This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a316630303a3a2f34302d3438203d3e20323132353332.roa File: 326130663a316363353a316630303a3a2f34302d3438203d3e20323132353332.roa (raw, json) Hash identifier: OkA7mE2By1tX1d9l2TmDX/6EpIF8txUZN6tihggXGTs= Subject key identifier: CA:4A:9F:F0:8D:2A:35:BC:41:CE:A7:7E:A5:9E:00:3B:CE:0F:CD:B4 Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94 Certificate serial: 1500C2CD03912E6FDC08CD37F49CE6E02123D1D8 Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a316630303a3a2f34302d3438203d3e20323132353332.roa Signing time: Sat 17 Jan 2026 21:23:33 +0000 ROA not before: Sat 17 Jan 2026 21:18:33 +0000 ROA not after: Sat 16 Jan 2027 21:23:33 +0000 asID: 212532 IP address blocks: 2a0f:1cc5:1f00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:00:c2:cd:03:91:2e:6f:dc:08:cd:37:f4:9c:e6:e0:21:23:d1:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94 Validity Not Before: Jan 17 21:18:33 2026 GMT Not After : Jan 16 21:23:33 2027 GMT Subject: CN=CA4A9FF08D2A35BC41CEA77EA59E003BCE0FCDB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:88:35:8e:82:06:5a:7a:a8:44:75:9d:86:0f: 73:60:2d:89:f7:dd:3c:b2:7c:b6:21:e8:df:17:16: 36:88:84:c2:e5:04:56:c4:f6:53:b6:f4:88:ac:bf: e2:3d:ea:7a:58:f0:77:69:c6:84:0d:44:75:9c:ba: b6:3b:a7:6e:7d:50:ae:14:11:dd:07:a7:5b:55:62: da:d0:38:64:b2:01:f2:38:fd:e6:9d:4c:53:81:ca: e3:2a:4a:bb:bb:17:c6:79:d0:a9:c0:b2:b3:a0:b4: 63:92:87:42:ea:74:49:7b:c8:3d:56:22:3b:3c:0e: 92:a6:a3:27:9a:3c:d6:c8:e5:53:a8:e0:e0:60:f6: ed:05:a1:39:81:57:eb:c0:06:97:b5:42:b6:7a:57: 1c:00:a5:17:93:8c:80:ca:86:92:94:b0:6b:5c:b3: d2:d5:c7:bf:25:a0:ac:ff:bc:17:0f:60:29:d1:55: cf:77:a3:da:3c:12:32:8a:0b:c5:ca:a2:30:7d:7b: 32:3b:f6:46:eb:6e:90:f7:f0:33:fb:81:02:bd:82: 79:c1:76:a3:e4:c2:99:dc:b8:5b:11:d7:c9:d5:1f: 5a:0e:9a:c6:7e:8f:dd:f3:14:cb:7a:b8:23:78:f3: c3:3e:16:8f:80:6e:44:24:6f:74:cf:45:e6:70:21: 4c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4A:9F:F0:8D:2A:35:BC:41:CE:A7:7E:A5:9E:00:3B:CE:0F:CD:B4 X509v3 Authority Key Identifier: keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a316630303a3a2f34302d3438203d3e20323132353332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1f00::/40 Signature Algorithm: sha256WithRSAEncryption 15:6c:55:76:f6:78:6f:35:9a:c5:21:02:4b:38:84:4c:5a:dd: 5f:03:c2:0c:3b:ba:f5:a6:a0:8b:44:36:d8:b5:66:9b:8b:24: ff:68:8b:90:d1:9a:7e:ed:ea:d1:15:57:6c:e4:2d:ef:81:6c: 5c:49:3c:6c:ea:fd:af:b2:05:08:41:b4:95:31:f5:91:11:e4: 50:0e:b1:f0:d3:6c:63:36:1b:5d:6e:e0:5f:f7:40:7c:bb:f4: e3:ed:06:65:3f:81:8f:15:8b:16:25:50:40:a9:68:98:cc:5e: 80:a1:8c:4a:2f:93:bb:e7:65:75:67:57:0d:bb:80:86:6a:66: 94:36:23:8c:81:a0:d0:11:de:7d:f3:fb:79:48:8f:8c:39:79: b0:3e:58:27:8d:2c:a1:f6:2b:8e:eb:61:c1:f2:29:fc:ea:cc: 7c:66:f0:64:e9:0e:da:b2:3d:df:0f:f8:7f:a2:e9:bc:63:8c: 41:22:38:2d:e9:e3:e0:4d:a9:66:a0:56:e8:d7:d8:6d:7b:88: fe:7f:8a:43:94:da:4e:31:96:90:bd:bb:c5:a5:0b:aa:6e:25: 52:e3:fd:b1:e7:ad:01:c1:ee:8f:3d:a8:39:8a:43:65:9d:f1: b4:a4:51:c0:8d:2d:aa:9f:74:b1:2f:22:23:86:53:b0:74:38: 5c:da:90:3a -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUFQDCzQORLm/cCM039Jzm4CEj0dgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExZTJkNDExZDY4N2JjYjQ0NDljM2RmNDViZWVkYzA0 MTAwN2Q5NDAeFw0yNjAxMTcyMTE4MzNaFw0yNzAxMTYyMTIzMzNaMDMxMTAvBgNV BAMTKENBNEE5RkYwOEQyQTM1QkM0MUNFQTc3RUE1OUUwMDNCQ0UwRkNEQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJiDWOggZaeqhEdZ2GD3NgLYn3 3TyyfLYh6N8XFjaIhMLlBFbE9lO29Iisv+I96npY8HdpxoQNRHWcurY7p259UK4U Ed0Hp1tVYtrQOGSyAfI4/eadTFOByuMqSru7F8Z50KnAsrOgtGOSh0LqdEl7yD1W Ijs8DpKmoyeaPNbI5VOo4OBg9u0FoTmBV+vABpe1QrZ6VxwApReTjIDKhpKUsGtc s9LVx78loKz/vBcPYCnRVc93o9o8EjKKC8XKojB9ezI79kbrbpD38DP7gQK9gnnB dqPkwpncuFsR18nVH1oOmsZ+j93zFMt6uCN488M+Fo+AbkQkb3TPReZwIUxjAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUykqf8I0qNbxBzqd+pZ4AO84PzbQwHwYDVR0j BBgwFoAUQR4tQR1oe8tEScPfRb7twEEAfZQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0 ZjBlLzAvNDExRTJENDExRDY4N0JDQjQ0NDlDM0RGNDVCRUVEQzA0MTAwN0Q5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FSNHRRUjFvZTh0RVNjUGZSYjd0d0VF QWZaUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzMTY2MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzMjM1MzMzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoPHMUfMA0GCSqGSIb3DQEBCwUAA4IBAQAVbFV29nhvNZrFIQJL OIRMWt1fA8IMO7r1pqCLRDbYtWabiyT/aIuQ0Zp+7erRFVds5C3vgWxcSTxs6v2v sgUIQbSVMfWREeRQDrHw02xjNhtdbuBf90B8u/Tj7QZlP4GPFYsWJVBAqWiYzF6A oYxKL5O752V1Z1cNu4CGamaUNiOMgaDQEd598/t5SI+MOXmwPlgnjSyh9iuO62HB 8in86sx8ZvBk6Q7asj3fD/h/oum8Y4xBIjgt6ePgTalmoFbo19hte4j+f4pDlNpO MZaQvbvFpQuqbiVS4/2x560Bwe6PPag5ikNlnfG0pFHAjS2qn3SxLyIjhlOwdDhc 2pA6 -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:34 2026 by rpki-client