This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa File: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (raw, json) Hash identifier: rra7K6FfnmdhsuCKYcUdQImHwFvo7h9/pjiSjqvVfjg= Subject key identifier: 16:99:AB:9E:1F:2F:31:6C:A0:4D:B0:16:C2:CD:D1:2B:B8:44:1B:25 Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94 Certificate serial: 341981A98AF588E3ADDFBD5F9BFC4329F57A8F50 Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa Signing time: Sat 17 Jan 2026 21:10:58 +0000 ROA not before: Sat 17 Jan 2026 21:05:58 +0000 ROA not after: Sat 16 Jan 2027 21:10:58 +0000 asID: 202335 IP address blocks: 2a0f:1cc5:2600::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:19:81:a9:8a:f5:88:e3:ad:df:bd:5f:9b:fc:43:29:f5:7a:8f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94 Validity Not Before: Jan 17 21:05:58 2026 GMT Not After : Jan 16 21:10:58 2027 GMT Subject: CN=1699AB9E1F2F316CA04DB016C2CDD12BB8441B25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7c:d5:f7:d6:e1:a8:a8:6b:7d:aa:9d:b7:3a: 57:42:ca:b2:ae:af:b8:ae:7a:21:69:71:bc:89:f7: 18:3e:75:b1:91:22:a3:34:65:08:ef:5c:39:40:2b: 4a:cd:a9:33:27:ab:27:93:93:1d:f1:05:f1:b1:88: f7:d4:25:53:69:80:65:5f:74:dc:df:d6:27:d5:c8: 8d:72:bb:d7:d8:37:ee:e9:a9:43:bd:6e:0b:fb:c2: c3:02:e1:f6:6c:33:ce:f0:e4:d7:e3:e5:1d:00:21: 85:46:e1:46:75:d9:6f:55:61:f3:b9:a8:e6:bf:67: 4a:af:e4:85:d1:e1:db:1d:a5:5a:2b:0c:99:c9:d0: aa:f2:ca:9d:73:6c:6d:3a:c3:97:a9:39:9c:1d:3c: 73:b0:59:8d:56:82:73:45:dc:84:0b:3d:41:8b:dd: 1d:6a:a6:b0:5e:40:8c:0b:de:67:ca:ed:bb:34:64: 55:18:ff:cd:ea:26:3f:a0:6d:bd:b8:7c:d9:20:9d: 03:17:e8:e8:42:aa:f1:e1:ad:29:4c:71:51:0c:41: ef:62:55:dc:60:ab:15:90:6f:63:18:fd:de:47:6f: d9:a3:55:16:a4:a4:2c:40:04:13:3b:d0:ab:64:db: a2:ae:54:fe:d0:69:48:34:5e:ee:02:bc:ff:f9:d1: 72:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:99:AB:9E:1F:2F:31:6C:A0:4D:B0:16:C2:CD:D1:2B:B8:44:1B:25 X509v3 Authority Key Identifier: keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:2600::/40 Signature Algorithm: sha256WithRSAEncryption 5a:a4:45:db:37:96:41:51:48:ca:a8:cb:88:3a:ff:ff:6a:a6: 49:e8:8b:51:d6:9a:43:d8:1a:08:cf:9e:1c:34:37:af:fb:fc: de:92:6d:d7:5b:b8:b0:a3:5e:74:16:b2:d3:cb:7d:93:04:53: fc:e1:30:95:13:ed:e3:9c:c2:35:e0:af:77:83:29:d6:3b:07: cf:4c:e6:f2:a2:77:c7:38:6d:94:03:0d:6a:4a:de:55:1b:a9: a5:c5:c9:41:ba:ce:fe:17:03:fd:75:9f:a9:7c:88:e1:fd:ca: 2d:5a:9e:cf:7d:c6:08:b7:8e:ad:7f:c7:f6:0a:ba:1a:7c:2a: b3:c2:c3:d6:1e:61:51:3f:84:f6:b6:61:4a:fa:d5:68:8f:ed: 4f:4c:25:0b:22:1e:a5:47:1c:bc:b0:13:b7:c5:78:21:5f:c6: 47:8b:df:c4:4c:b6:6b:07:f8:93:ee:d6:4b:60:2b:33:ad:a7: 31:66:ac:f7:3d:5e:4e:c2:54:c8:01:d8:65:1c:03:b7:f4:23: 51:71:20:f4:a1:fb:71:fc:1c:82:10:3b:72:8d:fc:25:ff:44: a5:ed:9b:80:1c:a1:92:36:b3:b2:aa:0d:32:51:c0:58:dd:4f: 12:24:87:63:51:36:56:5a:4d:c7:2b:de:67:43:7c:61:22:94: f7:9f:c1:74 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUNBmBqYr1iOOt371fm/xDKfV6j1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExZTJkNDExZDY4N2JjYjQ0NDljM2RmNDViZWVkYzA0 MTAwN2Q5NDAeFw0yNjAxMTcyMTA1NThaFw0yNzAxMTYyMTEwNThaMDMxMTAvBgNV BAMTKDE2OTlBQjlFMUYyRjMxNkNBMDREQjAxNkMyQ0REMTJCQjg0NDFCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKfNX31uGoqGt9qp23OldCyrKu r7iueiFpcbyJ9xg+dbGRIqM0ZQjvXDlAK0rNqTMnqyeTkx3xBfGxiPfUJVNpgGVf dNzf1ifVyI1yu9fYN+7pqUO9bgv7wsMC4fZsM87w5Nfj5R0AIYVG4UZ12W9VYfO5 qOa/Z0qv5IXR4dsdpVorDJnJ0Kryyp1zbG06w5epOZwdPHOwWY1WgnNF3IQLPUGL 3R1qprBeQIwL3mfK7bs0ZFUY/83qJj+gbb24fNkgnQMX6OhCqvHhrSlMcVEMQe9i VdxgqxWQb2MY/d5Hb9mjVRakpCxABBM70Ktk26KuVP7QaUg0Xu4CvP/50XK/AgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUFpmrnh8vMWygTbAWws3RK7hEGyUwHwYDVR0j BBgwFoAUQR4tQR1oe8tEScPfRb7twEEAfZQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0 ZjBlLzAvNDExRTJENDExRDY4N0JDQjQ0NDlDM0RGNDVCRUVEQzA0MTAwN0Q5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FSNHRRUjFvZTh0RVNjUGZSYjd0d0VF QWZaUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzMjM2MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMjMzMzMzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoPHMUmMA0GCSqGSIb3DQEBCwUAA4IBAQBapEXbN5ZBUUjKqMuI Ov//aqZJ6ItR1ppD2BoIz54cNDev+/zekm3XW7iwo150FrLTy32TBFP84TCVE+3j nMI14K93gynWOwfPTObyonfHOG2UAw1qSt5VG6mlxclBus7+FwP9dZ+pfIjh/cot Wp7PfcYIt46tf8f2CroafCqzwsPWHmFRP4T2tmFK+tVoj+1PTCULIh6lRxy8sBO3 xXghX8ZHi9/ETLZrB/iT7tZLYCszracxZqz3PV5OwlTIAdhlHAO39CNRcSD0oftx /ByCEDtyjfwl/0Sl7ZuAHKGSNrOyqg0yUcBY3U8SJIdjUTZWWk3HK95nQ3xhIpT3 n8F0 -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:36 2026 by rpki-client