This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa File: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (raw, json) Hash identifier: iqN0K0kqjE2jNtYdeLoflK5x6Z7cJoriz0IZPsDEpKs= Subject key identifier: 3C:60:DC:C8:29:07:89:74:56:69:8B:9E:DD:7E:00:0C:79:16:41:1A Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 3E2BE0AE12C91D510E178C06D7CA6F0ADA296886 Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa Signing time: Mon 29 Dec 2025 13:00:40 +0000 ROA not before: Mon 29 Dec 2025 12:55:40 +0000 ROA not after: Mon 28 Dec 2026 13:00:40 +0000 asID: 135659 IP address blocks: 2a14:7581:4650::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:2b:e0:ae:12:c9:1d:51:0e:17:8c:06:d7:ca:6f:0a:da:29:68:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Dec 29 12:55:40 2025 GMT Not After : Dec 28 13:00:40 2026 GMT Subject: CN=3C60DCC82907897456698B9EDD7E000C7916411A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:51:16:de:0f:af:53:65:c3:cc:16:01:d5: 5a:8a:08:92:28:0e:cb:33:8e:2c:3b:45:dd:3d:ad: 81:a8:f3:7b:0a:ba:69:95:71:e6:ad:56:55:94:99: 8f:c4:a4:a5:f8:af:bd:14:16:ee:78:95:43:9c:1c: f5:9f:e4:af:82:ea:5e:e5:1f:76:34:9e:d0:46:3e: 1a:46:98:6e:21:30:fb:6c:7a:2b:f0:7e:b1:f4:8f: a1:07:b5:fc:fe:51:1c:bd:8a:6b:4b:5b:fe:ca:4e: 84:16:15:7c:3a:8b:b8:b1:35:04:43:ca:4c:a9:26: 6b:c6:5f:f9:1f:cf:bf:9e:5d:5b:6f:1e:08:43:38: e5:17:28:cf:04:ba:90:bf:a6:17:46:c2:7e:43:4d: 92:74:03:5e:8b:83:ad:a8:2d:35:fa:36:91:31:9a: d6:e6:67:7d:99:9e:e4:fb:d6:19:0e:3e:dc:1b:c5: f7:14:cc:d0:84:ee:2a:f5:74:59:1b:90:1b:f9:38: 9a:c7:49:4b:7f:12:ce:69:14:54:87:65:6a:7e:d2: bb:4d:8f:3c:05:41:89:aa:d3:68:9d:ac:56:f7:66: a9:1a:e7:23:5b:94:cd:cf:bf:e9:25:a2:ec:89:57: 90:e5:22:13:3c:94:58:82:96:e7:8b:4c:8b:94:93: 61:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:60:DC:C8:29:07:89:74:56:69:8B:9E:DD:7E:00:0C:79:16:41:1A X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:4650::/44 Signature Algorithm: sha256WithRSAEncryption 6f:f8:61:50:86:d9:20:36:05:5c:86:ab:e8:0b:70:5b:78:9f: 52:76:f7:45:85:81:2b:18:1c:58:43:45:3e:9c:01:99:52:91: 56:1f:8c:ff:8c:65:84:01:8e:4b:e2:53:14:ea:6d:9e:ec:e9: e8:50:ec:8f:bd:ee:89:a1:21:19:ee:36:79:b3:51:59:81:86: 2b:93:c5:62:ad:9d:e6:b3:31:80:bd:1b:10:9e:f1:41:c8:da: c6:0d:26:07:ff:d8:92:7b:8c:65:d1:8b:fe:f4:bf:df:f8:6e: 5d:b6:a8:12:34:41:5b:7e:69:9e:4c:34:41:04:7a:60:16:05: 31:64:7e:c3:98:8e:05:e8:13:22:80:5e:3e:1f:eb:55:9d:0f: f0:ef:b9:5f:aa:82:a4:46:69:e2:10:6c:46:83:13:fa:53:d1: bb:0c:7c:5c:68:0d:bc:c2:50:ef:95:22:e6:19:8e:dc:c2:e5: 54:b8:45:5a:38:b5:47:04:ad:2e:d2:4e:94:20:aa:22:12:82: fb:26:3d:0c:ec:15:81:56:0a:b5:cc:7e:0e:c0:2a:23:76:2f: 81:f6:47:0e:43:62:9a:13:ac:1b:d3:d8:e5:d3:f9:28:01:81: 77:c2:5e:7f:c5:8e:be:86:10:6a:7d:97:2c:9d:7d:07:1e:5f: 4e:f0:b2:5e -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUPivgrhLJHVEOF4wG18pvCtopaIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNTEyMjkxMjU1NDBaFw0yNjEyMjgxMzAwNDBaMDMxMTAvBgNV BAMTKDNDNjBEQ0M4MjkwNzg5NzQ1NjY5OEI5RUREN0UwMDBDNzkxNjQxMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54lEW3g+vU2XDzBYB1VqKCJIo Dsszjiw7Rd09rYGo83sKummVceatVlWUmY/EpKX4r70UFu54lUOcHPWf5K+C6l7l H3Y0ntBGPhpGmG4hMPtseivwfrH0j6EHtfz+URy9imtLW/7KToQWFXw6i7ixNQRD ykypJmvGX/kfz7+eXVtvHghDOOUXKM8EupC/phdGwn5DTZJ0A16Lg62oLTX6NpEx mtbmZ32ZnuT71hkOPtwbxfcUzNCE7ir1dFkbkBv5OJrHSUt/Es5pFFSHZWp+0rtN jzwFQYmq02idrFb3Zqka5yNblM3Pv+klouyJV5DlIhM8lFiClueLTIuUk2FPAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUPGDcyCkHiXRWaYue3X4ADHkWQRowHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvNC8zMjYxMzEz NDNhMzczNTM4MzEzYTM0MzYzNTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEz MzM1MzYzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gUZQMA0GCSqGSIb3DQEBCwUAA4IBAQBv +GFQhtkgNgVchqvoC3BbeJ9SdvdFhYErGBxYQ0U+nAGZUpFWH4z/jGWEAY5L4lMU 6m2e7OnoUOyPve6JoSEZ7jZ5s1FZgYYrk8VirZ3mszGAvRsQnvFByNrGDSYH/9iS e4xl0Yv+9L/f+G5dtqgSNEFbfmmeTDRBBHpgFgUxZH7DmI4F6BMigF4+H+tVnQ/w 77lfqoKkRmniEGxGgxP6U9G7DHxcaA28wlDvlSLmGY7cwuVUuEVaOLVHBK0u0k6U IKoiEoL7Jj0M7BWBVgq1zH4OwCojdi+B9kcOQ2KaE6wb09jl0/koAYF3wl5/xY6+ hhBqfZcsnX0HHl9O8LJe -----END CERTIFICATE-----Generated at Mon Jan 26 06:08:36 2026 by rpki-client