This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538363a393030303a3a2f33362d3438203d3e20323134323233.roa File: 326131343a373538363a393030303a3a2f33362d3438203d3e20323134323233.roa (raw, json) Hash identifier: iA4p3IYifVrgGD3/GcCBblPOiSEiC+VZIiOYTHmZ3ew= Subject key identifier: 6E:5F:84:52:7A:60:54:DF:65:52:B9:CA:91:25:E4:5E:BC:3B:C5:68 Certificate issuer: /CN=34DEF610B33BA719BA344A660C4BDA8333112372 Certificate serial: FE5D5A8A9F4D41C306CFD9B9E0E21AD7FC7044 Authority key identifier: 34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538363a393030303a3a2f33362d3438203d3e20323134323233.roa Signing time: Sat 24 Jan 2026 22:53:05 +0000 ROA not before: Sat 24 Jan 2026 22:48:05 +0000 ROA not after: Sat 23 Jan 2027 22:53:05 +0000 asID: 214223 IP address blocks: 2a14:7586:9000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 00:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: fe:5d:5a:8a:9f:4d:41:c3:06:cf:d9:b9:e0:e2:1a:d7:fc:70:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DEF610B33BA719BA344A660C4BDA8333112372 Validity Not Before: Jan 24 22:48:05 2026 GMT Not After : Jan 23 22:53:05 2027 GMT Subject: CN=6E5F84527A6054DF6552B9CA9125E45EBC3BC568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:53:d5:ad:5f:09:97:c4:8f:6b:fb:80:3c:9d: 47:62:41:51:5c:5f:8b:13:8c:a5:fa:65:49:2e:ec: 09:f0:46:ae:3d:b8:e9:c4:1b:bf:93:a8:17:90:46: c8:77:ed:cf:e8:98:bc:e7:bd:40:4d:e6:a1:ca:ed: 1b:50:4f:fa:35:a0:97:d7:f5:df:35:ff:1d:c1:0e: b1:41:00:11:7c:17:7d:67:41:37:7e:7c:b3:5d:d5: 77:1a:ae:60:f4:eb:37:39:56:43:db:b7:2f:6f:b4: 5e:c0:55:2e:34:76:27:21:67:06:77:80:22:08:42: 00:7c:9f:0b:c6:13:88:fb:ec:30:19:2c:50:7a:dc: 80:4a:38:74:5d:87:94:dd:9a:6b:aa:bc:b6:6e:95: 90:af:fd:53:02:bb:7f:8e:15:aa:8e:33:6b:c2:5c: 10:fd:73:2c:dc:b9:c2:d9:6a:07:67:10:57:a3:9b: 79:e5:46:5b:1a:c7:ad:91:1a:87:66:e4:95:cf:b3: a6:ce:cb:df:cb:18:6b:b0:87:b4:d4:84:2c:d9:e8: 69:5e:2d:13:36:31:67:d0:47:43:73:a7:96:53:8e: 8c:cc:2d:ee:b0:20:e5:29:1a:a3:3f:d6:05:6b:9a: 87:67:b2:43:34:8e:98:1b:1e:f3:60:24:31:d3:dd: d1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5F:84:52:7A:60:54:DF:65:52:B9:CA:91:25:E4:5E:BC:3B:C5:68 X509v3 Authority Key Identifier: keyid:34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538363a393030303a3a2f33362d3438203d3e20323134323233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:9000::/36 Signature Algorithm: sha256WithRSAEncryption 17:17:33:14:6d:39:4b:4e:c8:17:7a:5c:74:c3:de:e7:d1:55: