d2:8d:d5:30:a1:36:41:6e:84:4a: e8:35:49:3c:44:ef:fb:9b:19:f3:59:38:14:b4:d5: c6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E5:0C:B4:6F:3B:7D:44:FB:E2:EC:2E:75:D9:A4:8A:A6:7B:8B:89 X509v3 Authority Key Identifier: keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/326130653a666434353a326635303a3a2f34382d3634203d3e203439393831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:fd45:2f50::/48 Signature Algorithm: sha256WithRSAEncryption a4:2a:5b:3f:bd:fc:08:ea:23:53:f0:83:14:d3:72:0b:01:f1: 71:ae:61:a6:7c:18:57:a9:23:8b:d1:c7:11:0d:42:ef:dc:c8: 11:1e:62:98:d7:54:0e:cb:aa:bc:37:c5:dd:ed:70:d8:0e:e8: c7:95:14:08:c4:93:c1:91:93:5b:2b:1f:87:2a:df:91:14:c4: 8c:f0:1d:12:07:61:07:4f:d7:29:1a:ac:c5:f3:ec:21:77:54: 58:e1:58:34:cf:e6:9e:df:4f:82:6b:a1:e3:fa:90:83:7b:d4: c9:e5:07:36:da:8e:ab:e1:d0:03:46:10:9a:4f:42:82:5d:b9: e2:9e:68:2b:8c:89:dc:13:d9:43:0a:68:1a:18:29:61:42:cd: 72:3b:af:47:f1:df:d1:be:ab:89:54:9f:bf:a2:17:e7:cf:34: 18:a5:70:3e:88:c7:d3:73:0a:97:fc:c3:7c:ae:11:e3:0e:a1: 62:dd:4f:e6:ff:48:13:7e:7e:f3:3e:34:5f:11:6e:a4:32:43: b4:61:37:b2:2a:94:5b:36:b0:3e:55:9c:25:e5:e2:b5:1d:03: 8b:47:ad:6a:3c:e5:d9:ad:7d:10:a6:9c:41:ea:2f:4b:04:a0: f0:8d:6f:34:0f:5b:75:91:79:38:a8:32:b6:70:f5:88:4b:fa: f3:f4:74:89 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIUNl9CjH8c0ueTTKILGSQVXIsoa9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2YyMTZmNDlhM2I5YTg0YTBlODVlODBhMmM0Mjg3NGYw OWVhMzk4NTAeFw0yNTEyMzAxMjI5NDVaFw0yNjEyMjkxMjM0NDVaMDMxMTAvBgNV BAMTKDFBRTUwQ0I0NkYzQjdENDRGQkUyRUMyRTc1RDlBNDhBQTY3QjhCODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGvmmbXCyLi6OCR8z7HS9mVHWA mWxGAyTgeQxw2JCeWhAFz1Ljdn4yEiTlqMEPfWdULgUfCo7F67U0pL8099VJaXWx YDJ+IYUTascn8PRLXohdkMUTSvvaveYrjq29kUn8Yqm2bsMLZYQdMI7QCICy7IoT CdoVzbZFC4n3FNniNomPW1FR6nbi8oKitbcA4r6MuJzALYv87VsZKETOKeQtWuSs Fyx0tmXtogkQT3u3EmLbhhKj4uaiwu7T8vgROcwgBTo+FCOZliNlRF0U4CDVevry fjZPKCXgrO3YED5QuZV51IDR0o3VMKE2QW6ESug1STxE7/ubGfNZOBS01caPAgMB AAGjggJIMIICRDAdBgNVHQ4EFgQUGuUMtG87fUT74uwuddmkiqZ7i4kwHwYDVR0j BBgwFoAUfyFvSaO5qEoOhegKLEKHTwnqOYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmRmYjMwY2EtZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1 YWYxLzAvN0YyMTZGNDlBM0I5QTg0QTBFODVFODBBMkM0Mjg3NEYwOUVBMzk4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Z5RnZTYU81cUVvT2hlZ0tMRUtIVHdu cU9ZVS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmRmYjMwY2Et ZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1YWYxLzAvMzI2MTMwNjUzYTY2NjQzNDM1 M2EzMjY2MzUzMDNhM2EyZjM0MzgyZDM2MzQyMDNkM2UyMDM0MzkzOTM4MzEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAqDv1FL1AwDQYJKoZIhvcNAQELBQADggEBAKQqWz+9/AjqI1PwgxTT cgsB8XGuYaZ8GFepI4vRxxENQu/cyBEeYpjXVA7Lqrw3xd3tcNgO6MeVFAjEk8GR k1srH4cq35EUxIzwHRIHYQdP1ykarMXz7CF3VFjhWDTP5p7fT4JroeP6kIN71Mnl Bzbajqvh0ANGEJpPQoJdueKeaCuMidwT2UMKaBoYKWFCzXI7r0fx39G+q4lUn7+i F+fPNBilcD6Ix9NzCpf8w3yuEeMOoWLdT+b/SBN+fvM+NF8RbqQyQ7RhN7IqlFs2 sD5VnCXl4rUdA4tHrWo85dmtfRCmnEHqL0sEoPCNbzQPW3WReTioMrZw9YhL+vP0 dIk= -----END CERTIFICATE-----Generated at Mon Jan 19 17:32:54 2026 by rpki-client