This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538363a393161303a3a2f34342d3438203d3e20323134323233.roa File: 326131343a373538363a393161303a3a2f34342d3438203d3e20323134323233.roa (raw, json) Hash identifier: czMZ6yHzk1H5R4x8pCiKnN7yebua0d7E2WPcIPaQbQU= Subject key identifier: 3F:2A:65:2D:08:AE:7A:02:38:EA:7E:C1:97:84:F4:4C:78:53:19:E3 Certificate issuer: /CN=34DEF610B33BA719BA344A660C4BDA8333112372 Certificate serial: 1DD76F7F631224559CBE59C517433D052601C50C Authority key identifier: 34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538363a393161303a3a2f34342d3438203d3e20323134323233.roa Signing time: Sat 24 Jan 2026 22:43:10 +0000 ROA not before: Sat 24 Jan 2026 22:38:10 +0000 ROA not after: Sat 23 Jan 2027 22:43:10 +0000 asID: 214223 IP address blocks: 2a14:7586:91a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 00:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d7:6f:7f:63:12:24:55:9c:be:59:c5:17:43:3d:05:26:01:c5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DEF610B33BA719BA344A660C4BDA8333112372 Validity Not Before: Jan 24 22:38:10 2026 GMT Not After : Jan 23 22:43:10 2027 GMT Subject: CN=3F2A652D08AE7A0238EA7EC19784F44C785319E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e7:50:2b:7f:f2:41:9e:87:b3:a2:1b:1b:85: c7:78:96:70:07:fc:36:53:e4:8e:8f:b8:33:26:fc: c8:d9:03:51:7c:59:79:7f:ba:e5:24:5a:fb:a1:1e: e0:4b:7d:dc:94:86:df:1b:fa:b8:6d:db:c1:b2:c8: 41:24:f9:d7:61:ad:d7:15:38:fb:d8:49:ac:8b:84: e7:00:c3:6e:f6:58:ce:a6:51:1a:db:c8:f6:c1:6e: db:4c:78:27:22:ca:20:86:1e:2b:d5:05:72:df:6a: 47:ab:e0:5a:3a:37:1b:3b:b8:ad:40:65:43:f3:a4: 1b:4f:f9:cb:0d:85:f9:e4:a2:91:f1:df:5d:aa:57: 86:a2:a3:dc:99:9d:7b:9a:4d:47:12:90:08:5e:bb: 39:28:df:1c:f4:46:d2:db:66:82:18:af:a4:ff:6b: 20:6e:12:ba:c3:d8:d2:ee:78:f4:b0:90:95:f2:50: 35:c1:73:ff:9c:c5:e0:6c:d6:98:53:b4:38:88:e4: d0:5b:ae:0c:c9:3f:76:32:ca:87:f2:7b:9b:61:db: 84:e9:50:6b:1d:6c:6e:46:1f:68:57:cf:dd:44:84: 5c:f7:0b:42:03:2a:17:a3:65:23:7c:45:17:f7:28: 4f:02:db:5b:68:c9:bf:1e:6d:fb:db:61:e7:69:8c: 0a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2A:65:2D:08:AE:7A:02:38:EA:7E:C1:97:84:F4:4C:78:53:19:E3 X509v3 Authority Key Identifier: keyid:34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538363a393161303a3a2f34342d3438203d3e20323134323233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:91a0::/44 Signature Algorithm: sha256WithRSAEncryption 2f:d0:81:a8:19:00:bf:a9:bb:11:a7:e9:16:1a:4d:dc:2e:ad: