This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa File: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (raw, json) Hash identifier: YStl04IuWDei0D2oH+P/iOh9DAuPICnaprLiyMtF9EQ= Subject key identifier: 6C:57:EE:FB:EC:C5:3C:DF:65:7F:5E:9C:EA:16:AC:C1:50:0A:30:6F Certificate issuer: /CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Certificate serial: 094AA2A05A402B7903AFDC6343418AA1F181C4FA Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa Signing time: Sat 31 Jan 2026 06:26:47 +0000 ROA not before: Sat 31 Jan 2026 06:21:47 +0000 ROA not after: Sat 30 Jan 2027 06:26:47 +0000 asID: 198954 IP address blocks: 2a14:7581:6c00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 05:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:4a:a2:a0:5a:40:2b:79:03:af:dc:63:43:41:8a:a1:f1:81:c4:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Validity Not Before: Jan 31 06:21:47 2026 GMT Not After : Jan 30 06:26:47 2027 GMT Subject: CN=6C57EEFBECC53CDF657F5E9CEA16ACC1500A306F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d8:e3:1f:3f:53:5e:aa:d3:19:27:73:06:01: cf:b7:e9:24:1d:57:b4:6f:bd:3d:72:26:e2:d7:d7: 89:77:6f:bc:45:dd:ca:ee:ba:46:df:11:6a:8d:2e: 46:5f:2d:49:ab:71:c9:3a:1e:75:3a:1e:2f:1d:4f: 55:e4:42:6c:c9:fc:52:d5:29:a8:06:0a:6e:f5:75: b4:4c:b0:93:87:c4:8f:24:53:13:48:c0:35:82:08: 44:61:5f:bd:61:4e:e4:e3:b4:f7:44:a8:fd:3a:f8: 7b:96:18:44:b3:62:4d:61:d3:70:cb:5e:4a:9f:4e: 69:d5:13:4a:35:15:5d:b3:90:8f:69:46:bc:f6:d2: 67:bc:7a:44:32:cc:42:00:79:10:0e:02:72:fa:7e: 64:46:d8:de:6a:94:4b:24:3d:f5:f9:4b:af:a2:4f: 7b:b5:69:51:75:65:82:8d:65:b5:ea:b5:40:a2:0e: 4b:df:74:55:88:31:40:a7:1e:1c:91:d0:06:ea:f4: e7:0a:6d:0e:c1:83:7e:e1:12:3d:0b:08:36:cf:63: b8:1f:ca:ec:cf:c7:d7:c9:25:14:c9:83:98:c7:d2: 5f:94:b2:cf:62:9a:71:7a:a3:07:99:3a:1e:a1:3e: 06:61:de:6a:95:c1:5d:3f:35:6d:5c:3f:1d:d8:89: a3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:57:EE:FB:EC:C5:3C:DF:65:7F:5E:9C:EA:16:AC:C1:50:0A:30:6F X509v3 Authority Key Identifier: keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:6c00::/40 Signature Algorithm: sha256WithRSAEncryption 5c:67:8c:ae:96:d7:bc:bc:ea:1d:5a:6b:49:9e:7b:3b:26:85: 8a:83:7b:44:3c:70:e0:86:1c:97:9a:75:1f:e3:fa:c8:33:e4: 5c:85:75:0d:8a:35:e6:d5:2b:73:bc:3f:bb:9d:a2:5e:24:38: ee:f2:f3:eb:9f:ed:d5:84:dd:21:21:5b:0d:42:70:30:83:67: d8:94:e4:11:1c:36:85:d7:a0:e9:2a:3c:40:48:5c:01:c1:69: ab:da:e8:6a:8a:12:0d:00:86:6f:b1:d0:b7:38:08:4b:1b:05: 31:58:92:8c:49:38:3c:ce:1d:0c:59:a1:d3:40:b4:08:d5:a1: a3:bc:c6:b7:25:5b:50:8e:b4:b1:35:10:43:76:1a:1b:43:8f: bc:b9:ce:74:5b:e8:0d:33:8a:7b:80:ff:e3:1a:0b:ef:36:5c: ac:84:73:15:56:cb:cd:d8:91:6b:e5:54:23:81:73:a4:44:a9: c1:19:d1:a7:ce:df:f2:6a:eb:a0:b4:69:70:62:76:e6:c6:59: 94:97:d4:74:ba:a7:17:09:63:1f:26:31:e6:1a:bf:7f:c8:f7: e5:d0:58:0d:0d:e0:11:dc:08:06:4f:80:3b:7e:60:ee:18:e3: 8f:6c:07:4e:b9:27:bf:ef:e7:29:59:fb:49:69:65:c6:94:15: 95:f3:fa:36 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUCUqioFpAK3kDr9xjQ0GKofGBxPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYx RjA2NDNGNjAeFw0yNjAxMzEwNjIxNDdaFw0yNzAxMzAwNjI2NDdaMDMxMTAvBgNV BAMTKDZDNTdFRUZCRUNDNTNDREY2NTdGNUU5Q0VBMTZBQ0MxNTAwQTMwNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2OMfP1NeqtMZJ3MGAc+36SQd V7RvvT1yJuLX14l3b7xF3cruukbfEWqNLkZfLUmrcck6HnU6Hi8dT1XkQmzJ/FLV KagGCm71dbRMsJOHxI8kUxNIwDWCCERhX71hTuTjtPdEqP06+HuWGESzYk1h03DL XkqfTmnVE0o1FV2zkI9pRrz20me8ekQyzEIAeRAOAnL6fmRG2N5qlEskPfX5S6+i T3u1aVF1ZYKNZbXqtUCiDkvfdFWIMUCnHhyR0Abq9OcKbQ7Bg37hEj0LCDbPY7gf yuzPx9fJJRTJg5jH0l+Uss9imnF6oweZOh6hPgZh3mqVwV0/NW1cPx3YiaO5AgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUbFfu++zFPN9lf16c6haswVAKMG8wHwYDVR0j BBgwFoAUiSwsWZDfTXBFu1WgEfRzJh8GQ/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzFiZWRmNmMtY2M5MS00YmYwLTlkNmUtN2U5YjNjYjk5 MDVkLzEvODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYxRjA2NDNGNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTJDMkM1OTkwREY0RDcwNDVCQjU1QTAx MUY0NzMyNjFGMDY0M0Y2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83MWJlZGY2Yy1jYzkxLTRiZjAtOWQ2ZS03ZTliM2NiOTkwNWQvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTM2NjMzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzEz OTM4MzkzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gWwwDQYJKoZIhvcNAQELBQADggEBAFxn jK6W17y86h1aa0meezsmhYqDe0Q8cOCGHJeadR/j+sgz5FyFdQ2KNebVK3O8P7ud ol4kOO7y8+uf7dWE3SEhWw1CcDCDZ9iU5BEcNoXXoOkqPEBIXAHBaava6GqKEg0A hm+x0Lc4CEsbBTFYkoxJODzOHQxZodNAtAjVoaO8xrclW1COtLE1EEN2GhtDj7y5 znRb6A0zinuA/+MaC+82XKyEcxVWy83YkWvlVCOBc6REqcEZ0afO3/Jq66C0aXBi dubGWZSX1HS6pxcJYx8mMeYav3/I9+XQWA0N4BHcCAZPgDt+YO4Y449sB065J7/v 5ylZ+0lpZcaUFZXz+jY= -----END CERTIFICATE-----Generated at Mon Feb 2 14:03:31 2026 by rpki-client