This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538363a393030303a3a2f34302d3438203d3e20323134323233.roa File: 326131343a373538363a393030303a3a2f34302d3438203d3e20323134323233.roa (raw, json) Hash identifier: sK/28IbuKKKyA7SCTgY03EIdfGQ4xy21thbu3jiR9Kc= Subject key identifier: 19:BB:BC:AC:BF:9D:98:17:03:BD:29:F9:62:4D:C9:94:A0:2C:34:20 Certificate issuer: /CN=34DEF610B33BA719BA344A660C4BDA8333112372 Certificate serial: 39CD9655839E88DA139A88669441C73F06FC3695 Authority key identifier: 34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538363a393030303a3a2f34302d3438203d3e20323134323233.roa Signing time: Sat 24 Jan 2026 22:44:26 +0000 ROA not before: Sat 24 Jan 2026 22:39:26 +0000 ROA not after: Sat 23 Jan 2027 22:44:26 +0000 asID: 214223 IP address blocks: 2a14:7586:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 00:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:cd:96:55:83:9e:88:da:13:9a:88:66:94:41:c7:3f:06:fc:36:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DEF610B33BA719BA344A660C4BDA8333112372 Validity Not Before: Jan 24 22:39:26 2026 GMT Not After : Jan 23 22:44:26 2027 GMT Subject: CN=19BBBCACBF9D981703BD29F9624DC994A02C3420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9e:d8:f2:e6:1c:31:1e:52:97:bb:31:82:a1: 37:5e:1a:18:a2:20:e3:d2:c8:60:25:08:2a:f1:18: 3f:2e:1a:2f:eb:d8:00:ec:30:30:05:47:f2:a4:f2: 78:2e:48:0e:a4:22:fc:f8:54:9b:90:e2:e8:32:3d: b7:ed:88:36:d1:f1:19:e3:05:ce:f8:55:b7:85:71: b8:fd:7d:f1:7a:16:57:24:35:11:8b:8b:94:8e:7e: 2d:17:f9:b2:e2:8c:51:d0:fb:ba:12:9f:fa:06:ca: 3c:b6:3f:70:1e:59:a7:74:5e:ef:15:4f:52:53:1b: 4c:25:72:10:bd:e7:49:49:3f:11:3f:3a:95:33:e0: 58:91:41:58:ac:49:e3:19:b7:62:e0:32:bf:10:1c: 9e:7a:8e:c9:75:e9:ec:ad:04:ff:96:2e:71:4b:5c: 78:ac:06:5c:ba:2d:ca:04:6b:bb:b9:9e:81:99:54: 5d:2e:25:0d:60:9d:72:ff:81:3e:84:46:4c:86:25: 02:4e:d5:29:f5:d1:ef:57:66:a1:25:be:63:2f:4b: a0:fa:cf:b4:56:12:2e:58:23:10:1a:2c:0e:ed:6c: 66:e9:07:56:d5:eb:33:b8:7e:80:27:56:26:2b:74: ca:5c:05:45:3c:70:32:10:08:c6:10:0d:16:f7:87: f5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BB:BC:AC:BF:9D:98:17:03:BD:29:F9:62:4D:C9:94:A0:2C:34:20 X509v3 Authority Key Identifier: keyid:34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538363a393030303a3a2f34302d3438203d3e20323134323233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:9000::/40 Signature Algorithm: sha256WithRSAEncryption 8f:24:d5:a5:b1:a3:89:b8:54:15:54:5a:be:51:14:cd:ab:bc: 