This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a326330303a3a2f34302d3438203d3e20323132343235.roa File: 326130663a316363353a326330303a3a2f34302d3438203d3e20323132343235.roa (raw, json) Hash identifier: FHO6yQdE9pVoMQZDbmdnV97e+QL5O1Qj0xNfbrOZSso= Subject key identifier: 60:B9:20:43:E0:A1:12:33:ED:72:BC:A3:70:13:7B:2D:AF:A4:06:0B Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94 Certificate serial: 28842646432FC2E9C9CDAC3B56C5388B80CADD53 Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a326330303a3a2f34302d3438203d3e20323132343235.roa Signing time: Sat 17 Jan 2026 21:22:45 +0000 ROA not before: Sat 17 Jan 2026 21:17:45 +0000 ROA not after: Sat 16 Jan 2027 21:22:45 +0000 asID: 212425 IP address blocks: 2a0f:1cc5:2c00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:84:26:46:43:2f:c2:e9:c9:cd:ac:3b:56:c5:38:8b:80:ca:dd:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94 Validity Not Before: Jan 17 21:17:45 2026 GMT Not After : Jan 16 21:22:45 2027 GMT Subject: CN=60B92043E0A11233ED72BCA370137B2DAFA4060B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7e:11:07:39:23:32:39:58:5d:67:87:af:7a: 13:1f:ec:a3:40:c0:f5:15:8b:3a:eb:b5:15:99:61: 85:21:b2:a2:1a:de:98:99:f3:81:4e:96:85:5c:97: 45:fb:bc:36:af:12:d3:43:cc:db:52:c1:cc:86:39: 0c:fc:6e:c9:dc:c1:87:d3:05:1b:e6:a6:d1:3b:d3: 2f:0c:47:37:18:7b:7b:b3:bc:f2:8c:50:65:4c:73: 9e:b3:76:53:77:40:7a:2f:9c:db:2b:26:fc:78:09: f4:95:c7:41:2f:d0:a3:8b:04:ab:47:4d:74:47:6e: 13:61:2a:2b:45:33:2c:53:f9:65:ee:db:da:af:d3: 01:a3:da:4e:59:2d:77:b8:da:60:db:a5:56:5f:35: da:14:9f:95:d0:4f:51:19:4d:d2:fa:c0:25:a9:d7: 9f:16:92:d9:10:ff:d7:58:7f:e9:28:81:02:df:cc: 6a:50:67:d6:9e:54:75:78:9d:2c:f0:8d:34:e9:5a: 7d:88:da:bc:05:83:2d:06:2a:33:68:04:2f:aa:00: 59:22:e4:10:21:d5:fe:96:d2:f0:41:92:87:2e:0c: 9d:2e:1e:be:4e:ac:d1:02:75:7d:c0:23:56:19:43: 5a:bc:a5:b9:c4:cd:6e:55:bb:4c:b5:ac:45:79:f1: 40:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B9:20:43:E0:A1:12:33:ED:72:BC:A3:70:13:7B:2D:AF:A4:06:0B X509v3 Authority Key Identifier: keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a326330303a3a2f34302d3438203d3e20323132343235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:2c00::/40 Signature Algorithm: sha256WithRSAEncryption 50:9f:e7:58:3a:7d:18:e9:9a:75:77:2c:35:b5:96:88:9b:d2: 58:35:7f:48:bf:d6:f5:61:78:15:72:87:5c:8f:65:f8:7d:94: a6:08:a5:8e:b8:9c:f3:5b:f0:14:93:c8:71:bf:41:f8:5f:aa: 1b:7b:76:84:33:a4:82:3a:4a:e7:05:b9:13:53:4d:d3:c7:36: 92:5b:0c:e0:73:a6:ad:b7:87:29:4e:07:3f:40:d4:55:9b:9a: 00:f1:ed:c7:c0:10:84:78:2b:c1:1b:d8:ab:22:42:51:e4:b7: 3e:44:e8:0e:ed:b5:38:98:58:1b:5c:db:0e:9f:02:87:f1:55: ac:27:d8:f7:24:db:a6:33:b7:81:0a:bb:6b:48:68:d5:67:07: 87:bd:c4:ae:ad:64:30:16:90:4c:99:70:21:0e:b3:7c:b4:d3: ce:76:4f:fa:8a:22:fc:0d:54:94:c3:86:17:67:36:6c:c4:ac: 99:11:07:98:f7:18:0e:2b:c2:d3:6c:f3:3d:61:89:89:b0:5f: ad:78:94:cb:fb:df:62:eb:f5:c8:41:23:8c:d4:e5:89:3a:6f: 04:a6:8a:a5:16:15:97:e2:e7:59:8e:94:79:ab:92:74:e7:f1: 3c:4c:b3:c0:c4:e2:b1:46:61:1f:02:17:bc:29:9b:ea:44:41: ee:02:69:b2 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUKIQmRkMvwunJzaw7VsU4i4DK3VMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExZTJkNDExZDY4N2JjYjQ0NDljM2RmNDViZWVkYzA0 MTAwN2Q5NDAeFw0yNjAxMTcyMTE3NDVaFw0yNzAxMTYyMTIyNDVaMDMxMTAvBgNV BAMTKDYwQjkyMDQzRTBBMTEyMzNFRDcyQkNBMzcwMTM3QjJEQUZBNDA2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQfhEHOSMyOVhdZ4evehMf7KNA wPUVizrrtRWZYYUhsqIa3piZ84FOloVcl0X7vDavEtNDzNtSwcyGOQz8bsncwYfT BRvmptE70y8MRzcYe3uzvPKMUGVMc56zdlN3QHovnNsrJvx4CfSVx0Ev0KOLBKtH TXRHbhNhKitFMyxT+WXu29qv0wGj2k5ZLXe42mDbpVZfNdoUn5XQT1EZTdL6wCWp 158WktkQ/9dYf+kogQLfzGpQZ9aeVHV4nSzwjTTpWn2I2rwFgy0GKjNoBC+qAFki 5BAh1f6W0vBBkocuDJ0uHr5OrNECdX3AI1YZQ1q8pbnEzW5Vu0y1rEV58UDzAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUYLkgQ+ChEjPtcryjcBN7La+kBgswHwYDVR0j BBgwFoAUQR4tQR1oe8tEScPfRb7twEEAfZQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0 ZjBlLzAvNDExRTJENDExRDY4N0JDQjQ0NDlDM0RGNDVCRUVEQzA0MTAwN0Q5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FSNHRRUjFvZTh0RVNjUGZSYjd0d0VF QWZaUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzMjYzMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzMjM0MzIzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoPHMUsMA0GCSqGSIb3DQEBCwUAA4IBAQBQn+dYOn0Y6Zp1dyw1 tZaIm9JYNX9Iv9b1YXgVcodcj2X4fZSmCKWOuJzzW/AUk8hxv0H4X6obe3aEM6SC OkrnBbkTU03TxzaSWwzgc6att4cpTgc/QNRVm5oA8e3HwBCEeCvBG9irIkJR5Lc+ ROgO7bU4mFgbXNsOnwKH8VWsJ9j3JNumM7eBCrtrSGjVZweHvcSurWQwFpBMmXAh DrN8tNPOdk/6iiL8DVSUw4YXZzZsxKyZEQeY9xgOK8LTbPM9YYmJsF+teJTL+99i 6/XIQSOM1OWJOm8EpoqlFhWX4udZjpR5q5J05/E8TLPAxOKxRmEfAhe8KZvqREHu Ammy -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:35 2026 by rpki-client