This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33383a3a2f34382d3438203d3e20323135333735.roa File: 326131313a323963303a33383a3a2f34382d3438203d3e20323135333735.roa (raw, json) Hash identifier: 3eH93P7X2UbneWz5frDyLRiZ840lRKx+EvIh6gCa/Ss= Subject key identifier: A0:A4:5B:25:EE:AB:33:4E:30:31:39:8F:24:89:69:A3:F7:95:9F:03 Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873 Certificate serial: 718F2CDE78787DBD137646F2AF325AF245D25896 Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33383a3a2f34382d3438203d3e20323135333735.roa Signing time: Tue 06 Jan 2026 12:22:45 +0000 ROA not before: Tue 06 Jan 2026 12:17:45 +0000 ROA not after: Tue 05 Jan 2027 12:22:45 +0000 asID: 215375 IP address blocks: 2a11:29c0:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:8f:2c:de:78:78:7d:bd:13:76:46:f2:af:32:5a:f2:45:d2:58:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873 Validity Not Before: Jan 6 12:17:45 2026 GMT Not After : Jan 5 12:22:45 2027 GMT Subject: CN=A0A45B25EEAB334E3031398F248969A3F7959F03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d7:32:3a:ab:91:31:2c:cc:25:36:18:20:03: 3f:ee:99:83:0b:b2:be:73:f9:00:67:fa:b9:35:7c: 3c:96:0b:e5:bd:a6:75:6a:04:d4:b1:38:14:73:84: 44:e1:f5:fa:3f:08:5f:50:9a:91:f1:27:7c:fb:5c: da:32:44:63:a9:55:85:d3:c0:8a:d6:cc:70:79:26: 8d:13:10:c3:f2:34:95:0b:03:86:a9:7b:36:de:5b: e1:ca:88:68:bd:f6:3a:87:4f:04:68:34:57:54:7e: d7:39:6e:50:bb:08:cc:fa:80:75:7f:36:b1:3b:a8: 79:86:ba:e0:76:d6:0b:21:4a:7f:8f:26:30:44:94: ed:a5:30:a8:c8:0c:d5:09:e1:3e:d2:4d:4b:51:d1: f3:b3:0d:6a:10:5a:32:33:5c:51:12:7c:90:d7:e0: 71:6f:32:20:31:ab:c6:c8:ae:b8:41:7a:9b:11:8b: a5:24:f6:b0:75:99:c6:1f:8e:dd:50:b6:0c:ab:27: b8:d3:88:07:f2:41:b5:75:5e:16:12:f2:c0:a1:99: a7:09:d8:d9:0a:e3:f3:15:a2:27:36:72:58:e7:4b: a9:65:d1:d0:06:ee:ad:74:fb:5a:93:7c:79:8b:05: 18:5c:87:9c:16:5b:fc:e5:18:b8:0f:43:cc:99:b1: ed:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A4:5B:25:EE:AB:33:4E:30:31:39:8F:24:89:69:A3:F7:95:9F:03 X509v3 Authority Key Identifier: keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33383a3a2f34382d3438203d3e20323135333735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:29c0:38::/48 Signature Algorithm: sha256WithRSAEncryption 39:1b:09:69:de:1b:07:15:de:fe:e5:f9:78:63:63:02:2c:b3: ed:17:4f:7c:90:05:13:d8:f5:8c:10:55:21:df:4a:e7:67:23: f9:d6:f7:70:8b:44:07:c0:30:83:0b:5c:2c:fe:26:2c:0b:33: cf:e7:45:56:6c:c2:9b:4f:45:79:02:57:d6:ef:8e:50:f8:01: 2e:f6:9c:53:a4:45:45:9d:c4:64:e0:c3:c1:70:70:9e:1f:48: 34:1c:ad:c0:fe:88:fe:bd:6c:f1:7d:22:71:ad:69:93:97:2f: 8a:f3:db:64:22:f6:0e:a1:05:fb:90:ff:bc:53:30:b1:9d:eb: 4f:88:bc:24:04:be:f5:4c:74:78:83:60:cb:cc:58:3a:0d:39: 32:af:53:8b:c9:dd:56:44:7f:a2:7c:e1:5e:56:d9:ce:64:91: 94:3c:10:eb:6e:b5:ed:4e:67:a1:d7:b6:e3:6e:c5:eb:9b:fa: 83:e0:75:ad:1c:5a:42:5c:d5:73:ec:25:cc:bb:69:d7:95:9f: d5:70:47:b3:83:71:3a:13:0a:0a:8f:11:4d:b1:69:28:6e:5e: ca:1d:e3:3f:3c:46:6a:53:2b:f8:ba:55:92:97:a6:49:13:56: 53:d0:7b:91:19:0b:d0:c0:22:88:c2:69:7e:93:7b:a3:5c:76: 53:d6:b7:a9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUcY8s3nh4fb0TdkbyrzJa8kXSWJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm MTA4Mjg3MzAeFw0yNjAxMDYxMjE3NDVaFw0yNzAxMDUxMjIyNDVaMDMxMTAvBgNV BAMTKEEwQTQ1QjI1RUVBQjMzNEUzMDMxMzk4RjI0ODk2OUEzRjc5NTlGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN1zI6q5ExLMwlNhggAz/umYML sr5z+QBn+rk1fDyWC+W9pnVqBNSxOBRzhETh9fo/CF9QmpHxJ3z7XNoyRGOpVYXT wIrWzHB5Jo0TEMPyNJULA4apezbeW+HKiGi99jqHTwRoNFdUftc5blC7CMz6gHV/ NrE7qHmGuuB21gshSn+PJjBElO2lMKjIDNUJ4T7STUtR0fOzDWoQWjIzXFESfJDX 4HFvMiAxq8bIrrhBepsRi6Uk9rB1mcYfjt1QtgyrJ7jTiAfyQbV1XhYS8sChmacJ 2NkK4/MVoic2cljnS6ll0dAG7q10+1qTfHmLBRhch5wWW/zlGLgPQ8yZse3/AgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUoKRbJe6rM04wMTmPJIlpo/eVnwMwHwYDVR0j BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF SUtITS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw M2EzMzM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTM1MzMzNzM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAKhEpwAA4MA0GCSqGSIb3DQEBCwUAA4IBAQA5Gwlp3hsHFd7+5fl4Y2MC LLPtF098kAUT2PWMEFUh30rnZyP51vdwi0QHwDCDC1ws/iYsCzPP50VWbMKbT0V5 AlfW745Q+AEu9pxTpEVFncRk4MPBcHCeH0g0HK3A/oj+vWzxfSJxrWmTly+K89tk IvYOoQX7kP+8UzCxnetPiLwkBL71THR4g2DLzFg6DTkyr1OLyd1WRH+ifOFeVtnO ZJGUPBDrbrXtTmeh17bjbsXrm/qD4HWtHFpCXNVz7CXMu2nXlZ/VcEezg3E6EwoK jxFNsWkobl7KHeM/PEZqUyv4ulWSl6ZJE1ZT0HuRGQvQwCKIwml+k3ujXHZT1rep -----END CERTIFICATE-----Generated at Sun Jan 25 14:47:34 2026 by rpki-client