This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa File: 326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa (raw, json) Hash identifier: GrABHnm92+umbLrVFGaFsGRxCk28MTZckUcjsaOY0Ow= Subject key identifier: 40:96:4C:D4:25:3D:1F:FD:57:60:B1:B3:AC:9D:C7:96:CD:BC:63:05 Certificate issuer: /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Certificate serial: 33AD2A3216E72E07E12184923A351A6C49ABCDC2 Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa Signing time: Sat 17 Jan 2026 22:02:07 +0000 ROA not before: Sat 17 Jan 2026 21:57:07 +0000 ROA not after: Sat 16 Jan 2027 22:02:07 +0000 asID: 201386 IP address blocks: 2a0f:1cc5:2f10::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ad:2a:32:16:e7:2e:07:e1:21:84:92:3a:35:1a:6c:49:ab:cd:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Validity Not Before: Jan 17 21:57:07 2026 GMT Not After : Jan 16 22:02:07 2027 GMT Subject: CN=40964CD4253D1FFD5760B1B3AC9DC796CDBC6305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9d:ff:69:97:5c:d5:9d:38:5f:33:7e:75:06: 9f:60:35:64:71:7e:88:22:d8:30:86:ef:e5:fb:5f: ca:ed:40:7a:0f:ab:e0:98:d0:54:83:f8:d6:ea:7d: 3f:18:c9:7d:cd:1e:ae:4e:e1:e3:31:f2:5d:44:c3: 6b:e9:41:65:a5:b9:aa:9c:07:11:4c:bc:68:56:c8: 27:23:df:6b:0f:62:c7:67:65:5f:50:5f:45:28:45: 19:db:53:3d:75:84:22:40:06:2d:34:96:8d:62:81: 76:86:2e:13:6b:5c:cf:8a:90:07:c1:fc:20:6f:90: 64:4c:4f:1c:f2:24:f0:88:65:72:0f:7d:31:18:45: 8a:22:aa:6e:66:a8:50:cf:40:31:f9:81:82:38:96: c3:47:14:a6:68:ad:55:48:04:74:a8:fa:97:d2:37: 6f:46:0e:03:35:3a:ea:a9:67:fc:6b:13:d7:e2:d3: 03:ec:a8:65:8b:90:f0:63:e5:b1:3c:b1:e1:76:a9: e8:1a:11:00:24:a2:59:94:90:8b:51:ec:60:5f:85: 15:10:7e:a1:ed:bc:1a:87:c9:93:75:e4:98:b9:9b: 96:78:05:17:20:91:48:a9:2c:85:80:7f:8f:65:ce: 5f:cf:cf:5d:8f:a6:7a:50:e6:b3:e4:34:b0:11:71: 10:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:96:4C:D4:25:3D:1F:FD:57:60:B1:B3:AC:9D:C7:96:CD:BC:63:05 X509v3 Authority Key Identifier: keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:2f10::/44 Signature Algorithm: sha256WithRSAEncryption 39:2b:e2:47:27:38:ba:0d:90:4a:1d:e0:55:24:99:56:83:b1: a2:9b:83:7b:76:dd:41:aa:59:3f:02:63:bd:98:d4:93:a1:a9: d4:d8:2e:39:d3:ef:f0:ff:e8:c0:47:a5:63:6f:eb:62:af:9f: 91:1d:9f:f5:89:95:dd:3f:5c:ff:c4:f4:9e:84:28:bf:e6:39: 93:06:09:27:1f:c0:98:0c:41:82:20:e6:78:e4:05:4f:b1:a7: c6:05:da:c4:86:00:4d:16:6c:d5:d0:78:a6:c4:7f:85:09:11: c4:4a:fc:aa:d9:61:8a:ca:bf:0b:ef:aa:b5:98:09:80:89:94: a0:b6:af:6a:bd:4f:e7:cc:c8:cd:85:ad:02:a0:51:60:80:22: da:53:96:3e:e9:73:da:49:10:ac:6b:09:32:61:5f:7a:58:4b: 04:f5:bd:be:a1:df:72:de:06:04:24:c5:ac:02:93:07:6d:39: 40:31:5c:6e:8c:05:6c:0b:cf:81:2c:ed:1f:a6:3c:a6:16:28: 16:0f:23:e8:11:1c:6c:38:ca:29:18:40:54:57:fd:6e:c8:4c: 87:cb:08:37:c4:c6:f1:e5:d1:f7:bb:e5:34:75:6a:06:51:1f: ce:f2:b9:3a:81:12:52:32:d9:a0:3b:15:0a:77:f1:9c:4f:d3: 09:ae:df:5f -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUM60qMhbnLgfhIYSSOjUabEmrzcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5 MUZCQjczQTAeFw0yNjAxMTcyMTU3MDdaFw0yNzAxMTYyMjAyMDdaMDMxMTAvBgNV BAMTKDQwOTY0Q0Q0MjUzRDFGRkQ1NzYwQjFCM0FDOURDNzk2Q0RCQzYzMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDInf9pl1zVnThfM351Bp9gNWRx fogi2DCG7+X7X8rtQHoPq+CY0FSD+NbqfT8YyX3NHq5O4eMx8l1Ew2vpQWWluaqc BxFMvGhWyCcj32sPYsdnZV9QX0UoRRnbUz11hCJABi00lo1igXaGLhNrXM+KkAfB /CBvkGRMTxzyJPCIZXIPfTEYRYoiqm5mqFDPQDH5gYI4lsNHFKZorVVIBHSo+pfS N29GDgM1OuqpZ/xrE9fi0wPsqGWLkPBj5bE8seF2qegaEQAkolmUkItR7GBfhRUQ fqHtvBqHyZN15Ji5m5Z4BRcgkUipLIWAf49lzl/Pz12PpnpQ5rPkNLARcRBfAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUQJZM1CU9H/1XYLGzrJ3Hls28YwUwHwYDVR0j BBgwFoAU4duHu7vSDf8mGeYUuG1LfpH7tzowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzMvRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5MUZCQjczQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9FMURCODdCQkJCRDIwREZGMjYxOUU2MTRC ODZENEI3RTkxRkJCNzNBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81MmI4NDE1Ni05NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMy8zMjYxMzA2 NjNhMzE2MzYzMzUzYTMyNjYzMTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MDMxMzMzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKg8cxS8QMA0GCSqGSIb3DQEBCwUAA4IBAQA5 K+JHJzi6DZBKHeBVJJlWg7Gim4N7dt1Bqlk/AmO9mNSToanU2C450+/w/+jAR6Vj b+tir5+RHZ/1iZXdP1z/xPSehCi/5jmTBgknH8CYDEGCIOZ45AVPsafGBdrEhgBN FmzV0HimxH+FCRHESvyq2WGKyr8L76q1mAmAiZSgtq9qvU/nzMjNha0CoFFggCLa U5Y+6XPaSRCsawkyYV96WEsE9b2+od9y3gYEJMWsApMHbTlAMVxujAVsC8+BLO0f pjymFigWDyPoERxsOMopGEBUV/1uyEyHywg3xMbx5dH3u+U0dWoGUR/O8rk6gRJS MtmgOxUKd/GcT9MJrt9f -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:17 2026 by rpki-client