This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa File: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (raw, json) Hash identifier: mT7wNp38f47L+2MAFo1ah1wV4i3g7EwDZhqEAFbd0PU= Subject key identifier: CD:F6:DA:DA:26:3C:51:DB:E4:B1:53:99:4C:47:41:05:AC:2C:60:E7 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 3E04A208CDFE95E28C5E9F8509DE5697BF339033 Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa Signing time: Wed 07 Jan 2026 03:02:02 +0000 ROA not before: Wed 07 Jan 2026 02:57:02 +0000 ROA not after: Wed 06 Jan 2027 03:02:02 +0000 asID: 215617 IP address blocks: 2a0f:85c1:357::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:04:a2:08:cd:fe:95:e2:8c:5e:9f:85:09:de:56:97:bf:33:90:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Jan 7 02:57:02 2026 GMT Not After : Jan 6 03:02:02 2027 GMT Subject: CN=CDF6DADA263C51DBE4B153994C474105AC2C60E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b4:0f:bb:b9:3a:e3:9e:13:fc:7b:c6:8e:f5: ef:e7:4c:ae:4b:93:17:74:32:83:a0:33:22:3f:20: b8:91:05:24:fb:e7:6f:1d:6a:5e:4a:05:f2:ed:eb: 25:21:77:6e:5f:c7:07:8d:fb:86:df:37:b4:9d:c2: b6:c8:72:02:e7:e6:7e:01:d0:be:65:ed:dd:aa:6e: 8d:74:11:e6:6c:d4:0c:00:c5:af:7d:7a:1e:ee:18: c4:76:8e:6b:16:37:01:ff:b5:b0:14:a2:ed:e0:84: bc:b7:1d:e3:72:13:bc:e7:31:b8:90:89:b5:b7:c8: 7a:d4:25:08:e7:77:78:f3:18:75:6f:c0:14:b0:cd: 8e:fb:26:0e:86:97:69:6d:1a:16:0e:be:e5:5e:0e: c4:0f:c0:b3:bf:14:29:85:2c:43:a4:21:32:38:3a: 12:fc:ef:b6:ca:b5:fe:9e:ca:51:44:88:0d:59:e9: 44:ae:22:c2:c9:2a:93:fb:b6:bf:19:e5:42:0e:15: 16:4b:9f:b0:e8:2f:63:1d:9a:87:b2:db:40:3e:c6: 01:88:66:75:ec:8a:e7:4a:7a:c0:fe:77:e3:0d:e0: 55:2d:a2:a6:7c:09:b3:58:b1:83:f4:a1:d5:8a:e9: d8:75:14:f9:27:22:a0:36:59:10:0c:ec:38:fd:1a: a6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F6:DA:DA:26:3C:51:DB:E4:B1:53:99:4C:47:41:05:AC:2C:60:E7 X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:357::/48 Signature Algorithm: sha256WithRSAEncryption 0d:d3:7c:8d:19:2e:0f:15:96:25:dd:46:c6:c9:4d:1f:69:a6: 6c:f7:5b:05:ba:28:e7:dd:86:b7:e6:5e:8f:38:69:44:9e:83: 99:e3:db:b8:d3:84:64:8c:c6:e1:c6:ef:56:55:b0:c0:43:a9: f6:b8:bd:77:2d:89:fa:5d:b2:97:4c:c6:0e:d9:09:7e:9b:72: 1e:b5:42:81:e2:81:c9:5a:d8:95:60:80:4e:5f:f3:8f:c6:04: 0e:cc:3c:ef:ba:89:67:dc:32:01:d4:12:1e:3a:ca:a4:97:73: cd:cb:f6:06:c5:f7:88:de:63:03:ad:83:7f:b3:11:0a:08:9e: 9d:0d:65:94:67:80:cd:01:e3:ed:2e:19:4e:12:5e:2a:63:3b: 3a:16:18:97:d8:98:3c:80:a4:b4:13:f1:de:90:15:24:98:11: 6d:2c:7b:5c:6a:3b:06:b0:0a:1e:01:0e:4e:97:48:6d:7c:4a: ae:60:88:f0:db:86:e2:e4:89:d0:5a:72:b2:36:67:0a:0b:d5: 4a:e1:7f:9f:a8:64:81:06:87:64:68:09:d1:f7:be:27:46:96: 69:df:45:e1:78:d2:4b:d4:d9:36:a9:ea:c8:0f:6f:25:6d:28: 0c:f7:3f:0e:b2:47:33:54:b2:24:f6:77:0a:7f:5d:6f:a2:ac: 70:33:f5:bd -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUPgSiCM3+leKMXp+FCd5Wl78zkDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNjAxMDcwMjU3MDJaFw0yNzAxMDYwMzAyMDJaMDMxMTAvBgNV BAMTKENERjZEQURBMjYzQzUxREJFNEIxNTM5OTRDNDc0MTA1QUMyQzYwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDStA+7uTrjnhP8e8aO9e/nTK5L kxd0MoOgMyI/ILiRBST7528dal5KBfLt6yUhd25fxweN+4bfN7SdwrbIcgLn5n4B 0L5l7d2qbo10EeZs1AwAxa99eh7uGMR2jmsWNwH/tbAUou3ghLy3HeNyE7znMbiQ ibW3yHrUJQjnd3jzGHVvwBSwzY77Jg6Gl2ltGhYOvuVeDsQPwLO/FCmFLEOkITI4 OhL877bKtf6eylFEiA1Z6USuIsLJKpP7tr8Z5UIOFRZLn7DoL2Mdmoey20A+xgGI ZnXsiudKesD+d+MN4FUtoqZ8CbNYsYP0odWK6dh1FPknIqA2WRAM7Dj9GqbbAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUzfba2iY8UdvksVOZTEdBBawsYOcwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMi8zMjYxMzA2 NjNhMzgzNTYzMzEzYTMzMzUzNzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTM2MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEDVzANBgkqhkiG9w0BAQsFAAOCAQEADdN8 jRkuDxWWJd1GxslNH2mmbPdbBboo592Gt+ZejzhpRJ6DmePbuNOEZIzG4cbvVlWw wEOp9ri9dy2J+l2yl0zGDtkJfptyHrVCgeKByVrYlWCATl/zj8YEDsw877qJZ9wy AdQSHjrKpJdzzcv2BsX3iN5jA62Df7MRCgienQ1llGeAzQHj7S4ZThJeKmM7OhYY l9iYPICktBPx3pAVJJgRbSx7XGo7BrAKHgEOTpdIbXxKrmCI8NuG4uSJ0FpysjZn CgvVSuF/n6hkgQaHZGgJ0fe+J0aWad9F4XjSS9TZNqnqyA9vJW0oDPc/DrJHM1Sy JPZ3Cn9db6KscDP1vQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:38:48 2026 by rpki-client