This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366630303a3a2f34342d3438203d3e20323035353932.roa File: 326131343a373538313a366630303a3a2f34342d3438203d3e20323035353932.roa (raw, json) Hash identifier: tGdxxPffiEkwkQ8zZYSEAsNxiyZw0E/Szbr/GF6Tp3w= Subject key identifier: 60:26:11:A4:9F:0A:A4:18:3D:46:15:E8:0D:AC:2C:67:EA:B0:96:F3 Certificate issuer: /CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Certificate serial: 0BDEA779684614787603FD8F5C72DC66BDC86A7A Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366630303a3a2f34342d3438203d3e20323035353932.roa Signing time: Sat 31 Jan 2026 06:27:04 +0000 ROA not before: Sat 31 Jan 2026 06:22:04 +0000 ROA not after: Sat 30 Jan 2027 06:27:04 +0000 asID: 205592 IP address blocks: 2a14:7581:6f00::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 05:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:de:a7:79:68:46:14:78:76:03:fd:8f:5c:72:dc:66:bd:c8:6a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Validity Not Before: Jan 31 06:22:04 2026 GMT Not After : Jan 30 06:27:04 2027 GMT Subject: CN=602611A49F0AA4183D4615E80DAC2C67EAB096F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d5:20:d6:12:cb:92:52:7a:f2:ef:b9:ff:9f: dd:89:46:99:d8:f0:12:0a:55:9f:4e:26:26:9a:b9: 02:58:d5:7a:b2:4c:b0:da:34:fb:1f:12:ec:eb:79: 62:74:e1:2a:fa:6a:cf:d3:27:23:a6:00:e4:6d:c2: ac:03:b6:fe:5b:e5:ab:3b:1b:65:4d:97:e4:51:db: 50:d2:f6:43:75:4f:f2:4f:a7:42:b4:1e:90:90:2a: ef:73:07:7e:e6:56:aa:e7:eb:c5:3f:e8:fb:65:62: 48:31:f9:3f:77:90:16:06:a2:4a:05:0f:ba:5b:5c: 13:84:10:0e:40:5f:be:b7:07:d6:9e:fa:a5:3d:8a: ee:e6:c9:39:6d:7f:e7:7b:84:cd:fa:5f:b1:dd:8c: 28:37:7a:fe:be:52:78:60:30:12:a6:1e:2d:58:89: a6:f7:29:eb:45:ef:92:32:93:9a:c4:5c:fa:17:a1: 85:18:16:c6:f6:89:46:9d:66:ac:27:14:c8:50:e3: b8:35:44:2c:17:c4:ea:1e:ea:30:a9:c6:16:cd:ac: e1:7c:f0:6f:4f:9b:02:b1:fa:8f:86:1b:a4:bf:f8: 24:fe:c0:71:83:f6:e0:00:3b:52:76:22:5d:c1:9f: b3:cc:c9:95:10:27:78:be:69:cd:20:0a:4a:96:e9: 9d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:26:11:A4:9F:0A:A4:18:3D:46:15:E8:0D:AC:2C:67:EA:B0:96:F3 X509v3 Authority Key Identifier: keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366630303a3a2f34342d3438203d3e20323035353932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:6f00::/44 Signature Algorithm: sha256WithRSAEncryption 7c:ac:de:23:b7:f4:00:fa:0c:ad:42:45:f4:02:4a:d2:e1:17: 6b:0f:7e:92:49:25:9f:c3:1b:09:7f:38:6f:ea:d0:75:50:00: ac:51:d6:97:7d:98:b1:53:1b:83:f1:2d:de:82:19:51:61:d9: 