This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323930303a3a2f34302d3438203d3e20323030303738.roa File: 326130663a316363353a323930303a3a2f34302d3438203d3e20323030303738.roa (raw, json) Hash identifier: glctOSn6s4Xj9+H9ebH8OBXBfYfFT2hJPUufn2SZLJY= Subject key identifier: 5B:D7:9D:4B:00:07:C9:46:1A:CF:23:45:2C:32:D3:41:6D:9B:97:DF Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94 Certificate serial: 7F2E3B1E96B453543923D2C69B26FD0B1A39AF2F Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323930303a3a2f34302d3438203d3e20323030303738.roa Signing time: Sat 17 Jan 2026 21:10:13 +0000 ROA not before: Sat 17 Jan 2026 21:05:13 +0000 ROA not after: Sat 16 Jan 2027 21:10:13 +0000 asID: 200078 IP address blocks: 2a0f:1cc5:2900::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:2e:3b:1e:96:b4:53:54:39:23:d2:c6:9b:26:fd:0b:1a:39:af:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94 Validity Not Before: Jan 17 21:05:13 2026 GMT Not After : Jan 16 21:10:13 2027 GMT Subject: CN=5BD79D4B0007C9461ACF23452C32D3416D9B97DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:7b:90:2b:30:de:80:4b:93:a3:05:97:8e: 37:7b:3e:c1:4d:13:33:6d:89:70:63:fb:e4:13:a5: 6d:fd:15:00:9c:5e:5c:b3:16:50:01:ad:50:48:01: e8:8e:48:d9:31:3e:e3:a9:6e:b1:85:0f:d1:3d:f4: af:2a:73:b5:ef:83:06:d6:57:56:9c:aa:f7:e7:4f: 92:f4:dc:2e:2d:9d:78:ff:87:69:b9:21:33:7b:ea: 59:c3:9a:18:33:86:2b:07:53:07:3b:c0:92:7b:f4: 3d:fd:fb:b9:bc:b6:dc:ce:4c:bb:c6:2f:28:a4:e9: f7:dc:8b:27:f2:32:a7:19:f2:66:d4:3b:8d:37:35: 96:cd:59:19:4e:61:70:54:19:49:a4:1e:e6:99:59: 5b:dc:27:ec:d5:c9:c1:6d:fb:66:7e:a6:1a:88:29: f1:6e:98:5d:01:3a:34:bc:6e:5b:85:77:e5:21:3b: f0:16:fe:b6:d7:eb:4f:eb:a8:95:a6:86:06:23:9d: 42:64:b8:0c:96:aa:36:98:96:46:2c:73:36:af:26: d9:65:81:4e:7b:da:24:92:ce:27:54:f8:67:7e:b3: 1a:9b:6b:d9:50:56:1e:4d:bf:4f:14:17:72:41:f7: 12:e7:36:f2:e8:ec:5d:ec:7b:b6:1f:96:05:63:f5: b1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D7:9D:4B:00:07:C9:46:1A:CF:23:45:2C:32:D3:41:6D:9B:97:DF X509v3 Authority Key Identifier: keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a323930303a3a2f34302d3438203d3e20323030303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:2900::/40 Signature Algorithm: sha256WithRSAEncryption 5e:69:cb:56:2a:d2:dd:eb:63:0b:3c:4a:ed:58:ff:f5:7a:79: b7:24:28:e5:ed:b2:97:db:ae:4f:f2:ba:56:8a:6f:51:65:ae: 98:3f:f6:f1:3f:c4:06:9d:18:62:4a:39:8c:a0:b2:07:3f:77: b9:59:30:05:e9:70:f9:8e:dd:4b:41:17:6f:5f:8f:53:43:88: 1d:35:69:1e:a2:9c:6a:ed:e5:91:b2:95:2b:f0:17:43:34:26: d4:1a:13:2a:62:92:60:ca:aa:a7:65:ab:21:52:0d:ab:36:bc: b2:7a:39:e6:c3:4b:72:b6:85:b3:f2:e7:ad:fb:b3:f9:40:43: 07:bb:3f:8d:b5:c4:61:98:8e:c1:9e:a5:24:9f:9c:c9:a9:78: 25:88:9b:df:79:65:e9:7f:f2:22:5b:94:ea:97:c4:52:3a:4d: 59:37:a1:28:89:00:92:1d:06:4a:29:89:e0:c9:af:35:ec:fe: 4b:3d:0f:67:4f:6b:12:f9:3a:5f:0d:27:92:21:a2:0c:f3:21: 63:d0:ae:e2:1e:85:1b:72:ef:0a:48:e1:bf:cb:59:0b:9c:d4: 91:5a:30:8e:db:20:22:fc:a8:38:2e:9b:1f:4e:34:37:00:11: 5b:d6:f7:5d:5b:ec:dc:bb:0b:61:0a:0c:30:09:0f:e9:ac:69: b3:65:b3:a1 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUfy47Hpa0U1Q5I9LGmyb9Cxo5ry8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExZTJkNDExZDY4N2JjYjQ0NDljM2RmNDViZWVkYzA0 MTAwN2Q5NDAeFw0yNjAxMTcyMTA1MTNaFw0yNzAxMTYyMTEwMTNaMDMxMTAvBgNV BAMTKDVCRDc5RDRCMDAwN0M5NDYxQUNGMjM0NTJDMzJEMzQxNkQ5Qjk3REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwYXuQKzDegEuTowWXjjd7PsFN EzNtiXBj++QTpW39FQCcXlyzFlABrVBIAeiOSNkxPuOpbrGFD9E99K8qc7XvgwbW V1acqvfnT5L03C4tnXj/h2m5ITN76lnDmhgzhisHUwc7wJJ79D39+7m8ttzOTLvG Lyik6ffciyfyMqcZ8mbUO403NZbNWRlOYXBUGUmkHuaZWVvcJ+zVycFt+2Z+phqI KfFumF0BOjS8bluFd+UhO/AW/rbX60/rqJWmhgYjnUJkuAyWqjaYlkYsczavJtll gU572iSSzidU+Gd+sxqba9lQVh5Nv08UF3JB9xLnNvLo7F3se7YflgVj9bFlAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUW9edSwAHyUYazyNFLDLTQW2bl98wHwYDVR0j BBgwFoAUQR4tQR1oe8tEScPfRb7twEEAfZQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0 ZjBlLzAvNDExRTJENDExRDY4N0JDQjQ0NDlDM0RGNDVCRUVEQzA0MTAwN0Q5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FSNHRRUjFvZTh0RVNjUGZSYjd0d0VF QWZaUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzMjM5MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMDMwMzczOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoPHMUpMA0GCSqGSIb3DQEBCwUAA4IBAQBeactWKtLd62MLPErt WP/1enm3JCjl7bKX265P8rpWim9RZa6YP/bxP8QGnRhiSjmMoLIHP3e5WTAF6XD5 jt1LQRdvX49TQ4gdNWkeopxq7eWRspUr8BdDNCbUGhMqYpJgyqqnZashUg2rNryy ejnmw0tytoWz8uet+7P5QEMHuz+NtcRhmI7BnqUkn5zJqXgliJvfeWXpf/IiW5Tq l8RSOk1ZN6EoiQCSHQZKKYngya817P5LPQ9nT2sS+TpfDSeSIaIM8yFj0K7iHoUb cu8KSOG/y1kLnNSRWjCO2yAi/Kg4LpsfTjQ3ABFb1vddW+zcuwthCgwwCQ/prGmz ZbOh -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:37 2026 by rpki-client