This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a313230303a3a2f34302d3438203d3e20323032373334.roa File: 326130663a316363353a313230303a3a2f34302d3438203d3e20323032373334.roa (raw, json) Hash identifier: JjNm5rDvtwoxVpKuyNODbWvZAo/OVdErv9yLLiqZwbQ= Subject key identifier: 69:09:71:52:6C:EF:DD:8C:CA:64:6E:15:C4:56:BD:BB:04:61:72:26 Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94 Certificate serial: 7BBEBEA46EBFD35C35F107043E936A5A4FBB6DD5 Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a313230303a3a2f34302d3438203d3e20323032373334.roa Signing time: Sat 17 Jan 2026 21:11:17 +0000 ROA not before: Sat 17 Jan 2026 21:06:17 +0000 ROA not after: Sat 16 Jan 2027 21:11:17 +0000 asID: 202734 IP address blocks: 2a0f:1cc5:1200::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:be:be:a4:6e:bf:d3:5c:35:f1:07:04:3e:93:6a:5a:4f:bb:6d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94 Validity Not Before: Jan 17 21:06:17 2026 GMT Not After : Jan 16 21:11:17 2027 GMT Subject: CN=690971526CEFDD8CCA646E15C456BDBB04617226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1a:9c:14:6d:9a:00:26:0e:c0:8b:bc:69:99: 92:d7:bf:27:0e:4c:ef:b2:59:d0:94:5f:6d:3a:af: e7:0b:c9:b3:d5:ff:42:04:7b:f6:da:24:ec:17:29: e7:9c:23:4e:0a:45:1b:40:0b:57:54:7a:b4:23:24: 5a:b9:03:64:81:cc:56:be:dd:16:eb:55:07:ab:b0: c6:1c:9f:73:b3:80:ac:1d:92:a4:95:2d:07:b4:fe: bd:48:ec:75:c3:17:a6:06:51:9d:9a:4a:03:2d:55: a0:44:59:9d:ce:9c:de:b6:7d:ec:2e:e9:14:2f:96: af:1f:c6:4f:8b:ae:aa:93:7d:9f:e3:f6:c7:6a:9c: b7:fd:5f:c2:c8:c4:eb:8c:02:f0:b4:e3:07:71:27: 2c:87:e7:19:a6:1a:aa:cd:8e:3f:4a:e5:d9:67:09: 0f:5a:eb:2b:60:7a:cc:8b:1c:d2:71:a3:d3:a3:11: 8e:06:0d:3d:06:b1:3e:47:a5:22:b5:eb:2d:d2:8e: 44:78:5e:c3:a6:18:97:70:9c:20:1f:7d:95:d3:74: ca:f2:eb:7f:a0:3e:5b:a6:22:46:99:53:45:d5:75: 10:7b:81:1d:27:ed:fe:f3:03:49:b6:a0:ac:ba:0f: 4d:02:04:c9:8f:be:36:12:56:75:7a:6d:56:0f:ca: c3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:09:71:52:6C:EF:DD:8C:CA:64:6E:15:C4:56:BD:BB:04:61:72:26 X509v3 Authority Key Identifier: keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a313230303a3a2f34302d3438203d3e20323032373334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1200::/40 Signature Algorithm: sha256WithRSAEncryption 56:cf:91:ed:b1:cc:21:70:a8:5b:91:90:e5:fa:ec:d1:55:11: b4:6c:8f:b5:d1:d7:cd:cc:4c:16:de:6b:7c:fc:bb:39:20:4f: 82:ad:a6:8f:63:13:8e:d4:90:94:bb:d1:b5:75:db:10:eb:d6: af:d1:4b:39:47:d5:fe:7b:ed:49:92:77:af:29:c5:6c:df:33: e5:22:55:3d:a5:94:b8:25:2c:83:a6:7e:73:06:a8:b1:30:b9: c1:d7:15:d4:4d:4a:b1:30:66:6e:f5:70:7a:c6:0e:e2:30:10: 57:2b:f6:ef:13:00:2b:97:a3:22:9a:dd:3a:ea:d4:54:44:8a: e6:a5:fa:f6:eb:50:7e:6b:f7:ea:3e:76:29:2f:af:75:73:b4: 18:f2:e8:3d:d9:58:6a:97:56:23:28:b1:e3:16:ee:ee:8b:5f: f3:fd:48:53:cd:3e:39:35:5f:33:3a:3d:b2:5e:bf:3f:d0:26: c2:49:60:52:b3:08:04:65:34:af:d4:69:40:7f:75:bd:71:c0: 56:88:a9:79:db:15:09:10:12:b2:ab:e4:82:f5:78:01:99:e6: 9f:d5:d2:84:b6:84:c6:44:d0:3a:df:87:89:89:47:8a:a6:9a: 0e:72:71:cb:7c:1a:e4:0f:81:af:03:07:2b:ca:c6:92:3f:42: d1:36:69:99 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUe76+pG6/01w18QcEPpNqWk+7bdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExZTJkNDExZDY4N2JjYjQ0NDljM2RmNDViZWVkYzA0 MTAwN2Q5NDAeFw0yNjAxMTcyMTA2MTdaFw0yNzAxMTYyMTExMTdaMDMxMTAvBgNV BAMTKDY5MDk3MTUyNkNFRkREOENDQTY0NkUxNUM0NTZCREJCMDQ2MTcyMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoGpwUbZoAJg7Ai7xpmZLXvycO TO+yWdCUX206r+cLybPV/0IEe/baJOwXKeecI04KRRtAC1dUerQjJFq5A2SBzFa+ 3RbrVQersMYcn3OzgKwdkqSVLQe0/r1I7HXDF6YGUZ2aSgMtVaBEWZ3OnN62fewu 6RQvlq8fxk+LrqqTfZ/j9sdqnLf9X8LIxOuMAvC04wdxJyyH5xmmGqrNjj9K5dln CQ9a6ytgesyLHNJxo9OjEY4GDT0GsT5HpSK16y3SjkR4XsOmGJdwnCAffZXTdMry 63+gPlumIkaZU0XVdRB7gR0n7f7zA0m2oKy6D00CBMmPvjYSVnV6bVYPysMpAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUaQlxUmzv3YzKZG4VxFa9uwRhciYwHwYDVR0j BBgwFoAUQR4tQR1oe8tEScPfRb7twEEAfZQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0 ZjBlLzAvNDExRTJENDExRDY4N0JDQjQ0NDlDM0RGNDVCRUVEQzA0MTAwN0Q5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FSNHRRUjFvZTh0RVNjUGZSYjd0d0VF QWZaUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzMTMyMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMjM3MzMzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoPHMUSMA0GCSqGSIb3DQEBCwUAA4IBAQBWz5HtscwhcKhbkZDl +uzRVRG0bI+10dfNzEwW3mt8/Ls5IE+CraaPYxOO1JCUu9G1ddsQ69av0Us5R9X+ e+1JknevKcVs3zPlIlU9pZS4JSyDpn5zBqixMLnB1xXUTUqxMGZu9XB6xg7iMBBX K/bvEwArl6Mimt066tRURIrmpfr261B+a/fqPnYpL691c7QY8ug92Vhql1YjKLHj Fu7ui1/z/UhTzT45NV8zOj2yXr8/0CbCSWBSswgEZTSv1GlAf3W9ccBWiKl52xUJ EBKyq+SC9XgBmeaf1dKEtoTGRNA634eJiUeKppoOcnHLfBrkD4GvAwcrysaSP0LR NmmZ -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:37 2026 by rpki-client