This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363313a3a2f33322d3438203d3e20323033333134.roa File: 326130663a316363313a3a2f33322d3438203d3e20323033333134.roa (raw, json) Hash identifier: 3CbPZlZdBv1wijTy1xiC/sWOE+eNUnisRKG/PEqX4Ls= Subject key identifier: F7:D0:A2:65:52:60:58:8B:17:D7:B0:5D:E5:CC:DE:84:F0:D5:7A:3F Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94 Certificate serial: 57CB626B3D5923F5D1457D7929BE90C4799F094E Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363313a3a2f33322d3438203d3e20323033333134.roa Signing time: Sat 17 Jan 2026 21:12:57 +0000 ROA not before: Sat 17 Jan 2026 21:07:57 +0000 ROA not after: Sat 16 Jan 2027 21:12:57 +0000 asID: 203314 IP address blocks: 2a0f:1cc1::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:cb:62:6b:3d:59:23:f5:d1:45:7d:79:29:be:90:c4:79:9f:09:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94 Validity Not Before: Jan 17 21:07:57 2026 GMT Not After : Jan 16 21:12:57 2027 GMT Subject: CN=F7D0A2655260588B17D7B05DE5CCDE84F0D57A3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:22:be:05:33:7f:0e:da:53:ed:5f:6b:63:67: 6a:43:7d:da:eb:5d:ef:ba:12:4d:ec:d9:a1:93:48: a7:50:58:65:49:4d:4f:99:35:1b:a6:7c:aa:90:5e: 76:80:9a:3b:f7:88:99:9f:f1:06:70:21:37:84:e5: f3:37:49:64:0e:32:70:85:05:9f:15:f9:0d:42:b0: 41:05:6d:e0:4f:5d:f9:de:a5:4d:82:d1:c1:bb:2b: 5b:85:6a:5d:9d:a5:ef:0c:dc:58:98:79:7f:61:48: bd:29:7a:bd:fc:4e:4d:2e:ee:69:90:12:e2:69:c3: a6:8a:12:6d:7c:92:4c:66:10:97:cd:f7:7f:a9:40: 84:ec:0b:24:c1:8f:26:b5:ed:b6:ec:4b:55:c4:cd: eb:b6:8d:65:8e:c9:64:ef:d1:1c:a1:d8:7a:fd:1c: a9:61:f6:dd:09:4e:44:ec:7b:b0:35:3b:8d:b3:0c: 81:c7:42:f4:90:16:65:35:1e:00:5e:10:09:fc:d4: a7:a6:f8:1a:dd:aa:2b:60:d4:96:bb:a9:ea:30:61: ce:d7:6c:e2:95:45:f0:d8:f4:e8:ab:9d:67:35:f7: da:9b:54:70:d1:41:41:62:30:7f:50:7d:61:69:24: f7:ed:ed:10:56:d5:a0:d7:8b:01:b6:e5:83:0d:d1: 88:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D0:A2:65:52:60:58:8B:17:D7:B0:5D:E5:CC:DE:84:F0:D5:7A:3F X509v3 Authority Key Identifier: keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363313a3a2f33322d3438203d3e20323033333134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc1::/32 Signature Algorithm: sha256WithRSAEncryption 7f:67:d5:2c:a1:78:bf:6b:68:ed:13:59:17:15:07:3e:13:5a: ce:70:93:78:87:51:75:e7:7a:7f:99:2b:b6:89:0f:80:69:fa: 3f:7d:be:66:3c:66:5a:aa:3a:b0:f9:67:66:08:91:5f:68:b9: 7f:09:20:12:b3:d1:87:da:73:76:4c:fc:36:f8:6e:dd:cc:8e: 0a:df:8d:a3:e1:a0:63:0c:dd:73:91:33:96:bd:6b:f8:a2:65: 97:0a:ab:33:dd:0b:e5:5b:85:57:c5:3a:02:0e:4f:af:4f:f3: 67:13:63:8c:46:99:66:af:2c:ab:6c:62:37:6e:61:a0:5a:38: 53:c6:81:05:f0:64:2c:52:61:43:2a:40:c6:e3:38:6c:66:7c: 60:f1:89:96:51:cd:70:29:e1:35:c0:62:5a:6f:5e:07:0a:bd: e4:11:58:64:05:36:45:45:a3:2d:f6:27:65:54:c1:b3:53:79: c8:4b:dd:dc:ab:7e:19:67:94:0f:3c:9b:da:0a:d9:8c:50:84: aa:96:db:dd:23:ff:9b:9d:71:b9:fa:b1:c9:d7:70:8e:fb:fe: 46:58:fb:ef:ff:98:1a:91:34:d0:1a:81:79:04:64:e4:c7:ed: dd:e4:0a:03:38:3e:a4:1a:f9:2f:70:00:09:88:e6:84:b0:4e: 5c:f0:e7:2b -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUV8tiaz1ZI/XRRX15Kb6QxHmfCU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExZTJkNDExZDY4N2JjYjQ0NDljM2RmNDViZWVkYzA0 MTAwN2Q5NDAeFw0yNjAxMTcyMTA3NTdaFw0yNzAxMTYyMTEyNTdaMDMxMTAvBgNV BAMTKEY3RDBBMjY1NTI2MDU4OEIxN0Q3QjA1REU1Q0NERTg0RjBENTdBM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSIr4FM38O2lPtX2tjZ2pDfdrr Xe+6Ek3s2aGTSKdQWGVJTU+ZNRumfKqQXnaAmjv3iJmf8QZwITeE5fM3SWQOMnCF BZ8V+Q1CsEEFbeBPXfnepU2C0cG7K1uFal2dpe8M3FiYeX9hSL0per38Tk0u7mmQ EuJpw6aKEm18kkxmEJfN93+pQITsCyTBjya17bbsS1XEzeu2jWWOyWTv0Ryh2Hr9 HKlh9t0JTkTse7A1O42zDIHHQvSQFmU1HgBeEAn81Kem+Brdqitg1Ja7qeowYc7X bOKVRfDY9OirnWc199qbVHDRQUFiMH9QfWFpJPft7RBW1aDXiwG25YMN0YjtAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQU99CiZVJgWIsX17Bd5czehPDVej8wHwYDVR0j BBgwFoAUQR4tQR1oe8tEScPfRb7twEEAfZQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0 ZjBlLzAvNDExRTJENDExRDY4N0JDQjQ0NDlDM0RGNDVCRUVEQzA0MTAwN0Q5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FSNHRRUjFvZTh0RVNjUGZSYjd0d0VF QWZaUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzMx M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzMDMzMzMzMTM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA Kg8cwTANBgkqhkiG9w0BAQsFAAOCAQEAf2fVLKF4v2to7RNZFxUHPhNaznCTeIdR ded6f5krtokPgGn6P32+ZjxmWqo6sPlnZgiRX2i5fwkgErPRh9pzdkz8Nvhu3cyO Ct+No+GgYwzdc5Ezlr1r+KJllwqrM90L5VuFV8U6Ag5Pr0/zZxNjjEaZZq8sq2xi N25hoFo4U8aBBfBkLFJhQypAxuM4bGZ8YPGJllHNcCnhNcBiWm9eBwq95BFYZAU2 RUWjLfYnZVTBs1N5yEvd3Kt+GWeUDzyb2grZjFCEqpbb3SP/m51xufqxyddwjvv+ Rlj77/+YGpE00BqBeQRk5Mft3eQKAzg+pBr5L3AACYjmhLBOXPDnKw== -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:31 2026 by rpki-client