This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa
File: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (raw, json)
Hash identifier: zvsXrWVsgBSXSyUjh+x5IMf/onv6HLNx12EoyFofF0E=
Subject key identifier: 19:68:05:83:7F:A5:5C:95:3A:C5:7F:4A:D7:81:2C:27:3D:49:D2:22
Certificate issuer: /CN=892C2C5990DF4D7045BB55A011F473261F0643F6
Certificate serial: 6FFCCF760FFA8CF60624F3732E4F288666B1FDE3
Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa
Signing time: Sat 31 Jan 2026 06:44:37 +0000
ROA not before: Sat 31 Jan 2026 06:39:37 +0000
ROA not after: Sat 30 Jan 2027 06:44:37 +0000
asID: 205329
IP address blocks: 2a14:7581:6d00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl
rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 05:54:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:fc:cf:76:0f:fa:8c:f6:06:24:f3:73:2e:4f:28:86:66:b1:fd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6
Validity
Not Before: Jan 31 06:39:37 2026 GMT
Not After : Jan 30 06:44:37 2027 GMT
Subject: CN=196805837FA55C953AC57F4AD7812C273D49D222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2d:df:ca:fc:35:b6:38:04:7d:f6:75:64:0a:
0b:50:66:10:61:6e:dc:77:a4:5e:88:3d:c8:4e:11:
19:ca:d8:9d:98:f6:c8:a3:e9:63:52:b0:e7:40:07:
18:e0:7f:33:43:68:31:1c:66:e0:b4:04:ce:6d:1c:
c2:5e:e9:b1:6f:44:65:b0:75:df:0e:fe:e7:6c:19:
24:9b:58:53:81:ec:5d:07:f5:3a:2d:96:e4:53:49:
a0:2b:18:c0:41:d0:e8:80:1f:25:2a:56:77:07:f4:
3e:fc:e1:27:eb:82:9d:28:b4:9b:aa:e0:9a:0c:76:
df:27:59:8f:ec:16:30:b1:36:f7:08:d3:84:2e:f9:
9b:2a:34:4c:07:a9:1b:d3:be:ad:1d:79:f4:d0:eb:
91:8c:21:be:7b:4d:9d:a8:26:46:fe:bf:d3:c3:4a:
64:88:cf:42:f7:f4:24:f0:2c:fa:01:88:23:9c:86:
2d:a5:72:e7:74:93:ba:bb:f2:c0:db:12:0d:70:ab:
54:1d:1e:bc:f7:10:08:a7:61:0f:25:b0:47:a2:81:
98:e0:4d:28:0a:8a:f3:c3:61:89:f0:c9:75:8b:3e:
b5:c9:b7:81:e9:93:20:dd:99:04:37:39:ba:4e:65:
4d:23:b8:8f:17:f3:d3:4c:5c:08:91:c0:1e:8f:a4:
74:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:68:05:83:7F:A5:5C:95:3A:C5:7F:4A:D7:81:2C:27:3D:49:D2:22
X509v3 Authority Key Identifier:
keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:6d00::/40
Signature Algorithm: sha256WithRSAEncryption
7b:4c:4b:18:6e:1e:97:fa:40:53:a8:6b:ea:0e:42:a4:2d:b1:
81:dc:2a:9c:f0:5c:38:52:c8:ae:66:d2:cf:7a:02:8b:26:c8:
85:94:24:a8:ba:f0:dd:2f:40:b2:1b:98:da:3f:bd:bf:21:71:
e6:8e:35:c9:cf:0c:f6:ac:23:7d:87:47:d1:16:e3:b4:5a:1d:
21:82:7b:cc:54:cb:32:83:e3:be:04:8b:39:78:66:c3:bd:db:
98:af:99:15:99:a1:5d:84:b7:5c:fd:88:35:4c:29:8f:52:fc:
49:e2:ca:e9:17:81:85:0b:32:da:2e:51:3b:88:ac:db:2b:01:
47:34:69:cc:20:98:9b:15:ca:30:bf:44:d8:c4:d2:c6:76:75:
44:57:f6:c7:8c:90:55:97:e8:fb:5d:01:b6:48:0e:7b:b6:9c:
63:c3:6f:59:ea:65:91:02:0c:df:7f:34:b0:6d:76:b8:ff:c7:
a4:53:c5:a0:a7:67:69:53:9d:5b:ac:7f:bf:ba:f9:e8:dd:dc:
43:d5:7d:23:44:25:e4:99:40:ed:73:86:0e:65:48:1a:e7:1f:
8f:f2:b9:b1:41:85:f1:06:71:a6:09:21:a3:04:8b:f5:5a:8c:
48:f8:5d:52:f0:53:84:85:de:d7:63:04:cd:f5:a9:5e:40:af:
dd:09:e8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:03:31 2026 by rpki-client