This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/326130303a666265303a3a2f33322d3332203d3e203632313133.roa
File: 326130303a666265303a3a2f33322d3332203d3e203632313133.roa (raw, json)
Hash identifier: WNjAJELB/oLrw9Hz4dnzCW0vPcsiMFGJ+BAVSWItBek=
Subject key identifier: C0:59:1A:96:A4:6B:87:6F:DA:BF:D3:64:DC:CE:DD:CE:54:7A:79:F1
Certificate issuer: /CN=8cc300faf2f6d49186a8b62e08f190107743973d
Certificate serial: 7FB41E6984ABE86AEF65ADD341D5AEEE9D543AFF
Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/326130303a666265303a3a2f33322d3332203d3e203632313133.roa
Signing time: Tue 03 Feb 2026 15:56:12 +0000
ROA not before: Tue 03 Feb 2026 15:51:12 +0000
ROA not after: Tue 02 Feb 2027 15:56:12 +0000
asID: 62113
IP address blocks: 2a00:fbe0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b4:1e:69:84:ab:e8:6a:ef:65:ad:d3:41:d5:ae:ee:9d:54:3a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d
Validity
Not Before: Feb 3 15:51:12 2026 GMT
Not After : Feb 2 15:56:12 2027 GMT
Subject: CN=C0591A96A46B876FDABFD364DCCEDDCE547A79F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:cc:16:c2:7d:15:6a:15:61:22:23:26:c3:
e2:1e:35:12:a9:76:17:6c:f7:7d:1e:4b:ff:81:ab:
f7:18:77:7d:dc:8f:8e:5a:9e:b0:60:73:aa:27:59:
03:4f:77:0e:f4:aa:9d:95:5e:a8:db:3f:3c:54:ec:
58:07:d0:98:44:12:cb:1a:4b:a5:5a:3e:39:80:69:
88:fa:6b:32:69:50:0d:11:bb:24:7d:96:4e:c8:00:
56:9a:6c:58:e5:08:3d:ee:ae:fb:ad:15:62:28:c2:
ec:9c:53:67:3e:8b:bd:c1:08:bc:e0:f1:c0:e4:88:
69:68:75:78:ce:77:d7:62:1c:c5:cd:b1:ce:40:1f:
f6:90:87:d5:28:22:f8:d9:9a:26:f9:a2:4a:25:da:
10:c9:99:76:cc:c2:01:1e:65:f5:24:f4:96:9f:9c:
f2:dd:91:7d:de:1d:46:30:d8:22:65:ae:d5:5d:34:
3c:7c:c9:c1:cb:4e:41:b4:77:81:32:a8:3e:51:fb:
04:7a:6c:fd:c0:12:ec:89:cf:b0:78:a8:a7:ad:65:
8c:00:8c:3e:53:01:7a:8a:f1:e1:a6:b6:e7:d5:dd:
c7:e9:c4:ee:02:94:f4:33:cd:a4:b3:cf:be:50:e1:
26:d1:52:0b:38:6e:da:a9:62:59:01:70:b5:fd:36:
9b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:59:1A:96:A4:6B:87:6F:DA:BF:D3:64:DC:CE:DD:CE:54:7A:79:F1
X509v3 Authority Key Identifier:
keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/326130303a666265303a3a2f33322d3332203d3e203632313133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:fbe0::/32
Signature Algorithm: sha256WithRSAEncryption
42:01:6c:bc:e6:18:0c:66:b8:2d:07:5f:4b:10:5b:c0:4e:4f:
0a:e7:69:c3:b9:3e:85:2b:47:fb:2d:5e:06:01:0b:89:e7:a6:
14:f2:97:32:03:5c:64:48:28:49:7a:0d:65:84:85:f9:bd:ca:
