This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a326530303a3a2f34302d3438203d3e20323131373231.roa File: 326130663a316363353a326530303a3a2f34302d3438203d3e20323131373231.roa (raw, json) Hash identifier: BkW1C05jo1OHjmQfgh6BSthITjhcqgr7WoujWuOO764= Subject key identifier: ED:31:EA:9E:88:36:D1:E1:2E:76:1B:C3:94:DA:83:17:04:84:FE:55 Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94 Certificate serial: 3201387D1BC342420543BDAAE62297ED24826F1B Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a326530303a3a2f34302d3438203d3e20323131373231.roa Signing time: Sat 17 Jan 2026 21:21:47 +0000 ROA not before: Sat 17 Jan 2026 21:16:47 +0000 ROA not after: Sat 16 Jan 2027 21:21:47 +0000 asID: 211721 IP address blocks: 2a0f:1cc5:2e00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:01:38:7d:1b:c3:42:42:05:43:bd:aa:e6:22:97:ed:24:82:6f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94 Validity Not Before: Jan 17 21:16:47 2026 GMT Not After : Jan 16 21:21:47 2027 GMT Subject: CN=ED31EA9E8836D1E12E761BC394DA83170484FE55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d5:0d:ce:db:04:5b:ac:39:be:86:55:19:de: e7:a1:a1:2e:f7:f6:ec:a9:99:14:aa:7e:8a:fb:41: 98:c4:27:46:18:0e:89:df:bd:da:bf:eb:55:1b:1a: 80:4f:45:9f:c6:1a:eb:c3:67:8b:2f:b0:e4:4a:95: b8:1a:05:77:49:32:65:e4:40:8a:7a:9d:1d:8a:0e: c8:f1:89:64:a2:49:c9:f5:57:fb:65:98:7d:0c:be: e2:3d:20:54:e4:42:9f:3d:82:77:5a:c6:e2:43:75: 0f:22:5c:4a:2f:f8:e7:1e:05:31:2b:39:8c:c9:33: 3f:a8:69:f4:fc:f8:25:26:28:12:a2:5a:97:c3:bc: a1:11:74:2f:8e:f0:dd:ce:96:bf:61:8a:35:13:c6: 12:6b:b7:4d:0c:44:97:a5:5b:58:25:48:74:cd:7b: a6:b5:d5:3e:d9:5a:f9:bb:97:d5:c3:c8:5f:5c:f4: 9a:51:47:72:a9:89:e3:e5:13:09:aa:56:46:40:2b: 4c:06:db:29:26:81:29:30:79:ab:1f:5a:61:6a:05: 8b:70:d7:4f:bb:45:92:8f:8e:5c:e0:d7:63:8a:b1: 0e:81:b4:ed:3c:fc:d2:a8:b5:23:45:73:c6:4b:ca: 59:8b:e1:72:fc:30:d2:bd:ab:f3:15:b4:11:8f:93: db:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:31:EA:9E:88:36:D1:E1:2E:76:1B:C3:94:DA:83:17:04:84:FE:55 X509v3 Authority Key Identifier: keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a326530303a3a2f34302d3438203d3e20323131373231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:2e00::/40 Signature Algorithm: sha256WithRSAEncryption 2f:b6:ff:37:59:ec:46:31:93:80:40:57:1c:54:56:77:f0:c9: 5b:c7:d3:c5:ec:84:75:8d:53:43:7f:2d:ac:ef:c5:6f:15:fb: 0a:79:ac:4a:2b:97:3f:97:0e:fa:fa:01:b5:16:14:9f:0a:85: a7:df:15:f5:07:62:d2:1f:b3:4c:77:da:aa:b7:e7:7e:a1:d9: 03:85:6e:9b:fa:4d:d6:46:1d:1c:25:3d:a1:51:2a:b7:39:43: 73:e6:25:6e:be:07:59:15:bf:c4:20:a9:8c:1f:db:d1:6b:6a: 3b:64:88:fd:9c:54:6f:3a:f9:7a:4f:af:07:d4:c3:d6:51:0b: 59:db:a0:56:3d:8a:44:ed:00:bb:f3:45:47:37:68:90:ed:89: 12:22:ff:28:a6:34:60:48:f9:b8:a2:3e:ec:0a:88:64:ec:a8: 60:13:60:2a:2b:be:c5:29:5f:ac:61:e3:39:95:42:60:d9:59: 4a:ac:de:40:6e:1e:c4:71:76:3c:5f:bd:a5:1f:26:07:1f:3e: be:a6:a9:47:65:3c:c1:64:f4:4e:ee:e9:48:dd:44:10:8d:39: ae:3e:05:02:00:80:fc:0c:c3:2d:7b:0b:76:ec:3d:b4:2a:a0: f8:79:fa:ca:17:1c:7d:dc:a5:f4:d7:30:26:4a:3a:96:d3:7d: f7:6d:10:b3 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUMgE4fRvDQkIFQ72q5iKX7SSCbxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExZTJkNDExZDY4N2JjYjQ0NDljM2RmNDViZWVkYzA0 MTAwN2Q5NDAeFw0yNjAxMTcyMTE2NDdaFw0yNzAxMTYyMTIxNDdaMDMxMTAvBgNV BAMTKEVEMzFFQTlFODgzNkQxRTEyRTc2MUJDMzk0REE4MzE3MDQ4NEZFNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCD1Q3O2wRbrDm+hlUZ3uehoS73 9uypmRSqfor7QZjEJ0YYDonfvdq/61UbGoBPRZ/GGuvDZ4svsORKlbgaBXdJMmXk QIp6nR2KDsjxiWSiScn1V/tlmH0MvuI9IFTkQp89gndaxuJDdQ8iXEov+OceBTEr OYzJMz+oafT8+CUmKBKiWpfDvKERdC+O8N3Olr9hijUTxhJrt00MRJelW1glSHTN e6a11T7ZWvm7l9XDyF9c9JpRR3KpiePlEwmqVkZAK0wG2ykmgSkweasfWmFqBYtw 10+7RZKPjlzg12OKsQ6BtO08/NKotSNFc8ZLylmL4XL8MNK9q/MVtBGPk9vdAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQU7THqnog20eEudhvDlNqDFwSE/lUwHwYDVR0j BBgwFoAUQR4tQR1oe8tEScPfRb7twEEAfZQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0 ZjBlLzAvNDExRTJENDExRDY4N0JDQjQ0NDlDM0RGNDVCRUVEQzA0MTAwN0Q5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FSNHRRUjFvZTh0RVNjUGZSYjd0d0VF QWZaUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzMjY1MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzMTM3MzIzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoPHMUuMA0GCSqGSIb3DQEBCwUAA4IBAQAvtv83WexGMZOAQFcc VFZ38Mlbx9PF7IR1jVNDfy2s78VvFfsKeaxKK5c/lw76+gG1FhSfCoWn3xX1B2LS H7NMd9qqt+d+odkDhW6b+k3WRh0cJT2hUSq3OUNz5iVuvgdZFb/EIKmMH9vRa2o7 ZIj9nFRvOvl6T68H1MPWUQtZ26BWPYpE7QC780VHN2iQ7YkSIv8opjRgSPm4oj7s Cohk7KhgE2AqK77FKV+sYeM5lUJg2VlKrN5Abh7EcXY8X72lHyYHHz6+pqlHZTzB ZPRO7ulI3UQQjTmuPgUCAID8DMMtewt27D20KqD4efrKFxx93KX01zAmSjqW0333 bRCz -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:29 2026 by rpki-client