This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/323030313a3637383a6139303a3a2f34382d3438203d3e20323135363835.roa File: 323030313a3637383a6139303a3a2f34382d3438203d3e20323135363835.roa (raw, json) Hash identifier: f01olELinbK/WN+AKKfNEa3BaJPmtAdvY7LAPWQjTbg= Subject key identifier: 4E:89:B9:D2:7D:AF:BD:9B:23:D0:66:CA:AF:44:3E:A4:65:48:2B:94 Certificate issuer: /CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d Certificate serial: 37633994EE4E5E457F0F0EC191D418AD62B5AD93 Authority key identifier: 39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/323030313a3637383a6139303a3a2f34382d3438203d3e20323135363835.roa Signing time: Thu 05 Feb 2026 13:20:27 +0000 ROA not before: Thu 05 Feb 2026 13:15:27 +0000 ROA not after: Thu 04 Feb 2027 13:20:27 +0000 asID: 215685 IP address blocks: 2001:678:a90::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:63:39:94:ee:4e:5e:45:7f:0f:0e:c1:91:d4:18:ad:62:b5:ad:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d Validity Not Before: Feb 5 13:15:27 2026 GMT Not After : Feb 4 13:20:27 2027 GMT Subject: CN=4E89B9D27DAFBD9B23D066CAAF443EA465482B94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ba:09:3d:f3:c7:8f:91:b6:1a:7f:00:28:f2: 21:43:ab:2c:b2:af:5a:5e:1e:e1:9b:2d:f4:43:4c: 75:d2:fc:2d:8e:5a:17:3f:35:72:a2:fe:df:20:1c: 31:ed:96:d1:60:1d:cc:1e:d1:35:7f:5f:54:ba:5b: 3b:a7:0b:58:d6:83:39:bb:85:27:c2:ee:66:0e:3a: 79:81:0f:8f:ca:b6:86:1a:e0:86:41:a0:63:75:17: 2b:5e:73:97:6c:a7:0e:d9:e7:85:a5:93:06:60:2b: f5:f1:9c:ef:76:d1:f8:66:2e:86:01:6e:bb:8d:54: aa:43:f0:d7:eb:d1:5f:42:8f:81:50:65:f7:7d:cd: 0c:a1:8e:2c:bb:9b:8c:1a:17:aa:43:f6:08:f2:88: 35:7a:f4:a9:65:e1:e2:49:aa:b9:10:a4:0a:49:05: 4c:b5:9c:e5:14:f0:14:52:c9:08:3d:79:02:c0:89: d6:86:d5:52:cd:9b:38:35:64:b5:50:27:e3:1d:29: de:0e:14:96:72:7d:11:d3:ea:15:a7:f7:4b:82:61: 47:09:38:ee:38:1f:9a:c5:ac:45:3e:c5:df:f4:ec: 7c:d5:c1:26:d0:60:c3:29:e8:77:a6:07:8e:cb:e8: f9:81:08:a3:35:82:3f:29:9c:21:ac:51:2f:d3:ba: d0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:89:B9:D2:7D:AF:BD:9B:23:D0:66:CA:AF:44:3E:A4:65:48:2B:94 X509v3 Authority Key Identifier: keyid:39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/323030313a3637383a6139303a3a2f34382d3438203d3e20323135363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:a90::/48 Signature Algorithm: sha256WithRSAEncryption c3:aa:38:b2:4d:66:34:e8:e6:80:b8:06:68:b7:4b:43:26:e4: 7f:02:46:63:c4:4e:e3:1c:a5:49:df:8c:10:95:87:a3:04:3b: 89:5e:51:67:22:da:8b:cd:af:6f:43:de:16:f9:aa:99:14:98: 