This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3161313a3a2f34382d3438203d3e20333936303530.roa File: 326131343a373538313a3161313a3a2f34382d3438203d3e20333936303530.roa (raw, json) Hash identifier: jUDsscWcaVVqVncbS4ulC5BHJ8JYBEpbsgcpkiL3g9U= Subject key identifier: DA:0C:13:65:AF:F0:E7:9B:6C:2A:E4:61:7C:EE:81:11:A9:7B:16:D2 Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 3DA06F5F7CAC8CD8204C7F923AFEDE4414184462 Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3161313a3a2f34382d3438203d3e20333936303530.roa Signing time: Wed 21 Jan 2026 13:21:00 +0000 ROA not before: Wed 21 Jan 2026 13:16:00 +0000 ROA not after: Wed 20 Jan 2027 13:21:00 +0000 asID: 396050 IP address blocks: 2a14:7581:1a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a0:6f:5f:7c:ac:8c:d8:20:4c:7f:92:3a:fe:de:44:14:18:44:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Jan 21 13:16:00 2026 GMT Not After : Jan 20 13:21:00 2027 GMT Subject: CN=DA0C1365AFF0E79B6C2AE4617CEE8111A97B16D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2d:3f:30:d4:e9:9d:0c:7b:33:a2:a1:73:c9: af:6b:4c:03:4c:15:d2:4c:01:7b:34:1a:fa:96:76: f5:6d:e3:e2:c3:a8:a6:0a:dc:fb:c7:a1:46:36:8d: 83:8c:17:bb:21:c7:ff:6a:ff:d0:b3:58:09:1e:d3: 65:22:31:0d:e4:1a:da:bd:57:4a:d1:79:76:4e:ac: 16:d4:2c:df:74:d6:12:32:f4:ae:cc:1b:cc:b0:15: d9:d3:52:90:68:b9:7e:7a:8c:b5:46:cc:5d:74:cf: 5a:ad:88:63:a0:ce:a0:b6:59:20:d4:f9:8d:fc:0e: 59:1c:50:5c:82:e2:27:b9:9d:6a:c0:52:d6:7c:a0: 1e:9c:0f:67:02:dd:58:5f:97:7a:92:37:24:6f:0e: b2:92:3e:f9:9d:c3:19:0a:ff:fa:eb:da:82:13:d1: 0b:d5:ce:7a:4f:ac:4c:aa:05:6e:62:4e:aa:30:5b: 1b:c0:76:58:cd:c3:57:3c:ab:31:82:ca:14:05:65: a1:d6:c1:46:17:87:6d:1f:46:7e:1c:56:ca:f0:25: 0f:c3:6d:66:61:c3:3b:71:5d:34:0f:54:f8:66:3e: 76:7b:56:f4:a9:5a:cd:38:6b:78:eb:ec:e6:71:0c: a1:d6:37:00:19:be:a5:63:df:77:57:90:53:d9:83: d2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0C:13:65:AF:F0:E7:9B:6C:2A:E4:61:7C:EE:81:11:A9:7B:16:D2 X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3161313a3a2f34382d3438203d3e20333936303530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:1a1::/48 Signature Algorithm: sha256WithRSAEncryption 38:be:91:b1:e2:fb:e9:92:02:66:b3:7c:ac:41:e5:21:22:77: aa:f8:9d:f2:e1:5d:ef:78:0f:33:c7:16:07:c8:a2:d0:70:9c: 83:29:2f:a2:13:12:5f:59:f7:9b:cd:fa:5e:07:79:55:eb:c3: a8:82:2e:a7:fd:24:aa:d4:47:1b:4f:02:1f:90:86:03:c1:ee: de:60:1a:b3:c7:48:7e:d4:77:97:ef:5b:fc:b5:05:1f:ef:2e: 13:3b:f6:bd:a7:30:96:3f:1c:d9:e9:cb:e5:b0:02:bf:97:a8: cd:84:63:e8:b3:d4:42:be:9a:ae:dc:eb:54:01:c6:f6:4d:63: 0a:33:9e:e3:15:a1:a4:57:00:c5:f3:d9:96:22:b1:da:84:36: b0:1e:ec:5f:8c:d4:75:62:e5:16:89:41:3f:c0:86:c0:97:62: 44:07:cd:5d:44:cd:5b:6f:ed:bc:b7:d5:1f:5f:ec:57:9e:95: c4:13:bb:c6:36:23:d7:11:60:3a:9d:81:f2:95:f9:0f:c8:fd: 69:56:3f:a9:1d:35:4d:3d:c6:a2:93:08:a1:24:eb:6c:f3:f1: d2:3d:3c:9e:fc:88:c4:fd:8f:d4:da:3b:4d:64:dd:8c:8e:b3: 0f:7c:a4:47:53:8f:7c:d1:93:5b:fc:8c:e7:c6:4b:70:4b:30: e2:ac:ff:3f -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUPaBvX3ysjNggTH+SOv7eRBQYRGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNjAxMjExMzE2MDBaFw0yNzAxMjAxMzIxMDBaMDMxMTAvBgNV BAMTKERBMEMxMzY1QUZGMEU3OUI2QzJBRTQ2MTdDRUU4MTExQTk3QjE2RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkLT8w1OmdDHszoqFzya9rTANM FdJMAXs0GvqWdvVt4+LDqKYK3PvHoUY2jYOMF7shx/9q/9CzWAke02UiMQ3kGtq9 V0rReXZOrBbULN901hIy9K7MG8ywFdnTUpBouX56jLVGzF10z1qtiGOgzqC2WSDU +Y38DlkcUFyC4ie5nWrAUtZ8oB6cD2cC3Vhfl3qSNyRvDrKSPvmdwxkK//rr2oIT 0QvVznpPrEyqBW5iTqowWxvAdljNw1c8qzGCyhQFZaHWwUYXh20fRn4cVsrwJQ/D bWZhwztxXTQPVPhmPnZ7VvSpWs04a3jr7OZxDKHWNwAZvqVj33dXkFPZg9LXAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQU2gwTZa/w55tsKuRhfO6BEal7FtIwHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMxNjEzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMzMzkz NjMwMzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYEBoTANBgkqhkiG9w0BAQsFAAOCAQEAOL6R seL76ZICZrN8rEHlISJ3qvid8uFd73gPM8cWB8ii0HCcgykvohMSX1n3m836Xgd5 VevDqIIup/0kqtRHG08CH5CGA8Hu3mAas8dIftR3l+9b/LUFH+8uEzv2vacwlj8c 2enL5bACv5eozYRj6LPUQr6artzrVAHG9k1jCjOe4xWhpFcAxfPZliKx2oQ2sB7s X4zUdWLlFolBP8CGwJdiRAfNXUTNW2/tvLfVH1/sV56VxBO7xjYj1xFgOp2B8pX5 D8j9aVY/qR01TT3GopMIoSTrbPPx0j08nvyIxP2P1No7TWTdjI6zD3ykR1OPfNGT W/yM58ZLcEsw4qz/Pw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:00:12 2026 by rpki-client