c8:2d:42:2b:eb:a9:a8:f7:13:68:17:ad:3c:89:88:2f:03:a8: 6e:8a:8c:71:2d:7a:d6:03:e3:85:db:52:2c:1f:0d:37:d3:a2: 8b:b6:a7:38:42:0f:2c:47:53:ff:7c:55:4c:dd:5e:84:fe:02: 72:33:c6:98:bf:9b:d7:8c:96:dc:60:d2:3b:23:61:ee:9c:74: 12:36:40:1d:e6:e1:ff:d9:4a:b3:f6:53:06:0d:5d:ef:2c:0d: 9d:3c:5c:61:69:16:4d:f3:c5:6e:a5:06:04:ed:72:e9:ed:8b: 63:44:60:65:05:fc:49:60:95:58:ec:99:5c:2a:05:46:e6:fe: e5:a1:46:d9:d1:52:d6:0d:45:02:24:8a:29:60:59:dc:6a:89: 5e:73:c1:10:bd:a5:73:a9:73:a3:07:7f:bf:e2:27:e8:4c:8e: 4f:6f:7b:8d:36:83:33:80:c7:eb:20:30:df:fd:5b:9f:c3:a6: 85:86:d2:2a:ae:71:b7:db:41:fd:5a:52:21:98:6d:43:88:82: 6d:2a:ff:74:db:e1:62:81:dc:51:d2:96:ba:ba:40:c5:e4:8c: e9:6d:dc:49:7b:1b:e7:b6:75:75:c0:98:a5:ac:68:af:dd:ea: 05:9c:36:d3 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUHddvf2MSJFWcvlnFF0M9BSYBxQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMz MzExMjM3MjAeFw0yNjAxMjQyMjM4MTBaFw0yNzAxMjMyMjQzMTBaMDMxMTAvBgNV BAMTKDNGMkE2NTJEMDhBRTdBMDIzOEVBN0VDMTk3ODRGNDRDNzg1MzE5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg51Arf/JBnoezohsbhcd4lnAH /DZT5I6PuDMm/MjZA1F8WXl/uuUkWvuhHuBLfdyUht8b+rht28GyyEEk+ddhrdcV OPvYSayLhOcAw272WM6mURrbyPbBbttMeCciyiCGHivVBXLfaker4Fo6Nxs7uK1A ZUPzpBtP+csNhfnkopHx312qV4aio9yZnXuaTUcSkAheuzko3xz0RtLbZoIYr6T/ ayBuErrD2NLuePSwkJXyUDXBc/+cxeBs1phTtDiI5NBbrgzJP3Yyyofye5th24Tp UGsdbG5GH2hXz91EhFz3C0IDKhejZSN8RRf3KE8C21toyb8ebfvbYedpjApNAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUPyplLQiuegI46n7Bl4T0THhTGeMwHwYDVR0j BBgwFoAUNN72ELM7pxm6NEpmDEvagzMRI3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgz YzkwLzEvMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMzMzExMjM3Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNERFRjYxMEIzM0JBNzE5QkEzNDRBNjYw QzRCREE4MzMzMTEyMzcyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yZWQ0YjdlYi0xN2E3LTQ0ZTEtOWNhMi0wOThhMzIzODNjOTAvMS8zMjYxMzEz NDNhMzczNTM4MzYzYTM5MzE2MTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM0MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1hpGgMA0GCSqGSIb3DQEBCwUAA4IBAQAv 0IGoGQC/qbsRp+kWGk3cLq3ILUIr66mo9xNoF608iYgvA6huioxxLXrWA+OF21Is Hw0306KLtqc4Qg8sR1P/fFVM3V6E/gJyM8aYv5vXjJbcYNI7I2HunHQSNkAd5uH/ 2Uqz9lMGDV3vLA2dPFxhaRZN88VupQYE7XLp7YtjRGBlBfxJYJVY7JlcKgVG5v7l oUbZ0VLWDUUCJIopYFncaolec8EQvaVzqXOjB3+/4ifoTI5Pb3uNNoMzgMfrIDDf /Vufw6aFhtIqrnG320H9WlIhmG1DiIJtKv902+FigdxR0pa6ukDF5IzpbdxJexvn tnV1wJilrGiv3eoFnDbT -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:43 2026 by rpki-client