This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366661303a3a2f34342d3438203d3e20323031393433.roa File: 326131343a373538313a366661303a3a2f34342d3438203d3e20323031393433.roa (raw, json) Hash identifier: JBtcFivWNaxAMDtrHXjCq5obdYQeQd+Iuq7/0LpltBs= Subject key identifier: DE:89:DB:A4:44:6D:D3:7F:6B:A1:62:45:FA:2B:AD:B7:E2:4B:3A:B0 Certificate issuer: /CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Certificate serial: 33D0FE5969F72EA162552F9B70B05E4D7ECB8781 Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366661303a3a2f34342d3438203d3e20323031393433.roa Signing time: Sat 31 Jan 2026 06:44:20 +0000 ROA not before: Sat 31 Jan 2026 06:39:20 +0000 ROA not after: Sat 30 Jan 2027 06:44:20 +0000 asID: 201943 IP address blocks: 2a14:7581:6fa0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 05:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d0:fe:59:69:f7:2e:a1:62:55:2f:9b:70:b0:5e:4d:7e:cb:87:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Validity Not Before: Jan 31 06:39:20 2026 GMT Not After : Jan 30 06:44:20 2027 GMT Subject: CN=DE89DBA4446DD37F6BA16245FA2BADB7E24B3AB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:96:0c:7f:1d:e3:fa:b5:63:60:5b:0e:4b:78: 7a:34:f2:db:1c:b5:2b:35:e8:05:b5:0f:4c:09:ea: 2c:6a:cb:d6:da:cd:fa:a0:b6:25:6b:a6:ca:e9:fe: d0:88:fd:5a:89:68:ff:4e:59:06:f0:2b:23:c2:54: 07:d1:3b:7b:c0:65:ef:87:c5:8b:20:a0:66:af:aa: 0e:a1:9a:38:7f:d2:fe:85:df:b1:a6:69:aa:63:76: 11:54:fe:7f:09:8d:73:b3:42:c6:99:84:32:5f:a5: 2d:03:c3:b2:93:05:08:01:15:ac:6a:2e:5f:d3:2d: d9:fb:97:e1:0a:58:60:ec:56:3d:cb:f8:94:f3:eb: 0a:4a:b8:1d:0b:9d:59:34:f9:aa:d7:af:57:7a:4b: ee:21:6f:30:1e:26:13:08:6c:fd:62:1d:06:d8:b6: 03:73:40:65:25:1c:6b:48:a5:b2:35:c6:30:88:bc: c1:13:79:54:d6:17:cc:be:66:de:1f:8e:a8:96:77: e0:26:0a:14:27:24:d2:46:46:01:96:0e:f3:c5:eb: 16:06:87:69:2c:e3:6b:c3:bc:d4:49:82:55:95:8d: 84:bf:57:bf:b8:09:c9:24:94:7b:72:5c:4e:91:f2: b9:5f:8d:a1:bf:7f:99:f4:e4:00:c8:8c:63:ec:f9: d3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:89:DB:A4:44:6D:D3:7F:6B:A1:62:45:FA:2B:AD:B7:E2:4B:3A:B0 X509v3 Authority Key Identifier: keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366661303a3a2f34342d3438203d3e20323031393433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:6fa0::/44 Signature Algorithm: sha256WithRSAEncryption 14:6c:66:4f:18:cd:08:79:d8:45:0f:76:f7:ff:42:af:15:fe: 90:20:c2:d1:da:ab:4e:25:a2:bc:aa:04:62:5a:ef:bf:dc:61: 43:98:17:71:5e:08:dc:30:37:1c:c0:15:5f:11:b8:ef:04:38: 