This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3130313a3a2f34382d3438203d3e20323136333234.roa File: 326131343a373538313a3130313a3a2f34382d3438203d3e20323136333234.roa (raw, json) Hash identifier: Emqgxwj0Gpbzspcrn8cu/akK3AuTlJFqJtNZd8KzZZE= Subject key identifier: 88:83:55:65:3C:BB:29:DF:BF:93:44:A9:C6:F9:4A:33:29:8E:A6:F5 Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 4B6D68D55C729F1843C24E913243B1093DBB0106 Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3130313a3a2f34382d3438203d3e20323136333234.roa Signing time: Tue 06 Jan 2026 16:01:46 +0000 ROA not before: Tue 06 Jan 2026 15:56:46 +0000 ROA not after: Tue 05 Jan 2027 16:01:46 +0000 asID: 216324 IP address blocks: 2a14:7581:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:6d:68:d5:5c:72:9f:18:43:c2:4e:91:32:43:b1:09:3d:bb:01:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Jan 6 15:56:46 2026 GMT Not After : Jan 5 16:01:46 2027 GMT Subject: CN=888355653CBB29DFBF9344A9C6F94A33298EA6F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:a9:44:6c:09:f3:0f:50:55:8f:38:46:df: 25:7e:a8:89:6b:c7:06:0d:a1:5e:e4:8e:0d:59:cd: a5:4a:5e:f9:fc:e1:d1:a6:ad:30:c8:f2:91:45:c2: 09:1e:d1:6c:3e:39:5d:2f:c5:fc:8e:c6:64:7a:ad: 13:69:c0:7c:5a:4a:46:99:45:aa:4b:52:05:b5:12: f6:0c:af:a5:11:05:5c:fe:07:25:6b:41:f7:17:12: 6d:ea:98:e3:7a:4a:9e:23:d9:39:f5:64:60:8a:ed: 59:33:e3:8f:fa:c6:d4:80:8d:d2:d7:c9:ac:9b:30: 73:c2:ae:af:88:33:37:9e:17:7e:25:86:c6:d6:30: c1:b9:95:a7:71:6d:91:95:84:f2:c3:f5:d2:0b:9e: ce:a4:82:30:fd:aa:d9:5d:c6:84:ba:78:ad:21:d1: ea:da:84:88:7a:85:f6:eb:b2:d1:e7:21:a9:d3:5d: 3d:87:2d:9e:22:31:e3:1b:cc:c9:b6:51:0d:20:c2: ee:0a:5c:5c:50:1a:bb:05:f1:6a:0b:f6:00:ad:e1: ac:29:5d:d8:73:fd:23:99:9a:2f:1e:09:8f:ea:f0: 6c:1c:f7:db:f1:fe:12:1c:6c:4a:3d:9a:5a:d5:48: 2f:5c:9a:d5:cc:71:49:26:1f:c6:8f:12:a5:ec:5e: d8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:83:55:65:3C:BB:29:DF:BF:93:44:A9:C6:F9:4A:33:29:8E:A6:F5 X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3130313a3a2f34382d3438203d3e20323136333234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:101::/48 Signature Algorithm: sha256WithRSAEncryption 6d:48:26:03:0c:65:88:82:46:74:00:89:ee:ae:0d:5c:48:b6: 26:0b:b5:29:d7:e9:5d:d0:27:f8:a5:df:fa:cb:a3:55:09:03: 76:be:60:e0:d3:a8:a9:83:6b:f2:8c:3c:d8:e7:ec:4d:c4:21: 5a:09:95:17:e8:0c:85:af:62:ab:6c:c0:cc:4f:aa:c5:74:fb: 52:19:a3:aa:3d:70:34:f3:e3:1a:09:5c:a9:5a:24:93:e1:cd: e5:ba:55:fb:bb:f4:05:f0:ce:99:04:f5:de:46:f9:7b:1f:87: 9e:dd:ee:8d:c7:b2:57:e2:9f:3a:7a:1c:45:bc:98:77:0c:2c: 76:a5:77:c5:97:3a:57:cc:c4:d6:93:28:52:d5:e7:56:b8:4b: 31:b7:0b:be:51:33:56:96:7a:1b:0b:80:76:6d:9b:5a:8c:71: a2:40:0a:23:d1:40:c5:b6:8a:fd:f2:61:14:db:cb:30:34:e4: 8a:8a:06:70:b0:bc:3a:62:69:d2:7f:f4:e2:20:56:67:a5:20: 5f:66:30:5a:53:8c:c9:01:62:c7:6e:15:35:98:a0:cf:55:4c: be:b5:f3:13:ac:ab:7d:5f:65:8c:53:27:b4:ff:8f:c5:d3:fc: 80:6b:7c:47:10:1c:ae:58:6e:44:d4:b2:06:a5:e4:b8:80:12: 3a:50:a1:e2 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUS21o1VxynxhDwk6RMkOxCT27AQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNjAxMDYxNTU2NDZaFw0yNzAxMDUxNjAxNDZaMDMxMTAvBgNV BAMTKDg4ODM1NTY1M0NCQjI5REZCRjkzNDRBOUM2Rjk0QTMzMjk4RUE2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5E6lEbAnzD1BVjzhG3yV+qIlr xwYNoV7kjg1ZzaVKXvn84dGmrTDI8pFFwgke0Ww+OV0vxfyOxmR6rRNpwHxaSkaZ RapLUgW1EvYMr6URBVz+ByVrQfcXEm3qmON6Sp4j2Tn1ZGCK7Vkz44/6xtSAjdLX yaybMHPCrq+IMzeeF34lhsbWMMG5ladxbZGVhPLD9dILns6kgjD9qtldxoS6eK0h 0erahIh6hfbrstHnIanTXT2HLZ4iMeMbzMm2UQ0gwu4KXFxQGrsF8WoL9gCt4awp Xdhz/SOZmi8eCY/q8Gwc99vx/hIcbEo9mlrVSC9cmtXMcUkmH8aPEqXsXtgfAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUiINVZTy7Kd+/k0SpxvlKMymOpvUwHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMxMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NjMzMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYEBATANBgkqhkiG9w0BAQsFAAOCAQEAbUgm AwxliIJGdACJ7q4NXEi2Jgu1KdfpXdAn+KXf+sujVQkDdr5g4NOoqYNr8ow82Ofs TcQhWgmVF+gMha9iq2zAzE+qxXT7Uhmjqj1wNPPjGglcqVokk+HN5bpV+7v0BfDO mQT13kb5ex+Hnt3ujceyV+KfOnocRbyYdwwsdqV3xZc6V8zE1pMoUtXnVrhLMbcL vlEzVpZ6GwuAdm2bWoxxokAKI9FAxbaK/fJhFNvLMDTkiooGcLC8OmJp0n/04iBW Z6UgX2YwWlOMyQFix24VNZigz1VMvrXzE6yrfV9ljFMntP+PxdP8gGt8RxAcrlhu RNSyBqXkuIASOlCh4g== -----END CERTIFICATE-----Generated at Sun Jan 25 17:10:00 2026 by rpki-client