This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a6130303a3a2f34302d3438203d3e20313938323636.roa File: 326130663a316363353a6130303a3a2f34302d3438203d3e20313938323636.roa (raw, json) Hash identifier: cu3myeTajLRffV1p90jDI0TXRI0bh3Dv5VJAXzLfnts= Subject key identifier: CC:BD:58:4B:5E:64:1C:78:38:18:65:93:39:A3:C2:3D:5D:6D:85:CB Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94 Certificate serial: 61DB6A00F501411BC774CCF87ED5EB3CFFCB6804 Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a6130303a3a2f34302d3438203d3e20313938323636.roa Signing time: Sat 17 Jan 2026 21:07:36 +0000 ROA not before: Sat 17 Jan 2026 21:02:36 +0000 ROA not after: Sat 16 Jan 2027 21:07:36 +0000 asID: 198266 IP address blocks: 2a0f:1cc5:a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:db:6a:00:f5:01:41:1b:c7:74:cc:f8:7e:d5:eb:3c:ff:cb:68:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94 Validity Not Before: Jan 17 21:02:36 2026 GMT Not After : Jan 16 21:07:36 2027 GMT Subject: CN=CCBD584B5E641C783818659339A3C23D5D6D85CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:00:d8:4d:d7:80:b6:23:ff:c1:f6:4d:89:df: 56:db:e9:ff:dc:f7:60:dd:ba:2f:53:76:96:1d:82: 48:74:f3:31:b3:25:06:06:57:d4:dc:13:0b:c9:f7: 57:a9:3d:d6:c1:51:0a:d9:3a:c2:e7:3c:fe:80:30: a2:49:c0:d9:b4:34:37:fc:67:f0:97:99:e3:bd:b9: 7b:4e:ad:b9:92:77:63:30:7e:8c:0c:2b:2d:b2:9f: cf:2b:57:01:0d:18:87:c5:11:84:8e:b5:fe:29:e6: 43:9b:d5:b5:28:a1:b0:7c:fe:ba:7e:82:17:1c:21: c6:f1:e0:4f:f8:55:1a:7c:b0:96:a9:27:23:d9:c8: e9:19:85:55:91:e3:ef:08:71:ae:f1:7d:ba:04:42: 27:e6:9c:f3:f5:eb:c7:34:9c:fd:29:2e:d5:17:e3: e0:48:ed:16:f1:0a:a6:47:ec:30:ff:3e:5e:06:37: 77:b6:fe:e1:6b:db:9f:f4:0b:08:b1:7f:bd:99:fe: 92:a8:2e:c8:bc:1d:b8:2b:c8:4b:28:56:60:39:ef: 71:53:41:e5:54:a4:ed:2f:fc:6e:66:38:16:ff:e9: 09:1d:7a:8b:68:18:74:6d:59:d7:d9:af:f6:b3:bb: fd:8d:b9:5d:ee:af:f3:d0:da:73:3c:b2:f8:bc:65: 87:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BD:58:4B:5E:64:1C:78:38:18:65:93:39:A3:C2:3D:5D:6D:85:CB X509v3 Authority Key Identifier: keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a6130303a3a2f34302d3438203d3e20313938323636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:a00::/40 Signature Algorithm: sha256WithRSAEncryption 1d:98:10:d7:e7:f3:25:d6:ed:aa:79:e6:27:76:46:0f:4a:5f: 53:91:cc:f0:bd:80:88:21:e5:05:71:b5:0d:78:52:4b:9d:8f: 80:4e:ab:5c:78:04:22:74:c3:15:c2:3f:c7:ef:a0:9c:79:4e: 99:a5:aa:57:28:f1:d1:7f:5b:bc:e4:46:17:60:95:00:26:31: 09:3e:e2:c3:e6:8a:85:97:11:ee:60:54:e6:27:2a:dd:7b:36: de:12:cb:b6:39:9c:74:1a:ee:31:1a:5a:4a:04:b5:a6:51:55: ce:b6:2b:f6:89:fa:68:c1:4e:f3:df:f8:8f:63:ef:e2:1f:5a: 68:ea:32:92:32:65:5a:f8:d9:f8:0f:37:d9:6c:59:16:87:86: fb:7f:52:6f:9d:26:25:a2:5d:26:a3:18:4d:31:c3:a0:d3:25: e3:aa:5f:3a:81:69:45:2f:3e:01:4b:fa:f3:91:7d:91:ac:30: b9:c7:82:6d:32:ed:66:51:6e:d1:39:60:5b:41:db:65:e3:9e: 08:bb:44:0f:53:b9:2a:42:b7:c4:f7:11:7b:09:f4:45:47:85: 36:b6:dd:50:24:c5:c8:05:1c:32:ec:3e:6b:3a:3f:63:04:61: df:0e:1c:26:4d:1b:d4:18:3b:f1:3f:de:a7:76:40:b1:29:29: 78:c8:25:ad -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYdtqAPUBQRvHdMz4ftXrPP/LaAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExZTJkNDExZDY4N2JjYjQ0NDljM2RmNDViZWVkYzA0 MTAwN2Q5NDAeFw0yNjAxMTcyMTAyMzZaFw0yNzAxMTYyMTA3MzZaMDMxMTAvBgNV BAMTKENDQkQ1ODRCNUU2NDFDNzgzODE4NjU5MzM5QTNDMjNENUQ2RDg1Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdANhN14C2I//B9k2J31bb6f/c 92Ddui9TdpYdgkh08zGzJQYGV9TcEwvJ91epPdbBUQrZOsLnPP6AMKJJwNm0NDf8 Z/CXmeO9uXtOrbmSd2MwfowMKy2yn88rVwENGIfFEYSOtf4p5kOb1bUoobB8/rp+ ghccIcbx4E/4VRp8sJapJyPZyOkZhVWR4+8Ica7xfboEQifmnPP168c0nP0pLtUX 4+BI7RbxCqZH7DD/Pl4GN3e2/uFr25/0Cwixf72Z/pKoLsi8HbgryEsoVmA573FT QeVUpO0v/G5mOBb/6QkdeotoGHRtWdfZr/azu/2NuV3ur/PQ2nM8svi8ZYdDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzL1YS15kHHg4GGWTOaPCPV1thcswHwYDVR0j BBgwFoAUQR4tQR1oe8tEScPfRb7twEEAfZQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0 ZjBlLzAvNDExRTJENDExRDY4N0JDQjQ0NDlDM0RGNDVCRUVEQzA0MTAwN0Q5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FSNHRRUjFvZTh0RVNjUGZSYjd0d0VF QWZaUS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2E2MTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMTM5MzgzMjM2MzYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAqDxzFCjANBgkqhkiG9w0BAQsFAAOCAQEAHZgQ1+fzJdbtqnnmJ3ZG D0pfU5HM8L2AiCHlBXG1DXhSS52PgE6rXHgEInTDFcI/x++gnHlOmaWqVyjx0X9b vORGF2CVACYxCT7iw+aKhZcR7mBU5icq3Xs23hLLtjmcdBruMRpaSgS1plFVzrYr 9on6aMFO89/4j2Pv4h9aaOoykjJlWvjZ+A832WxZFoeG+39Sb50mJaJdJqMYTTHD oNMl46pfOoFpRS8+AUv685F9kawwuceCbTLtZlFu0TlgW0HbZeOeCLtED1O5KkK3 xPcRewn0RUeFNrbdUCTFyAUcMuw+azo/YwRh3w4cJk0b1Bg78T/ep3ZAsSkpeMgl rQ== -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:37 2026 by rpki-client