This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa File: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (raw, json) Hash identifier: nzPrfU7/0C1uT8wK0Kkdb/GSWbML8Xt4edf9nME+bEg= Subject key identifier: 56:5E:30:A6:98:42:12:A6:58:19:5A:86:E8:9C:21:1A:61:E5:D0:D5 Certificate issuer: /CN=2A91778ACCE76333081468D9784DE132C2985976 Certificate serial: 29C2368D4798923AB48CBCB8EAB2C632AA6A4634 Authority key identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa Signing time: Sun 25 Jan 2026 05:58:58 +0000 ROA not before: Sun 25 Jan 2026 05:53:58 +0000 ROA not after: Sun 24 Jan 2027 05:58:58 +0000 asID: 202335 IP address blocks: 2a0f:1cc5:2600::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c2:36:8d:47:98:92:3a:b4:8c:bc:b8:ea:b2:c6:32:aa:6a:46:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A91778ACCE76333081468D9784DE132C2985976 Validity Not Before: Jan 25 05:53:58 2026 GMT Not After : Jan 24 05:58:58 2027 GMT Subject: CN=565E30A6984212A658195A86E89C211A61E5D0D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:42:66:9a:d5:38:1a:6c:a3:ca:c9:42:e7:5c: 06:c1:08:46:e6:88:77:7a:d2:ab:7a:c0:24:e8:3d: a5:1a:ba:30:65:5d:e1:4d:85:c3:fd:aa:3c:67:a0: 74:ec:17:c8:12:f4:f1:51:aa:50:37:e3:ce:7e:97: af:65:49:c0:1c:76:4a:d1:08:74:b0:1d:a0:b8:9f: 41:34:cb:b1:ce:5a:b3:ec:21:25:7a:11:c0:38:05: 5d:f8:ba:3d:82:fe:13:ca:45:90:90:92:88:c9:1c: de:7e:3f:2d:28:7c:2f:26:77:34:fc:8c:dc:8c:9e: 4b:d0:55:9b:43:14:e6:4b:cf:ad:c2:67:d5:c5:c1: bd:97:60:f9:d3:b0:2f:f9:99:35:ef:d5:ff:29:20: b0:d3:75:7d:3c:15:58:52:b7:09:9d:91:04:66:5d: de:21:0a:00:95:65:4d:db:ca:ee:a0:60:e0:43:38: fc:67:8b:cd:0d:b7:83:7e:81:60:b6:e5:82:15:ae: 89:a0:83:7d:78:6f:c1:f6:fd:89:54:c0:21:88:9b: 5a:f1:82:ef:47:d9:c8:45:62:8a:b8:18:3d:74:60: 06:35:86:2c:7e:45:f8:4a:eb:be:56:24:36:31:47: c9:fa:4f:7a:34:49:58:36:6f:9c:d1:c3:ad:cf:f5: 0f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5E:30:A6:98:42:12:A6:58:19:5A:86:E8:9C:21:1A:61:E5:D0:D5 X509v3 Authority Key Identifier: keyid:2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:2600::/40 Signature Algorithm: sha256WithRSAEncryption 3b:12:d5:b5:1e:78:48:2b:51:68:55:ac:4a:fe:04:16:2e:5a: 66:91:31:0d:e8:10:d3:d9:2f:41:29:b2:12:14:1d:8e:04:cb: 55:30:77:32:38:01:a5:a7:c7:f1:90:fa:f2:60:c3:cd:af:ff: b5:2b:75:89:00:ce:00:cd:70:69:9b:f3:c5:63:c8:b0:d4:55: 01:a5:88:25:e8:d6:f0:d2:8a:f2:6a:fd:a5:a8:11:2e:7a:c0: f0:39:7b:d6:b6:5e:b9:d9:72:31:e0:8f:33:20:87:aa:3e:0a: 6d:04:b1:d0:c2:ed:df:8b:fe:53:41:f2:1d:44:c9:a6:2c:60: 11:53:1d:b5:36:b8:2e:dd:46:d0:5e:6d:05:27:ca:77:a7:69: 80:cc:d7:9a:e4:18:a8:06:dc:4b:d6:20:a7:eb:60:14:bf:76: 26:cb:b5:e8:1b:ef:8f:bc:cf:6e:8f:48:93:0d:8f:b5:76:1c: 08:1e:ac:58:79:7b:37:e8:6f:02:d7:b1:b8:ce:87:09:95:78: 15:ec:5f:12:99:62:e2:37:fe:f2:7c:a3:48:0e:01:a7:3b:74: 92:61:27:35:54:c9:4b:2a:a5:b7:1b:3b:a2:0a:ad:1c:46:4f: b5:ad:4f:f5:2b:c6:fc:a5:34:01:78:10:81:fe:8f:80:63:ee: f7:ab:96:fe -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUKcI2jUeYkjq0jLy46rLGMqpqRjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJD Mjk4NTk3NjAeFw0yNjAxMjUwNTUzNThaFw0yNzAxMjQwNTU4NThaMDMxMTAvBgNV BAMTKDU2NUUzMEE2OTg0MjEyQTY1ODE5NUE4NkU4OUMyMTFBNjFFNUQwRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLQmaa1TgabKPKyULnXAbBCEbm iHd60qt6wCToPaUaujBlXeFNhcP9qjxnoHTsF8gS9PFRqlA3485+l69lScAcdkrR CHSwHaC4n0E0y7HOWrPsISV6EcA4BV34uj2C/hPKRZCQkojJHN5+Py0ofC8mdzT8 jNyMnkvQVZtDFOZLz63CZ9XFwb2XYPnTsC/5mTXv1f8pILDTdX08FVhStwmdkQRm Xd4hCgCVZU3byu6gYOBDOPxni80Nt4N+gWC25YIVromgg314b8H2/YlUwCGIm1rx gu9H2chFYoq4GD10YAY1hix+RfhK675WJDYxR8n6T3o0SVg2b5zRw63P9Q9lAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUVl4wpphCEqZYGVqG6JwhGmHl0NUwHwYDVR0j BBgwFoAUKpF3isznYzMIFGjZeE3hMsKYWXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAw ZGM5LzEvMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJDMjk4NTk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8yQTkxNzc4QUNDRTc2MzMzMDgxNDY4RDk3 ODRERTEzMkMyOTg1OTc2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS80MGNiYTYxZC00MDU2LTQ2YTktOTM5Mi1hNjFkZmM1MDBkYzkvMS8zMjYxMzA2 NjNhMzE2MzYzMzUzYTMyMzYzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MDMyMzMzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKg8cxSYwDQYJKoZIhvcNAQELBQADggEBADsS 1bUeeEgrUWhVrEr+BBYuWmaRMQ3oENPZL0EpshIUHY4Ey1UwdzI4AaWnx/GQ+vJg w82v/7UrdYkAzgDNcGmb88VjyLDUVQGliCXo1vDSivJq/aWoES56wPA5e9a2XrnZ cjHgjzMgh6o+Cm0EsdDC7d+L/lNB8h1EyaYsYBFTHbU2uC7dRtBebQUnynenaYDM 15rkGKgG3EvWIKfrYBS/dibLtegb74+8z26PSJMNj7V2HAgerFh5ezfobwLXsbjO hwmVeBXsXxKZYuI3/vJ8o0gOAac7dJJhJzVUyUsqpbcbO6IKrRxGT7WtT/Urxvyl NAF4EIH+j4Bj7verlv4= -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:06 2026 by rpki-client