d8:46:bf:26:af:06:38:1f:57:c7:a2:ce:5d:64:05:66:47:25:
31:f5:35:74:29:d6:32:b5:98:d7:d8:aa:fb:ae:b1:54:93:4a:
54:79:79:ea:d7:be:b6:83:d2:f2:66:39:e5:f7:ad:1f:6b:30:
52:cf:66:1a:a4:64:64:2e:11:8c:fa:fb:e7:61:65:69:38:2d:
34:0b:34:aa:24:d5:52:a5:ae:f9:87:cd:f7:cb:c2:91:83:96:
a1:c2:4f:2d:47:2b:78:e6:1d:70:6e:64:cf:8e:00:45:94:f6:
d6:90:8f:ac:8e:f7:e9:ac:32:10:5f:90:8f:0d:10:d1:16:d9:
a5:aa:32:6c:40:ec:e0:95:b0:5b:5c:01:a3:2a:bb:12:00:92:
b7:4d:8e:18:05:ab:d9:34:cb:a2:cb:10:18:07:2f:82:1f:98:
dd:6a:b9:38:54:bc:91:21:fd:bb:71:4a:63:bf:28:66:94:6f:
a7:cc:d1:37:44:bf:73:48:5c:79:f5:e2:35:f5:dc:a0:87:a7:
ae:6b:0d:27
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUf7QeaYSr6GrvZa3TQdWu7p1UOv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGNjMzAwZmFmMmY2ZDQ5MTg2YThiNjJlMDhmMTkwMTA3
NzQzOTczZDAeFw0yNjAyMDMxNTUxMTJaFw0yNzAyMDIxNTU2MTJaMDMxMTAvBgNV
BAMTKEMwNTkxQTk2QTQ2Qjg3NkZEQUJGRDM2NERDQ0VERENFNTQ3QTc5RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDZswWwn0VahVhIiMmw+IeNRKp
dhds930eS/+Bq/cYd33cj45anrBgc6onWQNPdw70qp2VXqjbPzxU7FgH0JhEEssa
S6VaPjmAaYj6azJpUA0RuyR9lk7IAFaabFjlCD3urvutFWIowuycU2c+i73BCLzg
8cDkiGlodXjOd9diHMXNsc5AH/aQh9UoIvjZmib5okol2hDJmXbMwgEeZfUk9Jaf
nPLdkX3eHUYw2CJlrtVdNDx8ycHLTkG0d4EyqD5R+wR6bP3AEuyJz7B4qKetZYwA
jD5TAXqK8eGmtufV3cfpxO4ClPQzzaSzz75Q4SbRUgs4btqpYlkBcLX9NptRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUwFkalqRrh2/av9Nk3M7dzlR6efEwHwYDVR0j
BBgwFoAUjMMA+vL21JGGqLYuCPGQEHdDlz0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGQ5MDYyZGUtZjUzNi00NDVkLWJhNzEtMDM1ZmJmZWNh
YWQ4LzAvOENDMzAwRkFGMkY2RDQ5MTg2QThCNjJFMDhGMTkwMTA3NzQzOTczRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pNTUEtdkwyMUpHR3FMWXVDUEdRRUhk
RGx6MC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ5MDYyZGUt
ZjUzNi00NDVkLWJhNzEtMDM1ZmJmZWNhYWQ4LzAvMzI2MTMwMzAzYTY2NjI2NTMw
M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMjMxMzEzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoA
++AwDQYJKoZIhvcNAQELBQADggEBAEIBbLzmGAxmuC0HX0sQW8BOTwrnacO5PoUr
R/stXgYBC4nnphTylzIDXGRIKEl6DWWEhfm9ythGvyavBjgfV8eizl1kBWZHJTH1
NXQp1jK1mNfYqvuusVSTSlR5eerXvraD0vJmOeX3rR9rMFLPZhqkZGQuEYz6++dh
ZWk4LTQLNKok1VKlrvmHzffLwpGDlqHCTy1HK3jmHXBuZM+OAEWU9taQj6yO9+ms
MhBfkI8NENEW2aWqMmxA7OCVsFtcAaMquxIAkrdNjhgFq9k0y6LLEBgHL4IfmN1q
uThUvJEh/btxSmO/KGaUb6fM0TdEv3NIXHn14jX13KCHp65rDSc=
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:11 2026 by rpki-client