This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa File: 326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: l0RMqMiAhgGDzLpuD3ZJuPudrozfegvLREqyl+4aP2I= Subject key identifier: 25:6E:39:81:E8:B2:F5:0F:BF:E0:11:1B:46:82:62:BA:02:84:E4:11 Certificate issuer: /CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Certificate serial: 362A27E95776C6E1EC20A045144A318E49738778 Authority key identifier: DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa Signing time: Sun 18 Jan 2026 06:58:04 +0000 ROA not before: Sun 18 Jan 2026 06:53:04 +0000 ROA not after: Sun 17 Jan 2027 06:58:04 +0000 asID: 214955 IP address blocks: 2a0f:1cc5:2d01::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:2a:27:e9:57:76:c6:e1:ec:20:a0:45:14:4a:31:8e:49:73:87:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Validity Not Before: Jan 18 06:53:04 2026 GMT Not After : Jan 17 06:58:04 2027 GMT Subject: CN=256E3981E8B2F50FBFE0111B468262BA0284E411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:12:57:8e:03:84:a0:e2:16:29:82:5c:bc: dd:5e:aa:62:21:0d:a4:30:70:45:2e:5a:ed:f8:09: b4:57:95:b6:09:7f:0e:f7:d1:88:3f:e0:30:82:b1: b0:1f:3a:b9:7c:f1:78:c9:17:2f:55:4a:3f:57:55: e8:95:70:8e:bc:1c:60:13:a4:0c:9c:a7:c8:1c:5d: 2a:6b:81:c9:f9:86:0e:e9:2d:d7:d0:76:a6:39:48: 06:db:36:b4:8c:7c:b7:46:3b:7c:d4:d8:7a:f6:fd: 88:31:37:1c:2f:38:3a:c0:0a:34:2d:3c:0b:4a:05: 40:1c:e5:ca:ce:89:5e:d9:eb:86:c5:23:64:be:48: a0:85:df:15:7e:55:3c:19:26:f8:53:02:20:09:64: ca:f2:1a:4a:78:02:0f:ca:31:1b:4c:72:eb:23:18: 52:cc:59:56:49:77:aa:14:89:06:41:0d:9c:35:b4: c6:04:c2:63:8f:a2:0a:63:3a:e6:b2:bd:34:f2:6c: c8:b0:e7:f2:56:0a:3b:9e:f7:09:12:16:e4:6a:2c: 86:46:3d:90:7c:6a:5b:f8:60:aa:ed:42:5e:77:32: 9a:ba:2a:fd:ac:50:21:6e:0b:17:4c:71:52:3a:6a: 6e:f0:dd:01:0d:28:c0:bb:6a:9a:10:78:54:ff:4f: 3a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6E:39:81:E8:B2:F5:0F:BF:E0:11:1B:46:82:62:BA:02:84:E4:11 X509v3 Authority Key Identifier: keyid:DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:2d01::/48 Signature Algorithm: sha256WithRSAEncryption 4c:27:03:0d:97:dc:81:d7:12:2a:af:5f:80:e4:24:5f:64:81: 23:0e:10:18:fc:10:1f:0f:cb:18:00:ce:19:af:46:0a:b3:97: aa:c9:89:a9:b5:ee:c1:d5:62:0a:0e:26:fe:5f:d0:2d:e7:f0: 98:69:f9:11:97:f9:47:9e:dc:73:a5:0e:89:41:35:05:86:56: 70:01:31:b5:44:71:a3:c8:06:4d:e2:45:db:ce:5d:3a:79:d0: 27:8d:3d:04:28:23:d2:b8:3a:c4:f7:2b:f5:d8:ce:c5:f1:6b: 84:a4:f1:90:b0:f0:ff:76:c1:c6:26:d3:6b:12:7e:97:d1:9a: 5e:7e:43:0d:c0:8a:c0:2c:a3:57:e9:5c:a9:7c:10:07:75:13: e0:cf:62:ec:7c:2b:fc:51:fc:23:95:9b:6c:dc:0b:02:cf:84: 7c:ba:86:0b:a2:d3:08:5e:11:84:53:f2:5b:92:11:e2:91:4a: 64:3c:dd:d6:88:00:63:54:2b:14:03:cb:4a:c2:bc:b6:59:a7: a7:ea:b8:99:3a:a7:0c:43:31:97:5d:78:71:01:ff:ab:f4:19: 73:90:6a:7e:22:9d:2b:45:f9:02:73:df:7e:22:08:04:db:49: b0:40:96:00:b0:77:ba:3d:9c:c0:66:88:1d:f7:5a:c9:dd:4c: b6:97:79:4a -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUNion6Vd2xuHsIKBFFEoxjklzh3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4 NUZBNEVFMTAeFw0yNjAxMTgwNjUzMDRaFw0yNzAxMTcwNjU4MDRaMDMxMTAvBgNV BAMTKDI1NkUzOTgxRThCMkY1MEZCRkUwMTExQjQ2ODI2MkJBMDI4NEU0MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxDxJXjgOEoOIWKYJcvN1eqmIh DaQwcEUuWu34CbRXlbYJfw730Yg/4DCCsbAfOrl88XjJFy9VSj9XVeiVcI68HGAT pAycp8gcXSprgcn5hg7pLdfQdqY5SAbbNrSMfLdGO3zU2Hr2/YgxNxwvODrACjQt PAtKBUAc5crOiV7Z64bFI2S+SKCF3xV+VTwZJvhTAiAJZMryGkp4Ag/KMRtMcusj GFLMWVZJd6oUiQZBDZw1tMYEwmOPogpjOuayvTTybMiw5/JWCjue9wkSFuRqLIZG PZB8alv4YKrtQl53Mpq6Kv2sUCFuCxdMcVI6am7w3QENKMC7apoQeFT/TzqTAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUJW45geiy9Q+/4BEbRoJiugKE5BEwHwYDVR0j BBgwFoAU21u9swIQMU6QQLbJnb9p7oX6TuEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzMvREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4NUZBNEVFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9EQjVCQkRCMzAyMTAzMTRFOTA0MEI2Qzk5 REJGNjlFRTg1RkE0RUUxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMy8zMjYxMzA2 NjNhMzE2MzYzMzUzYTMyNjQzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKg8cxS0BMA0GCSqGSIb3DQEBCwUAA4IBAQBM JwMNl9yB1xIqr1+A5CRfZIEjDhAY/BAfD8sYAM4Zr0YKs5eqyYmpte7B1WIKDib+ X9At5/CYafkRl/lHntxzpQ6JQTUFhlZwATG1RHGjyAZN4kXbzl06edAnjT0EKCPS uDrE9yv12M7F8WuEpPGQsPD/dsHGJtNrEn6X0ZpefkMNwIrALKNX6VypfBAHdRPg z2LsfCv8UfwjlZts3AsCz4R8uoYLotMIXhGEU/JbkhHikUpkPN3WiABjVCsUA8tK wry2Waen6riZOqcMQzGXXXhxAf+r9BlzkGp+Ip0rRfkCc99+IggE20mwQJYAsHe6 PZzAZogd91rJ3Uy2l3lK -----END CERTIFICATE-----Generated at Sun Jan 18 15:23:50 2026 by rpki-client