This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538363a373030303a3a2f33362d3438203d3e20323134323233.roa File: 326131343a373538363a373030303a3a2f33362d3438203d3e20323134323233.roa (raw, json) Hash identifier: pCJnPNsZB30IXmBLO9EkDOhxW1xXJNPlCqoAbVJT2Wc= Subject key identifier: 97:A6:4E:2F:B2:7B:72:60:68:07:AE:9E:C5:A9:E5:D3:B3:17:FB:13 Certificate issuer: /CN=34DEF610B33BA719BA344A660C4BDA8333112372 Certificate serial: 7A7398E44E8A491E22191B3802FCA25D7B5A26FA Authority key identifier: 34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538363a373030303a3a2f33362d3438203d3e20323134323233.roa Signing time: Sat 24 Jan 2026 12:19:45 +0000 ROA not before: Sat 24 Jan 2026 12:14:45 +0000 ROA not after: Sat 23 Jan 2027 12:19:45 +0000 asID: 214223 IP address blocks: 2a14:7586:7000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 00:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:73:98:e4:4e:8a:49:1e:22:19:1b:38:02:fc:a2:5d:7b:5a:26:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DEF610B33BA719BA344A660C4BDA8333112372 Validity Not Before: Jan 24 12:14:45 2026 GMT Not After : Jan 23 12:19:45 2027 GMT Subject: CN=97A64E2FB27B72606807AE9EC5A9E5D3B317FB13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:71:99:e1:8f:c8:45:d2:34:d7:45:be:61:0e: 60:89:28:a7:4d:e1:3c:8c:4b:a5:4e:20:45:0d:af: 72:0e:7f:af:60:03:8f:50:4d:77:2c:b0:68:db:32: 28:c5:eb:e4:54:2d:b9:f1:66:fa:26:0d:fc:e9:d3: 35:02:eb:c9:96:92:5a:7e:13:04:2a:66:c0:1a:9d: 14:17:a5:11:74:a5:7d:8c:ad:ef:76:55:83:02:b8: 1b:ee:c9:31:5c:88:8d:a3:89:fd:8b:c6:85:cc:84: 7b:78:a3:5b:9d:28:7b:2a:19:73:89:43:95:28:d2: 20:4d:9b:29:c1:cd:4a:de:b4:7b:3d:56:55:94:00: e0:58:55:94:0a:d8:12:9d:e1:04:de:0e:ca:ed:06: e9:31:e3:e5:99:27:02:c6:f9:bb:87:d1:13:0c:a3: 1b:b6:4b:eb:d3:52:72:a2:19:19:49:89:61:43:d8: 7c:e4:a4:52:57:17:64:be:5f:7f:8b:ac:cf:0b:7f: e1:d5:19:7a:9a:46:97:ce:36:a7:9e:60:f8:c9:b3: 3e:b3:d1:0e:0a:36:70:ef:18:58:8f:37:2f:c4:54: 62:3e:f1:f4:b3:2a:d7:38:71:80:e2:a8:b3:17:1b: 3c:09:40:40:a8:5b:08:09:41:61:64:95:b2:37:89: 94:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A6:4E:2F:B2:7B:72:60:68:07:AE:9E:C5:A9:E5:D3:B3:17:FB:13 X509v3 Authority Key Identifier: keyid:34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538363a373030303a3a2f33362d3438203d3e20323134323233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:7000::/36 Signature Algorithm: sha256WithRSAEncryption 57:c9:a3:b7:d4:c8:89:60:67:4f:0b:ab:d9:6e:3d:e4:93:54: