This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3130343a3a2f34382d3438203d3e20323136333234.roa File: 326131343a373538313a3130343a3a2f34382d3438203d3e20323136333234.roa (raw, json) Hash identifier: AoUyZsCFBTa86RRZneU+TYe+P8vq+joOOq0ALjagkZ8= Subject key identifier: A5:25:79:51:98:4D:90:16:2F:E3:F0:49:34:CC:5A:8B:E0:62:6E:8A Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 72C0DB165B5D346C7CF7921CFABE5D0B961C2026 Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3130343a3a2f34382d3438203d3e20323136333234.roa Signing time: Tue 13 Jan 2026 07:01:47 +0000 ROA not before: Tue 13 Jan 2026 06:56:47 +0000 ROA not after: Tue 12 Jan 2027 07:01:47 +0000 asID: 216324 IP address blocks: 2a14:7581:104::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c0:db:16:5b:5d:34:6c:7c:f7:92:1c:fa:be:5d:0b:96:1c:20:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Jan 13 06:56:47 2026 GMT Not After : Jan 12 07:01:47 2027 GMT Subject: CN=A5257951984D90162FE3F04934CC5A8BE0626E8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:48:64:de:0b:db:65:20:77:3f:6c:6c:0d: 48:13:61:05:d6:63:c6:e5:30:e4:ca:ed:5d:23:fe: 18:63:8e:31:55:29:22:d9:aa:85:eb:90:10:3d:1e: 9f:48:2a:be:4a:34:b3:6f:42:51:ff:f4:46:23:47: 51:3e:c0:75:cb:59:00:1e:73:d1:96:4c:0f:66:ea: e6:13:c1:de:3b:04:fd:42:cd:90:6d:fc:81:ec:d4: 19:70:44:09:f5:ad:2b:1e:e6:4b:e6:ce:db:a2:b1: c9:6b:2e:66:40:1c:a7:1c:8f:71:8c:ca:5b:9a:1b: 69:2c:87:db:45:c5:6a:16:d8:b1:67:ad:60:ac:ec: 03:bc:5c:4a:ca:b3:ba:84:a9:89:83:31:d2:6b:72: 1b:e0:0b:e9:2e:a0:5c:a6:30:1f:6f:92:c5:2e:e5: 61:a8:7f:9d:1e:7e:4d:cb:aa:6a:66:79:0b:a7:ef: a5:d8:9f:65:97:8c:f9:9c:66:aa:3e:53:38:7e:dd: 0c:e2:4a:e9:bb:a3:70:e5:6c:75:d6:6a:78:1c:5e: 96:fe:ca:a0:f7:a0:53:92:34:a3:cd:37:85:29:db: 4a:4a:53:ad:fc:54:fb:f4:6e:ac:07:b4:4b:c3:19: a4:9d:dd:3b:38:5c:6a:cd:4e:c5:0f:76:73:51:29: d6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:25:79:51:98:4D:90:16:2F:E3:F0:49:34:CC:5A:8B:E0:62:6E:8A X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3130343a3a2f34382d3438203d3e20323136333234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:104::/48 Signature Algorithm: sha256WithRSAEncryption 1c:40:e8:5a:5a:aa:de:aa:7c:f7:b7:4a:9b:44:5b:80:1d:f7: 73:9a:9b:76:10:06:2b:76:ea:12:35:c1:13:49:a9:9a:4b:27: 92:4a:9b:ac:ea:c1:2f:3e:b3:52:95:e3:ac:2b:f4:30:a8:af: bb:a6:72:8c:db:34:e9:d7:6a:ca:27:74:92:c3:25:8b:74:3d: 5a:0b:5b:d7:98:15:42:a5:1a:e2:09:57:32:e1:d8:90:b5:f5: e1:c0:b9:45:13:b4:aa:70:50:c8:63:ee:ea:48:98:e9:61:7f: 75:bf:c7:88:ad:61:9d:dd:07:80:a2:83:f3:d4:08:3f:d7:7d: 0a:d3:45:e6:31:49:8a:eb:7c:34:ab:5c:83:64:28:f8:00:13: b3:2c:6e:4f:7b:39:73:8d:67:28:7f:01:16:e9:ae:d5:0d:47: 0e:eb:79:c6:c8:51:c2:95:b8:44:2d:cf:00:00:7d:6f:65:0d: 39:32:05:6d:d9:47:84:c1:76:38:f1:60:33:c0:16:2f:df:e3: f6:4a:a7:67:4c:d8:dd:58:64:16:0b:5b:69:76:7c:25:b1:d4: 0d:b7:0e:75:00:6a:7c:85:58:8b:84:c6:93:82:0b:14:82:d8: 90:a1:fc:10:85:c6:33:3f:fa:09:22:d1:1d:2c:19:eb:bc:d5: f2:b4:fb:d6 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUcsDbFltdNGx895Ic+r5dC5YcICYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNjAxMTMwNjU2NDdaFw0yNzAxMTIwNzAxNDdaMDMxMTAvBgNV BAMTKEE1MjU3OTUxOTg0RDkwMTYyRkUzRjA0OTM0Q0M1QThCRTA2MjZFOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3tEhk3gvbZSB3P2xsDUgTYQXW Y8blMOTK7V0j/hhjjjFVKSLZqoXrkBA9Hp9IKr5KNLNvQlH/9EYjR1E+wHXLWQAe c9GWTA9m6uYTwd47BP1CzZBt/IHs1BlwRAn1rSse5kvmztuisclrLmZAHKccj3GM yluaG2ksh9tFxWoW2LFnrWCs7AO8XErKs7qEqYmDMdJrchvgC+kuoFymMB9vksUu 5WGof50efk3LqmpmeQun76XYn2WXjPmcZqo+Uzh+3QziSum7o3DlbHXWangcXpb+ yqD3oFOSNKPNN4Up20pKU638VPv0bqwHtEvDGaSd3Ts4XGrNTsUPdnNRKdYPAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUpSV5UZhNkBYv4/BJNMxai+BiboowHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMxMzAzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NjMzMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYEBBDANBgkqhkiG9w0BAQsFAAOCAQEAHEDo Wlqq3qp897dKm0RbgB33c5qbdhAGK3bqEjXBE0mpmksnkkqbrOrBLz6zUpXjrCv0 MKivu6ZyjNs06ddqyid0ksMli3Q9Wgtb15gVQqUa4glXMuHYkLX14cC5RRO0qnBQ yGPu6kiY6WF/db/HiK1hnd0HgKKD89QIP9d9CtNF5jFJiut8NKtcg2Qo+AATsyxu T3s5c41nKH8BFumu1Q1HDut5xshRwpW4RC3PAAB9b2UNOTIFbdlHhMF2OPFgM8AW L9/j9kqnZ0zY3VhkFgtbaXZ8JbHUDbcOdQBqfIVYi4TGk4ILFILYkKH8EIXGMz/6 CSLRHSwZ67zV8rT71g== -----END CERTIFICATE-----Generated at Sun Jan 25 17:10:03 2026 by rpki-client