This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa File: 326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa (raw, json) Hash identifier: to/XNiV+31bHlWV85twiWB79n/oQY5V6FHMoothOY/o= Subject key identifier: 8B:E1:05:8E:5E:3D:C1:0E:9F:02:B6:F8:A9:65:95:59:4B:5C:46:B1 Certificate issuer: /CN=AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED Certificate serial: 15517CCC3682EA248CB1846EC6418ADF8BC62088 Authority key identifier: AE:EA:EE:FF:1C:1C:26:B1:A0:08:C2:2C:84:3A:B4:5D:CA:D1:57:ED Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa Signing time: Mon 05 Jan 2026 08:03:37 +0000 ROA not before: Mon 05 Jan 2026 07:58:37 +0000 ROA not after: Mon 04 Jan 2027 08:03:37 +0000 asID: 216299 IP address blocks: 2a0f:1cc5:1000::/48 maxlen: 48 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 15:51:7c:cc:36:82:ea:24:8c:b1:84:6e:c6:41:8a:df:8b:c6:20:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED Validity Not Before: Jan 5 07:58:37 2026 GMT Not After : Jan 4 08:03:37 2027 GMT Subject: CN=8BE1058E5E3DC10E9F02B6F8A96595594B5C46B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:66:29:c0:f8:11:fe:19:5d:e6:04:b5:32:af: 4a:61:de:0f:81:13:1c:4b:b2:f9:41:48:79:f0:5f: 73:37:7a:20:93:ed:b3:7c:66:89:fe:a4:46:f2:90: 2f:b4:3f:47:d7:df:0e:cc:1e:b4:d9:cd:f3:15:6d: 54:dd:47:44:1b:07:a5:3b:be:93:ea:1b:e1:50:ab: 91:3a:b1:4f:f9:54:27:c8:dd:7f:7a:10:cd:25:9c: 1f:3b:42:bd:25:f6:ed:a6:30:57:99:b5:d3:2b:1c: 05:ab:66:09:fc:f1:44:16:8e:97:c5:c1:8c:d2:77: 4b:6d:e7:79:7d:7b:3a:c4:3c:a4:5b:9d:a6:15:3f: b4:46:6c:b5:36:c1:a8:3b:10:b6:6c:4c:4d:2d:26: fd:46:e5:88:c9:31:15:33:20:22:e2:7e:c2:82:7d: ef:1c:69:37:9d:0b:3d:e8:31:51:a9:77:ac:e4:f2: c8:9f:b8:e8:55:fa:b9:a0:04:a2:a0:df:29:83:ae: a1:b9:d3:5f:95:ef:3c:18:97:0a:07:89:fe:33:3c: 9f:93:9a:e2:0c:88:dd:8a:f5:aa:96:7b:38:8d:42: db:5d:37:3f:d2:f6:c1:5d:ae:36:83:0e:e3:8e:71: ae:87:66:b3:02:80:43:29:3c:b2:2b:69:ff:af:5d: 6e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E1:05:8E:5E:3D:C1:0E:9F:02:B6:F8:A9:65:95:59:4B:5C:46:B1 X509v3 Authority Key Identifier: keyid:AE:EA:EE:FF:1C:1C:26:B1:A0:08:C2:2C:84:3A:B4:5D:CA:D1:57:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1000::/48 Signature Algorithm: sha256WithRSAEncryption 45:1a:73:63:31:f5:b6:be:4b:52:d2:3f:90:15:69:86:de:ea: 1b:0d:54:8c:c5:25:2d:fa:bb:1d:54:df:d6:4d:ce:f3:1e:06: 3c:ab:32:9f:01:86:1e:6a:6a:3b:1e:1e:79:f5:ae:f0:a1:37: e8:e0:a4:2a:09:f4:b2:fe:48:14:d3:99:fc:8d:bf:ff:25:7c: 37:b2:bd:85:00:09:2f:e0:c9:b7:6f:64:ad:5d:0a:00:b3:04: 18:6d:13:dd:39:c1:fd:e4:3d:37:d4:91:8b:c8:e5:5e:cc:aa: 57:ec:fa:89:54:3a:17:68:de:31:a4:90:b0:cd:21:ca:f4:31: 92:35:c4:24:84:6e:80:14:29:af:36:74:57:4c:f6:36:12:2e: 87:67:2a:d0:7b:8d:d4:bc:1a:b1:85:03:5f:90:56:97:3d:66: f5:39:f7:53:a1:93:5d:0e:ab:0a:4d:e7:0a:eb:46:0e:20:3e: dd:13:e7:2c:9d:e8:00:51:23:ae:f7:e6:cb:f5:d5:8c:70:a7: a4:01:31:41:06:10:f5:4a:ce:04:89:cc:06:fe:e3:07:6d:8b: b9:1a:d0:24:6c:56:3c:48:8f:28:f0:a2:2d:4a:15:0e:c0:84: 30:ea:8c:56:69:0a:de:ef:d3:24:93:ca:37:d7:17:99:4d:e0: b1:cf:74:69 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUFVF8zDaC6iSMsYRuxkGK34vGIIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVFQUVFRkYxQzFDMjZCMUEwMDhDMjJDODQzQUI0NURD QUQxNTdFRDAeFw0yNjAxMDUwNzU4MzdaFw0yNzAxMDQwODAzMzdaMDMxMTAvBgNV BAMTKDhCRTEwNThFNUUzREMxMEU5RjAyQjZGOEE5NjU5NTU5NEI1QzQ2QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjZinA+BH+GV3mBLUyr0ph3g+B ExxLsvlBSHnwX3M3eiCT7bN8Zon+pEbykC+0P0fX3w7MHrTZzfMVbVTdR0QbB6U7 vpPqG+FQq5E6sU/5VCfI3X96EM0lnB87Qr0l9u2mMFeZtdMrHAWrZgn88UQWjpfF wYzSd0tt53l9ezrEPKRbnaYVP7RGbLU2wag7ELZsTE0tJv1G5YjJMRUzICLifsKC fe8caTedCz3oMVGpd6zk8sifuOhV+rmgBKKg3ymDrqG501+V7zwYlwoHif4zPJ+T muIMiN2K9aqWeziNQttdNz/S9sFdrjaDDuOOca6HZrMCgEMpPLIraf+vXW5VAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUi+EFjl49wQ6fArb4qWWVWUtcRrEwHwYDVR0j BBgwFoAUruru/xwcJrGgCMIshDq0XcrRV+0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzIvQUVFQUVFRkYxQzFDMjZCMUEwMDhDMjJDODQzQUI0NURDQUQxNTdFRC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC9BRUVBRUVGRjFDMUMyNkIxQTAwOEMyMkM4 NDNBQjQ1RENBRDE1N0VELmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81MmI4NDE1Ni05NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMi8zMjYxMzA2 NjNhMzE2MzYzMzUzYTMxMzAzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM2MzIzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKg8cxRAAMA0GCSqGSIb3DQEBCwUAA4IBAQBF GnNjMfW2vktS0j+QFWmG3uobDVSMxSUt+rsdVN/WTc7zHgY8qzKfAYYeamo7Hh55 9a7woTfo4KQqCfSy/kgU05n8jb//JXw3sr2FAAkv4Mm3b2StXQoAswQYbRPdOcH9 5D031JGLyOVezKpX7PqJVDoXaN4xpJCwzSHK9DGSNcQkhG6AFCmvNnRXTPY2Ei6H ZyrQe43UvBqxhQNfkFaXPWb1OfdToZNdDqsKTecK60YOID7dE+csnegAUSOu9+bL 9dWMcKekATFBBhD1Ss4EicwG/uMHbYu5GtAkbFY8SI8o8KItShUOwIQw6oxWaQre 79Mkk8o31xeZTeCxz3Rp -----END CERTIFICATE-----Generated at Mon Jan 26 11:34:58 2026 by rpki-client