32:60:7a:6e:33:90:0c:05:f0:b1:78:58:ae:ba:59:56:96:3d: 01:24:3b:b4:b4:e6:00:a7:94:fa:b2:16:b8:e5:d5:cc:af:23: 2d:be:b9:5c:0f:73:8d:ef:31:0c:aa:21:07:64:5f:0e:ce:44: f3:94:1f:ff:c2:6b:a7:83:2b:7e:16:0b:1c:23:da:2f:0d:48: 44:63:25:66:12:ce:a6:72:91:15:b6:7b:75:b7:e5:73:8c:ef: 55:de:c6:14:20:ad:2a:45:94:88:d3:ce:b0:58:6a:59:fd:a7: 70:6b:b2:d6:68:82:1b:eb:a9:65:7f:27:2b:89:b9:a4:7b:fb: 2f:5e:32:87:68:f2:20:44:10:eb:20:61:31:9c:1b:7f:a4:c3: c1:c5:50:fa:18:41:6f:53:e4:c0:86:a5:4e:05:85:2e:e3:0f: 6a:7b:0a:6b:fc:32:4c:9b:f6:52:b4:46:4b:aa:52:83:da:01: 3c:2b:a7:4a:92:2c:e6:70:1c:a6:9f:24:1c:1c:fd:3b:6f:43: 53:42:02:c7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUN2M5lO5OXkV/Dw7BkdQYrWK1rZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzkxZjIwZjI2YWE2ZDYzNTk4ZmYzMDI1Y2RkYmRiNGI5 YzlhYjY3ZDAeFw0yNjAyMDUxMzE1MjdaFw0yNzAyMDQxMzIwMjdaMDMxMTAvBgNV BAMTKDRFODlCOUQyN0RBRkJEOUIyM0QwNjZDQUFGNDQzRUE0NjU0ODJCOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwugk988ePkbYafwAo8iFDqyyy r1peHuGbLfRDTHXS/C2OWhc/NXKi/t8gHDHtltFgHcwe0TV/X1S6WzunC1jWgzm7 hSfC7mYOOnmBD4/KtoYa4IZBoGN1Fytec5dspw7Z54WlkwZgK/XxnO920fhmLoYB bruNVKpD8Nfr0V9Cj4FQZfd9zQyhjiy7m4waF6pD9gjyiDV69Kll4eJJqrkQpApJ BUy1nOUU8BRSyQg9eQLAidaG1VLNmzg1ZLVQJ+MdKd4OFJZyfRHT6hWn90uCYUcJ OO44H5rFrEU+xd/07HzVwSbQYMMp6HemB47L6PmBCKM1gj8pnCGsUS/TutA5AgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUTom50n2vvZsj0GbKr0Q+pGVIK5QwHwYDVR0j BBgwFoAUOR8g8mqm1jWY/zAlzdvbS5yatn0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmU3Zjc0N2UtZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhh MzIwLzAvMzkxRjIwRjI2QUE2RDYzNTk4RkYzMDI1Q0REQkRCNEI5QzlBQjY3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09SOGc4bXFtMWpXWV96QWx6ZHZiUzV5 YXRuMC5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmU3Zjc0N2Ut ZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhhMzIwLzAvMzIzMDMwMzEzYTM2MzczODNh NjEzOTMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTM1MzYzODM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEGeAqQMA0GCSqGSIb3DQEBCwUAA4IBAQDDqjiyTWY06OaAuAZot0tD JuR/AkZjxE7jHKVJ34wQlYejBDuJXlFnItqLza9vQ94W+aqZFJgyYHpuM5AMBfCx eFiuullWlj0BJDu0tOYAp5T6sha45dXMryMtvrlcD3ON7zEMqiEHZF8OzkTzlB// wmungyt+FgscI9ovDUhEYyVmEs6mcpEVtnt1t+VzjO9V3sYUIK0qRZSI086wWGpZ /adwa7LWaIIb66llfycribmke/svXjKHaPIgRBDrIGExnBt/pMPBxVD6GEFvU+TA hqVOBYUu4w9qewpr/DJMm/ZStEZLqlKD2gE8K6dKkizmcBymnyQcHP07b0NTQgLH -----END CERTIFICATE-----Generated at Mon Feb 9 20:51:55 2026 by rpki-client