This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a35303a3a2f34342d3438203d3e20323036353430.roa File: 326130663a316363353a35303a3a2f34342d3438203d3e20323036353430.roa (raw, json) Hash identifier: aeHFhugMkHAq+hujmnc0CAWqcy4S7rlH+hTvTizIIcQ= Subject key identifier: D1:91:D6:AB:90:E8:D2:02:A1:FB:01:79:3A:46:F8:B1:50:5E:8B:2F Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94 Certificate serial: 13E57C50AC5C85B00A6B7640733194A93F2110AB Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a35303a3a2f34342d3438203d3e20323036353430.roa Signing time: Sun 25 Jan 2026 08:46:55 +0000 ROA not before: Sun 25 Jan 2026 08:41:55 +0000 ROA not after: Sun 24 Jan 2027 08:46:55 +0000 asID: 206540 IP address blocks: 2a0f:1cc5:50::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e5:7c:50:ac:5c:85:b0:0a:6b:76:40:73:31:94:a9:3f:21:10:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94 Validity Not Before: Jan 25 08:41:55 2026 GMT Not After : Jan 24 08:46:55 2027 GMT Subject: CN=D191D6AB90E8D202A1FB01793A46F8B1505E8B2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c3:51:e0:f5:a6:56:5f:ab:ba:14:bd:d4:c0: fb:3b:72:6e:2d:31:51:8f:f7:d8:a9:1f:40:40:f3: 8b:2b:c9:07:a0:e5:07:64:ad:fd:4d:83:cb:50:d0: d4:67:54:97:b6:fa:47:9d:29:eb:fb:81:24:58:82: d4:5d:7c:4c:b0:ce:a4:12:ce:fa:95:c1:76:32:bb: d5:f1:8b:c9:24:48:2b:92:3e:f7:65:af:3c:c3:49: da:8e:24:27:dd:2b:96:93:f4:f8:d7:62:d3:c6:47: 98:e3:a0:10:28:b0:0a:b7:e1:15:41:08:b6:a8:2e: 7d:53:d3:b4:bb:7b:4f:f7:a8:a5:f6:ff:db:d1:73: c4:a2:bb:0b:d1:bd:63:fc:d2:0e:f5:c4:0b:a6:79: e7:b0:84:1b:06:72:20:de:9a:71:7c:9d:b0:b5:70: 4a:3f:3e:e6:f8:af:06:3c:27:4a:98:14:fb:16:6d: c4:37:c3:d3:0f:18:8b:ec:9c:70:e5:dc:65:15:b1: ff:c8:3c:8b:27:5f:84:73:6c:d0:66:e7:b0:76:b9: a9:7f:70:b1:08:43:a1:36:b9:9e:16:25:fa:cd:6c: 70:c8:df:2b:59:8d:80:42:99:c2:de:c6:62:c7:bb: 06:2f:eb:af:c6:3c:89:f2:c6:4b:db:01:40:2a:3a: d1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:91:D6:AB:90:E8:D2:02:A1:FB:01:79:3A:46:F8:B1:50:5E:8B:2F X509v3 Authority Key Identifier: keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/326130663a316363353a35303a3a2f34342d3438203d3e20323036353430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:50::/44 Signature Algorithm: sha256WithRSAEncryption 63:57:b1:84:92:35:dd:67:52:76:01:4d:48:02:88:de:13:c7: fb:ac:e9:38:26:d7:eb:98:8f:73:4d:1e:26:f1:e9:e5:ef:f2: 85:78:fb:19:7f:29:aa:4a:e4:63:6a:e1:92:ec:13:d1:45:f3: bc:ce:a7:2d:03:cb:be:a9:d3:56:da:14:3b:a3:d6:d9:65:66: f1:14:a6:de:96:45:25:bd:14:71:be:59:9c:81:9d:fa:0c:28: d4:9e:45:b9:53:02:30:bb:c2:c2:85:ae:6c:4c:d1:e4:d8:0e: e0:69:c3:ce:b4:58:e3:eb:2c:d9:dd:43:01:5e:a7:37:bc:43: 66:d7:db:45:73:18:b2:93:61:54:3f:74:ae:d5:a0:14:01:1b: c8:6d:bf:40:19:9a:68:9f:16:1d:1f:8c:2b:12:22:58:45:54: ce:63:05:f5:ba:b1:e4:a4:a6:e5:74:32:94:2e:0b:1b:c6:a5: 88:c0:01:53:a4:7d:95:ce:2c:9f:fd:84:83:e4:75:b1:88:d7: 52:59:a3:e7:dd:2d:d8:03:98:5f:e4:bc:07:8d:eb:a8:a6:97: f4:da:3a:90:44:b1:08:78:d6:75:bb:4b:9f:30:ce:8d:49:8e: 5f:ec:37:56:8d:36:69:de:8a:00:62:f4:65:bd:bc:f1:ad:8d: a1:81:9c:8a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUE+V8UKxchbAKa3ZAczGUqT8hEKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExZTJkNDExZDY4N2JjYjQ0NDljM2RmNDViZWVkYzA0 MTAwN2Q5NDAeFw0yNjAxMjUwODQxNTVaFw0yNzAxMjQwODQ2NTVaMDMxMTAvBgNV BAMTKEQxOTFENkFCOTBFOEQyMDJBMUZCMDE3OTNBNDZGOEIxNTA1RThCMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1w1Hg9aZWX6u6FL3UwPs7cm4t MVGP99ipH0BA84sryQeg5Qdkrf1Ng8tQ0NRnVJe2+kedKev7gSRYgtRdfEywzqQS zvqVwXYyu9Xxi8kkSCuSPvdlrzzDSdqOJCfdK5aT9PjXYtPGR5jjoBAosAq34RVB CLaoLn1T07S7e0/3qKX2/9vRc8SiuwvRvWP80g71xAumeeewhBsGciDemnF8nbC1 cEo/Pub4rwY8J0qYFPsWbcQ3w9MPGIvsnHDl3GUVsf/IPIsnX4RzbNBm57B2ual/ cLEIQ6E2uZ4WJfrNbHDI3ytZjYBCmcLexmLHuwYv66/GPInyxkvbAUAqOtHbAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQU0ZHWq5Do0gKh+wF5Okb4sVBeiy8wHwYDVR0j BBgwFoAUQR4tQR1oe8tEScPfRb7twEEAfZQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0 ZjBlLzAvNDExRTJENDExRDY4N0JDQjQ0NDlDM0RGNDVCRUVEQzA0MTAwN0Q5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FSNHRRUjFvZTh0RVNjUGZSYjd0d0VF QWZaUS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFmYjVmZTIt M2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzNTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMDM2MzUzNDMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEKg8cxQBQMA0GCSqGSIb3DQEBCwUAA4IBAQBjV7GEkjXdZ1J2AU1IAoje E8f7rOk4JtfrmI9zTR4m8enl7/KFePsZfymqSuRjauGS7BPRRfO8zqctA8u+qdNW 2hQ7o9bZZWbxFKbelkUlvRRxvlmcgZ36DCjUnkW5UwIwu8LCha5sTNHk2A7gacPO tFjj6yzZ3UMBXqc3vENm19tFcxiyk2FUP3Su1aAUARvIbb9AGZponxYdH4wrEiJY RVTOYwX1urHkpKbldDKULgsbxqWIwAFTpH2Vziyf/YSD5HWxiNdSWaPn3S3YA5hf 5LwHjeuoppf02jqQRLEIeNZ1u0ufMM6NSY5f7DdWjTZp3ooAYvRlvbzxrY2hgZyK -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:35 2026 by rpki-client