This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3130303a3a2f34382d3438203d3e20323136333234.roa File: 326131343a373538313a3130303a3a2f34382d3438203d3e20323136333234.roa (raw, json) Hash identifier: h7shGmnUeEW5NEC86lbo1SYpQn3IMB2eWz4pjrnPnHc= Subject key identifier: 3B:2E:B7:F7:C3:B0:2E:E4:02:5B:E3:53:87:A7:4D:2E:38:5D:F5:AB Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 0E69468F40D2DC8DB367AE65C7288D38F0ADE994 Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3130303a3a2f34382d3438203d3e20323136333234.roa Signing time: Tue 06 Jan 2026 16:01:46 +0000 ROA not before: Tue 06 Jan 2026 15:56:46 +0000 ROA not after: Tue 05 Jan 2027 16:01:46 +0000 asID: 216324 IP address blocks: 2a14:7581:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:69:46:8f:40:d2:dc:8d:b3:67:ae:65:c7:28:8d:38:f0:ad:e9:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Jan 6 15:56:46 2026 GMT Not After : Jan 5 16:01:46 2027 GMT Subject: CN=3B2EB7F7C3B02EE4025BE35387A74D2E385DF5AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ec:89:a7:4c:bd:be:d3:88:2d:6d:a2:4e:60: 02:33:1f:bf:2e:d0:83:02:90:5a:08:61:4e:86:f3: e2:ff:d0:32:d8:08:4d:7a:74:93:9e:8a:e5:bf:ef: 57:38:57:a3:11:ba:7c:d4:0d:92:48:5b:11:48:b1: b2:8c:0d:32:8d:40:b0:8e:dd:ec:d2:28:be:37:89: 7f:af:19:00:68:5f:0d:c3:e4:f1:d9:c3:e9:e7:3e: 31:e2:fe:db:73:b5:a1:c9:35:6d:a4:6c:03:6f:d5: 03:8f:7e:6d:3a:18:1f:89:b9:95:2f:05:b4:b9:8a: 00:ac:59:02:eb:76:96:00:b3:0e:cf:6c:8c:e8:8d: 01:f3:14:b0:03:6b:a1:3e:d8:81:5c:0c:f2:cf:e7: 8c:e5:68:86:ef:cf:d4:38:06:b1:98:f7:5d:fd:86: 91:60:5c:41:20:25:06:c5:1c:77:5d:73:71:a5:4e: 72:72:80:48:60:6b:94:77:d7:f0:10:72:21:e2:c7: e6:93:3c:2e:c4:4a:cb:3e:13:af:45:75:58:0a:f8: af:d8:5e:ab:76:84:cc:02:04:e8:c9:37:a3:17:f6: 4d:80:09:4e:2c:71:80:06:90:2d:ad:34:49:4d:1e: f7:29:04:13:73:ee:98:c1:6a:6f:c8:f5:a4:5b:af: a7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2E:B7:F7:C3:B0:2E:E4:02:5B:E3:53:87:A7:4D:2E:38:5D:F5:AB X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3130303a3a2f34382d3438203d3e20323136333234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:100::/48 Signature Algorithm: sha256WithRSAEncryption 4d:fd:35:85:e5:be:aa:a3:f1:d0:d3:04:fc:a9:d7:ca:f3:4a: 27:8d:61:74:c7:a8:b0:8c:9d:f0:de:f6:b4:3a:d0:fb:9d:1f: 92:2f:c8:6c:46:97:4e:8f:f5:3b:cd:8c:72:f9:bc:09:e0:b6: 0d:8d:ed:ee:e3:48:5b:09:1e:73:07:e6:a1:a0:6d:70:b3:41: 54:b2:6b:5e:87:de:48:6b:21:c0:2c:ec:b5:1b:a4:43:fe:ed: 08:6d:af:e9:41:f7:5a:2c:e7:c9:f2:ea:6d:dc:c4:29:a3:87: 6d:db:4b:53:16:6a:35:ce:4c:f4:8e:9a:14:a9:20:95:d0:80: ab:ef:5c:56:51:69:a5:e2:62:d0:a9:f2:a1:a0:48:af:65:5c: c7:19:49:51:6a:d9:32:43:a4:9b:48:7f:f9:e1:7d:29:ad:64: 7b:0b:d3:59:95:cc:6a:22:34:53:aa:80:76:ee:b5:f5:15:d0: 49:91:b3:4a:dc:df:9a:ff:65:8c:73:f6:35:72:70:98:47:5e: 49:09:8c:34:68:10:f5:6c:ff:82:70:cb:54:ed:90:fe:d3:28: d2:bc:34:32:55:90:01:73:49:04:1a:b6:86:c8:b9:2e:f9:59: bc:d5:d2:d4:41:e9:3a:24:b7:47:69:04:b3:ae:72:68:50:a2: ee:cd:0c:7b -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUDmlGj0DS3I2zZ65lxyiNOPCt6ZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNjAxMDYxNTU2NDZaFw0yNzAxMDUxNjAxNDZaMDMxMTAvBgNV BAMTKDNCMkVCN0Y3QzNCMDJFRTQwMjVCRTM1Mzg3QTc0RDJFMzg1REY1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87ImnTL2+04gtbaJOYAIzH78u 0IMCkFoIYU6G8+L/0DLYCE16dJOeiuW/71c4V6MRunzUDZJIWxFIsbKMDTKNQLCO 3ezSKL43iX+vGQBoXw3D5PHZw+nnPjHi/ttztaHJNW2kbANv1QOPfm06GB+JuZUv BbS5igCsWQLrdpYAsw7PbIzojQHzFLADa6E+2IFcDPLP54zlaIbvz9Q4BrGY9139 hpFgXEEgJQbFHHddc3GlTnJygEhga5R31/AQciHix+aTPC7ESss+E69FdVgK+K/Y Xqt2hMwCBOjJN6MX9k2ACU4scYAGkC2tNElNHvcpBBNz7pjBam/I9aRbr6dzAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUOy6398OwLuQCW+NTh6dNLjhd9aswHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMxMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NjMzMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYEBADANBgkqhkiG9w0BAQsFAAOCAQEATf01 heW+qqPx0NME/KnXyvNKJ41hdMeosIyd8N72tDrQ+50fki/IbEaXTo/1O82Mcvm8 CeC2DY3t7uNIWwkecwfmoaBtcLNBVLJrXofeSGshwCzstRukQ/7tCG2v6UH3Wizn yfLqbdzEKaOHbdtLUxZqNc5M9I6aFKkgldCAq+9cVlFppeJi0KnyoaBIr2VcxxlJ UWrZMkOkm0h/+eF9Ka1kewvTWZXMaiI0U6qAdu619RXQSZGzStzfmv9ljHP2NXJw mEdeSQmMNGgQ9Wz/gnDLVO2Q/tMo0rw0MlWQAXNJBBq2hsi5LvlZvNXS1EHpOiS3 R2kEs65yaFCi7s0Mew== -----END CERTIFICATE-----Generated at Sun Jan 25 17:10:01 2026 by rpki-client