This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a6530303a3a2f34302d3438203d3e20323034353339.roa File: 326130663a316363353a6530303a3a2f34302d3438203d3e20323034353339.roa (raw, json) Hash identifier: 8Lg12+qS457Clceh7CRKK2dYQVdupidFacGSjFmqeRY= Subject key identifier: 05:DF:05:E4:52:B2:2F:25:06:F0:40:8F:11:13:10:24:6E:22:68:0B Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94 Certificate serial: 119B92B67720F8E438EBC429497EA9A929690151 Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a6530303a3a2f34302d3438203d3e20323034353339.roa Signing time: Sat 17 Jan 2026 21:17:37 +0000 ROA not before: Sat 17 Jan 2026 21:12:37 +0000 ROA not after: Sat 16 Jan 2027 21:17:37 +0000 asID: 204539 IP address blocks: 2a0f:1cc5:e00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:9b:92:b6:77:20:f8:e4:38:eb:c4:29:49:7e:a9:a9:29:69:01:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94 Validity Not Before: Jan 17 21:12:37 2026 GMT Not After : Jan 16 21:17:37 2027 GMT Subject: CN=05DF05E452B22F2506F0408F111310246E22680B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:55:42:80:fe:18:40:1a:4a:86:81:81:85: 16:f4:72:d9:ff:f1:d7:59:ed:62:b2:78:d2:e8:50: 7d:73:35:46:a2:a1:9a:ee:cf:75:bb:f0:f7:93:7b: b6:62:73:2f:f9:82:96:6d:1a:5b:12:dc:62:06:7d: af:b1:47:61:ed:0b:64:ab:45:36:c6:5d:5b:41:d9: 1d:4c:7f:2e:ed:49:b4:51:d4:13:ef:82:75:bb:e3: 9a:59:09:e0:c0:7c:84:dc:4c:80:4a:85:3c:c1:87: 49:ea:2c:83:3d:6e:0a:a5:62:1b:4c:fb:b4:a7:65: 3b:4e:9c:5d:0a:b0:9b:15:cb:35:d8:ad:9d:71:52: 66:d9:79:91:7a:dd:b3:60:3f:de:fd:2b:89:73:05: 3c:cb:e8:a3:c6:19:cf:5a:22:7e:fa:3a:da:c6:c6: ad:e1:0e:3d:06:1b:a8:9c:93:a5:9e:1c:c6:1c:a4: b0:78:39:fe:a7:f2:c9:54:fe:43:74:8a:95:8f:f7: ae:d8:14:6e:f4:ae:92:b2:cb:0e:ba:e0:5c:96:28: d7:fe:fa:99:38:ac:13:06:ea:4c:7f:de:27:d5:dd: 61:b7:11:28:97:26:2a:77:4f:4d:b3:f0:c9:91:00: 16:c5:4a:fe:fe:58:5c:a5:6c:fa:57:61:2b:8d:d5: 6d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DF:05:E4:52:B2:2F:25:06:F0:40:8F:11:13:10:24:6E:22:68:0B X509v3 Authority Key Identifier: keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a6530303a3a2f34302d3438203d3e20323034353339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:e00::/40 Signature Algorithm: sha256WithRSAEncryption 69:b9:24:35:60:7e:65:4b:39:fa:fa:c1:52:7f:bd:c7:07:4c: 72:26:31:c3:d8:56:5c:82:d0:c3:85:f5:48:65:33:fd:ad:38: d3:73:ee:94:45:ba:df:c6:ef:07:f7:3b:fc:ed:65:6b:25:ed: c1:0c:fc:3b:22:d4:bf:69:8a:f4:ff:cf:b0:4c:ac:61:77:36: 5c:17:b2:83:62:b9:69:e2:93:b5:d1:99:f1:6f:be:1a:d0:3e: 26:6a:a4:bd:91:5d:4e:f3:51:b7:72:94:2b:04:e0:0e:60:59: 00:f0:06:61:d6:6e:77:62:3d:4f:4f:66:15:86:b6:0b:2e:55: 50:b1:aa:99:cf:02:8f:09:71:ea:fd:a9:a3:2a:16:4d:4f:e4: d4:f0:9e:10:f9:99:0e:9a:bb:d8:c7:b4:7d:bd:f6:10:80:31: 90:5b:12:fc:16:b2:94:d3:d8:0c:70:6e:38:7a:0a:88:e2:da: da:45:5e:7f:45:7e:77:eb:3e:66:c9:9d:01:a1:fb:3a:08:22: bc:ea:1e:e9:19:82:8d:bc:e7:cb:8d:39:c3:ea:a0:be:05:1c: 71:f4:2e:9a:2d:4b:22:82:c5:cf:b4:df:fe:9e:90:b0:5b:91: 96:80:d1:f2:49:f8:3e:15:3c:81:a3:7c:a2:de:ea:8a:41:43: bb:15:cb:71 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEZuStncg+OQ468QpSX6pqSlpAVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExZTJkNDExZDY4N2JjYjQ0NDljM2RmNDViZWVkYzA0 MTAwN2Q5NDAeFw0yNjAxMTcyMTEyMzdaFw0yNzAxMTYyMTE3MzdaMDMxMTAvBgNV BAMTKDA1REYwNUU0NTJCMjJGMjUwNkYwNDA4RjExMTMxMDI0NkUyMjY4MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9c1VCgP4YQBpKhoGBhRb0ctn/ 8ddZ7WKyeNLoUH1zNUaioZruz3W78PeTe7Zicy/5gpZtGlsS3GIGfa+xR2HtC2Sr RTbGXVtB2R1Mfy7tSbRR1BPvgnW745pZCeDAfITcTIBKhTzBh0nqLIM9bgqlYhtM +7SnZTtOnF0KsJsVyzXYrZ1xUmbZeZF63bNgP979K4lzBTzL6KPGGc9aIn76OtrG xq3hDj0GG6ick6WeHMYcpLB4Of6n8slU/kN0ipWP967YFG70rpKyyw664FyWKNf+ +pk4rBMG6kx/3ifV3WG3ESiXJip3T02z8MmRABbFSv7+WFylbPpXYSuN1W0LAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBd8F5FKyLyUG8ECPERMQJG4iaAswHwYDVR0j BBgwFoAUQR4tQR1oe8tEScPfRb7twEEAfZQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0 ZjBlLzAvNDExRTJENDExRDY4N0JDQjQ0NDlDM0RGNDVCRUVEQzA0MTAwN0Q5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FSNHRRUjFvZTh0RVNjUGZSYjd0d0VF QWZaUS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2E2NTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMwMzQzNTMzMzkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAqDxzFDjANBgkqhkiG9w0BAQsFAAOCAQEAabkkNWB+ZUs5+vrBUn+9 xwdMciYxw9hWXILQw4X1SGUz/a0403PulEW638bvB/c7/O1layXtwQz8OyLUv2mK 9P/PsEysYXc2XBeyg2K5aeKTtdGZ8W++GtA+JmqkvZFdTvNRt3KUKwTgDmBZAPAG YdZud2I9T09mFYa2Cy5VULGqmc8Cjwlx6v2poyoWTU/k1PCeEPmZDpq72Me0fb32 EIAxkFsS/BaylNPYDHBuOHoKiOLa2kVef0V+d+s+ZsmdAaH7OggivOoe6RmCjbzn y405w+qgvgUccfQumi1LIoLFz7Tf/p6QsFuRloDR8kn4PhU8gaN8ot7qikFDuxXL cQ== -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:29 2026 by rpki-client