This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538363a373030303a3a2f33362d3438203d3e20323134323233.roa File: 326131343a373538363a373030303a3a2f33362d3438203d3e20323134323233.roa (raw, json) Hash identifier: cR9vCxq+QNlbo4d+tncW/wsq3Jmq5gmf6sfBypzY7KM= Subject key identifier: 27:6C:45:AC:47:BA:3A:2D:7A:BC:ED:9E:BD:5B:4D:D5:21:41:2C:1D Certificate issuer: /CN=34DEF610B33BA719BA344A660C4BDA8333112372 Certificate serial: 49A09A4426043121FE2F7A332EB7FE4321873916 Authority key identifier: 34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538363a373030303a3a2f33362d3438203d3e20323134323233.roa Signing time: Sun 18 Jan 2026 14:43:49 +0000 ROA not before: Sun 18 Jan 2026 14:38:49 +0000 ROA not after: Sun 17 Jan 2027 14:43:49 +0000 asID: 214223 IP address blocks: 2a14:7586:7000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a0:9a:44:26:04:31:21:fe:2f:7a:33:2e:b7:fe:43:21:87:39:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DEF610B33BA719BA344A660C4BDA8333112372 Validity Not Before: Jan 18 14:38:49 2026 GMT Not After : Jan 17 14:43:49 2027 GMT Subject: CN=276C45AC47BA3A2D7ABCED9EBD5B4DD521412C1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b6:6e:fc:66:d4:11:99:e4:42:2e:5c:71:5b: 77:32:f1:21:63:23:0b:7f:62:89:b0:3e:c7:a9:8d: b0:bf:7e:c7:2a:5e:e7:e2:60:f2:f1:be:d8:09:29: 7e:25:98:7b:5a:6e:64:9b:3e:a5:be:8e:4b:fc:60: 57:86:50:26:e7:7e:d2:c7:bc:b5:40:49:4c:5f:54: 49:06:af:3a:16:1a:a5:28:ee:6b:1c:ef:11:b2:65: 6d:2a:fb:af:66:cb:46:b5:e4:2f:a5:0e:5a:14:50: 69:7a:b8:15:2d:e4:cb:cc:76:d9:79:fa:d6:f3:08: 8b:62:f4:b5:e6:ba:11:de:bb:fc:05:1a:fa:d6:61: f6:71:8b:84:c1:2c:ea:2e:1a:18:20:00:a9:8f:01: 5f:72:a3:a9:dd:ff:07:1d:1e:71:93:73:08:76:83: 59:8b:6b:56:5f:cb:0f:3a:28:46:1f:1c:c2:fc:99: 5e:7b:53:2d:09:19:49:d7:ed:da:d4:4d:ed:60:d1: 37:f6:de:02:b6:f3:0a:57:ca:67:9b:c6:58:fd:53: 6a:34:ff:5c:16:9c:73:3a:89:86:2e:b4:4f:be:04: ca:9b:68:1b:b7:b2:36:bb:cf:aa:72:aa:61:84:da: 5d:a0:18:60:56:f6:93:8c:c4:54:01:82:0d:b7:9e: 5d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6C:45:AC:47:BA:3A:2D:7A:BC:ED:9E:BD:5B:4D:D5:21:41:2C:1D X509v3 Authority Key Identifier: keyid:34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538363a373030303a3a2f33362d3438203d3e20323134323233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:7000::/36 Signature Algorithm: sha256WithRSAEncryption 7f:62:d0:51:79:0c:b2:ca:b9:b3:dd:f0:93:0b:79:0e:4c:7f: 5b:07:b2:98:e6:ec:02:56:d6:b3:6a:94:d1:4a:49:a9:21:8f: 