This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa File: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (raw, json) Hash identifier: PJthaD3Dqq1MsFvHVoT7SFWUfWl9HRqCSrg1Gh5Hnbs= Subject key identifier: A0:1F:83:FD:3C:DB:4E:27:18:AF:B8:42:06:9D:2B:CB:E8:DF:6E:E3 Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94 Certificate serial: 52611EDCB5C87581D72DEA6F130A4003816A4EF8 Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa Signing time: Sat 17 Jan 2026 21:19:39 +0000 ROA not before: Sat 17 Jan 2026 21:14:39 +0000 ROA not after: Sat 16 Jan 2027 21:19:39 +0000 asID: 210352 IP address blocks: 2a0f:1cc5:f00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:61:1e:dc:b5:c8:75:81:d7:2d:ea:6f:13:0a:40:03:81:6a:4e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94 Validity Not Before: Jan 17 21:14:39 2026 GMT Not After : Jan 16 21:19:39 2027 GMT Subject: CN=A01F83FD3CDB4E2718AFB842069D2BCBE8DF6EE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:86:ea:33:5f:60:c6:ad:8f:eb:d7:b3:f6:29: ec:5a:a4:e1:4e:51:ef:91:a8:ea:ad:b7:e1:4c:0f: d4:ca:8f:05:94:03:69:ff:dc:97:0f:1c:14:97:2c: c1:0e:de:be:c2:a7:20:15:d9:d0:86:d4:51:20:0e: bd:29:52:5a:f0:ea:d5:88:4f:50:67:a7:54:4d:e1: 42:89:50:b2:31:e6:b8:69:6b:33:70:cf:ec:54:47: bd:16:9b:71:68:26:c2:9f:23:ca:4b:46:4c:82:b3: 2f:03:e3:2a:1e:d3:51:8b:6c:1b:35:e0:48:91:62: 79:3a:c9:3b:49:4d:bf:81:05:de:b2:4b:79:39:f3: 74:05:9b:76:a6:30:c5:d4:52:2e:20:1b:3f:21:50: fd:d7:47:9a:95:e3:83:de:e1:74:b1:54:69:a6:33: 89:2c:44:6c:c6:fa:9f:97:d2:c3:9e:6a:1b:07:ac: f8:15:d0:71:fa:1e:6c:c9:f0:af:57:df:1d:3c:71: 44:e2:bf:0d:a8:8c:aa:9b:c9:84:9e:5d:46:6a:aa: e9:2c:de:14:55:a6:90:cd:4c:5d:d5:f5:7a:25:6d: af:d6:37:77:07:11:3a:43:92:92:d5:4a:f8:3e:c1: ae:de:29:78:29:ab:9f:4a:85:c5:a9:47:dd:ff:df: da:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1F:83:FD:3C:DB:4E:27:18:AF:B8:42:06:9D:2B:CB:E8:DF:6E:E3 X509v3 Authority Key Identifier: keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:f00::/40 Signature Algorithm: sha256WithRSAEncryption 5d:e7:14:c0:96:16:26:50:44:25:8e:e9:0b:40:88:3d:e4:88: 27:43:fd:dd:5f:e6:4c:74:25:b2:2b:38:63:49:ea:26:7c:11: b5:5f:8c:c1:2f:fc:d1:28:e6:15:e7:26:74:cf:0d:dd:e0:6d: 1b:3b:1c:54:cb:bc:7a:f8:f6:5e:41:71:1d:e7:03:df:9f:7f: 0d:b5:16:f9:bc:68:bd:80:0f:ae:8e:63:f5:41:da:72:95:a8: fc:f9:3f:61:b6:f1:a2:c9:19:39:4c:96:d9:33:9e:f2:9b:3a: 3e:a0:ff:88:d9:23:66:4b:c1:17:87:57:bb:47:cb:1c:c8:c1: 7f:6b:a0:01:49:48:8e:40:14:36:87:d7:cb:9d:44:10:c8:04: 9f:f7:4a:40:b8:36:76:ae:4e:53:aa:4f:55:a9:a9:91:f7:7e: 63:06:19:a7:c2:f3:8d:26:6b:b7:17:5b:2e:a6:58:74:81:8a: 68:c9:d1:30:7f:2b:a4:37:b3:59:f7:2e:86:c1:f7:47:cf:b7: 4c:6a:62:ad:b2:ba:f5:81:0a:27:15:14:f8:88:37:60:67:4e: a0:75:52:2e:ff:6f:a4:2a:ed:9a:fd:bf:25:99:b4:c5:a4:e6: e7:2f:2f:18:bb:f2:5f:83:64:b6:44:81:a7:2b:c4:e8:c3:18: 5a:ab:f2:de -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUmEe3LXIdYHXLepvEwpAA4FqTvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExZTJkNDExZDY4N2JjYjQ0NDljM2RmNDViZWVkYzA0 MTAwN2Q5NDAeFw0yNjAxMTcyMTE0MzlaFw0yNzAxMTYyMTE5MzlaMDMxMTAvBgNV BAMTKEEwMUY4M0ZEM0NEQjRFMjcxOEFGQjg0MjA2OUQyQkNCRThERjZFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDohuozX2DGrY/r17P2KexapOFO Ue+RqOqtt+FMD9TKjwWUA2n/3JcPHBSXLMEO3r7CpyAV2dCG1FEgDr0pUlrw6tWI T1Bnp1RN4UKJULIx5rhpazNwz+xUR70Wm3FoJsKfI8pLRkyCsy8D4yoe01GLbBs1 4EiRYnk6yTtJTb+BBd6yS3k583QFm3amMMXUUi4gGz8hUP3XR5qV44Pe4XSxVGmm M4ksRGzG+p+X0sOeahsHrPgV0HH6HmzJ8K9X3x08cUTivw2ojKqbyYSeXUZqquks 3hRVppDNTF3V9Xolba/WN3cHETpDkpLVSvg+wa7eKXgpq59KhcWpR93/39rPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUoB+D/TzbTicYr7hCBp0ry+jfbuMwHwYDVR0j BBgwFoAUQR4tQR1oe8tEScPfRb7twEEAfZQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0 ZjBlLzAvNDExRTJENDExRDY4N0JDQjQ0NDlDM0RGNDVCRUVEQzA0MTAwN0Q5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FSNHRRUjFvZTh0RVNjUGZSYjd0d0VF QWZaUS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2E2NjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMxMzAzMzM1MzIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAqDxzFDzANBgkqhkiG9w0BAQsFAAOCAQEAXecUwJYWJlBEJY7pC0CI PeSIJ0P93V/mTHQlsis4Y0nqJnwRtV+MwS/80SjmFecmdM8N3eBtGzscVMu8evj2 XkFxHecD359/DbUW+bxovYAPro5j9UHacpWo/Pk/YbbxoskZOUyW2TOe8ps6PqD/ iNkjZkvBF4dXu0fLHMjBf2ugAUlIjkAUNofXy51EEMgEn/dKQLg2dq5OU6pPVamp kfd+YwYZp8LzjSZrtxdbLqZYdIGKaMnRMH8rpDezWfcuhsH3R8+3TGpirbK69YEK JxUU+Ig3YGdOoHVSLv9vpCrtmv2/JZm0xaTm5y8vGLvyX4NktkSBpyvE6MMYWqvy 3g== -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:28 2026 by rpki-client