This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a316130303a3a2f34302d3438203d3e20323030343535.roa File: 326130663a316363353a316130303a3a2f34302d3438203d3e20323030343535.roa (raw, json) Hash identifier: caS1uw+tIHonGiirp27ihWFLNvPI3Lqgcb7cJY/5URU= Subject key identifier: DF:F3:3F:9F:86:0F:55:65:0B:27:A4:D2:E4:D8:AF:7F:FB:BC:4F:D3 Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94 Certificate serial: 27370BD03B5997DAC792E50619468C81C59C09B9 Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a316130303a3a2f34302d3438203d3e20323030343535.roa Signing time: Sat 17 Jan 2026 21:10:40 +0000 ROA not before: Sat 17 Jan 2026 21:05:40 +0000 ROA not after: Sat 16 Jan 2027 21:10:40 +0000 asID: 200455 IP address blocks: 2a0f:1cc5:1a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:37:0b:d0:3b:59:97:da:c7:92:e5:06:19:46:8c:81:c5:9c:09:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94 Validity Not Before: Jan 17 21:05:40 2026 GMT Not After : Jan 16 21:10:40 2027 GMT Subject: CN=DFF33F9F860F55650B27A4D2E4D8AF7FFBBC4FD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:00:a4:c7:11:58:9f:bf:0d:1a:86:66:39:22: 20:24:e1:26:67:d9:de:39:44:54:ee:10:eb:f6:9f: 57:cc:87:28:3c:63:f9:77:03:b7:3f:98:b1:53:89: 8d:48:11:32:3d:2c:35:59:e3:c0:06:43:df:e9:bc: e1:2f:ef:3d:99:ea:3d:4e:c1:35:20:94:2c:88:45: 8f:8e:2c:47:be:db:f9:e8:c2:6c:a3:a1:21:25:c1: 11:03:73:3d:15:02:5b:f3:f8:90:ba:c7:2a:96:3d: 50:b2:29:44:51:c0:68:56:2d:f7:57:96:b8:58:a2: be:5c:0c:4f:cf:cd:fd:3a:4b:04:0b:24:41:67:71: fb:b3:88:32:5a:2b:b5:cf:5c:c2:6b:0c:09:fc:75: 67:31:63:0b:17:89:0a:d6:cb:77:94:31:85:e1:29: 3d:d3:14:34:60:5e:5f:a9:ab:f0:b6:db:f8:5a:f4: 0d:71:a2:31:ed:7a:19:2c:18:c9:ef:a2:c6:fd:f1: cb:48:64:23:c1:92:13:19:97:bd:be:3d:ec:ea:af: a4:75:de:e1:6a:73:d4:8e:22:ce:20:8a:38:74:41: 81:05:d7:bd:8b:9e:99:8d:87:19:3a:e3:28:a1:3b: 0d:2c:b1:64:3f:2f:6e:f7:fc:68:c5:1d:72:46:a9: 6a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F3:3F:9F:86:0F:55:65:0B:27:A4:D2:E4:D8:AF:7F:FB:BC:4F:D3 X509v3 Authority Key Identifier: keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a316130303a3a2f34302d3438203d3e20323030343535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1a00::/40 Signature Algorithm: sha256WithRSAEncryption 3b:d3:06:a6:d1:73:c9:20:a3:ed:ca:ff:be:48:bb:41:97:16: 93:1c:4b:de:ce:11:28:1e:4e:4d:dd:af:ad:00:63:ac:70:c2: d3:49:20:c4:bc:6b:c9:1b:1b:ad:e9:97:38:e7:71:6a:24:74: 65:6a:93:f4:f5:58:b1:44:d6:0a:63:e4:7f:81:e5:3a:a4:5b: b3:d1:b2:aa:77:43:cf:5b:b2:47:bd:a0:ce:02:84:5a:ab:73: d9:ef:85:78:be:ee:84:bc:1c:c0:fc:61:74:a5:df:73:16:2a: 37:82:ff:ab:98:d8:45:60:28:52:3f:4d:b3:32:97:93:89:1e: 89:44:dc:57:2d:22:04:76:36:dd:9d:b8:ef:c0:97:fa:b6:24: 5a:88:ee:9d:ee:e4:87:ba:da:92:a7:62:80:0d:26:f0:58:71: b8:7c:d1:45:b2:cd:04:c3:8c:ec:9b:1e:bf:29:06:c0:7d:48: c1:ec:70:0e:b3:eb:3d:f0:f0:44:8f:3d:2c:6c:0c:eb:cb:3c: 48:7a:29:75:74:51:0f:a7:71:a6:bc:97:c9:6c:56:9d:6b:59: db:0e:08:d8:25:d0:02:9c:a9:e9:0e:24:c7:af:80:4b:64:2e: f6:44:e2:e4:55:07:85:03:50:0b:38:e6:7d:ea:59:0f:88:a3: a6:2a:12:30 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUJzcL0DtZl9rHkuUGGUaMgcWcCbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExZTJkNDExZDY4N2JjYjQ0NDljM2RmNDViZWVkYzA0 MTAwN2Q5NDAeFw0yNjAxMTcyMTA1NDBaFw0yNzAxMTYyMTEwNDBaMDMxMTAvBgNV BAMTKERGRjMzRjlGODYwRjU1NjUwQjI3QTREMkU0RDhBRjdGRkJCQzRGRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4AKTHEVifvw0ahmY5IiAk4SZn 2d45RFTuEOv2n1fMhyg8Y/l3A7c/mLFTiY1IETI9LDVZ48AGQ9/pvOEv7z2Z6j1O wTUglCyIRY+OLEe+2/nowmyjoSElwREDcz0VAlvz+JC6xyqWPVCyKURRwGhWLfdX lrhYor5cDE/Pzf06SwQLJEFncfuziDJaK7XPXMJrDAn8dWcxYwsXiQrWy3eUMYXh KT3TFDRgXl+pq/C22/ha9A1xojHtehksGMnvosb98ctIZCPBkhMZl72+Pezqr6R1 3uFqc9SOIs4gijh0QYEF172LnpmNhxk64yihOw0ssWQ/L273/GjFHXJGqWrDAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQU3/M/n4YPVWULJ6TS5Nivf/u8T9MwHwYDVR0j BBgwFoAUQR4tQR1oe8tEScPfRb7twEEAfZQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0 ZjBlLzAvNDExRTJENDExRDY4N0JDQjQ0NDlDM0RGNDVCRUVEQzA0MTAwN0Q5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FSNHRRUjFvZTh0RVNjUGZSYjd0d0VF QWZaUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzMTYxMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMDM0MzUzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoPHMUaMA0GCSqGSIb3DQEBCwUAA4IBAQA70wam0XPJIKPtyv++ SLtBlxaTHEvezhEoHk5N3a+tAGOscMLTSSDEvGvJGxut6Zc453FqJHRlapP09Vix RNYKY+R/geU6pFuz0bKqd0PPW7JHvaDOAoRaq3PZ74V4vu6EvBzA/GF0pd9zFio3 gv+rmNhFYChSP02zMpeTiR6JRNxXLSIEdjbdnbjvwJf6tiRaiO6d7uSHutqSp2KA DSbwWHG4fNFFss0Ew4zsmx6/KQbAfUjB7HAOs+s98PBEjz0sbAzryzxIeil1dFEP p3GmvJfJbFada1nbDgjYJdACnKnpDiTHr4BLZC72ROLkVQeFA1ALOOZ96lkPiKOm KhIw -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:35 2026 by rpki-client