9a:94:ae:6d:39:91:dc:e5:07:45:07:29:f8:eb:86:1d:c7:b1: 62:4e:1c:00:d4:c6:b3:89:d9:a4:e2:9f:2f:77:9a:60:dc:cc: d5:be:d5:c2:4b:20:8f:7f:b2:46:a5:0f:73:16:cc:39:55:2b: e3:5d:0a:56:b4:2e:0b:9a:0b:66:c4:57:e9:ed:99:86:8b:f8: c6:c7:bd:e6:fc:73:10:49:22:b2:41:4d:61:82:4f:68:ff:9a: e4:ac:21:02:aa:44:b8:8f:34:eb:6e:67:69:31:b6:c5:e6:62: 27:2f:6a:1e:24:14:ad:7a:4a:8c:5d:c3:a7:61:17:93:85:9a: 45:db:52:68:5f:9e:9e:4b:aa:40:b0:86:b9:75:7c:23:8a:66: b8:a6:56:38:83:08:4b:08:d7:77:5a:a1:fd:fe:44:ec:05:ad: 5c:b5:32:56:c0:68:48:e6:14:9f:12:9a:f4:d3:a5:4c:81:08: 17:a1:40:dd:eb:93:af:83:20:23:54:c9:72:6d:d8:a5:9d:48: 05:53:88:a5:75:3d:29:94:65:f6:39:b8:4f:c5:c0:71:e1:c6: ee:45:9c:3e:9d:cb:81:cd:6a:21:b6:b3:b5:db:67:f9:7c:dd: 33:78:6e:7f -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUOc2WVYOeiNoTmohmlEHHPwb8NpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMz MzExMjM3MjAeFw0yNjAxMjQyMjM5MjZaFw0yNzAxMjMyMjQ0MjZaMDMxMTAvBgNV BAMTKDE5QkJCQ0FDQkY5RDk4MTcwM0JEMjlGOTYyNERDOTk0QTAyQzM0MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyntjy5hwxHlKXuzGCoTdeGhii IOPSyGAlCCrxGD8uGi/r2ADsMDAFR/Kk8nguSA6kIvz4VJuQ4ugyPbftiDbR8Rnj Bc74VbeFcbj9ffF6FlckNRGLi5SOfi0X+bLijFHQ+7oSn/oGyjy2P3AeWad0Xu8V T1JTG0wlchC950lJPxE/OpUz4FiRQVisSeMZt2LgMr8QHJ56jsl16eytBP+WLnFL XHisBly6LcoEa7u5noGZVF0uJQ1gnXL/gT6ERkyGJQJO1Sn10e9XZqElvmMvS6D6 z7RWEi5YIxAaLA7tbGbpB1bV6zO4foAnViYrdMpcBUU8cDIQCMYQDRb3h/XNAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUGbu8rL+dmBcDvSn5Yk3JlKAsNCAwHwYDVR0j BBgwFoAUNN72ELM7pxm6NEpmDEvagzMRI3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgz YzkwLzEvMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMzMzExMjM3Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNERFRjYxMEIzM0JBNzE5QkEzNDRBNjYw QzRCREE4MzMzMTEyMzcyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yZWQ0YjdlYi0xN2E3LTQ0ZTEtOWNhMi0wOThhMzIzODNjOTAvMS8zMjYxMzEz NDNhMzczNTM4MzYzYTM5MzAzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MTM0MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1hpAwDQYJKoZIhvcNAQELBQADggEBAI8k 1aWxo4m4VBVUWr5RFM2rvJqUrm05kdzlB0UHKfjrhh3HsWJOHADUxrOJ2aTiny93 mmDczNW+1cJLII9/skalD3MWzDlVK+NdCla0LguaC2bEV+ntmYaL+MbHveb8cxBJ IrJBTWGCT2j/muSsIQKqRLiPNOtuZ2kxtsXmYicvah4kFK16Soxdw6dhF5OFmkXb Umhfnp5LqkCwhrl1fCOKZrimVjiDCEsI13daof3+ROwFrVy1MlbAaEjmFJ8SmvTT pUyBCBehQN3rk6+DICNUyXJt2KWdSAVTiKV1PSmUZfY5uE/FwHHhxu5FnD6dy4HN aiG2s7XbZ/l83TN4bn8= -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:20 2026 by rpki-client