This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa File: 326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa (raw, json) Hash identifier: BQDJ5MQBcUAO3DNIndlqGRpqRDYK9vOMV2e/1C55/mU= Subject key identifier: 8E:23:FD:AD:60:57:65:DC:F3:5C:BD:BA:2C:A9:59:A1:44:9A:5F:17 Certificate issuer: /CN=8cc300faf2f6d49186a8b62e08f190107743973d Certificate serial: 544850DD6DFE60EDC7DF36A27589AC7B8AF1AED7 Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa Signing time: Tue 03 Feb 2026 15:56:24 +0000 ROA not before: Tue 03 Feb 2026 15:51:24 +0000 ROA not after: Tue 02 Feb 2027 15:56:24 +0000 asID: 205235 IP address blocks: 2a00:fbe4:1ab::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:48:50:dd:6d:fe:60:ed:c7:df:36:a2:75:89:ac:7b:8a:f1:ae:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d Validity Not Before: Feb 3 15:51:24 2026 GMT Not After : Feb 2 15:56:24 2027 GMT Subject: CN=8E23FDAD605765DCF35CBDBA2CA959A1449A5F17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:eb:90:71:a6:06:3a:a9:af:b9:d0:e5:58:91: 1b:49:15:62:b4:18:10:44:9f:8f:b6:e6:6f:17:c3: 67:71:41:f7:18:11:8a:21:75:43:04:9a:02:a3:d9: 91:ec:df:40:4d:17:64:b3:a5:d8:0e:a8:5d:5b:8b: 66:34:66:a3:d0:0e:4a:96:fd:38:d9:38:8e:65:5c: 17:fa:ad:52:32:aa:74:f5:94:42:f1:5d:e0:8a:f8: cc:68:59:50:24:a4:96:d6:d2:39:db:53:63:0b:53: 06:a4:5f:ac:7b:c4:b0:2e:05:e4:59:05:40:50:01: 8c:08:89:02:1a:81:94:cc:f3:b8:f1:48:01:21:3c: 31:81:38:62:fa:4b:32:fc:a8:c0:42:78:59:75:2c: 22:62:70:90:dc:41:0d:50:3b:a4:b9:5a:27:9a:31: ac:cd:70:67:a7:56:d4:ee:9a:8b:9b:13:9b:c9:8b: 37:ab:e4:6a:d6:f1:a0:06:1f:96:8f:e8:75:45:fb: 46:00:44:ea:d9:46:0a:eb:52:c8:6d:2c:50:29:cc: ef:18:1a:93:30:78:15:0f:7e:62:58:cb:2a:b9:6a: f3:d2:64:2d:06:ef:1b:06:16:3d:6b:ae:d5:95:e3: 3c:fc:0f:d7:91:16:50:f6:7b:a7:62:d3:0e:f5:7c: 6b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:23:FD:AD:60:57:65:DC:F3:5C:BD:BA:2C:A9:59:A1:44:9A:5F:17 X509v3 Authority Key Identifier: keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:fbe4:1ab::/48 Signature Algorithm: sha256WithRSAEncryption 71:84:70:48:cf:85:9d:f1:2c:be:6e:ca:36:07:b6:eb:23:9e: 83:af:78:d6:ea:27:97:92:80:05:8a:29:eb:bf:7f:34:13:5a: 78:16:33:d4:b2:b2:32:6d:36:6f:0f:70:71:e5:46:3b:ee:89: e7:69:bf:1b:ef:fe:0a:72:80:33:5f:7c:d8:8d:c6:27:04:b6: 68:75:1b:38:1c:29:6d:1c:43:a9:29:c5:fb:f2:ba:81:de:d6: