This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538313a333730303a3a2f34302d3438203d3e20323134323233.roa File: 326131343a373538313a333730303a3a2f34302d3438203d3e20323134323233.roa (raw, json) Hash identifier: ZXZeF/4tgTqT/vfx1rQrIuGclMSkLzx41lELH0gATSk= Subject key identifier: CF:CE:62:59:6C:38:C0:80:1A:91:56:FB:87:EA:BC:01:78:B1:75:06 Certificate issuer: /CN=34DEF610B33BA719BA344A660C4BDA8333112372 Certificate serial: 438AFDE834E2777BF932DD986C432E625C77E8A9 Authority key identifier: 34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538313a333730303a3a2f34302d3438203d3e20323134323233.roa Signing time: Sat 24 Jan 2026 20:22:16 +0000 ROA not before: Sat 24 Jan 2026 20:17:16 +0000 ROA not after: Sat 23 Jan 2027 20:22:16 +0000 asID: 214223 IP address blocks: 2a14:7581:3700::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 00:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8a:fd:e8:34:e2:77:7b:f9:32:dd:98:6c:43:2e:62:5c:77:e8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DEF610B33BA719BA344A660C4BDA8333112372 Validity Not Before: Jan 24 20:17:16 2026 GMT Not After : Jan 23 20:22:16 2027 GMT Subject: CN=CFCE62596C38C0801A9156FB87EABC0178B17506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:86:fc:40:83:4a:22:f3:5f:76:ca:8b:d8:95: 8c:a1:73:f6:11:c6:16:9a:4e:d7:1c:09:f0:b2:f2: 8f:f0:9b:52:b0:09:1c:08:34:b0:32:21:f3:11:f9: a8:9d:42:ea:72:aa:f7:6d:de:f2:03:4e:f0:b1:a1: 4d:34:fb:ef:2c:06:6d:f1:62:53:86:50:20:bb:a7: 46:61:47:dc:16:32:34:cb:60:59:f2:b9:57:48:4a: ec:95:e8:97:a8:f4:2f:94:94:9b:42:48:dc:c7:8b: bb:46:d2:ae:ed:c0:90:4f:4d:55:62:f9:7c:ae:10: 9f:d7:85:11:d2:a5:eb:d4:31:11:c7:29:4b:33:32: 75:ef:1f:b7:56:f7:b8:5e:74:d4:13:c8:6f:46:a3: 3c:15:96:26:c5:14:d2:fc:64:ec:e8:6f:e3:b9:76: 7d:f3:eb:73:a7:0d:27:b9:7d:5e:37:45:a3:f3:4e: f9:b0:8c:9d:ea:77:55:72:b7:7d:de:bb:b6:64:da: 99:45:d1:4e:8d:e8:cd:58:f0:6e:80:fd:7c:61:db: 0b:22:9e:68:56:9d:e5:83:39:e8:39:33:68:b3:96: 9f:11:ac:d6:8e:2d:6f:88:30:af:1a:f5:2e:0a:4b: 0d:73:a2:04:2d:8a:0a:95:e3:fa:bd:7d:b6:46:ad: d5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CE:62:59:6C:38:C0:80:1A:91:56:FB:87:EA:BC:01:78:B1:75:06 X509v3 Authority Key Identifier: keyid:34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538313a333730303a3a2f34302d3438203d3e20323134323233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:3700::/40 Signature Algorithm: sha256WithRSAEncryption 1f:fe:7f:b6:d8:55:8b:00:28:a6:df:a1:60:50:41:99:75:55: 3d:64:c1:91:21:52:99:7f:a8:ed:32:47:ba:3e:cc:af:83:8f: 87:30:e5:c6:54:12:f1:44:af:6f:74:10:48:4e:46:b2:73:4d: 87:da:8d:d1:77:7e:69:6a:3e:14:50:16:54:c5:c1:b2:03:60: c7:d2:43:7e:9b:37:d4:d4:82:ce:6b:ad:33:9e:33:95:f4:aa: 2e:30:e4:9b:b5:87:bd:38:5f:fe:7e:32:c5:b4:62:08:0f:48: a6:a2:82:cf:73:e2:05:4b:0f:ce:44:e0:78:af:03:7a:a5:47: e7:46:4b:39:db:7a:ea:43:8a:e4:c7:df:a7:56:1c:f6:11:58: 02:1c:ee:d8:51:d9:46:5b:dc:3f:ee:94:16:f6:d7:86:5d:3e: b0:35:7e:b4:e7:e3:85:31:9b:37:54:8f:46:a2:44:c1:01:1d: dc:76:02:ab:8f:27:97:aa:e8:a8:52:03:98:ec:b5:aa:56:93: 16:09:00:b4:37:c1:da:01:3c:70:41:ea:02:27:0e:5c:50:ec: c1:b9:35:38:55:d8:c1:a2:1e:28:af:4c:61:18:f8:53:66:64: a2:d1:c8:c0:92:5b:4c:1f:fb:02:93:b5:b7:e5:70:a9:f1:ee: 70:02:1c:7a -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUQ4r96DTid3v5Mt2YbEMuYlx36KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMz MzExMjM3MjAeFw0yNjAxMjQyMDE3MTZaFw0yNzAxMjMyMDIyMTZaMDMxMTAvBgNV BAMTKENGQ0U2MjU5NkMzOEMwODAxQTkxNTZGQjg3RUFCQzAxNzhCMTc1MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChvxAg0oi8192yovYlYyhc/YR xhaaTtccCfCy8o/wm1KwCRwINLAyIfMR+aidQupyqvdt3vIDTvCxoU00++8sBm3x YlOGUCC7p0ZhR9wWMjTLYFnyuVdISuyV6Jeo9C+UlJtCSNzHi7tG0q7twJBPTVVi +XyuEJ/XhRHSpevUMRHHKUszMnXvH7dW97hedNQTyG9GozwVlibFFNL8ZOzob+O5 dn3z63OnDSe5fV43RaPzTvmwjJ3qd1Vyt33eu7Zk2plF0U6N6M1Y8G6A/Xxh2wsi nmhWneWDOeg5M2izlp8RrNaOLW+IMK8a9S4KSw1zogQtigqV4/q9fbZGrdUpAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUz85iWWw4wIAakVb7h+q8AXixdQYwHwYDVR0j BBgwFoAUNN72ELM7pxm6NEpmDEvagzMRI3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgz YzkwLzEvMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMzMzExMjM3Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNERFRjYxMEIzM0JBNzE5QkEzNDRBNjYw QzRCREE4MzMzMTEyMzcyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yZWQ0YjdlYi0xN2E3LTQ0ZTEtOWNhMi0wOThhMzIzODNjOTAvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMzMzczMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MTM0MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gTcwDQYJKoZIhvcNAQELBQADggEBAB/+ f7bYVYsAKKbfoWBQQZl1VT1kwZEhUpl/qO0yR7o+zK+Dj4cw5cZUEvFEr290EEhO RrJzTYfajdF3fmlqPhRQFlTFwbIDYMfSQ36bN9TUgs5rrTOeM5X0qi4w5Ju1h704 X/5+MsW0YggPSKaigs9z4gVLD85E4HivA3qlR+dGSznbeupDiuTH36dWHPYRWAIc 7thR2UZb3D/ulBb214ZdPrA1frTn44UxmzdUj0aiRMEBHdx2AquPJ5eq6KhSA5js tapWkxYJALQ3wdoBPHBB6gInDlxQ7MG5NThV2MGiHiivTGEY+FNmZKLRyMCSW0wf +wKTtbflcKnx7nACHHo= -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:32 2026 by rpki-client