This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538363a393162303a3a2f34342d3438203d3e20323134323233.roa File: 326131343a373538363a393162303a3a2f34342d3438203d3e20323134323233.roa (raw, json) Hash identifier: ZO9VHs/jdkk6zzSYMSYZUdvcDq76KLDhmDYi/qPc0gQ= Subject key identifier: 88:E5:4C:F9:75:97:4D:6C:CE:D2:C1:48:F0:0D:7E:D9:EE:F3:64:A7 Certificate issuer: /CN=34DEF610B33BA719BA344A660C4BDA8333112372 Certificate serial: 4CDC39104D490D3B27A91D968EF252C7ADA4536C Authority key identifier: 34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538363a393162303a3a2f34342d3438203d3e20323134323233.roa Signing time: Sat 24 Jan 2026 22:43:23 +0000 ROA not before: Sat 24 Jan 2026 22:38:23 +0000 ROA not after: Sat 23 Jan 2027 22:43:23 +0000 asID: 214223 IP address blocks: 2a14:7586:91b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 00:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:dc:39:10:4d:49:0d:3b:27:a9:1d:96:8e:f2:52:c7:ad:a4:53:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DEF610B33BA719BA344A660C4BDA8333112372 Validity Not Before: Jan 24 22:38:23 2026 GMT Not After : Jan 23 22:43:23 2027 GMT Subject: CN=88E54CF975974D6CCED2C148F00D7ED9EEF364A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9b:e3:71:90:62:b2:0e:1e:4b:fd:7d:8d:22: f3:0d:98:02:d9:d2:06:da:9d:03:f9:62:f9:f0:7f: f3:67:2b:0e:19:fc:8c:8c:c1:30:b9:07:b9:82:29: 55:8e:10:eb:d3:58:6b:aa:c3:9c:89:24:b7:32:c6: 9c:70:d4:df:01:c9:c3:f6:aa:83:35:fd:a3:84:02: cf:cc:52:8c:be:e4:28:bf:48:fc:63:be:fb:89:da: 16:c4:43:e4:3c:59:46:45:c6:05:a8:1f:3d:f8:6b: 1e:84:e0:5f:bf:12:15:ca:42:33:24:c9:0e:f5:54: dd:a2:47:dc:0c:35:5a:20:41:5c:d1:d4:3a:fa:70: d4:8c:59:0d:c3:cc:4e:5a:fe:7a:3d:11:54:70:d6: 0a:26:cc:bb:15:13:05:c3:b2:73:66:78:73:7d:21: f4:5b:7c:e0:c6:c2:cb:ee:36:51:82:14:03:6e:0b: 7b:0c:71:d1:22:12:07:a0:02:6e:ac:1c:75:a9:2b: 18:58:09:9d:30:66:22:dc:9e:35:51:fd:5f:64:86: dc:5f:4e:56:1c:48:ed:dc:01:61:37:18:df:50:af: 38:b2:47:1b:f9:6a:a3:ff:e7:ca:31:60:f7:3d:8e: c3:af:7c:45:a5:e4:4e:53:40:26:05:c4:5a:92:1d: 88:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E5:4C:F9:75:97:4D:6C:CE:D2:C1:48:F0:0D:7E:D9:EE:F3:64:A7 X509v3 Authority Key Identifier: keyid:34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538363a393162303a3a2f34342d3438203d3e20323134323233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:91b0::/44 Signature Algorithm: sha256WithRSAEncryption 59:ba:79:30:a3:08:13:b3:b0:f0:1d:a7:21:50:70:2e:e9:08: 