This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366666303a3a2f34342d3438203d3e20323035353932.roa File: 326131343a373538313a366666303a3a2f34342d3438203d3e20323035353932.roa (raw, json) Hash identifier: tJECAkp2L4ouOi5S7tH2woZZkAUIydRlFynQO3qJTRU= Subject key identifier: EF:47:6B:2A:9D:02:81:02:9A:10:CE:E5:01:B0:57:BC:1C:78:50:42 Certificate issuer: /CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Certificate serial: 703B1C489A058B4540A478673BECE11F8808B024 Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366666303a3a2f34342d3438203d3e20323035353932.roa Signing time: Sat 31 Jan 2026 06:27:07 +0000 ROA not before: Sat 31 Jan 2026 06:22:07 +0000 ROA not after: Sat 30 Jan 2027 06:27:07 +0000 asID: 205592 IP address blocks: 2a14:7581:6ff0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 05:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:3b:1c:48:9a:05:8b:45:40:a4:78:67:3b:ec:e1:1f:88:08:b0:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Validity Not Before: Jan 31 06:22:07 2026 GMT Not After : Jan 30 06:27:07 2027 GMT Subject: CN=EF476B2A9D0281029A10CEE501B057BC1C785042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f5:34:fe:64:08:cb:6a:0d:d3:1b:89:a2:7b: 38:ed:04:86:b9:08:0c:c9:ac:22:f6:ad:90:27:88: d2:10:d3:06:e9:e2:41:3a:fc:92:c6:c9:02:e8:f0: 2e:2d:93:cd:ac:2b:5b:4d:03:ee:65:18:5d:fb:d6: 80:a6:80:8e:17:c2:0e:aa:5e:a0:04:ad:9f:c2:b0: 61:61:23:90:96:aa:e2:b6:f3:a8:a4:fa:05:2c:a7: c2:e2:63:a4:99:22:2a:a8:f4:db:08:93:3c:f7:30: 0a:1f:64:2c:ef:6a:7e:df:16:6b:ae:a2:47:85:71: 88:30:69:47:d1:f6:f4:ab:17:00:70:49:45:02:ed: e2:c9:0d:1e:58:86:e1:2e:2f:20:a9:ad:e1:53:56: a0:72:89:65:cb:5f:0b:c1:84:5a:f0:c2:7d:1a:c2: a7:2e:f4:e6:52:63:68:f1:91:10:df:3d:bd:49:a6: b2:6d:53:cc:bb:48:8b:54:8c:66:40:35:95:28:4b: 75:53:e5:22:0d:d6:b7:3d:f2:dc:bc:48:fd:8e:6e: 56:fa:f2:2d:51:e2:a6:7e:67:fd:65:6e:16:30:c3: fd:c9:c4:58:cf:32:a9:20:8e:27:50:a8:b6:a8:09: 35:a7:e1:ee:ce:dd:86:96:4e:96:24:96:99:e5:07: 07:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:47:6B:2A:9D:02:81:02:9A:10:CE:E5:01:B0:57:BC:1C:78:50:42 X509v3 Authority Key Identifier: keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366666303a3a2f34342d3438203d3e20323035353932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:6ff0::/44 Signature Algorithm: sha256WithRSAEncryption 09:54:d8:c6:37:90:ad:e2:61:ee:26:1e:e3:eb:ff:0b:f8:0b: 55:ad:56:64:3c:8f:2d:77:a0:d8:ba:69:b0:d3:aa:4c:8a:b8: c8:cd:b3:c2:64:72:5c:bc:1c:55:55:63:c3:61:bc:4d:32:b4: 