This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363303a3a2f33322d3438203d3e203434333234.roa File: 326130663a316363303a3a2f33322d3438203d3e203434333234.roa (raw, json) Hash identifier: 2itISUuyiq2kJ3p6MrMIH40PF2ksGE3/FGvvEXcIVOY= Subject key identifier: 14:E8:83:BA:C4:08:F6:2D:AB:7E:BE:5D:E1:15:2A:B1:2C:E1:D1:A7 Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94 Certificate serial: 2E769FEADE6EE6925235F41C2F1E0DEE2F6616D1 Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363303a3a2f33322d3438203d3e203434333234.roa Signing time: Sat 17 Jan 2026 21:02:01 +0000 ROA not before: Sat 17 Jan 2026 20:57:01 +0000 ROA not after: Sat 16 Jan 2027 21:02:01 +0000 asID: 44324 IP address blocks: 2a0f:1cc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:76:9f:ea:de:6e:e6:92:52:35:f4:1c:2f:1e:0d:ee:2f:66:16:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94 Validity Not Before: Jan 17 20:57:01 2026 GMT Not After : Jan 16 21:02:01 2027 GMT Subject: CN=14E883BAC408F62DAB7EBE5DE1152AB12CE1D1A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:63:6e:e0:6c:8b:f5:d7:6b:9c:be:5d:26:e6: 4b:31:51:11:15:3e:66:b1:72:16:59:9b:e5:83:00: 43:50:98:4f:3d:18:8f:2e:77:e8:e6:46:a7:69:44: 40:d1:cc:f1:a2:d8:ee:85:7d:d1:2f:99:ff:f3:b5: af:8b:47:cd:1f:8a:d2:14:15:43:7f:7d:56:02:6f: de:0a:29:54:50:f4:71:76:55:10:13:6a:ff:5f:f7: 04:d5:d9:fc:12:12:6b:bd:08:81:fa:6a:d1:6b:3f: f9:c1:ee:4e:39:4c:ae:d3:14:bf:0f:7d:ef:20:5d: 09:6e:72:d4:0e:03:8b:07:ac:06:97:9e:65:1f:f7: ce:ed:a1:d3:e0:ab:3e:b7:2f:bb:a5:83:06:d7:a2: ea:cc:8e:2d:b4:bc:38:92:4a:ea:ca:02:31:86:63: fb:92:61:39:f0:6e:8d:80:49:5f:41:a8:b9:57:38: b1:da:b5:e8:12:8a:3b:7a:3e:b7:ad:04:87:2f:56: 20:ce:a1:db:38:aa:32:7e:cf:a7:58:63:08:82:27: f5:30:0a:8e:ed:b7:13:2e:95:21:90:c5:39:89:4e: 1c:ef:45:90:f8:9e:77:57:76:63:5e:43:31:b8:75: 47:c0:2b:6c:3b:41:14:05:bf:15:6b:e7:f1:b1:da: d4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E8:83:BA:C4:08:F6:2D:AB:7E:BE:5D:E1:15:2A:B1:2C:E1:D1:A7 X509v3 Authority Key Identifier: keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363303a3a2f33322d3438203d3e203434333234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc0::/32 Signature Algorithm: sha256WithRSAEncryption 0d:63:51:3f:ed:0f:5b:85:61:02:b9:cc:2e:77:1d:60:4c:41: 75:e5:ec:0a:3f:9c:1e:8d:63:f9:8e:04:30:63:c6:31:5e:dc: 03:1c:ec:88:cf:e1:73:2d:5d:e4:46:8f:1e:f3:e4:ac:d5:6c: f6:b9:6b:e4:a0:2b:6a:e7:26:c2:ea:33:d0:5b:78:a4:a1:f8: f1:fa:eb:ff:89:9f:86:ea:df:eb:5b:48:6a:30:3e:78:8f:c4: 2c:c8:16:a7:32:dc:68:a2:73:e5:9d:e9:87:64:b1:6b:13:15: 61:71:ee:fa:d7:f4:f2:be:01:1b:d8:06:1b:f5:d3:33:f0:01: d9:93:6d:8e:8b:6c:16:c0:2b:64:ae:0b:89:4c:82:4c:10:e8: 8f:bd:c8:96:c7:a0:f5:16:3c:49:76:fd:f7:b1:0f:d2:dd:c6: 91:1a:4b:1a:1b:0f:09:ee:f1:54:a9:44:cf:99:f8:24:51:57: aa:69:9f:c1:a4:0a:02:af:d0:1e:6d:92:ec:4f:5b:39:2d:4a: 2d:5a:c1:22:52:20:b6:d7:0e:cf:7f:c2:ec:2e:bc:7c:5f:b3: 58:7c:d5:10:93:9b:37:dd:8c:3a:9e:f1:ab:56:c2:8a:39:ad: 81:c1:f8:e6:45:48:1e:6b:59:59:f7:7d:e2:b1:c0:90:62:18: 56:40:06:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULnaf6t5u5pJSNfQcLx4N7i9mFtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExZTJkNDExZDY4N2JjYjQ0NDljM2RmNDViZWVkYzA0 MTAwN2Q5NDAeFw0yNjAxMTcyMDU3MDFaFw0yNzAxMTYyMTAyMDFaMDMxMTAvBgNV BAMTKDE0RTg4M0JBQzQwOEY2MkRBQjdFQkU1REUxMTUyQUIxMkNFMUQxQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBY27gbIv112ucvl0m5ksxUREV PmaxchZZm+WDAENQmE89GI8ud+jmRqdpREDRzPGi2O6FfdEvmf/zta+LR80fitIU FUN/fVYCb94KKVRQ9HF2VRATav9f9wTV2fwSEmu9CIH6atFrP/nB7k45TK7TFL8P fe8gXQluctQOA4sHrAaXnmUf987todPgqz63L7ulgwbXourMji20vDiSSurKAjGG Y/uSYTnwbo2ASV9BqLlXOLHategSijt6PretBIcvViDOods4qjJ+z6dYYwiCJ/Uw Co7ttxMulSGQxTmJThzvRZD4nndXdmNeQzG4dUfAK2w7QRQFvxVr5/Gx2tTLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFOiDusQI9i2rfr5d4RUqsSzh0acwHwYDVR0j BBgwFoAUQR4tQR1oe8tEScPfRb7twEEAfZQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0 ZjBlLzAvNDExRTJENDExRDY4N0JDQjQ0NDlDM0RGNDVCRUVEQzA0MTAwN0Q5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FSNHRRUjFvZTh0RVNjUGZSYjd0d0VF QWZaUS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzMw M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzQzNDMzMzIzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoP HMAwDQYJKoZIhvcNAQELBQADggEBAA1jUT/tD1uFYQK5zC53HWBMQXXl7Ao/nB6N Y/mOBDBjxjFe3AMc7IjP4XMtXeRGjx7z5KzVbPa5a+SgK2rnJsLqM9BbeKSh+PH6 6/+Jn4bq3+tbSGowPniPxCzIFqcy3Giic+Wd6YdksWsTFWFx7vrX9PK+ARvYBhv1 0zPwAdmTbY6LbBbAK2SuC4lMgkwQ6I+9yJbHoPUWPEl2/fexD9LdxpEaSxobDwnu 8VSpRM+Z+CRRV6ppn8GkCgKv0B5tkuxPWzktSi1awSJSILbXDs9/wuwuvHxfs1h8 1RCTmzfdjDqe8atWwoo5rYHB+OZFSB5rWVn3feKxwJBiGFZABps= -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:34 2026 by rpki-client