This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa File: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (raw, json) Hash identifier: xJNDYcDRMGL3P/Oo1HJdC8ak3UBswnP71D60lUjKtOU= Subject key identifier: 2F:11:14:A3:F2:25:D6:AB:32:4D:2D:A1:C2:37:42:B6:62:E0:A8:CF Certificate issuer: /CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Certificate serial: 01F7048D6F5694280EE7E6B11AAAE2506BCF5728 Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa Signing time: Sat 31 Jan 2026 06:27:10 +0000 ROA not before: Sat 31 Jan 2026 06:22:10 +0000 ROA not after: Sat 30 Jan 2027 06:27:10 +0000 asID: 207389 IP address blocks: 2a14:7581:6fc0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 05:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f7:04:8d:6f:56:94:28:0e:e7:e6:b1:1a:aa:e2:50:6b:cf:57:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Validity Not Before: Jan 31 06:22:10 2026 GMT Not After : Jan 30 06:27:10 2027 GMT Subject: CN=2F1114A3F225D6AB324D2DA1C23742B662E0A8CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:35:ce:89:f5:b9:a1:e8:be:98:73:e6:e5: bf:6b:07:5b:56:bf:d6:c1:4b:5e:fe:18:ce:89:0c: d2:95:43:c7:9f:84:b5:29:c8:f1:85:97:09:7e:a9: 2e:c9:30:9d:89:08:7d:eb:8d:d5:89:a3:8c:87:23: 57:c4:f7:1d:e7:a7:fe:9e:44:05:34:68:d5:97:cf: ea:e0:4d:e9:84:b5:50:02:56:5f:8e:24:57:cb:e5: 31:2f:43:bc:95:ba:e1:ee:26:ee:83:ad:3e:bb:f6: 47:ae:0e:e4:89:99:c0:0d:64:64:d3:d1:ed:72:51: 8e:24:eb:dc:03:cf:f2:36:b4:05:08:bd:e0:b1:b2: 9d:66:d3:5d:b6:f5:ac:aa:49:8d:cf:b0:10:c4:7b: 1a:30:18:60:a6:6e:72:f0:be:da:df:d0:f4:b7:e3: fb:9d:3c:d8:84:94:d5:cd:a5:5e:35:51:72:2e:18: 0f:f5:30:b1:23:1f:f8:0d:41:f5:b3:ed:2f:5b:ce: 7a:ee:34:45:3d:04:e0:10:6e:92:31:c0:ac:e8:34: 5d:15:16:d0:00:22:c4:dc:84:ab:68:f5:fe:0e:35: ea:ef:49:9b:c4:02:9f:16:bf:71:85:e2:99:13:a7: a4:cd:e1:b4:d5:aa:40:35:60:98:d0:c8:4a:01:7a: 7b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:11:14:A3:F2:25:D6:AB:32:4D:2D:A1:C2:37:42:B6:62:E0:A8:CF X509v3 Authority Key Identifier: keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:6fc0::/44 Signature Algorithm: sha256WithRSAEncryption 74:78:48:cf:88:74:64:30:06:90:c5:fc:f5:15:00:09:b5:93: a6:e9:13:49:0a:65:bf:bc:07:30:15:71:c3:53:83:55:3d:85: 57:82:c4:12:2a:a7:9f:21:8f:c0:4d:df:e5:f5:37:96:c9:74: fd:15:63:45:67:56:eb:5e:81:a9:2f:1f:96:51:23:2b:8b:ce: bb:8e:22:ef:3a:25:3d:39:e6:68:80:db:3b:a0:8b:a9:f1:9f: bc:fa:dc:e5:95:7a:0a:a0:e4:0d:0c:ab:e9:dc:a0:f8:56:ef: 1f:fd:02:85:2c:a9:cd:fe:1d:5c:88:5f:28:79:89:35:b6:bd: 24:83:38:a9:e0:fc:77:55:19:31:86:01:a4:3b:a0:ff:39:6d: 26:42:29:96:fd:08:28:46:7b:97:85:1d:50:b7:1b:51:67:fd: de:fc:4f:ec:f4:51:ec:53:dc:e4:84:7b:e0:55:3e:6f:2e:8d: c9:b6:5a:bd:13:21:b1:72:1b:4d:60:70:21:ea:00:73:bd:98: 59:f6:c8:ba:d0:da:14:94:46:6f:2f:fb:c4:19:cb:ba:8c:8b: 79:ee:5a:4e:1b:c5:24:43:e2:98:4b:3a:a1:12:39:97:b2:b1: 69:90:34:c5:a4:6c:c6:55:40:e6:ac:bf:9a:b6:50:ff:5c:06: 35:2f:5f:42 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUAfcEjW9WlCgO5+axGqriUGvPVygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYx RjA2NDNGNjAeFw0yNjAxMzEwNjIyMTBaFw0yNzAxMzAwNjI3MTBaMDMxMTAvBgNV BAMTKDJGMTExNEEzRjIyNUQ2QUIzMjREMkRBMUMyMzc0MkI2NjJFMEE4Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwODXOifW5oei+mHPm5b9rB1tW v9bBS17+GM6JDNKVQ8efhLUpyPGFlwl+qS7JMJ2JCH3rjdWJo4yHI1fE9x3np/6e RAU0aNWXz+rgTemEtVACVl+OJFfL5TEvQ7yVuuHuJu6DrT679keuDuSJmcANZGTT 0e1yUY4k69wDz/I2tAUIveCxsp1m01229ayqSY3PsBDEexowGGCmbnLwvtrf0PS3 4/udPNiElNXNpV41UXIuGA/1MLEjH/gNQfWz7S9bznruNEU9BOAQbpIxwKzoNF0V FtAAIsTchKto9f4ONervSZvEAp8Wv3GF4pkTp6TN4bTVqkA1YJjQyEoBenuzAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQULxEUo/Il1qsyTS2hwjdCtmLgqM8wHwYDVR0j BBgwFoAUiSwsWZDfTXBFu1WgEfRzJh8GQ/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzFiZWRmNmMtY2M5MS00YmYwLTlkNmUtN2U5YjNjYjk5 MDVkLzEvODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYxRjA2NDNGNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTJDMkM1OTkwREY0RDcwNDVCQjU1QTAx MUY0NzMyNjFGMDY0M0Y2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83MWJlZGY2Yy1jYzkxLTRiZjAtOWQ2ZS03ZTliM2NiOTkwNWQvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTM2NjY2MzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MDM3MzMzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gW/AMA0GCSqGSIb3DQEBCwUAA4IBAQB0 eEjPiHRkMAaQxfz1FQAJtZOm6RNJCmW/vAcwFXHDU4NVPYVXgsQSKqefIY/ATd/l 9TeWyXT9FWNFZ1brXoGpLx+WUSMri867jiLvOiU9OeZogNs7oIup8Z+8+tzllXoK oOQNDKvp3KD4Vu8f/QKFLKnN/h1ciF8oeYk1tr0kgzip4Px3VRkxhgGkO6D/OW0m QimW/QgoRnuXhR1QtxtRZ/3e/E/s9FHsU9zkhHvgVT5vLo3Jtlq9EyGxchtNYHAh 6gBzvZhZ9si60NoUlEZvL/vEGcu6jIt57lpOG8UkQ+KYSzqhEjmXsrFpkDTFpGzG VUDmrL+atlD/XAY1L19C -----END CERTIFICATE-----Generated at Mon Feb 2 14:03:31 2026 by rpki-client