5a:7e:75:f8:2a:26:8e:cc:d0:c6:4b:2e:aa:a2:fa:da:16:ac: 65:eb:c8:2f:38:a5:51:48:bd:89:17:21:0d:bc:a1:a3:03:e4: 75:e3:b2:62:58:69:d6:b7:52:75:d8:da:98:43:d2:2b:49:56: e1:ff:f9:db:0c:60:27:f9:44:ee:fd:56:b0:56:cc:d2:13:97: a2:83:df:72:96:8b:b0:cb:82:42:27:d8:8a:a7:aa:c8:84:ce: 9f:2f:5b:f1:a2:37:eb:db:7b:6d:c0:55:64:ab:a1:93:bc:f1: 45:0b:a3:9c:0c:bc:93:14:86:06:be:5a:54:d4:3c:ed:4f:d5: ba:2d:7b:8f:a5:ba:aa:dc:5f:77:a4:b3:d6:71:82:c6:11:5c: 84:c8:bf:97:9c:5a:00:a0:d5:11:09:28:78:1c:c4:dd:2b:b4: 1b:ad:43:23:f7:64:b1:39:f1:0f:3d:41:cc:8a:54:91:69:d0: df:c6:b2:7a:c9:fc:27:47:16:c8:8d:b3:3e:61:64:ab:67:df: 24:b7:9a:ad -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUcDscSJoFi0VApHhnO+zhH4gIsCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYx RjA2NDNGNjAeFw0yNjAxMzEwNjIyMDdaFw0yNzAxMzAwNjI3MDdaMDMxMTAvBgNV BAMTKEVGNDc2QjJBOUQwMjgxMDI5QTEwQ0VFNTAxQjA1N0JDMUM3ODUwNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi9TT+ZAjLag3TG4miezjtBIa5 CAzJrCL2rZAniNIQ0wbp4kE6/JLGyQLo8C4tk82sK1tNA+5lGF371oCmgI4Xwg6q XqAErZ/CsGFhI5CWquK286ik+gUsp8LiY6SZIiqo9NsIkzz3MAofZCzvan7fFmuu okeFcYgwaUfR9vSrFwBwSUUC7eLJDR5YhuEuLyCpreFTVqByiWXLXwvBhFrwwn0a wqcu9OZSY2jxkRDfPb1JprJtU8y7SItUjGZANZUoS3VT5SIN1rc98ty8SP2Oblb6 8i1R4qZ+Z/1lbhYww/3JxFjPMqkgjidQqLaoCTWn4e7O3YaWTpYklpnlBwefAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU70drKp0CgQKaEM7lAbBXvBx4UEIwHwYDVR0j BBgwFoAUiSwsWZDfTXBFu1WgEfRzJh8GQ/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzFiZWRmNmMtY2M5MS00YmYwLTlkNmUtN2U5YjNjYjk5 MDVkLzEvODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYxRjA2NDNGNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTJDMkM1OTkwREY0RDcwNDVCQjU1QTAx MUY0NzMyNjFGMDY0M0Y2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83MWJlZGY2Yy1jYzkxLTRiZjAtOWQ2ZS03ZTliM2NiOTkwNWQvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTM2NjY2NjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MDM1MzUzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gW/wMA0GCSqGSIb3DQEBCwUAA4IBAQAJ VNjGN5Ct4mHuJh7j6/8L+AtVrVZkPI8td6DYummw06pMirjIzbPCZHJcvBxVVWPD YbxNMrRafnX4KiaOzNDGSy6qovraFqxl68gvOKVRSL2JFyENvKGjA+R147JiWGnW t1J12NqYQ9IrSVbh//nbDGAn+UTu/VawVszSE5eig99ylouwy4JCJ9iKp6rIhM6f L1vxojfr23ttwFVkq6GTvPFFC6OcDLyTFIYGvlpU1DztT9W6LXuPpbqq3F93pLPW cYLGEVyEyL+XnFoAoNURCSh4HMTdK7QbrUMj92SxOfEPPUHMilSRadDfxrJ6yfwn RxbIjbM+YWSrZ98kt5qt -----END CERTIFICATE-----Generated at Mon Feb 2 14:03:30 2026 by rpki-client