This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa File: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (raw, json) Hash identifier: 6pSA0kSz3996g9/BXeNESbR6lV0s0HcQ+D2Slss3z5w= Subject key identifier: E0:F5:8D:8E:BF:C0:68:78:55:0B:FC:52:DC:B1:96:C6:27:D0:20:D6 Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 711BCAA986DD6956FE8FFC2BD7FBF10B48B7D387 Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa Signing time: Sat 31 Jan 2026 22:01:31 +0000 ROA not before: Sat 31 Jan 2026 21:56:31 +0000 ROA not after: Sat 30 Jan 2027 22:01:31 +0000 asID: 215171 IP address blocks: 2a14:7581:4940::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:1b:ca:a9:86:dd:69:56:fe:8f:fc:2b:d7:fb:f1:0b:48:b7:d3:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Jan 31 21:56:31 2026 GMT Not After : Jan 30 22:01:31 2027 GMT Subject: CN=E0F58D8EBFC06878550BFC52DCB196C627D020D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b7:ba:aa:d5:a2:f4:12:c4:64:ae:25:c9:28: 8e:e3:b0:84:12:84:73:eb:8f:ae:55:30:52:d5:aa: e6:3d:b3:ba:a1:27:aa:49:15:d9:37:51:45:0b:97: 2a:f9:23:9e:db:b6:d4:23:25:fa:06:3b:aa:af:a7: c3:87:e5:f6:97:b5:0f:15:b2:31:da:8a:c7:5d:b7: 30:fa:03:45:ce:c2:57:67:21:bb:5b:f1:32:6e:df: a3:d6:1f:91:0f:81:d6:ed:49:f9:e7:a0:7d:9e:34: 8e:c9:6f:9c:c6:51:1c:82:e5:a3:a8:8a:ff:3c:7b: b1:92:41:31:15:1b:c8:60:d5:95:51:30:95:cc:a5: d8:6c:9d:b0:c5:0c:0f:b2:c3:b4:85:2d:d6:e5:0d: 29:58:60:cf:0f:bf:fc:bc:5c:55:03:71:a9:88:fe: c8:e0:1f:c5:d0:18:4a:f6:48:04:53:87:eb:63:13: 45:d9:c2:7a:66:d3:c8:38:f2:8e:c4:1b:28:0e:0b: ac:54:24:bb:89:75:14:22:fd:67:8d:18:0e:75:4c: 56:81:8e:be:7f:ca:46:ab:68:2b:db:7d:61:c1:d8: b3:4b:d3:7f:6c:b4:ef:8d:b2:77:97:86:c9:52:81: 38:41:78:a8:98:ab:f3:83:77:99:98:5d:e9:0b:50: b0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F5:8D:8E:BF:C0:68:78:55:0B:FC:52:DC:B1:96:C6:27:D0:20:D6 X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:4940::/44 Signature Algorithm: sha256WithRSAEncryption 2c:a3:97:03:03:2d:4e:d0:4b:57:fd:99:d6:5a:a7:6f:9e:7b: 99:f1:ff:c0:c1:bd:f5:09:4c:4f:e4:06:f4:1e:c5:99:40:fe: dc:55:b0:30:37:ba:33:58:d3:11:d2:dd:3b:6a:85:03:9d:5a: 8b:5c:54:2a:93:39:e2:07:4f:a2:64:41:6f:1f:b1:8b:bc:20: 59:04:5a:1f:a9:ed:ec:3c:97:d8:cc:dc:34:1f:b7:f7:4f:8b: e9:48:71:ed:f2:4b:cb:72:8f:8a:fb:61:88:89:d8:75:01:1d: 38:72:a5:95:ba:7f:3e:15:f2:90:8f:84:c5:52:a0:ce:03:c2: 6d:af:40:f6:05:db:ae:c4:b2:7e:9b:f9:54:6a:13:a3:c3:66: 4f:93:e0:41:c6:71:ef:ca:b5:0a:c0:54:72:c0:10:0b:74:f1: f9:03:18:32:db:be:94:ce:84:31:58:10:a1:40:5d:ff:c5:7b: fe:e9:53:e0:21:e0:63:11:98:8f:96:9c:9f:de:fe:96:e9:74: de:c1:ab:c3:75:42:2c:1e:34:c7:11:d1:82:85:b8:e9:0d:ab: 03:a2:33:3e:5c:39:33:6c:30:16:cc:0b:7e:a2:b8:21:f5:14: 29:16:9a:d3:56:09:84:5f:12:58:59:ac:81:d4:3b:70:a7:9e: 8f:0e:e8:2d -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUcRvKqYbdaVb+j/wr1/vxC0i304cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNjAxMzEyMTU2MzFaFw0yNzAxMzAyMjAxMzFaMDMxMTAvBgNV BAMTKEUwRjU4RDhFQkZDMDY4Nzg1NTBCRkM1MkRDQjE5NkM2MjdEMDIwRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgt7qq1aL0EsRkriXJKI7jsIQS hHPrj65VMFLVquY9s7qhJ6pJFdk3UUULlyr5I57bttQjJfoGO6qvp8OH5faXtQ8V sjHaisddtzD6A0XOwldnIbtb8TJu36PWH5EPgdbtSfnnoH2eNI7Jb5zGURyC5aOo iv88e7GSQTEVG8hg1ZVRMJXMpdhsnbDFDA+yw7SFLdblDSlYYM8Pv/y8XFUDcamI /sjgH8XQGEr2SARTh+tjE0XZwnpm08g48o7EGygOC6xUJLuJdRQi/WeNGA51TFaB jr5/ykaraCvbfWHB2LNL039stO+NsneXhslSgThBeKiYq/ODd5mYXekLULCPAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU4PWNjr/AaHhVC/xS3LGWxifQINYwHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvNC8zMjYxMzEz NDNhMzczNTM4MzEzYTM0MzkzNDMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz MTM1MzEzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gUlAMA0GCSqGSIb3DQEBCwUAA4IBAQAs o5cDAy1O0EtX/ZnWWqdvnnuZ8f/Awb31CUxP5Ab0HsWZQP7cVbAwN7ozWNMR0t07 aoUDnVqLXFQqkzniB0+iZEFvH7GLvCBZBFofqe3sPJfYzNw0H7f3T4vpSHHt8kvL co+K+2GIidh1AR04cqWVun8+FfKQj4TFUqDOA8Jtr0D2BduuxLJ+m/lUahOjw2ZP k+BBxnHvyrUKwFRywBALdPH5Axgy276UzoQxWBChQF3/xXv+6VPgIeBjEZiPlpyf 3v6W6XTewavDdUIsHjTHEdGChbjpDasDojM+XDkzbDAWzAt+orgh9RQpFprTVgmE XxJYWayB1Dtwp56PDugt -----END CERTIFICATE-----Generated at Mon Feb 2 12:53:56 2026 by rpki-client