This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa File: 326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa (raw, json) Hash identifier: PhJ22uKOLkIyMB26jpFkBLaf94CPZDjFlKqxP4B3DyA= Subject key identifier: 79:CB:8A:D0:25:47:90:0D:6C:58:8E:E6:BD:D3:FE:B8:E4:EC:F5:9D Certificate issuer: /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Certificate serial: 69030AE1C41227E6D8ECC5859AAC32E60C4178C6 Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa Signing time: Sat 17 Jan 2026 22:02:07 +0000 ROA not before: Sat 17 Jan 2026 21:57:07 +0000 ROA not after: Sat 16 Jan 2027 22:02:07 +0000 asID: 216299 IP address blocks: 2a0f:1cc5:1020::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:03:0a:e1:c4:12:27:e6:d8:ec:c5:85:9a:ac:32:e6:0c:41:78:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Validity Not Before: Jan 17 21:57:07 2026 GMT Not After : Jan 16 22:02:07 2027 GMT Subject: CN=79CB8AD02547900D6C588EE6BDD3FEB8E4ECF59D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:32:ae:0c:ad:0d:44:37:73:63:3b:38:e9:33: e5:a3:57:1e:db:7e:8f:ab:e3:02:a0:57:85:f4:88: b1:35:5e:5b:71:d7:c9:50:5e:67:30:65:fc:31:86: b5:bc:0d:1c:bb:60:e3:12:b8:dd:2f:e5:16:7b:e8: a5:e3:1a:92:7d:07:a9:8e:4f:28:2e:81:76:3d:15: c5:d6:1f:f4:2a:e9:1a:96:75:46:f3:da:22:b4:b5: 96:c9:d7:ba:8b:c7:ec:f9:92:c4:74:a8:cf:41:90: bd:f1:cc:55:87:5f:c8:20:f7:89:cd:3c:c5:90:5c: 72:65:9c:11:3c:83:2a:58:3c:e2:24:bb:0d:10:41: 35:3c:b6:7e:12:1d:54:93:1c:d1:5c:20:de:0e:9c: 09:cb:eb:8e:4e:62:92:97:1a:36:05:db:a0:72:75: 26:69:48:f4:e4:4f:18:cb:27:1f:85:ad:bb:a7:f7: 58:00:c0:98:0b:9d:a6:bf:e1:75:2d:29:2a:25:af: 1d:c7:5d:44:bb:b5:d1:56:84:4c:69:3d:f8:80:8d: 33:f1:a7:75:7c:3b:70:dd:26:6b:f9:a3:96:89:41: 82:0a:6f:49:a0:c7:6f:b1:d6:0e:81:07:73:de:d2: d0:d8:dc:6e:17:90:d4:cd:df:30:87:57:9c:46:ba: a6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CB:8A:D0:25:47:90:0D:6C:58:8E:E6:BD:D3:FE:B8:E4:EC:F5:9D X509v3 Authority Key Identifier: keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1020::/44 Signature Algorithm: sha256WithRSAEncryption ad:da:7e:0a:ed:40:ae:83:eb:90:94:5a:fe:09:c4:85:3b:56: 22:91:1f:45:31:a8:57:3d:79:09:a5:11:d1:7e:bf:47:ae:3f: 3d:2b:f0:e2:bc:0d:31:9f:04:ab:62:89:84:f4:20:30:35:ec: 80:96:44:b2:9e:ba:0f:35:77:91:c5:2c:dd:a1:26:a7:4b:92: 9d:47:48:6f:db:21:69:9b:9b:2b:52:73:01:44:df:e4:39:22: f1:c1:3b:7c:da:9f:6b:dc:54:40:57:69:56:c9:26:b4:45:0d: 08:f2:b5:1d:e2:c1:31:e6:37:c5:0b:43:b7:a8:4e:a9:57:88: 6d:96:1b:ea:de:98:fd:02:5e:22:5c:e2:ff:5d:ae:05:44:08: 32:31:d7:14:99:91:2b:9a:da:2e:37:e1:4e:5a:ad:de:67:78: 39:62:6c:2e:2e:ad:3d:52:3e:3e:81:12:c5:0c:1f:17:af:77: 4e:fa:b3:e4:71:05:7e:0a:77:97:9c:bf:37:53:ac:48:c4:13: df:44:f5:1d:7c:0d:ef:ec:de:5f:44:0d:cb:ad:a3:7b:b5:c1: 6b:18:68:6b:82:42:5d:d1:52:81:3d:ac:06:d9:49:86:e0:0e: 81:e8:f2:6f:b1:56:aa:09:91:38:d6:da:59:bf:20:f6:4d:6b: 7a:36:d6:96 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUaQMK4cQSJ+bY7MWFmqwy5gxBeMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5 MUZCQjczQTAeFw0yNjAxMTcyMTU3MDdaFw0yNzAxMTYyMjAyMDdaMDMxMTAvBgNV BAMTKDc5Q0I4QUQwMjU0NzkwMEQ2QzU4OEVFNkJERDNGRUI4RTRFQ0Y1OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLMq4MrQ1EN3NjOzjpM+WjVx7b fo+r4wKgV4X0iLE1Xltx18lQXmcwZfwxhrW8DRy7YOMSuN0v5RZ76KXjGpJ9B6mO TygugXY9FcXWH/Qq6RqWdUbz2iK0tZbJ17qLx+z5ksR0qM9BkL3xzFWHX8gg94nN PMWQXHJlnBE8gypYPOIkuw0QQTU8tn4SHVSTHNFcIN4OnAnL645OYpKXGjYF26By dSZpSPTkTxjLJx+Frbun91gAwJgLnaa/4XUtKSolrx3HXUS7tdFWhExpPfiAjTPx p3V8O3DdJmv5o5aJQYIKb0mgx2+x1g6BB3Pe0tDY3G4XkNTN3zCHV5xGuqarAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUecuK0CVHkA1sWI7mvdP+uOTs9Z0wHwYDVR0j BBgwFoAU4duHu7vSDf8mGeYUuG1LfpH7tzowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzMvRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5MUZCQjczQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9FMURCODdCQkJCRDIwREZGMjYxOUU2MTRC ODZENEI3RTkxRkJCNzNBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81MmI4NDE1Ni05NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMy8zMjYxMzA2 NjNhMzE2MzYzMzUzYTMxMzAzMjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM2MzIzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKg8cxRAgMA0GCSqGSIb3DQEBCwUAA4IBAQCt 2n4K7UCug+uQlFr+CcSFO1YikR9FMahXPXkJpRHRfr9Hrj89K/DivA0xnwSrYomE 9CAwNeyAlkSynroPNXeRxSzdoSanS5KdR0hv2yFpm5srUnMBRN/kOSLxwTt82p9r 3FRAV2lWySa0RQ0I8rUd4sEx5jfFC0O3qE6pV4htlhvq3pj9Al4iXOL/Xa4FRAgy MdcUmZErmtouN+FOWq3eZ3g5YmwuLq09Uj4+gRLFDB8Xr3dO+rPkcQV+CneXnL83 U6xIxBPfRPUdfA3v7N5fRA3LraN7tcFrGGhrgkJd0VKBPawG2UmG4A6B6PJvsVaq CZE41tpZvyD2TWt6NtaW -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:17 2026 by rpki-client