This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa File: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (raw, json) Hash identifier: hu2ypRUPAbYRtYy+M6vE/W8hAPWUPIin1Y9THyO12k8= Subject key identifier: 5F:4D:8E:4F:5B:0F:EE:FF:8A:EF:CE:30:7A:35:01:01:A2:8C:E8:F3 Certificate issuer: /CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Certificate serial: 154A4BEF99B502998C7EEA7CFA9AC7C9EE4BFF2A Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa Signing time: Sat 31 Jan 2026 06:26:44 +0000 ROA not before: Sat 31 Jan 2026 06:21:44 +0000 ROA not after: Sat 30 Jan 2027 06:26:44 +0000 asID: 9923 IP address blocks: 2a14:7581:6e00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 05:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:4a:4b:ef:99:b5:02:99:8c:7e:ea:7c:fa:9a:c7:c9:ee:4b:ff:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Validity Not Before: Jan 31 06:21:44 2026 GMT Not After : Jan 30 06:26:44 2027 GMT Subject: CN=5F4D8E4F5B0FEEFF8AEFCE307A350101A28CE8F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:86:31:69:1f:55:79:64:50:06:fc:d0:3f:de: 98:6f:7a:5a:cd:a5:f7:ff:dc:9e:94:a5:48:87:bf: d5:f7:2b:41:14:5d:ae:e7:dd:38:ed:54:3f:35:1f: 5b:42:e5:7f:63:a8:72:00:c9:68:3c:22:d5:d3:aa: a8:16:72:46:46:f2:09:f9:ef:88:e1:82:05:dc:4b: 74:06:c2:a7:67:42:45:41:94:d1:5e:2a:e7:c8:87: 4c:51:dd:cb:89:97:95:19:64:dc:a6:01:40:30:08: 05:e9:3b:bf:8b:77:e3:85:a2:77:2c:db:c4:6e:11: 0f:d3:85:07:1c:a1:7d:7c:aa:c6:dd:1f:92:ab:60: 3d:78:9f:e2:0a:a0:02:0b:94:8b:92:28:0b:79:79: 92:a8:92:fa:35:91:11:4a:db:c0:6a:85:51:4d:e5: 23:f9:43:30:1d:3e:46:2b:5b:86:30:b6:06:00:85: b4:da:9a:33:45:56:9d:12:e5:79:3d:4b:4f:37:40: 85:d7:d9:1b:f0:1e:4e:7f:b2:e3:d6:67:fd:6d:df: a9:e7:25:11:16:dd:77:44:ba:a9:8c:1f:82:8b:6b: 0e:86:f7:d8:8d:c8:cd:16:d1:45:7f:2e:d8:70:7d: b4:a3:84:6b:e7:57:f4:ef:37:67:1c:e3:b0:34:a2: 33:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4D:8E:4F:5B:0F:EE:FF:8A:EF:CE:30:7A:35:01:01:A2:8C:E8:F3 X509v3 Authority Key Identifier: keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:6e00::/40 Signature Algorithm: sha256WithRSAEncryption 67:9d:23:59:26:b1:99:1d:19:aa:a9:a4:3b:00:b7:03:ba:f9: 9c:95:35:29:7a:cd:91:57:4c:53:16:58:8d:9d:86:c7:da:e1: fb:6c:cf:e1:35:86:b2:f3:e7:32:d1:a5:18:8d:7e:3c:cd:66: 46:a0:70:4b:80:b8:22:c4:a1:25:8a:d7:da:7c:17:8f:6b:a9: 78:9f:cb:af:2a:6e:a5:79:4d:ae:a6:82:9f:79:06:55:5a:66: f9:0d:5e:00:fd:ef:32:af:93:bb:b9:5f:6c:f0:53:eb:98:eb: 87:62:9e:a4:ff:e7:a2:f7:e4:1a:4d:3b:5d:ce:83:32:b0:29: 3d:8c:a3:45:49:eb:66:c1:88:7e:1f:1a:96:0b:eb:c3:ee:04: 3a:f8:e1:69:c2:6d:85:87:25:b1:d2:ea:1c:84:ed:a9:93:90: 55:18:23:c5:ea:42:69:06:df:91:8e:2e:93:f6:55:d5:6d:2f: e4:f4:6c:d5:5c:30:cc:7d:7e:7b:be:c3:67:fc:20:19:5c:95: 4d:a5:09:31:95:e3:96:77:7a:9e:55:77:43:0d:6f:cc:aa:00: e6:2e:75:82:23:97:57:96:30:93:67:9b:9d:33:2a:13:48:65: dc:ad:e6:7b:a5:63:ef:75:64:cc:56:55:b7:4b:bf:e1:5d:c2: 56:b3:98:42 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIUFUpL75m1ApmMfup8+prHye5L/yowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYx RjA2NDNGNjAeFw0yNjAxMzEwNjIxNDRaFw0yNzAxMzAwNjI2NDRaMDMxMTAvBgNV BAMTKDVGNEQ4RTRGNUIwRkVFRkY4QUVGQ0UzMDdBMzUwMTAxQTI4Q0U4RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hjFpH1V5ZFAG/NA/3phvelrN pff/3J6UpUiHv9X3K0EUXa7n3TjtVD81H1tC5X9jqHIAyWg8ItXTqqgWckZG8gn5 74jhggXcS3QGwqdnQkVBlNFeKufIh0xR3cuJl5UZZNymAUAwCAXpO7+Ld+OFoncs 28RuEQ/ThQccoX18qsbdH5KrYD14n+IKoAILlIuSKAt5eZKokvo1kRFK28BqhVFN 5SP5QzAdPkYrW4YwtgYAhbTamjNFVp0S5Xk9S083QIXX2RvwHk5/suPWZ/1t36nn JREW3XdEuqmMH4KLaw6G99iNyM0W0UV/LthwfbSjhGvnV/TvN2cc47A0ojNjAgMB AAGjggKAMIICfDAdBgNVHQ4EFgQUX02OT1sP7v+K784wejUBAaKM6PMwHwYDVR0j BBgwFoAUiSwsWZDfTXBFu1WgEfRzJh8GQ/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzFiZWRmNmMtY2M5MS00YmYwLTlkNmUtN2U5YjNjYjk5 MDVkLzEvODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYxRjA2NDNGNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTJDMkM1OTkwREY0RDcwNDVCQjU1QTAx MUY0NzMyNjFGMDY0M0Y2LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83MWJlZGY2Yy1jYzkxLTRiZjAtOWQ2ZS03ZTliM2NiOTkwNWQvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTM2NjUzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzkz OTMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgAqFHWBbjANBgkqhkiG9w0BAQsFAAOCAQEAZ50jWSax mR0ZqqmkOwC3A7r5nJU1KXrNkVdMUxZYjZ2Gx9rh+2zP4TWGsvPnMtGlGI1+PM1m RqBwS4C4IsShJYrX2nwXj2upeJ/LrypupXlNrqaCn3kGVVpm+Q1eAP3vMq+Tu7lf bPBT65jrh2KepP/novfkGk07Xc6DMrApPYyjRUnrZsGIfh8algvrw+4EOvjhacJt hYclsdLqHITtqZOQVRgjxepCaQbfkY4uk/ZV1W0v5PRs1VwwzH1+e77DZ/wgGVyV TaUJMZXjlnd6nlV3Qw1vzKoA5i51giOXV5Ywk2ebnTMqE0hl3K3me6Vj73VkzFZV t0u/4V3CVrOYQg== -----END CERTIFICATE-----Generated at Mon Feb 2 14:03:23 2026 by rpki-client