32:f3:a9:c2:d9:a3:45:bd:df:76:bd:23:34:b4:62:9d:d5:2b: 78:d2:2d:78:95:b5:ee:72:99:2b:e5:15:e6:28:b1:7e:57:f2: cf:7e:19:29:2c:be:6b:eb:b7:d6:20:86:c0:a9:12:f9:4a:27: 3d:5e:8b:6e:f5:ec:32:a4:68:ab:08:f3:34:0f:ff:97:14:a2: 7c:55:e4:04:ce:36:b1:b7:08:f6:aa:bf:5b:6a:1e:c4:1d:30: 09:35:1e:c0:30:2d:7a:01:14:ab:c3:77:ff:6e:02:a1:dd:7d: 1a:ba:7b:01:8a:b6:64:72:1e:ab:02:98:47:26:ce:e2:80:df: 5d:6b:1d:14:4b:ae:45:23:6f:f8:7a:68:b3:b7:75:e6:aa:51: 90:e2:8a:7b:f2:ff:82:e3:3f:b1:20:00:72:18:8d:61:3f:ec: 39:f9:4a:f9:94:47:5e:0e:ec:24:2f:4a:46:4a:3d:1b:eb:8d: c4:ad:a4:2f:5b:a4:bd:7a:4c:26:82:72:b2:dd:ff:a5:a5:9d: b7:8d:5c:b5 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUC96neWhGFHh2A/2PXHLcZr3IanowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYx RjA2NDNGNjAeFw0yNjAxMzEwNjIyMDRaFw0yNzAxMzAwNjI3MDRaMDMxMTAvBgNV BAMTKDYwMjYxMUE0OUYwQUE0MTgzRDQ2MTVFODBEQUMyQzY3RUFCMDk2RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP1SDWEsuSUnry77n/n92JRpnY 8BIKVZ9OJiaauQJY1XqyTLDaNPsfEuzreWJ04Sr6as/TJyOmAORtwqwDtv5b5as7 G2VNl+RR21DS9kN1T/JPp0K0HpCQKu9zB37mVqrn68U/6PtlYkgx+T93kBYGokoF D7pbXBOEEA5AX763B9ae+qU9iu7myTltf+d7hM36X7HdjCg3ev6+UnhgMBKmHi1Y iab3KetF75Iyk5rEXPoXoYUYFsb2iUadZqwnFMhQ47g1RCwXxOoe6jCpxhbNrOF8 8G9PmwKx+o+GG6S/+CT+wHGD9uAAO1J2Il3Bn7PMyZUQJ3i+ac0gCkqW6Z2jAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUYCYRpJ8KpBg9RhXoDawsZ+qwlvMwHwYDVR0j BBgwFoAUiSwsWZDfTXBFu1WgEfRzJh8GQ/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzFiZWRmNmMtY2M5MS00YmYwLTlkNmUtN2U5YjNjYjk5 MDVkLzEvODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYxRjA2NDNGNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTJDMkM1OTkwREY0RDcwNDVCQjU1QTAx MUY0NzMyNjFGMDY0M0Y2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83MWJlZGY2Yy1jYzkxLTRiZjAtOWQ2ZS03ZTliM2NiOTkwNWQvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTM2NjYzMDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MDM1MzUzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gW8AMA0GCSqGSIb3DQEBCwUAA4IBAQB8 rN4jt/QA+gytQkX0AkrS4RdrD36SSSWfwxsJfzhv6tB1UACsUdaXfZixUxuD8S3e ghlRYdky86nC2aNFvd92vSM0tGKd1St40i14lbXucpkr5RXmKLF+V/LPfhkpLL5r 67fWIIbAqRL5Sic9Xotu9ewypGirCPM0D/+XFKJ8VeQEzjaxtwj2qr9bah7EHTAJ NR7AMC16ARSrw3f/bgKh3X0aunsBirZkch6rAphHJs7igN9dax0US65FI2/4emiz t3XmqlGQ4op78v+C4z+xIAByGI1hP+w5+Ur5lEdeDuwkL0pGSj0b643EraQvW6S9 ekwmgnKy3f+lpZ23jVy1 -----END CERTIFICATE-----Generated at Mon Feb 2 14:03:21 2026 by rpki-client