6b:82:be:21:d4:89:76:b3:d1:14:41:5e:34:22:56:f8:7d:6f: 04:76:38:46:9e:e9:c2:df:01:31:97:7b:e4:e4:cb:47:b9:9a: 5d:89:a9:0e:f6:46:19:44:b9:55:16:20:df:0e:c2:e3:52:54: 87:05:1b:81:28:3e:17:4f:a8:a5:f9:c9:b0:78:d2:e0:f7:89: 83:28:9b:7b:e1:27:56:a0:90:08:13:4f:23:b7:0a:ce:e9:13: e4:0d:45:75:27:bc:28:29:28:63:24:cf:52:ba:46:12:b4:23: 20:66:09:db:e9:01:57:c3:e0:d2:b2:1d:26:1a:01:75:c6:0c: aa:6b:33:51:08:5e:fb:5d:c4:8c:f0:10:03:0d:0d:7a:45:82: 7a:0c:f7:95:8c:53:89:7b:2e:1e:8c:84:0f:41:a0:1f:0b:b9: 3d:31:30:30:5a:ab:86:fe:fa:e7:4f:5f:87:f6:3a:5c:a6:00: fa:7b:36:9d:d9:8c:6a:07:97:59:20:07:cb:19:08:9c:c0:0c: ef:cd:b1:1b -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUM9D+WWn3LqFiVS+bcLBeTX7Lh4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYx RjA2NDNGNjAeFw0yNjAxMzEwNjM5MjBaFw0yNzAxMzAwNjQ0MjBaMDMxMTAvBgNV BAMTKERFODlEQkE0NDQ2REQzN0Y2QkExNjI0NUZBMkJBREI3RTI0QjNBQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFlgx/HeP6tWNgWw5LeHo08tsc tSs16AW1D0wJ6ixqy9bazfqgtiVrpsrp/tCI/VqJaP9OWQbwKyPCVAfRO3vAZe+H xYsgoGavqg6hmjh/0v6F37GmaapjdhFU/n8JjXOzQsaZhDJfpS0Dw7KTBQgBFaxq Ll/TLdn7l+EKWGDsVj3L+JTz6wpKuB0LnVk0+arXr1d6S+4hbzAeJhMIbP1iHQbY tgNzQGUlHGtIpbI1xjCIvMETeVTWF8y+Zt4fjqiWd+AmChQnJNJGRgGWDvPF6xYG h2ks42vDvNRJglWVjYS/V7+4CckklHtyXE6R8rlfjaG/f5n05ADIjGPs+dPJAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU3onbpERt039roWJF+iutt+JLOrAwHwYDVR0j BBgwFoAUiSwsWZDfTXBFu1WgEfRzJh8GQ/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzFiZWRmNmMtY2M5MS00YmYwLTlkNmUtN2U5YjNjYjk5 MDVkLzEvODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYxRjA2NDNGNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTJDMkM1OTkwREY0RDcwNDVCQjU1QTAx MUY0NzMyNjFGMDY0M0Y2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83MWJlZGY2Yy1jYzkxLTRiZjAtOWQ2ZS03ZTliM2NiOTkwNWQvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTM2NjY2MTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MDMxMzkzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gW+gMA0GCSqGSIb3DQEBCwUAA4IBAQAU bGZPGM0IedhFD3b3/0KvFf6QIMLR2qtOJaK8qgRiWu+/3GFDmBdxXgjcMDccwBVf EbjvBDhrgr4h1Il2s9EUQV40Ilb4fW8EdjhGnunC3wExl3vk5MtHuZpdiakO9kYZ RLlVFiDfDsLjUlSHBRuBKD4XT6il+cmweNLg94mDKJt74SdWoJAIE08jtwrO6RPk DUV1J7woKShjJM9SukYStCMgZgnb6QFXw+DSsh0mGgF1xgyqazNRCF77XcSM8BAD DQ16RYJ6DPeVjFOJey4ejIQPQaAfC7k9MTAwWquG/vrnT1+H9jpcpgD6ezad2Yxq B5dZIAfLGQicwAzvzbEb -----END CERTIFICATE-----Generated at Mon Feb 2 14:03:29 2026 by rpki-client