cd:76:0b:80:8d:89:b1:c3:d1:b1:fd:c4:87:a3:62:de:e4:fe: 1a:b4:52:60:3b:3f:9c:cb:09:50:50:b9:c4:42:00:33:c2:e4: d0:2e:ec:34:3f:a1:2a:cf:59:b5:2a:a7:82:29:fb:f7:ec:5b: fe:4a:8d:db:74:19:68:54:12:bc:d8:f5:87:24:9f:73:17:1c: e0:55:64:ee:82:ff:ab:88:ba:bf:83:a7:9b:5d:fa:9b:bb:e2: 68:78:b0:2e:92:c9:1a:de:29:dc:dc:4a:01:31:25:72:e9:37: 11:ca:3f:28:14:2c:1e:1a:93:af:0c:ea:0b:13:c9:81:f4:ad: f4:00:0d:12:02:6a:f4:7a:da:48:10:7c:67:75:cd:57:bc:53: ee:e0:de:4f:f1:65:1b:bd:8c:47:cf:f9:ab:42:31:40:68:e3: 68:30:0e:15 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIUVEhQ3W3+YO3H3zaidYmse4rxrtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGNjMzAwZmFmMmY2ZDQ5MTg2YThiNjJlMDhmMTkwMTA3 NzQzOTczZDAeFw0yNjAyMDMxNTUxMjRaFw0yNzAyMDIxNTU2MjRaMDMxMTAvBgNV BAMTKDhFMjNGREFENjA1NzY1RENGMzVDQkRCQTJDQTk1OUExNDQ5QTVGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd65BxpgY6qa+50OVYkRtJFWK0 GBBEn4+25m8Xw2dxQfcYEYohdUMEmgKj2ZHs30BNF2SzpdgOqF1bi2Y0ZqPQDkqW /TjZOI5lXBf6rVIyqnT1lELxXeCK+MxoWVAkpJbW0jnbU2MLUwakX6x7xLAuBeRZ BUBQAYwIiQIagZTM87jxSAEhPDGBOGL6SzL8qMBCeFl1LCJicJDcQQ1QO6S5Wiea MazNcGenVtTumoubE5vJizer5GrW8aAGH5aP6HVF+0YAROrZRgrrUshtLFApzO8Y GpMweBUPfmJYyyq5avPSZC0G7xsGFj1rrtWV4zz8D9eRFlD2e6di0w71fGtZAgMB AAGjggJIMIICRDAdBgNVHQ4EFgQUjiP9rWBXZdzzXL26LKlZoUSaXxcwHwYDVR0j BBgwFoAUjMMA+vL21JGGqLYuCPGQEHdDlz0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ5MDYyZGUtZjUzNi00NDVkLWJhNzEtMDM1ZmJmZWNh YWQ4LzAvOENDMzAwRkFGMkY2RDQ5MTg2QThCNjJFMDhGMTkwMTA3NzQzOTczRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pNTUEtdkwyMUpHR3FMWXVDUEdRRUhk RGx6MC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ5MDYyZGUt ZjUzNi00NDVkLWJhNzEtMDM1ZmJmZWNhYWQ4LzAvMzI2MTMwMzAzYTY2NjI2NTM0 M2EzMTYxNjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzUzMjMzMzUucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAqAPvkAaswDQYJKoZIhvcNAQELBQADggEBAHGEcEjPhZ3xLL5uyjYH tusjnoOveNbqJ5eSgAWKKeu/fzQTWngWM9SysjJtNm8PcHHlRjvuiedpvxvv/gpy gDNffNiNxicEtmh1GzgcKW0cQ6kpxfvyuoHe1s12C4CNibHD0bH9xIejYt7k/hq0 UmA7P5zLCVBQucRCADPC5NAu7DQ/oSrPWbUqp4Ip+/fsW/5Kjdt0GWhUErzY9Yck n3MXHOBVZO6C/6uIur+Dp5td+pu74mh4sC6SyRreKdzcSgExJXLpNxHKPygULB4a k68M6gsTyYH0rfQADRICavR62kgQfGd1zVe8U+7g3k/xZRu9jEfP+atCMUBo42gw DhU= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:08 2026 by rpki-client