This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa File: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (raw, json) Hash identifier: hhnXez1MtyG/OWqeDWj8Yk7vwpb6xK8SsXbhq+WvHw8= Subject key identifier: A7:6F:B9:CC:37:3C:16:08:81:BB:9C:EE:97:67:70:4E:1B:82:22:2E Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 77D890084840B7E367A0801336DF4A48DB4D0E50 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa Signing time: Wed 24 Dec 2025 15:18:25 +0000 ROA not before: Wed 24 Dec 2025 15:13:25 +0000 ROA not after: Wed 23 Dec 2026 15:18:25 +0000 asID: 401386 IP address blocks: 2a14:7581:2f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d8:90:08:48:40:b7:e3:67:a0:80:13:36:df:4a:48:db:4d:0e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Dec 24 15:13:25 2025 GMT Not After : Dec 23 15:18:25 2026 GMT Subject: CN=A76FB9CC373C160881BB9CEE9767704E1B82222E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6c:d8:7d:97:52:a7:d5:9a:5f:0e:f7:48:3c: 4b:27:1a:16:a1:8e:4b:a6:27:9d:b1:e2:37:7b:5f: a0:48:9c:1e:0b:c4:c7:ce:c3:f0:9b:f9:1b:be:0d: 1f:2b:b5:f1:a4:e2:7e:33:85:bd:ea:ee:46:f0:6e: 54:80:f1:be:af:69:f8:1e:4d:23:c4:e4:92:99:be: 8f:63:cf:97:de:16:b5:bf:30:3d:b9:f9:5a:29:fe: bc:e5:d6:c0:00:9d:8e:af:85:ca:1b:b9:6e:f4:0d: 4b:19:76:43:7c:ce:8b:b5:3c:73:9c:3c:d9:06:1b: 6f:01:89:b4:67:67:16:af:85:be:79:82:97:4b:e9: 37:c9:27:a9:4e:0f:bd:a6:8f:e5:db:a1:ab:62:ed: 86:36:67:c1:37:ac:2d:ca:50:39:c1:60:8b:7b:50: c9:ba:ef:47:3a:be:0f:15:c7:40:9b:68:f2:43:fd: 46:bb:fd:03:02:96:c1:3a:a3:1e:8a:fe:a1:a5:76: fd:cf:ba:53:fe:31:da:b0:55:4f:57:93:73:1c:ad: 00:e5:b6:f8:58:f2:28:df:99:77:dc:56:d5:c1:71: 3c:fe:a8:8a:9a:7b:9d:40:e8:62:aa:c4:fa:33:4b: 90:22:94:f6:74:99:4d:b4:3c:92:b0:a9:b4:ce:e3: f6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6F:B9:CC:37:3C:16:08:81:BB:9C:EE:97:67:70:4E:1B:82:22:2E X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:2f00::/48 Signature Algorithm: sha256WithRSAEncryption 4a:6b:7d:47:6c:81:27:94:1a:b6:bf:ed:96:a1:1c:c1:c9:cf: 8f:c3:13:2e:ca:1c:6a:c6:b5:88:b5:fe:1c:4a:5b:9d:96:05: 9b:17:cb:39:de:f2:e0:58:35:03:c7:9c:56:5d:aa:6c:f0:be: d8:20:1f:66:00:c1:cc:73:17:e4:4d:71:2f:a0:1b:45:41:b4: 13:5e:b3:d6:ee:14:96:62:85:e6:8c:b5:23:1c:37:93:41:89: 08:b4:68:5a:42:5a:1f:df:ed:d9:19:5f:25:20:b8:82:d1:29: b0:8f:53:c5:55:56:6e:6a:89:1d:81:3e:73:f1:7c:b7:10:45: 2c:90:7d:4b:81:f7:57:2f:22:4d:e6:04:65:14:8c:3c:17:4a: ad:3d:a4:dc:dc:19:1e:10:e9:4e:f7:07:0c:8c:02:b5:ed:99: 34:74:d1:19:df:72:a8:31:4c:9a:3b:4d:ba:b8:68:44:5e:98: 41:12:75:fa:76:05:1c:e3:c6:3f:5e:78:0d:64:16:ae:ae:e7: 27:14:10:45:c2:9c:d4:40:6c:3e:2a:fd:bc:3c:51:07:5c:35: aa:0d:2a:82:a9:39:63:e6:49:aa:66:64:1f:dd:3f:b4:78:41: 19:7a:ce:a3:70:53:11:64:5a:59:f7:03:3b:97:76:af:f1:a8: 49:10:0b:eb -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUd9iQCEhAt+NnoIATNt9KSNtNDlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTEyMjQxNTEzMjVaFw0yNjEyMjMxNTE4MjVaMDMxMTAvBgNV BAMTKEE3NkZCOUNDMzczQzE2MDg4MUJCOUNFRTk3Njc3MDRFMUI4MjIyMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbNh9l1Kn1ZpfDvdIPEsnGhah jkumJ52x4jd7X6BInB4LxMfOw/Cb+Ru+DR8rtfGk4n4zhb3q7kbwblSA8b6vafge TSPE5JKZvo9jz5feFrW/MD25+Vop/rzl1sAAnY6vhcobuW70DUsZdkN8zou1PHOc PNkGG28BibRnZxavhb55gpdL6TfJJ6lOD72mj+Xboati7YY2Z8E3rC3KUDnBYIt7 UMm670c6vg8Vx0CbaPJD/Ua7/QMClsE6ox6K/qGldv3PulP+MdqwVU9Xk3McrQDl tvhY8ijfmXfcVtXBcTz+qIqae51A6GKqxPozS5AilPZ0mU20PJKwqbTO4/a7AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUp2+5zDc8FgiBu5zul2dwThuCIi4wHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mYWRlYmI5ZC0zM2NjLTQyOWItYWEzNS0xMDYzNGE4YjFkZDQvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMyNjYzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzQz MDMxMzMzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gS8AMA0GCSqGSIb3DQEBCwUAA4IBAQBK a31HbIEnlBq2v+2WoRzByc+PwxMuyhxqxrWItf4cSludlgWbF8s53vLgWDUDx5xW Xaps8L7YIB9mAMHMcxfkTXEvoBtFQbQTXrPW7hSWYoXmjLUjHDeTQYkItGhaQlof 3+3ZGV8lILiC0Smwj1PFVVZuaokdgT5z8Xy3EEUskH1LgfdXLyJN5gRlFIw8F0qt PaTc3BkeEOlO9wcMjAK17Zk0dNEZ33KoMUyaO026uGhEXphBEnX6dgUc48Y/XngN ZBaurucnFBBFwpzUQGw+Kv28PFEHXDWqDSqCqTlj5kmqZmQf3T+0eEEZes6jcFMR ZFpZ9wM7l3av8ahJEAvr -----END CERTIFICATE-----Generated at Mon Jan 26 11:10:43 2026 by rpki-client