This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa File: 326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa (raw, json) Hash identifier: alWdZcWOVcqLJ+t8VCXLM/51cMrMQD6vIi6z5Hkb/rM= Subject key identifier: 03:31:40:EA:25:A8:A5:99:5A:F4:B5:5F:87:5A:46:AC:BD:03:D2:58 Certificate issuer: /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Certificate serial: 47EFAE1D197EC5EE00F289B850DCF19A414481E8 Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa Signing time: Sat 17 Jan 2026 22:02:07 +0000 ROA not before: Sat 17 Jan 2026 21:57:07 +0000 ROA not after: Sat 16 Jan 2027 22:02:07 +0000 asID: 216299 IP address blocks: 2a0f:1cc5:1010::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ef:ae:1d:19:7e:c5:ee:00:f2:89:b8:50:dc:f1:9a:41:44:81:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Validity Not Before: Jan 17 21:57:07 2026 GMT Not After : Jan 16 22:02:07 2027 GMT Subject: CN=033140EA25A8A5995AF4B55F875A46ACBD03D258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:01:9d:93:dc:f7:c3:b1:3d:26:fc:a9:09:89: 31:2a:a2:88:fa:45:a8:b0:5e:f9:b5:69:e7:90:b6: b8:85:15:93:5e:b7:6b:44:3e:b9:e2:b4:67:29:e8: b8:22:48:fa:00:6d:ae:b0:46:f8:e6:68:31:d4:d8: 65:11:b9:1b:9e:b2:e7:07:a6:09:4a:9d:7b:d9:aa: ab:25:99:4a:30:e9:ed:3f:6b:a7:3a:10:94:a4:f9: bd:01:bf:56:df:94:0e:11:ea:40:61:fe:54:cb:ef: 04:7c:d0:b3:38:2f:28:18:6f:4f:6e:3f:5c:e9:d4: e4:63:74:41:63:e2:9f:ac:c1:34:4b:06:d8:08:d0: b6:ae:8e:40:6b:74:76:e7:fd:a8:0d:9a:d6:8c:84: c5:45:f8:0a:de:cb:8c:c8:c0:aa:95:b7:1c:b3:7f: 09:1e:93:cd:19:36:4c:85:66:48:14:e2:ad:d7:41: 2d:2b:cc:2e:d3:b0:0b:79:93:03:a4:d6:40:ba:70: 94:53:3f:99:92:7e:52:16:ce:60:af:00:83:52:d3: 77:ee:d9:9e:5a:d2:8b:83:d1:72:c1:98:a0:55:7b: b5:69:64:7a:70:ae:58:b7:70:c1:60:e8:f7:35:0c: 99:35:c0:d9:22:8a:23:ed:cb:93:15:3a:a1:c9:37: b3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:31:40:EA:25:A8:A5:99:5A:F4:B5:5F:87:5A:46:AC:BD:03:D2:58 X509v3 Authority Key Identifier: keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1010::/44 Signature Algorithm: sha256WithRSAEncryption 34:00:38:d6:2f:3a:3d:fc:88:9a:37:3f:bf:24:65:73:d2:18: 39:53:a0:2f:e9:48:a2:21:99:a4:81:9e:c4:88:4b:08:c7:15: 8c:8f:de:c2:e6:4b:df:07:6f:8a:ce:48:d1:01:de:23:05:36: 5f:f0:7e:c1:57:de:91:d4:62:94:5c:ed:20:5a:de:8c:41:63: 0e:62:a5:13:78:c1:41:c0:71:92:21:e1:65:ec:79:b2:08:f6: 74:9c:5f:61:36:96:69:ba:1a:40:5a:6e:aa:4a:fe:93:c4:5f: b2:bb:28:0c:f9:ae:4a:84:47:3a:cf:81:32:f0:eb:96:07:3f: 97:12:cd:b4:03:26:66:da:63:7c:5c:68:5a:aa:d5:62:7d:be: 33:9c:f2:79:e0:ab:22:ec:2c:c4:6f:b3:f9:96:40:e4:c8:33: 2a:d4:a2:b7:66:9b:29:1b:9c:7d:ba:c7:73:f1:32:56:2a:a3: 4e:d4:1e:ca:b1:28:f5:d5:15:4a:07:65:c9:22:ab:53:ce:b4: cb:77:e1:39:ba:26:6d:d1:56:19:d8:d7:76:2f:fc:1c:8d:b1: 32:67:ef:1b:41:7b:08:36:86:23:87:d7:c5:75:a0:59:95:09: 9f:06:46:f1:bf:7a:fa:c4:4a:ee:af:8c:08:bb:c4:38:80:c1: c1:16:ae:43 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUR++uHRl+xe4A8om4UNzxmkFEgegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5 MUZCQjczQTAeFw0yNjAxMTcyMTU3MDdaFw0yNzAxMTYyMjAyMDdaMDMxMTAvBgNV BAMTKDAzMzE0MEVBMjVBOEE1OTk1QUY0QjU1Rjg3NUE0NkFDQkQwM0QyNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtAZ2T3PfDsT0m/KkJiTEqooj6 RaiwXvm1aeeQtriFFZNet2tEPrnitGcp6LgiSPoAba6wRvjmaDHU2GURuRuesucH pglKnXvZqqslmUow6e0/a6c6EJSk+b0Bv1bflA4R6kBh/lTL7wR80LM4LygYb09u P1zp1ORjdEFj4p+swTRLBtgI0LaujkBrdHbn/agNmtaMhMVF+Arey4zIwKqVtxyz fwkek80ZNkyFZkgU4q3XQS0rzC7TsAt5kwOk1kC6cJRTP5mSflIWzmCvAINS03fu 2Z5a0ouD0XLBmKBVe7VpZHpwrli3cMFg6Pc1DJk1wNkiiiPty5MVOqHJN7NJAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUAzFA6iWopZla9LVfh1pGrL0D0lgwHwYDVR0j BBgwFoAU4duHu7vSDf8mGeYUuG1LfpH7tzowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzMvRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5MUZCQjczQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9FMURCODdCQkJCRDIwREZGMjYxOUU2MTRC ODZENEI3RTkxRkJCNzNBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81MmI4NDE1Ni05NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMy8zMjYxMzA2 NjNhMzE2MzYzMzUzYTMxMzAzMTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM2MzIzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKg8cxRAQMA0GCSqGSIb3DQEBCwUAA4IBAQA0 ADjWLzo9/IiaNz+/JGVz0hg5U6Av6UiiIZmkgZ7EiEsIxxWMj97C5kvfB2+KzkjR Ad4jBTZf8H7BV96R1GKUXO0gWt6MQWMOYqUTeMFBwHGSIeFl7HmyCPZ0nF9hNpZp uhpAWm6qSv6TxF+yuygM+a5KhEc6z4Ey8OuWBz+XEs20AyZm2mN8XGhaqtVifb4z nPJ54Ksi7CzEb7P5lkDkyDMq1KK3ZpspG5x9usdz8TJWKqNO1B7KsSj11RVKB2XJ IqtTzrTLd+E5uiZt0VYZ2Nd2L/wcjbEyZ+8bQXsINoYjh9fFdaBZlQmfBkbxv3r6 xErur4wIu8Q4gMHBFq5D -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:16 2026 by rpki-client