This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3730303a3a2f34302d3438203d3e20323034303731.roa File: 326130663a316363353a3730303a3a2f34302d3438203d3e20323034303731.roa (raw, json) Hash identifier: a9VTadKi3X1qXhii/AdM18H2c+kqhz05BGXKnS6Oxrw= Subject key identifier: 51:44:A6:D2:4A:76:70:7C:CA:48:68:22:28:F2:9E:23:67:74:B7:0B Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94 Certificate serial: 04C765E60322DB2A7E86C79E56C352282E886D6C Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3730303a3a2f34302d3438203d3e20323034303731.roa Signing time: Sat 17 Jan 2026 21:14:22 +0000 ROA not before: Sat 17 Jan 2026 21:09:22 +0000 ROA not after: Sat 16 Jan 2027 21:14:22 +0000 asID: 204071 IP address blocks: 2a0f:1cc5:700::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c7:65:e6:03:22:db:2a:7e:86:c7:9e:56:c3:52:28:2e:88:6d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94 Validity Not Before: Jan 17 21:09:22 2026 GMT Not After : Jan 16 21:14:22 2027 GMT Subject: CN=5144A6D24A76707CCA48682228F29E236774B70B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e4:d2:47:16:29:c9:96:f8:69:fb:bd:ed:1a: 75:72:7e:85:48:62:ae:cb:8a:9c:f8:47:c0:65:1c: 3d:a4:95:83:e9:a7:f7:e3:86:d6:16:68:65:b2:41: 08:dc:45:12:05:31:4d:95:71:19:24:28:f0:a8:73: d0:68:e9:b5:00:34:90:9c:66:cd:e5:02:b7:e8:4c: 9b:33:e1:84:ac:91:a3:a0:e1:08:0c:3d:be:3c:1f: 3a:34:78:8e:ea:2e:0a:85:71:d3:45:14:6b:96:a8: bc:44:1b:30:6d:37:98:c3:17:9d:32:0c:5e:2b:e6: 91:4c:18:da:34:47:4b:8b:2f:81:b1:3c:6f:79:90: b0:ad:82:e9:32:08:e8:19:1b:1f:5f:cc:c6:19:db: a7:06:04:67:e9:61:82:b2:7f:a2:26:51:56:4a:c3: 92:40:f0:52:71:88:23:d7:36:e6:af:86:50:d3:f2: cf:17:32:48:d9:82:f0:16:6c:d6:86:07:12:94:d3: 4a:45:70:cb:86:b0:24:ea:fc:4c:62:51:be:25:d3: f1:3c:52:e5:a7:92:8f:7b:4d:78:4d:c9:77:21:a1: 9b:62:97:97:e7:cb:91:fb:20:6c:19:80:31:90:d1: 8d:fa:f3:b5:4c:0d:f2:ee:f4:19:25:03:d2:a8:d0: cc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:44:A6:D2:4A:76:70:7C:CA:48:68:22:28:F2:9E:23:67:74:B7:0B X509v3 Authority Key Identifier: keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a3730303a3a2f34302d3438203d3e20323034303731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:700::/40 Signature Algorithm: sha256WithRSAEncryption 55:55:f6:29:55:9f:a9:e2:28:ae:b5:d8:76:f5:22:a1:d5:86: 5b:34:7c:4b:b1:dc:f0:53:97:9e:89:e5:da:97:20:c0:75:e1: 41:fd:8b:bd:d9:01:f6:3c:46:2a:ce:3b:59:8b:22:68:c5:60: 14:17:c9:5f:c0:4e:26:bb:e5:d5:c1:b8:d7:02:44:6b:22:8f: aa:4e:f9:ad:56:2d:70:7d:70:95:0e:52:b3:05:3d:17:18:9e: 30:cb:26:24:86:08:57:36:6d:0e:51:cd:27:6a:58:1d:8c:0f: 33:96:18:6a:e4:f8:7f:08:0e:a2:b4:f3:b8:b3:d1:1f:42:2d: 96:ef:e4:79:54:75:eb:11:e1:a0:58:f5:33:23:3b:fd:04:45: 64:66:00:eb:57:b0:a8:fd:a3:aa:da:84:1d:f5:e9:61:3a:8a: 8f:dc:8b:b9:3a:38:94:bf:60:e9:10:f3:36:5e:e4:a3:a3:9f: 28:d0:0e:65:85:6b:36:87:94:9f:fe:de:62:01:ec:ac:2e:16: ec:38:b1:16:35:ad:7e:8e:2a:b8:67:b9:ba:d6:15:b7:67:79: fb:d9:61:8b:11:9f:9e:b8:a7:a5:c0:4e:e9:9d:31:2e:ef:8f: d2:f5:70:c7:11:76:94:7c:f0:5b:c3:ff:ba:25:90:80:21:ba: a5:8d:80:d9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBMdl5gMi2yp+hseeVsNSKC6IbWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExZTJkNDExZDY4N2JjYjQ0NDljM2RmNDViZWVkYzA0 MTAwN2Q5NDAeFw0yNjAxMTcyMTA5MjJaFw0yNzAxMTYyMTE0MjJaMDMxMTAvBgNV BAMTKDUxNDRBNkQyNEE3NjcwN0NDQTQ4NjgyMjI4RjI5RTIzNjc3NEI3MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5NJHFinJlvhp+73tGnVyfoVI Yq7Lipz4R8BlHD2klYPpp/fjhtYWaGWyQQjcRRIFMU2VcRkkKPCoc9Bo6bUANJCc Zs3lArfoTJsz4YSskaOg4QgMPb48Hzo0eI7qLgqFcdNFFGuWqLxEGzBtN5jDF50y DF4r5pFMGNo0R0uLL4GxPG95kLCtgukyCOgZGx9fzMYZ26cGBGfpYYKyf6ImUVZK w5JA8FJxiCPXNuavhlDT8s8XMkjZgvAWbNaGBxKU00pFcMuGsCTq/ExiUb4l0/E8 UuWnko97TXhNyXchoZtil5fny5H7IGwZgDGQ0Y3687VMDfLu9BklA9Ko0Mw/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUUSm0kp2cHzKSGgiKPKeI2d0twswHwYDVR0j BBgwFoAUQR4tQR1oe8tEScPfRb7twEEAfZQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0 ZjBlLzAvNDExRTJENDExRDY4N0JDQjQ0NDlDM0RGNDVCRUVEQzA0MTAwN0Q5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FSNHRRUjFvZTh0RVNjUGZSYjd0d0VF QWZaUS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzNzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMwMzQzMDM3MzEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAqDxzFBzANBgkqhkiG9w0BAQsFAAOCAQEAVVX2KVWfqeIorrXYdvUi odWGWzR8S7Hc8FOXnonl2pcgwHXhQf2LvdkB9jxGKs47WYsiaMVgFBfJX8BOJrvl 1cG41wJEayKPqk75rVYtcH1wlQ5SswU9FxieMMsmJIYIVzZtDlHNJ2pYHYwPM5YY auT4fwgOorTzuLPRH0Itlu/keVR16xHhoFj1MyM7/QRFZGYA61ewqP2jqtqEHfXp YTqKj9yLuTo4lL9g6RDzNl7ko6OfKNAOZYVrNoeUn/7eYgHsrC4W7DixFjWtfo4q uGe5utYVt2d5+9lhixGfnrinpcBO6Z0xLu+P0vVwxxF2lHzwW8P/uiWQgCG6pY2A 2Q== -----END CERTIFICATE-----Generated at Sun Jan 18 10:55:41 2026 by rpki-client