d7:c3:d9:19:a9:d7:8b:5a:8c:c9:ae:00:1b:f7:db:cd:fd:fd: a3:46:49:29:5f:f5:21:1b:e0:30:ab:01:0c:04:07:da:d3:7f: e3:74:f7:0b:b9:45:47:4d:a0:c4:d6:2a:cb:e5:38:03:8a:fd: 30:93:48:47:cd:00:9b:ad:80:77:f9:06:35:60:3c:0b:99:55: fc:a4:78:40:37:3c:b2:e0:66:8e:e7:e8:2f:29:8f:5d:89:28: e1:73:2e:d8:3c:df:04:24:3a:6d:cb:82:c0:4d:f7:bf:9d:a9: 2f:21:21:86:25:9e:a9:d0:22:96:90:1b:59:15:0c:43:57:bf: f4:78:a6:34:84:c4:a0:bb:0f:64:0d:19:5b:cf:61:41:00:e1: 28:29:d4:12:1e:c5:bf:62:c9:b3:09:f4:32:7e:b2:09:94:85: eb:e2:bc:31:1c:6d:a1:8a:b6:45:7f:43:03:26:b6:14:3c:f1: 97:3e:3c:9a:7d:c6:b2:7f:46:e6:de:be:31:49:a7:ba:42:df: ab:82:c8:98:28:30:58:f4:75:9d:51:6c:46:45:e8:41:e7:52: 76:86:17:a1:21:2b:84:1e:be:e9:ae:3f:d9:1d:58:a6:04:23: a6:94:32:3e -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUAP5dWoqfTUHDBs/ZueDiGtf8cEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMz MzExMjM3MjAeFw0yNjAxMjQyMjQ4MDVaFw0yNzAxMjMyMjUzMDVaMDMxMTAvBgNV BAMTKDZFNUY4NDUyN0E2MDU0REY2NTUyQjlDQTkxMjVFNDVFQkMzQkM1NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLU9WtXwmXxI9r+4A8nUdiQVFc X4sTjKX6ZUku7AnwRq49uOnEG7+TqBeQRsh37c/omLznvUBN5qHK7RtQT/o1oJfX 9d81/x3BDrFBABF8F31nQTd+fLNd1XcarmD06zc5VkPbty9vtF7AVS40dichZwZ3 gCIIQgB8nwvGE4j77DAZLFB63IBKOHRdh5TdmmuqvLZulZCv/VMCu3+OFaqOM2vC XBD9cyzcucLZagdnEFejm3nlRlsax62RGodm5JXPs6bOy9/LGGuwh7TUhCzZ6Gle LRM2MWfQR0Nzp5ZTjozMLe6wIOUpGqM/1gVrmodnskM0jpgbHvNgJDHT3dHNAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUbl+EUnpgVN9lUrnKkSXkXrw7xWgwHwYDVR0j BBgwFoAUNN72ELM7pxm6NEpmDEvagzMRI3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgz YzkwLzEvMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMzMzExMjM3Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNERFRjYxMEIzM0JBNzE5QkEzNDRBNjYw QzRCREE4MzMzMTEyMzcyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yZWQ0YjdlYi0xN2E3LTQ0ZTEtOWNhMi0wOThhMzIzODNjOTAvMS8zMjYxMzEz NDNhMzczNTM4MzYzYTM5MzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIz MTM0MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYEKhR1hpAwDQYJKoZIhvcNAQELBQADggEBABcX MxRtOUtOyBd6XHTD3ufRVdfD2Rmp14tajMmuABv32839/aNGSSlf9SEb4DCrAQwE B9rTf+N09wu5RUdNoMTWKsvlOAOK/TCTSEfNAJutgHf5BjVgPAuZVfykeEA3PLLg Zo7n6C8pj12JKOFzLtg83wQkOm3LgsBN97+dqS8hIYYlnqnQIpaQG1kVDENXv/R4 pjSExKC7D2QNGVvPYUEA4Sgp1BIexb9iybMJ9DJ+sgmUhevivDEcbaGKtkV/QwMm thQ88Zc+PJp9xrJ/RubevjFJp7pC36uCyJgoMFj0dZ1RbEZF6EHnUnaGF6EhK4Qe vumuP9kdWKYEI6aUMj4= -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:19 2026 by rpki-client