This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa File: 326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa (raw, json) Hash identifier: fxbR5GcPyoWqODdA3f1yyd4v8P4uCsBii+08ii9bg1w= Subject key identifier: D5:D5:1A:D8:6E:FF:83:91:49:6A:3C:2E:C1:40:93:1F:61:DF:19:6A Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 7D0A04D6C125EC20EE404B06C71BCBA545AFAE87 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa Signing time: Sun 18 Jan 2026 19:33:57 +0000 ROA not before: Sun 18 Jan 2026 19:28:57 +0000 ROA not after: Sun 17 Jan 2027 19:33:57 +0000 asID: 202306 IP address blocks: 2a0f:3cc3:4000::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:0a:04:d6:c1:25:ec:20:ee:40:4b:06:c7:1b:cb:a5:45:af:ae:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Jan 18 19:28:57 2026 GMT Not After : Jan 17 19:33:57 2027 GMT Subject: CN=D5D51AD86EFF8391496A3C2EC140931F61DF196A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:28:97:95:89:c8:92:4b:6a:06:4e:6d:69: b7:0b:ba:6f:ed:de:b5:b5:f2:2a:fe:60:d4:ff:80: bd:e4:37:26:9e:d7:06:c1:16:78:fb:ba:85:08:48: 4a:a1:8b:31:10:74:b0:f9:e9:de:bd:4f:09:6e:c1: 6e:f5:d6:34:75:eb:21:0a:4a:f1:a8:09:9a:86:52: 11:9b:b6:86:25:9b:04:64:48:8d:8e:71:2f:7a:19: 91:5f:0d:67:39:3d:8b:47:19:49:b4:7f:db:c8:18: 92:ca:80:b2:b7:c8:e6:2f:d1:fc:95:40:08:c4:c0: fe:5c:5b:72:47:ed:00:45:f5:20:6a:a4:b0:d6:9d: ff:e7:c0:5b:b9:56:cb:1b:82:af:18:ed:b9:eb:e1: 85:df:0e:02:ff:9d:c5:c4:8e:9a:0a:c5:93:a7:f0: cb:ce:e5:0e:1c:13:1b:cd:2c:95:16:38:51:00:d9: f6:b4:4f:93:e2:fe:30:fa:e9:5a:6a:43:b9:f7:5e: 2b:95:13:17:d9:f5:35:f6:83:5b:9d:f3:35:a5:dd: 26:7b:da:89:7f:ad:37:7a:87:7a:39:fd:cf:d5:ff: 98:af:4b:88:f3:63:31:90:29:64:53:f6:8b:fc:66: 85:8f:b4:92:dc:53:fb:f9:c9:4b:1d:6b:6c:be:d6: 94:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D5:1A:D8:6E:FF:83:91:49:6A:3C:2E:C1:40:93:1F:61:DF:19:6A X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:3cc3:4000::/44 Signature Algorithm: sha256WithRSAEncryption ab:99:93:1c:8c:b9:55:ff:9f:a1:56:4f:f4:9b:a2:39:e0:3f: 67:23:df:fa:22:d5:2e:96:4e:28:f3:9f:86:75:af:ac:1e:77: 4b:a0:a6:2f:39:4b:ff:01:7a:5e:ef:af:57:e4:c8:08:dc:94: 58:83:02:e2:f8:ee:b4:e8:0d:e6:32:7a:17:e1:0d:39:f4:49: bb:58:aa:e0:34:0a:49:af:39:54:c6:0a:b9:1a:48:fb:9b:27: 4f:31:da:b9:17:fc:fc:d0:60:9e:45:41:5d:87:03:9e:b8:9b: bb:9a:31:ee:f2:87:c8:79:aa:d7:d7:cd:58:e6:bb:04:69:17: 64:90:53:54:c8:fa:4a:50:b1:42:1c:fd:17:7c:77:a0:4a:52: 84:05:d4:b0:38:5d:4a:9e:89:69:20:0d:d9:12:e1:a4:9c:23: 83:47:bc:46:1c:83:4d:cf:ca:ef:a6:c4:70:48:82:07:1b:5a: d6:b2:7e:b0:bc:66:60:42:73:40:7b:e3:60:98:3b:4d:d0:49: 97:ee:13:39:33:47:b5:c9:c5:dd:26:2d:32:73:29:c7:6b:62: 6a:fb:54:46:0a:51:e2:1e:4a:25:30:bd:07:82:c2:0d:65:07: 77:a4:bf:b1:94:d9:6b:36:ec:cf:60:31:0b:c1:57:be:fc:56: cf:48:49:ac -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUfQoE1sEl7CDuQEsGxxvLpUWvrocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNjAxMTgxOTI4NTdaFw0yNzAxMTcxOTMzNTdaMDMxMTAvBgNV BAMTKEQ1RDUxQUQ4NkVGRjgzOTE0OTZBM0MyRUMxNDA5MzFGNjFERjE5NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1PiiXlYnIkktqBk5tabcLum/t 3rW18ir+YNT/gL3kNyae1wbBFnj7uoUISEqhizEQdLD56d69TwluwW711jR16yEK SvGoCZqGUhGbtoYlmwRkSI2OcS96GZFfDWc5PYtHGUm0f9vIGJLKgLK3yOYv0fyV QAjEwP5cW3JH7QBF9SBqpLDWnf/nwFu5Vssbgq8Y7bnr4YXfDgL/ncXEjpoKxZOn 8MvO5Q4cExvNLJUWOFEA2fa0T5Pi/jD66VpqQ7n3XiuVExfZ9TX2g1ud8zWl3SZ7 2ol/rTd6h3o5/c/V/5ivS4jzYzGQKWRT9ov8ZoWPtJLcU/v5yUsda2y+1pTzAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQU1dUa2G7/g5FJajwuwUCTH2HfGWowHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgt N2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhmMDZlLzAvMzI2MTMwNjYzYTMzNjM2MzMz M2EzNDMwMzAzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMyMzAzMjMzMzAzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHBCoPPMNAADANBgkqhkiG9w0BAQsFAAOCAQEAq5mTHIy5Vf+foVZP 9JuiOeA/ZyPf+iLVLpZOKPOfhnWvrB53S6CmLzlL/wF6Xu+vV+TICNyUWIMC4vju tOgN5jJ6F+ENOfRJu1iq4DQKSa85VMYKuRpI+5snTzHauRf8/NBgnkVBXYcDnrib u5ox7vKHyHmq19fNWOa7BGkXZJBTVMj6SlCxQhz9F3x3oEpShAXUsDhdSp6JaSAN 2RLhpJwjg0e8RhyDTc/K76bEcEiCBxta1rJ+sLxmYEJzQHvjYJg7TdBJl+4TOTNH tcnF3SYtMnMpx2tiavtURgpR4h5KJTC9B4LCDWUHd6S/sZTZazbsz2AxC8FXvvxW z0hJrA== -----END CERTIFICATE-----Generated at Wed Jan 21 20:13:31 2026 by rpki-client