This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa File: 326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa (raw, json) Hash identifier: 6lZvvFWPvSfdQUMPjqUZGcuEJ5oDxzIDckdsgacq+JE= Subject key identifier: 41:73:4C:27:03:4F:EC:CC:D6:7E:AE:C2:53:CA:33:B9:57:29:A1:75 Certificate issuer: /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Certificate serial: 7C13B6958AF3784E00325949F764C4B4EF099057 Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa Signing time: Sat 17 Jan 2026 22:02:07 +0000 ROA not before: Sat 17 Jan 2026 21:57:07 +0000 ROA not after: Sat 16 Jan 2027 22:02:07 +0000 asID: 216299 IP address blocks: 2a0f:1cc5:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:13:b6:95:8a:f3:78:4e:00:32:59:49:f7:64:c4:b4:ef:09:90:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Validity Not Before: Jan 17 21:57:07 2026 GMT Not After : Jan 16 22:02:07 2027 GMT Subject: CN=41734C27034FECCCD67EAEC253CA33B95729A175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e1:04:8a:50:84:d7:2c:fe:09:0c:ea:09:6c: d0:57:b9:7f:93:90:df:21:44:ba:40:a5:4d:fd:1b: d1:ba:44:40:f3:96:6f:81:a8:fc:a4:9c:50:13:6a: 74:ec:af:98:dd:6a:31:3c:63:96:1c:2a:48:74:75: 3c:d1:33:7b:b6:43:20:d9:77:61:ce:88:76:1a:88: e2:6a:4f:6f:cd:33:ab:80:41:d8:74:a8:cd:91:c7: 4d:d6:ae:e6:e1:d7:f8:03:58:e2:d4:43:49:9f:50: 13:eb:ab:6d:b3:a0:6e:9a:f6:66:ed:42:b1:86:75: ad:e4:58:20:37:4a:9e:61:4f:80:e9:a9:8c:f2:30: ff:dc:17:83:91:f0:19:10:d9:9f:63:6d:6a:48:82: 6d:f0:19:7e:e0:2d:d9:0f:b1:c8:19:4f:c0:58:d5: 71:53:8f:b1:0f:70:ce:b9:87:1c:fb:ee:22:68:53: 39:88:a2:51:ab:57:dc:5b:b5:ff:7e:11:df:e8:d6: 18:ba:f2:8e:0f:72:95:b8:ec:97:a7:29:aa:c1:db: 77:42:49:7e:7f:c5:a9:65:b5:ff:83:6d:10:62:79: 9c:f6:46:c2:69:9a:54:4f:46:ff:c1:a1:8d:4a:a2: fe:52:9a:c2:45:9e:b4:a3:88:9b:88:9b:c1:d8:78: 25:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:73:4C:27:03:4F:EC:CC:D6:7E:AE:C2:53:CA:33:B9:57:29:A1:75 X509v3 Authority Key Identifier: keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1000::/48 Signature Algorithm: sha256WithRSAEncryption 34:33:37:69:f1:1f:80:2a:d8:20:d9:8a:4b:5e:37:ab:40:80: 66:26:74:92:fe:4e:b5:26:97:8a:0d:75:40:0e:9f:60:5a:2a: e6:26:20:97:bc:d4:83:07:24:a7:74:14:c5:5c:e2:46:d8:91: 77:48:ed:f5:db:91:e0:5f:46:e6:d5:9b:76:5c:3c:d2:4e:31: 71:92:bf:1c:2f:f4:e3:89:cc:90:3c:3d:62:62:1b:fb:aa:56: 1d:28:09:43:97:23:c0:bf:7f:15:89:e0:f5:41:04:03:be:f8: 46:54:df:0e:75:12:cf:db:44:c4:70:69:97:ba:47:2a:f5:a2: 3b:37:d4:37:aa:ac:a0:fe:6b:9c:ff:8d:14:46:19:37:5a:ab: 09:7d:76:0a:59:ac:07:01:d0:81:eb:0d:3d:e4:2d:7b:9a:5d: 28:64:79:36:6e:ce:42:4f:cb:21:1b:06:a7:e9:3f:a0:56:a8: fc:f4:ed:68:3b:86:cc:5a:0e:91:74:41:b8:41:02:83:5e:c2: bf:e2:da:3f:49:fd:67:71:9d:a4:79:5b:18:9f:7d:22:b3:9c: 75:bd:d3:41:24:7e:12:aa:39:9d:15:bd:6b:23:54:69:0c:24: eb:20:bc:31:f9:72:fb:d8:c8:ef:87:94:db:fd:64:ac:b6:29: 10:2b:c1:45 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUfBO2lYrzeE4AMllJ92TEtO8JkFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5 MUZCQjczQTAeFw0yNjAxMTcyMTU3MDdaFw0yNzAxMTYyMjAyMDdaMDMxMTAvBgNV BAMTKDQxNzM0QzI3MDM0RkVDQ0NENjdFQUVDMjUzQ0EzM0I5NTcyOUExNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd4QSKUITXLP4JDOoJbNBXuX+T kN8hRLpApU39G9G6REDzlm+BqPyknFATanTsr5jdajE8Y5YcKkh0dTzRM3u2QyDZ d2HOiHYaiOJqT2/NM6uAQdh0qM2Rx03Wrubh1/gDWOLUQ0mfUBPrq22zoG6a9mbt QrGGda3kWCA3Sp5hT4DpqYzyMP/cF4OR8BkQ2Z9jbWpIgm3wGX7gLdkPscgZT8BY 1XFTj7EPcM65hxz77iJoUzmIolGrV9xbtf9+Ed/o1hi68o4PcpW47JenKarB23dC SX5/xalltf+DbRBieZz2RsJpmlRPRv/BoY1Kov5SmsJFnrSjiJuIm8HYeCXTAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUQXNMJwNP7MzWfq7CU8ozuVcpoXUwHwYDVR0j BBgwFoAU4duHu7vSDf8mGeYUuG1LfpH7tzowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzMvRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5MUZCQjczQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9FMURCODdCQkJCRDIwREZGMjYxOUU2MTRC ODZENEI3RTkxRkJCNzNBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81MmI4NDE1Ni05NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMy8zMjYxMzA2 NjNhMzE2MzYzMzUzYTMxMzAzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM2MzIzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKg8cxRAAMA0GCSqGSIb3DQEBCwUAA4IBAQA0 Mzdp8R+AKtgg2YpLXjerQIBmJnSS/k61JpeKDXVADp9gWirmJiCXvNSDBySndBTF XOJG2JF3SO3125HgX0bm1Zt2XDzSTjFxkr8cL/TjicyQPD1iYhv7qlYdKAlDlyPA v38VieD1QQQDvvhGVN8OdRLP20TEcGmXukcq9aI7N9Q3qqyg/muc/40URhk3WqsJ fXYKWawHAdCB6w095C17ml0oZHk2bs5CT8shGwan6T+gVqj89O1oO4bMWg6RdEG4 QQKDXsK/4to/Sf1ncZ2keVsYn30is5x1vdNBJH4SqjmdFb1rI1RpDCTrILwx+XL7 2Mjvh5Tb/WSstikQK8FF -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:14 2026 by rpki-client