96:33:46:60:24:60:f9:1d:b4:f0:87:0e:d5:06:42:67:a8:bd: e7:22:4e:f7:49:81:4b:df:5a:c6:5a:25:fd:7a:9c:a6:70:05: 1b:60:ff:1b:34:d2:06:d8:b1:e3:5d:8d:55:bd:d9:6d:48:28: ad:6b:02:b4:62:1e:38:69:c8:9b:ef:f4:57:84:97:4c:f5:fc: 0d:54:d6:17:b7:5d:94:40:37:50:6c:3b:50:ed:55:10:2e:b1: 74:31:f6:89:29:19:ae:46:bd:03:67:2d:66:37:80:a5:b2:1a: d8:64:cb:e8:52:cb:2f:71:fd:67:cb:74:d3:06:39:5e:d1:0f: 56:82:36:98:50:7d:19:65:30:9d:86:13:7d:20:f4:93:92:15: bd:98:bc:75:86:fb:55:f7:33:3a:9b:c6:80:b9:91:54:41:0d: 3c:8c:d0:d1:a3:4f:86:1f:25:18:de:18:d8:83:1f:a6:39:29: df:c8:62:d1:53:47:0f:cf:d1:73:14:f1:04:53:e1:e6:05:17: 32:6a:07:99:a7:01:27:15:c0:56:9f:15:58:1b:37:aa:ac:56: 72:57:db:55 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUSaCaRCYEMSH+L3ozLrf+QyGHORYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMz MzExMjM3MjAeFw0yNjAxMTgxNDM4NDlaFw0yNzAxMTcxNDQzNDlaMDMxMTAvBgNV BAMTKDI3NkM0NUFDNDdCQTNBMkQ3QUJDRUQ5RUJENUI0REQ1MjE0MTJDMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRtm78ZtQRmeRCLlxxW3cy8SFj Iwt/YomwPsepjbC/fscqXufiYPLxvtgJKX4lmHtabmSbPqW+jkv8YFeGUCbnftLH vLVASUxfVEkGrzoWGqUo7msc7xGyZW0q+69my0a15C+lDloUUGl6uBUt5MvMdtl5 +tbzCIti9LXmuhHeu/wFGvrWYfZxi4TBLOouGhggAKmPAV9yo6nd/wcdHnGTcwh2 g1mLa1Zfyw86KEYfHML8mV57Uy0JGUnX7drUTe1g0Tf23gK28wpXymebxlj9U2o0 /1wWnHM6iYYutE++BMqbaBu3sja7z6pyqmGE2l2gGGBW9pOMxFQBgg23nl1/AgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUJ2xFrEe6Oi16vO2evVtN1SFBLB0wHwYDVR0j BBgwFoAUNN72ELM7pxm6NEpmDEvagzMRI3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgz YzkwLzEvMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMzMzExMjM3Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNERFRjYxMEIzM0JBNzE5QkEzNDRBNjYw QzRCREE4MzMzMTEyMzcyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yZWQ0YjdlYi0xN2E3LTQ0ZTEtOWNhMi0wOThhMzIzODNjOTAvMS8zMjYxMzEz NDNhMzczNTM4MzYzYTM3MzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIz MTM0MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYEKhR1hnAwDQYJKoZIhvcNAQELBQADggEBAH9i 0FF5DLLKubPd8JMLeQ5Mf1sHspjm7AJW1rNqlNFKSakhj5YzRmAkYPkdtPCHDtUG QmeoveciTvdJgUvfWsZaJf16nKZwBRtg/xs00gbYseNdjVW92W1IKK1rArRiHjhp yJvv9FeEl0z1/A1U1he3XZRAN1BsO1DtVRAusXQx9okpGa5GvQNnLWY3gKWyGthk y+hSyy9x/WfLdNMGOV7RD1aCNphQfRllMJ2GE30g9JOSFb2YvHWG+1X3MzqbxoC5 kVRBDTyM0NGjT4YfJRjeGNiDH6Y5Kd/IYtFTRw/P0XMU8QRT4eYFFzJqB5mnAScV wFafFVgbN6qsVnJX21U= -----END CERTIFICATE-----Generated at Wed Jan 21 01:09:26 2026 by rpki-client