This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538313a333730303a3a2f34302d3438203d3e20323134323233.roa File: 326131343a373538313a333730303a3a2f34302d3438203d3e20323134323233.roa (raw, json) Hash identifier: OM1UlQNl1s10FY6z5IKjFPtWVdQjSiXHznymmRP/YvA= Subject key identifier: BE:23:EC:86:D4:C9:3B:21:7A:19:09:8E:51:F4:C0:09:47:E7:81:66 Certificate issuer: /CN=34DEF610B33BA719BA344A660C4BDA8333112372 Certificate serial: 55DC885645BF330CAA297CA4B071B30CE37F3777 Authority key identifier: 34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538313a333730303a3a2f34302d3438203d3e20323134323233.roa Signing time: Sun 18 Jan 2026 14:43:28 +0000 ROA not before: Sun 18 Jan 2026 14:38:28 +0000 ROA not after: Sun 17 Jan 2027 14:43:28 +0000 asID: 214223 IP address blocks: 2a14:7581:3700::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:dc:88:56:45:bf:33:0c:aa:29:7c:a4:b0:71:b3:0c:e3:7f:37:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DEF610B33BA719BA344A660C4BDA8333112372 Validity Not Before: Jan 18 14:38:28 2026 GMT Not After : Jan 17 14:43:28 2027 GMT Subject: CN=BE23EC86D4C93B217A19098E51F4C00947E78166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4d:d2:17:14:da:69:26:a5:77:59:ed:8d:69: 36:4a:0b:79:45:f4:64:59:2d:95:55:76:e2:8c:02: 88:14:37:6b:30:31:6c:8e:4f:34:ba:98:91:45:4f: ff:1b:17:23:3a:37:df:fd:88:5f:fd:fc:a3:e5:2e: fc:5d:95:37:1d:6d:be:d7:2d:78:f0:22:a4:5b:2f: 44:84:5e:55:b3:92:a1:fa:c3:4a:2a:a4:6e:e6:b3: 9e:bc:1a:55:05:73:1d:68:99:ca:7f:fe:f7:59:e4: 77:8b:b9:6d:06:05:9f:0d:7f:76:06:14:9a:28:d6: 69:14:61:48:9a:17:96:c9:9d:ee:c9:ff:1b:f8:1e: 84:d7:3b:d1:28:63:5f:43:47:e9:05:75:39:18:93: 9c:cd:0f:9f:58:15:21:38:fc:28:2c:ec:8f:cd:42: f7:b0:2b:c8:46:1a:06:9a:50:20:c8:78:93:8a:f9: 07:c5:92:08:5f:93:57:cc:cd:f5:fa:4e:d8:45:d2: 32:42:b0:c4:68:e4:c3:eb:fe:b4:61:c9:e9:fb:be: 7b:ee:b9:47:70:af:c0:3f:51:70:e0:ea:d1:7b:e8: 8b:ca:23:17:2a:f6:a1:64:35:76:ad:c2:31:9c:e5: ab:df:79:69:61:30:34:45:2a:2f:3f:d0:45:b0:61: 9f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:23:EC:86:D4:C9:3B:21:7A:19:09:8E:51:F4:C0:09:47:E7:81:66 X509v3 Authority Key Identifier: keyid:34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538313a333730303a3a2f34302d3438203d3e20323134323233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:3700::/40 Signature Algorithm: sha256WithRSAEncryption 0b:6d:b7:aa:3f:99:8d:c6:ce:cf:3d:7c:bf:74:ec:4f:95:51: 59:64:9b:6b:86:c5:87:e7:60:21:ed:76:7e:d7:8f:db:1b:c2: b7:04:c3:12:cc:07:45:98:de:a5:bc:9f:15:38:f7:a0:ac:8e: 28:65:57:59:04:d4:0f:d3:62:a3:5e:cd:1c:c7:72:9c:de:83: 6c:9a:52:f9:b5:48:69:6d:69:a5:33:38:06:96:3e:97:7d:de: a1:44:16:8c:c5:56:e2:37:7d:45:af:27:b7:f5:21:6b:15:96: 6d:de:02:87:2b:c1:12:9f:45:d4:0f:4b:01:fd:8c:d2:42:d8: 02:52:a8:ed:0c:72:40:51:81:48:e2:08:a0:ea:27:3c:79:7c: 3a:05:11:ca:b1:d1:2b:fb:b7:29:5c:bc:68:eb:1d:bb:78:d7: 53:78:a3:b1:42:87:4f:e1:6e:e6:ff:69:f4:b7:b9:ee:32:4b: 10:c5:4c:2e:c9:ed:b6:72:18:45:e7:60:78:f1:a7:45:5a:c4: 62:c7:e2:66:5a:11:93:79:6d:42:5f:b1:5d:ff:76:7d:65:ab: 25:8b:26:91:50:6f:1d:90:80:85:bd:55:cc:88:d0:b9:d1:f0: 2a:84:88:15:2f:ab:23:b9:26:d0:8d:d3:2c:b6:3e:9b:f8:d3: 2c:a1:0f:23 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUVdyIVkW/MwyqKXyksHGzDON/N3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMz MzExMjM3MjAeFw0yNjAxMTgxNDM4MjhaFw0yNzAxMTcxNDQzMjhaMDMxMTAvBgNV BAMTKEJFMjNFQzg2RDRDOTNCMjE3QTE5MDk4RTUxRjRDMDA5NDdFNzgxNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqTdIXFNppJqV3We2NaTZKC3lF 9GRZLZVVduKMAogUN2swMWyOTzS6mJFFT/8bFyM6N9/9iF/9/KPlLvxdlTcdbb7X LXjwIqRbL0SEXlWzkqH6w0oqpG7ms568GlUFcx1omcp//vdZ5HeLuW0GBZ8Nf3YG FJoo1mkUYUiaF5bJne7J/xv4HoTXO9EoY19DR+kFdTkYk5zND59YFSE4/Cgs7I/N QvewK8hGGgaaUCDIeJOK+QfFkghfk1fMzfX6TthF0jJCsMRo5MPr/rRhyen7vnvu uUdwr8A/UXDg6tF76IvKIxcq9qFkNXatwjGc5avfeWlhMDRFKi8/0EWwYZ/LAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUviPshtTJOyF6GQmOUfTACUfngWYwHwYDVR0j BBgwFoAUNN72ELM7pxm6NEpmDEvagzMRI3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgz YzkwLzEvMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMzMzExMjM3Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNERFRjYxMEIzM0JBNzE5QkEzNDRBNjYw QzRCREE4MzMzMTEyMzcyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yZWQ0YjdlYi0xN2E3LTQ0ZTEtOWNhMi0wOThhMzIzODNjOTAvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMzMzczMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MTM0MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gTcwDQYJKoZIhvcNAQELBQADggEBAAtt t6o/mY3Gzs89fL907E+VUVlkm2uGxYfnYCHtdn7Xj9sbwrcEwxLMB0WY3qW8nxU4 96CsjihlV1kE1A/TYqNezRzHcpzeg2yaUvm1SGltaaUzOAaWPpd93qFEFozFVuI3 fUWvJ7f1IWsVlm3eAocrwRKfRdQPSwH9jNJC2AJSqO0MckBRgUjiCKDqJzx5fDoF Ecqx0Sv7tylcvGjrHbt411N4o7FCh0/hbub/afS3ue4ySxDFTC7J7bZyGEXnYHjx p0VaxGLH4mZaEZN5bUJfsV3/dn1lqyWLJpFQbx2QgIW9VcyI0LnR8CqEiBUvqyO5 JtCN0yy2Ppv40yyhDyM= -----END CERTIFICATE-----Generated at Wed Jan 21 01:09:26 2026 by rpki-client