This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3530303a3a2f34302d3438203d3e20323037333137.roa File: 326130663a316363353a3530303a3a2f34302d3438203d3e20323037333137.roa (raw, json) Hash identifier: IlSzSHDNIZ6+6aFd92vwII4f0I4UgOAOOCbXoAxD+t0= Subject key identifier: 37:0B:55:93:4A:D3:5F:D1:59:66:EC:81:32:E0:B7:FD:21:79:01:D3 Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94 Certificate serial: 7D71543FBE240359E6579B5A765B40590ED14AB5 Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3530303a3a2f34302d3438203d3e20323037333137.roa Signing time: Sat 17 Jan 2026 21:18:11 +0000 ROA not before: Sat 17 Jan 2026 21:13:11 +0000 ROA not after: Sat 16 Jan 2027 21:18:11 +0000 asID: 207317 IP address blocks: 2a0f:1cc5:500::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:71:54:3f:be:24:03:59:e6:57:9b:5a:76:5b:40:59:0e:d1:4a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94 Validity Not Before: Jan 17 21:13:11 2026 GMT Not After : Jan 16 21:18:11 2027 GMT Subject: CN=370B55934AD35FD15966EC8132E0B7FD217901D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:91:48:f2:03:b2:38:1b:27:39:38:e3:60:8a: ee:74:e4:18:59:88:bb:3d:c3:25:04:96:c2:c0:aa: f6:9d:cc:2d:94:bb:ac:af:b2:49:24:17:d7:69:75: 3d:a1:04:5e:30:12:d9:24:e7:1a:93:47:c7:9c:9f: 68:f3:1f:b3:47:ef:52:bf:c9:96:5d:94:35:1e:02: 2d:7f:99:c8:f1:9b:53:66:3a:a3:9b:6c:60:16:0a: f6:80:6f:a1:f0:eb:f7:b4:b8:6d:19:7d:e5:69:e6: fc:c6:a3:c4:d3:a1:ae:5e:2d:49:60:3f:af:93:32: 20:ce:ee:bc:f0:a1:3e:5e:04:73:2c:4c:3b:a8:96: 6c:04:e6:c6:85:77:9f:f1:9c:48:8b:ba:3b:1c:55: c3:54:3e:c0:8f:0b:42:11:5e:79:d2:64:0c:13:2d: bb:d0:44:f8:e2:f4:92:8c:71:fe:3f:41:a1:55:d2: 18:fe:e7:19:73:9a:8d:5a:03:e5:9d:32:5f:76:74: 88:11:92:8b:36:83:d2:44:7f:15:5c:aa:88:11:ad: 19:57:ed:9d:89:a5:f9:17:89:8c:14:07:d6:07:a1: 16:47:48:1b:64:d3:e4:b5:81:55:56:5a:1a:63:29: 50:ce:b3:a0:6e:e4:a0:b6:9a:9a:9e:fc:e4:ef:e3: 42:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0B:55:93:4A:D3:5F:D1:59:66:EC:81:32:E0:B7:FD:21:79:01:D3 X509v3 Authority Key Identifier: keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3530303a3a2f34302d3438203d3e20323037333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:500::/40 Signature Algorithm: sha256WithRSAEncryption 07:e0:3d:b5:24:ff:ac:d6:7b:0d:3d:b4:b9:9f:06:a3:2a:fd: 9d:8d:cc:ff:c6:7b:48:3a:f8:5c:26:1d:ab:1f:ff:87:76:ea: 86:89:8c:a6:ae:eb:a1:89:79:5b:53:1b:67:62:5c:ac:59:cd: 81:ea:82:16:72:e2:4e:cc:cc:84:86:ec:11:57:21:56:8c:b8: 96:1c:88:20:56:89:6a:bc:b9:08:38:4e:6f:02:4b:d5:10:b6: ba:0b:ca:0c:39:68:86:0a:11:05:d7:82:88:7d:eb:10:f1:e2: 16:95:c7:ea:6f:2d:35:7a:d1:35:d3:d3:64:c0:e3:8b:fc:88: 5f:0a:f1:42:8e:f4:a9:29:32:fc:bc:ad:cf:b6:ae:8b:c3:f7: 5f:28:77:fe:51:97:f8:62:98:1c:1b:f6:18:40:b8:21:27:fb: 65:5e:89:c7:83:f1:8c:17:c9:45:5a:1c:95:70:c1:95:12:e4: 6c:b2:12:be:48:1b:4b:4b:e1:3d:87:73:27:e7:c5:9e:eb:48: eb:96:b9:2c:ca:12:d7:02:33:c7:45:1b:99:39:e4:7f:7b:47: 49:e2:dd:fa:15:53:35:56:32:b3:84:7f:c1:80:7c:43:78:72: 07:91:b8:33:c3:52:eb:15:f2:5e:44:ef:f5:13:6b:3f:54:22: df:85:61:7a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfXFUP74kA1nmV5tadltAWQ7RSrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExZTJkNDExZDY4N2JjYjQ0NDljM2RmNDViZWVkYzA0 MTAwN2Q5NDAeFw0yNjAxMTcyMTEzMTFaFw0yNzAxMTYyMTE4MTFaMDMxMTAvBgNV BAMTKDM3MEI1NTkzNEFEMzVGRDE1OTY2RUM4MTMyRTBCN0ZEMjE3OTAxRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpkUjyA7I4Gyc5OONgiu505BhZ iLs9wyUElsLAqvadzC2Uu6yvskkkF9dpdT2hBF4wEtkk5xqTR8ecn2jzH7NH71K/ yZZdlDUeAi1/mcjxm1NmOqObbGAWCvaAb6Hw6/e0uG0ZfeVp5vzGo8TToa5eLUlg P6+TMiDO7rzwoT5eBHMsTDuolmwE5saFd5/xnEiLujscVcNUPsCPC0IRXnnSZAwT LbvQRPji9JKMcf4/QaFV0hj+5xlzmo1aA+WdMl92dIgRkos2g9JEfxVcqogRrRlX 7Z2JpfkXiYwUB9YHoRZHSBtk0+S1gVVWWhpjKVDOs6Bu5KC2mpqe/OTv40KHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNwtVk0rTX9FZZuyBMuC3/SF5AdMwHwYDVR0j BBgwFoAUQR4tQR1oe8tEScPfRb7twEEAfZQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0 ZjBlLzAvNDExRTJENDExRDY4N0JDQjQ0NDlDM0RGNDVCRUVEQzA0MTAwN0Q5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FSNHRRUjFvZTh0RVNjUGZSYjd0d0VF QWZaUS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzNTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMwMzczMzMxMzcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAqDxzFBTANBgkqhkiG9w0BAQsFAAOCAQEAB+A9tST/rNZ7DT20uZ8G oyr9nY3M/8Z7SDr4XCYdqx//h3bqhomMpq7roYl5W1MbZ2JcrFnNgeqCFnLiTszM hIbsEVchVoy4lhyIIFaJary5CDhObwJL1RC2ugvKDDlohgoRBdeCiH3rEPHiFpXH 6m8tNXrRNdPTZMDji/yIXwrxQo70qSky/Lytz7aui8P3Xyh3/lGX+GKYHBv2GEC4 ISf7ZV6Jx4PxjBfJRVoclXDBlRLkbLISvkgbS0vhPYdzJ+fFnutI65a5LMoS1wIz x0UbmTnkf3tHSeLd+hVTNVYys4R/wYB8Q3hyB5G4M8NS6xXyXkTv9RNrP1Qi34Vh eg== -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:38 2026 by rpki-client