0b:23:a3:b1:0e:fa:e4:0f:05:e6:26:27:f4:bc:24:b7:64:ba: 64:40:53:f0:0a:0f:b8:e2:c3:10:ba:be:eb:66:fc:74:75:98: d5:04:30:ba:51:e8:06:b7:a4:53:07:db:15:0f:72:a4:ad:30: 7c:04:36:2f:15:da:70:5c:b6:d8:d1:1a:d8:f7:0a:80:27:b4: e7:be:99:55:9a:b9:c2:47:ef:8b:42:24:b2:70:77:6f:64:62: 35:03:88:5f:9f:8a:15:8c:bc:cf:3d:92:06:eb:fc:43:47:fd: 6e:71:03:ed:03:13:50:f9:7b:09:ea:43:e1:a0:db:ae:d5:1c: d1:96:06:0a:e1:43:0a:96:b2:07:bc:3c:98:5f:4b:6c:c1:8e: 15:57:fd:e9:7a:26:54:87:24:ec:da:83:d3:ae:18:4c:56:0e: 58:c2:47:3a:08:c4:15:eb:14:3b:b0:13:31:d6:ed:c2:e4:77: 5e:ef:cf:ee:b8:ef:a1:e3:40:57:ce:05:5c:fe:26:78:5f:f4: c0:10:a4:30:27:92:c7:14:4d:d0:a1:69:3c:b5:c9:d6:d0:97: 67:22:cd:d5:8a:2a:1f:0b:15:23:b5:2c:05:0c:f7:73:17:08: de:54:58:e7 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUTNw5EE1JDTsnqR2WjvJSx62kU2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMz MzExMjM3MjAeFw0yNjAxMjQyMjM4MjNaFw0yNzAxMjMyMjQzMjNaMDMxMTAvBgNV BAMTKDg4RTU0Q0Y5NzU5NzRENkNDRUQyQzE0OEYwMEQ3RUQ5RUVGMzY0QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCm+NxkGKyDh5L/X2NIvMNmALZ 0gbanQP5Yvnwf/NnKw4Z/IyMwTC5B7mCKVWOEOvTWGuqw5yJJLcyxpxw1N8BycP2 qoM1/aOEAs/MUoy+5Ci/SPxjvvuJ2hbEQ+Q8WUZFxgWoHz34ax6E4F+/EhXKQjMk yQ71VN2iR9wMNVogQVzR1Dr6cNSMWQ3DzE5a/no9EVRw1gomzLsVEwXDsnNmeHN9 IfRbfODGwsvuNlGCFANuC3sMcdEiEgegAm6sHHWpKxhYCZ0wZiLcnjVR/V9khtxf TlYcSO3cAWE3GN9QrziyRxv5aqP/58oxYPc9jsOvfEWl5E5TQCYFxFqSHYjrAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUiOVM+XWXTWzO0sFI8A1+2e7zZKcwHwYDVR0j BBgwFoAUNN72ELM7pxm6NEpmDEvagzMRI3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgz YzkwLzEvMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMzMzExMjM3Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNERFRjYxMEIzM0JBNzE5QkEzNDRBNjYw QzRCREE4MzMzMTEyMzcyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yZWQ0YjdlYi0xN2E3LTQ0ZTEtOWNhMi0wOThhMzIzODNjOTAvMS8zMjYxMzEz NDNhMzczNTM4MzYzYTM5MzE2MjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM0MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1hpGwMA0GCSqGSIb3DQEBCwUAA4IBAQBZ unkwowgTs7DwHachUHAu6QgLI6OxDvrkDwXmJif0vCS3ZLpkQFPwCg+44sMQur7r Zvx0dZjVBDC6UegGt6RTB9sVD3KkrTB8BDYvFdpwXLbY0RrY9wqAJ7TnvplVmrnC R++LQiSycHdvZGI1A4hfn4oVjLzPPZIG6/xDR/1ucQPtAxNQ+XsJ6kPhoNuu1RzR lgYK4UMKlrIHvDyYX0tswY4VV/3peiZUhyTs2oPTrhhMVg5Ywkc6CMQV6xQ7sBMx 1u3C5Hde78/uuO+h40BXzgVc/iZ4X/TAEKQwJ5LHFE3QoWk8tcnW0JdnIs3Viiof CxUjtSwFDPdzFwjeVFjn -----END CERTIFICATE-----Generated at Sun Jan 25 13:04:01 2026 by rpki-client