This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa File: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (raw, json) Hash identifier: BopLEf/ZmGSLBYK/WoER81ANZkew9Ua3lUbCSl9Jp8M= Subject key identifier: 82:D2:EA:ED:9B:F4:5B:4A:40:6C:62:A6:85:FE:87:12:93:46:7A:BC Certificate issuer: /CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Certificate serial: 4CFA3512FD256AC02F540EB749A5EAB26744B1FC Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa Signing time: Sat 31 Jan 2026 06:26:58 +0000 ROA not before: Sat 31 Jan 2026 06:21:58 +0000 ROA not after: Sat 30 Jan 2027 06:26:58 +0000 asID: 204844 IP address blocks: 2a14:7581:6000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 05:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fa:35:12:fd:25:6a:c0:2f:54:0e:b7:49:a5:ea:b2:67:44:b1:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Validity Not Before: Jan 31 06:21:58 2026 GMT Not After : Jan 30 06:26:58 2027 GMT Subject: CN=82D2EAED9BF45B4A406C62A685FE871293467ABC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:3a:98:af:31:71:a8:40:71:17:9d:6c:a8: 37:1a:7b:9c:07:25:cf:d4:1c:9b:75:9c:1d:8f:f3: 83:45:1a:0f:86:a4:b5:fb:18:f7:41:18:35:23:86: 93:39:e0:c2:d8:34:b4:a4:e3:f2:af:c6:6b:b2:7d: fd:a4:81:4a:91:f8:e9:ce:e9:52:22:13:f9:e9:c8: e8:82:93:4d:4d:0a:2e:15:3e:1f:d1:97:72:f2:d8: 96:a5:66:14:28:6e:ab:ea:ac:0f:21:b0:0b:da:c0: e2:de:b1:92:8d:49:2b:95:d3:23:ed:41:ff:32:7e: 16:5e:fd:5f:30:97:20:4a:f7:4a:b5:04:67:47:25: 0d:a8:23:4c:50:73:de:cd:8e:f6:ba:f7:d3:bc:05: 45:d3:45:55:01:c3:8a:4f:fc:20:3f:38:af:d9:1a: 29:41:94:c9:e2:cb:d5:8a:cd:dd:29:af:07:a5:61: 19:a3:50:a2:8f:33:5e:0a:a2:de:1b:ac:2b:a5:c4: 42:dc:71:bd:d2:1a:01:3e:5a:b4:cf:8e:e1:1c:87: eb:e8:c0:4f:bc:bd:7a:7e:cf:bf:86:31:bc:6b:e6: 3b:55:b4:11:a9:bf:91:0f:77:b1:73:40:48:1a:b2: a4:8c:4c:45:82:16:ea:75:76:79:5b:96:b7:17:38: e9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D2:EA:ED:9B:F4:5B:4A:40:6C:62:A6:85:FE:87:12:93:46:7A:BC X509v3 Authority Key Identifier: keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:6000::/36 Signature Algorithm: sha256WithRSAEncryption 05:f5:c3:8d:fe:2f:13:bf:94:92:94:6a:74:68:a5:4a:e7:8f: 76:45:52:2b:2e:08:dc:9f:89:b3:29:fb:ed:0c:d3:f7:bf:25: 05:84:f2:37:aa:07:17:77:25:a2:e4:e8:db:c0:bc:e4:96:82: 34:0b:9a:28:6d:67:b6:45:20:07:e5:45:26:de:9f:cf:59:66: b3:00:98:24:6f:eb:ee:f0:fc:50:df:8f:12:af:86:42:61:a5: a3:a6:9a:f6:4d:1a:80:99:38:0d:55:17:8a:de:79:73:61:37: 54:80:87:eb:79:11:0c:fd:09:57:e3:27:0c:ad:6e:22:d7:69: 1b:04:73:12:8e:2a:20:e2:b6:9f:51:37:d2:8f:7b:49:b5:0c: 43:2a:26:1d:0d:69:96:21:85:8b:27:40:1b:92:cc:a3:5a:e5: f0:c5:43:1c:a3:43:9d:e5:1e:ca:9f:e9:7d:48:c1:63:e7:cd: f1:45:a1:6d:84:62:90:1b:1b:4a:00:50:5a:94:b1:d3:8c:cf: de:5e:14:73:90:86:15:e2:1d:bb:a4:46:05:fe:34:27:2e:f9: d3:42:e2:51:3a:e0:69:24:f7:1d:48:06:d5:1d:b0:ed:69:c5: 87:45:b6:9f:f0:53:3e:d2:6d:af:70:a6:15:a2:3c:69:72:9c: aa:ba:fa:71 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUTPo1Ev0lasAvVA63SaXqsmdEsfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYx RjA2NDNGNjAeFw0yNjAxMzEwNjIxNThaFw0yNzAxMzAwNjI2NThaMDMxMTAvBgNV BAMTKDgyRDJFQUVEOUJGNDVCNEE0MDZDNjJBNjg1RkU4NzEyOTM0NjdBQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuizqYrzFxqEBxF51sqDcae5wH Jc/UHJt1nB2P84NFGg+GpLX7GPdBGDUjhpM54MLYNLSk4/Kvxmuyff2kgUqR+OnO 6VIiE/npyOiCk01NCi4VPh/Rl3Ly2JalZhQobqvqrA8hsAvawOLesZKNSSuV0yPt Qf8yfhZe/V8wlyBK90q1BGdHJQ2oI0xQc97Njva699O8BUXTRVUBw4pP/CA/OK/Z GilBlMniy9WKzd0prwelYRmjUKKPM14Kot4brCulxELccb3SGgE+WrTPjuEch+vo wE+8vXp+z7+GMbxr5jtVtBGpv5EPd7FzQEgasqSMTEWCFup1dnlblrcXOOkHAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUgtLq7Zv0W0pAbGKmhf6HEpNGerwwHwYDVR0j BBgwFoAUiSwsWZDfTXBFu1WgEfRzJh8GQ/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzFiZWRmNmMtY2M5MS00YmYwLTlkNmUtN2U5YjNjYjk5 MDVkLzEvODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYxRjA2NDNGNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTJDMkM1OTkwREY0RDcwNDVCQjU1QTAx MUY0NzMyNjFGMDY0M0Y2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83MWJlZGY2Yy1jYzkxLTRiZjAtOWQ2ZS03ZTliM2NiOTkwNWQvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTM2MzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIz MDM0MzgzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYEKhR1gWAwDQYJKoZIhvcNAQELBQADggEBAAX1 w43+LxO/lJKUanRopUrnj3ZFUisuCNyfibMp++0M0/e/JQWE8jeqBxd3JaLk6NvA vOSWgjQLmihtZ7ZFIAflRSben89ZZrMAmCRv6+7w/FDfjxKvhkJhpaOmmvZNGoCZ OA1VF4reeXNhN1SAh+t5EQz9CVfjJwytbiLXaRsEcxKOKiDitp9RN9KPe0m1DEMq Jh0NaZYhhYsnQBuSzKNa5fDFQxyjQ53lHsqf6X1IwWPnzfFFoW2EYpAbG0oAUFqU sdOMz95eFHOQhhXiHbukRgX+NCcu+dNC4lE64Gkk9x1IBtUdsO1pxYdFtp/wUz7S ba9wphWiPGlynKq6+nE= -----END CERTIFICATE-----Generated at Mon Feb 2 14:03:21 2026 by rpki-client