This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3161313a3a2f34382d3438203d3e20323136333234.roa File: 326131343a373538313a3161313a3a2f34382d3438203d3e20323136333234.roa (raw, json) Hash identifier: /M4TtUllhqdXNEtkTKvn/jbj38tma3xoboqzFgGi29o= Subject key identifier: 2D:F8:65:DF:C7:07:15:B3:67:58:5B:3B:73:E8:23:12:23:DF:31:EF Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 76758DB06E9BD167F018C54D7F2D24BED8C62155 Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3161313a3a2f34382d3438203d3e20323136333234.roa Signing time: Sun 21 Dec 2025 05:00:58 +0000 ROA not before: Sun 21 Dec 2025 04:55:58 +0000 ROA not after: Sun 20 Dec 2026 05:00:58 +0000 asID: 216324 IP address blocks: 2a14:7581:1a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:75:8d:b0:6e:9b:d1:67:f0:18:c5:4d:7f:2d:24:be:d8:c6:21:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Dec 21 04:55:58 2025 GMT Not After : Dec 20 05:00:58 2026 GMT Subject: CN=2DF865DFC70715B367585B3B73E8231223DF31EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:6b:c0:a6:6e:0c:f7:6f:77:52:06:1e:95: c2:68:f2:4a:6c:da:13:9d:ca:6f:a9:e7:ce:7e:89: ed:00:6d:ca:b9:48:51:60:65:f9:9c:c4:30:51:ac: 57:96:ad:dd:db:04:a2:db:68:54:a0:e7:23:fb:75: ef:a9:79:39:78:10:c2:a3:42:9b:5a:9e:33:a4:61: 39:a0:34:ae:c4:bf:fc:87:1f:ce:41:67:9f:4b:25: 85:0e:90:4c:f9:73:68:09:63:91:8f:cb:88:9f:05: 98:c1:67:93:26:2f:ed:95:c6:09:c4:b1:62:d7:2a: 0c:e0:0b:18:95:24:59:76:37:f0:a8:1e:8e:bf:12: 78:e1:02:25:2b:ce:b0:a4:d7:ca:ed:99:af:8e:a5: c1:ca:cd:83:af:79:26:e6:b6:4b:67:68:7e:c5:06: 01:28:de:59:7c:af:21:90:e7:d8:01:9d:91:76:15: 6f:60:fb:cc:81:7e:0d:9b:d6:b6:cb:16:3c:e8:76: d8:e6:bc:98:80:53:db:af:e9:41:cd:c1:78:6b:c1: 2b:c9:c6:71:44:ae:78:0a:dd:b1:b1:3c:da:a7:68: 82:8a:3c:8e:cc:f3:b9:f9:0f:82:57:3a:d9:f3:25: c4:a6:9e:ff:5d:cb:b0:3e:58:7a:d2:d6:3d:75:29: 10:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F8:65:DF:C7:07:15:B3:67:58:5B:3B:73:E8:23:12:23:DF:31:EF X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3161313a3a2f34382d3438203d3e20323136333234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:1a1::/48 Signature Algorithm: sha256WithRSAEncryption 7c:16:48:0b:6d:a4:58:2b:bd:fd:65:67:07:04:00:4c:fa:ad: 5b:53:8d:b6:08:24:a0:5f:d5:37:66:35:83:64:a8:8e:29:3c: 77:45:51:61:7f:06:6e:1c:7b:1f:a6:8d:5d:d3:5d:a7:b0:64: c0:cd:42:13:eb:6a:19:64:2e:9c:ae:90:a4:82:10:6c:b0:38: 17:64:cb:05:79:12:5f:6d:d3:c6:b8:70:62:dc:55:5c:31:58: 25:45:bd:9b:a8:0c:66:08:53:2a:7e:b0:15:35:54:83:32:b5: a5:44:a6:08:ab:cb:f1:67:78:d2:2b:e3:0f:64:21:ee:a6:d4: e5:01:ce:ec:1a:12:9a:57:3b:07:31:07:d5:07:18:cf:c1:92: 22:07:95:54:2d:76:ea:7c:fc:bf:aa:7f:6b:78:bd:f7:67:5b: 02:f2:ab:a0:6f:c5:05:dc:a8:93:a2:68:0e:a6:d6:c3:f6:21: 7a:a9:aa:29:a0:13:77:9a:19:75:db:96:d2:bc:54:26:35:b8: 44:31:e1:48:6b:20:e3:e6:25:5c:a1:f7:6e:08:d2:c3:9f:8f: 8d:c6:35:61:7a:30:aa:1b:05:c0:5e:26:fa:3c:be:bc:c5:6b: bd:b9:db:70:ec:25:16:c3:74:00:ce:8b:c3:ec:f1:fe:d0:35: 43:4e:e4:b6 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUdnWNsG6b0WfwGMVNfy0kvtjGIVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNTEyMjEwNDU1NThaFw0yNjEyMjAwNTAwNThaMDMxMTAvBgNV BAMTKDJERjg2NURGQzcwNzE1QjM2NzU4NUIzQjczRTgyMzEyMjNERjMxRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrqmvApm4M9293UgYelcJo8kps 2hOdym+p585+ie0Abcq5SFFgZfmcxDBRrFeWrd3bBKLbaFSg5yP7de+peTl4EMKj QptanjOkYTmgNK7Ev/yHH85BZ59LJYUOkEz5c2gJY5GPy4ifBZjBZ5MmL+2VxgnE sWLXKgzgCxiVJFl2N/CoHo6/EnjhAiUrzrCk18rtma+OpcHKzYOveSbmtktnaH7F BgEo3ll8ryGQ59gBnZF2FW9g+8yBfg2b1rbLFjzodtjmvJiAU9uv6UHNwXhrwSvJ xnFErngK3bGxPNqnaIKKPI7M87n5D4JXOtnzJcSmnv9dy7A+WHrS1j11KRAdAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQULfhl38cHFbNnWFs7c+gjEiPfMe8wHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMxNjEzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NjMzMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYEBoTANBgkqhkiG9w0BAQsFAAOCAQEAfBZI C22kWCu9/WVnBwQATPqtW1ONtggkoF/VN2Y1g2Sojik8d0VRYX8Gbhx7H6aNXdNd p7BkwM1CE+tqGWQunK6QpIIQbLA4F2TLBXkSX23TxrhwYtxVXDFYJUW9m6gMZghT Kn6wFTVUgzK1pUSmCKvL8Wd40ivjD2Qh7qbU5QHO7BoSmlc7BzEH1QcYz8GSIgeV VC126nz8v6p/a3i992dbAvKroG/FBdyok6JoDqbWw/YheqmqKaATd5oZdduW0rxU JjW4RDHhSGsg4+YlXKH3bgjSw5+PjcY1YXowqhsFwF4m+jy+vMVrvbnbcOwlFsN0 AM6Lw+zx/tA1Q07ktg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:09:59 2026 by rpki-client