a7:57:f7:61:31:df:f9:bb:ca:b7:29:f0:8d:8d:be:db:f9:cc: e0:4c:b3:3d:01:47:a4:74:5f:94:51:f7:6b:8d:3e:5c:8a:36: 0c:82:0f:bd:44:45:5e:ba:2e:1e:5d:09:07:3a:5d:cd:e6:b9: 9d:e1:f7:40:15:06:d9:e0:1f:f8:62:7e:6a:94:c7:e5:89:51: c4:a9:e2:10:95:a8:09:63:a5:06:be:df:34:6d:c9:31:10:06: 92:ac:f1:70:d0:3a:3e:19:b4:b8:cf:59:f6:6d:f1:f8:77:0b: 45:b8:f7:56:cb:dd:a4:ec:f4:e4:7a:f9:c8:eb:46:d2:3e:fc: 84:39:64:81:6b:47:e3:41:88:0a:5c:c6:cd:72:53:69:7b:da: 51:71:a0:50:bc:8e:df:7f:16:06:55:23:79:c0:15:9c:08:1d: f2:ca:41:af:91:30:96:4e:96:41:0b:aa:70:38:55:2c:79:c7: d8:49:c1:df:81:77:2a:7a:ca:85:fd:7b:eb:a0:c9:7b:c0:c9: 7f:ac:14:1c:e4:88:c3:7d:c5:54:56:23:22:b8:57:a0:bb:14: 42:12:84:cf:02:0f:ca:83:d5:25:89:0a:37:58:32:36:27:39: 72:17:46:05 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUenOY5E6KSR4iGRs4AvyiXXtaJvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMz MzExMjM3MjAeFw0yNjAxMjQxMjE0NDVaFw0yNzAxMjMxMjE5NDVaMDMxMTAvBgNV BAMTKDk3QTY0RTJGQjI3QjcyNjA2ODA3QUU5RUM1QTlFNUQzQjMxN0ZCMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKcZnhj8hF0jTXRb5hDmCJKKdN 4TyMS6VOIEUNr3IOf69gA49QTXcssGjbMijF6+RULbnxZvomDfzp0zUC68mWklp+ EwQqZsAanRQXpRF0pX2Mre92VYMCuBvuyTFciI2jif2LxoXMhHt4o1udKHsqGXOJ Q5Uo0iBNmynBzUretHs9VlWUAOBYVZQK2BKd4QTeDsrtBukx4+WZJwLG+buH0RMM oxu2S+vTUnKiGRlJiWFD2HzkpFJXF2S+X3+LrM8Lf+HVGXqaRpfONqeeYPjJsz6z 0Q4KNnDvGFiPNy/EVGI+8fSzKtc4cYDiqLMXGzwJQECoWwgJQWFklbI3iZQtAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUl6ZOL7J7cmBoB66exanl07MX+xMwHwYDVR0j BBgwFoAUNN72ELM7pxm6NEpmDEvagzMRI3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgz YzkwLzEvMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMzMzExMjM3Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNERFRjYxMEIzM0JBNzE5QkEzNDRBNjYw QzRCREE4MzMzMTEyMzcyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yZWQ0YjdlYi0xN2E3LTQ0ZTEtOWNhMi0wOThhMzIzODNjOTAvMS8zMjYxMzEz NDNhMzczNTM4MzYzYTM3MzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIz MTM0MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYEKhR1hnAwDQYJKoZIhvcNAQELBQADggEBAFfJ o7fUyIlgZ08Lq9luPeSTVKdX92Ex3/m7yrcp8I2Nvtv5zOBMsz0BR6R0X5RR92uN PlyKNgyCD71ERV66Lh5dCQc6Xc3muZ3h90AVBtngH/hifmqUx+WJUcSp4hCVqAlj pQa+3zRtyTEQBpKs8XDQOj4ZtLjPWfZt8fh3C0W491bL3aTs9OR6+cjrRtI+/IQ5 ZIFrR+NBiApcxs1yU2l72lFxoFC8jt9/FgZVI3nAFZwIHfLKQa+RMJZOlkELqnA4 VSx5x9hJwd+Bdyp6yoX9e+ugyXvAyX+sFBzkiMN9xVRWIyK4V6C7FEIShM8CD8qD 1SWJCjdYMjYnOXIXRgU= -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:33 2026 by rpki-client