This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3230303a3a2f34302d3438203d3e20323135313732.roa File: 326130663a316363353a3230303a3a2f34302d3438203d3e20323135313732.roa (raw, json) Hash identifier: KBjHfA9kjqW8OLDitF/Wf34xfbXVf7rNOb2IaI6UkFY= Subject key identifier: 17:E6:D2:AB:F7:1E:23:D7:6F:42:8C:7B:F4:41:49:D5:4E:F4:13:26 Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94 Certificate serial: 79F975BCC9EC55A369F506F14E8ECA10CD337778 Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3230303a3a2f34302d3438203d3e20323135313732.roa Signing time: Sat 17 Jan 2026 21:28:39 +0000 ROA not before: Sat 17 Jan 2026 21:23:39 +0000 ROA not after: Sat 16 Jan 2027 21:28:39 +0000 asID: 215172 IP address blocks: 2a0f:1cc5:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f9:75:bc:c9:ec:55:a3:69:f5:06:f1:4e:8e:ca:10:cd:33:77:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94 Validity Not Before: Jan 17 21:23:39 2026 GMT Not After : Jan 16 21:28:39 2027 GMT Subject: CN=17E6D2ABF71E23D76F428C7BF44149D54EF41326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4d:ae:97:2a:31:b5:d9:b1:72:6b:63:79:aa: a9:6c:77:73:fb:33:b5:2f:af:d7:e7:20:65:5d:18: e6:20:61:90:32:f5:aa:2a:0d:6e:a3:73:54:ee:86: cd:d7:b7:f5:0a:f2:e3:2d:04:77:df:f0:c5:91:92: b3:3c:9e:b1:77:0f:00:3f:c8:66:47:ad:e6:05:cb: fb:0b:b2:f5:3c:56:9b:18:76:7e:79:64:38:cf:33: e3:f4:73:6e:3c:1f:7e:1f:18:0c:4c:e3:96:2d:41: 54:48:8b:86:83:ef:46:fc:b0:5c:11:c0:9c:90:37: a9:df:df:32:f5:d0:51:66:9d:5a:a2:b8:f5:6a:17: 45:9b:71:32:a7:e2:0f:bf:a4:ac:4f:b5:38:63:7f: a8:8f:dd:07:ae:b6:b3:05:ea:69:fc:a9:f7:35:b2: 2e:d4:99:04:62:a0:ea:b2:25:43:0f:06:2f:fe:03: 3e:b1:26:68:5a:f8:91:d7:f8:3e:1b:de:28:c9:97: 8a:f5:1f:43:94:f8:a7:96:3f:2d:a9:c9:a7:1a:f1: 2f:56:4b:f8:1d:50:58:6b:01:c8:31:3f:ca:05:6c: cd:89:9a:1c:62:99:97:3e:19:7e:78:8b:89:7e:eb: 80:43:df:92:29:c5:16:80:2b:59:4d:6e:5f:df:0d: 45:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E6:D2:AB:F7:1E:23:D7:6F:42:8C:7B:F4:41:49:D5:4E:F4:13:26 X509v3 Authority Key Identifier: keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3230303a3a2f34302d3438203d3e20323135313732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:200::/40 Signature Algorithm: sha256WithRSAEncryption 7d:e5:e4:01:4f:8c:fb:5f:1d:36:26:d6:ca:b1:80:db:20:94: 77:7b:47:88:ed:3d:26:78:02:e5:6d:7b:f4:c7:c5:16:3d:54: 6f:0a:ba:87:ce:ba:96:e9:b3:5f:bd:23:1f:24:4a:03:bb:a1: 63:e0:4b:f2:66:65:49:1a:21:48:0d:43:87:11:42:2f:66:42: 1d:6a:14:4c:90:eb:3f:8e:14:16:d0:85:50:e0:7f:a1:77:7d: 9c:ef:97:07:78:d6:e5:99:98:9b:4f:5f:97:ff:d1:68:40:c9: a0:24:0b:6f:78:ff:70:aa:52:80:76:30:7d:2b:6d:1f:d4:4a: b4:53:d9:fb:fd:a6:af:18:ff:eb:9a:df:c4:17:4e:53:85:d6: 54:29:ec:d3:52:f6:b5:23:a1:8d:39:10:f6:5a:ae:97:be:65: 49:80:63:db:82:56:52:05:63:3d:e4:54:4b:32:29:15:a2:48: da:d0:ba:cf:24:5e:78:64:3f:f3:95:c6:e1:a0:2c:b1:ff:32: 8a:ec:ac:44:f6:d5:57:7d:cc:64:0d:70:5d:21:79:e5:e5:42: 76:86:43:10:90:43:21:7a:f7:00:0f:8c:f6:66:d7:e1:ca:de: ac:19:c4:9b:f0:45:29:e7:4d:21:a9:ba:49:26:91:c1:3c:f9: 89:9d:6a:72 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUefl1vMnsVaNp9QbxTo7KEM0zd3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExZTJkNDExZDY4N2JjYjQ0NDljM2RmNDViZWVkYzA0 MTAwN2Q5NDAeFw0yNjAxMTcyMTIzMzlaFw0yNzAxMTYyMTI4MzlaMDMxMTAvBgNV BAMTKDE3RTZEMkFCRjcxRTIzRDc2RjQyOEM3QkY0NDE0OUQ1NEVGNDEzMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Ta6XKjG12bFya2N5qqlsd3P7 M7Uvr9fnIGVdGOYgYZAy9aoqDW6jc1Tuhs3Xt/UK8uMtBHff8MWRkrM8nrF3DwA/ yGZHreYFy/sLsvU8VpsYdn55ZDjPM+P0c248H34fGAxM45YtQVRIi4aD70b8sFwR wJyQN6nf3zL10FFmnVqiuPVqF0WbcTKn4g+/pKxPtThjf6iP3QeutrMF6mn8qfc1 si7UmQRioOqyJUMPBi/+Az6xJmha+JHX+D4b3ijJl4r1H0OU+KeWPy2pyaca8S9W S/gdUFhrAcgxP8oFbM2JmhximZc+GX54i4l+64BD35IpxRaAK1lNbl/fDUWnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUF+bSq/ceI9dvQox79EFJ1U70EyYwHwYDVR0j BBgwFoAUQR4tQR1oe8tEScPfRb7twEEAfZQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0 ZjBlLzAvNDExRTJENDExRDY4N0JDQjQ0NDlDM0RGNDVCRUVEQzA0MTAwN0Q5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FSNHRRUjFvZTh0RVNjUGZSYjd0d0VF QWZaUS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzMjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMxMzUzMTM3MzIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAqDxzFAjANBgkqhkiG9w0BAQsFAAOCAQEAfeXkAU+M+18dNibWyrGA 2yCUd3tHiO09JngC5W179MfFFj1Ubwq6h866lumzX70jHyRKA7uhY+BL8mZlSRoh SA1DhxFCL2ZCHWoUTJDrP44UFtCFUOB/oXd9nO+XB3jW5ZmYm09fl//RaEDJoCQL b3j/cKpSgHYwfSttH9RKtFPZ+/2mrxj/65rfxBdOU4XWVCns01L2tSOhjTkQ9lqu l75lSYBj24JWUgVjPeRUSzIpFaJI2tC6zyReeGQ/85XG4aAssf8yiuysRPbVV33M ZA1wXSF55eVCdoZDEJBDIXr3AA+M9mbX4crerBnEm/BFKedNIam6SSaRwTz5iZ1q cg== -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:38 2026 by rpki-client