This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/323030313a3637383a313161303a3a2f34382d3438203d3e203531303139.roa File: 323030313a3637383a313161303a3a2f34382d3438203d3e203531303139.roa (raw, json) Hash identifier: WTZJrpZtSK56gi8FgUd2AbaB/s6bTUvq5ttS3fRGoxU= Subject key identifier: 69:B4:CD:29:69:27:8F:68:90:27:13:1D:C6:56:90:93:41:EB:16:3D Certificate issuer: /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Certificate serial: 5C431A4EDF94711071B50B52D758FD06AD164A05 Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/323030313a3637383a313161303a3a2f34382d3438203d3e203531303139.roa Signing time: Tue 13 Jan 2026 16:05:38 +0000 ROA not before: Tue 13 Jan 2026 16:00:38 +0000 ROA not after: Tue 12 Jan 2027 16:05:38 +0000 asID: 51019 IP address blocks: 2001:678:11a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:43:1a:4e:df:94:71:10:71:b5:0b:52:d7:58:fd:06:ad:16:4a:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Validity Not Before: Jan 13 16:00:38 2026 GMT Not After : Jan 12 16:05:38 2027 GMT Subject: CN=69B4CD2969278F689027131DC656909341EB163D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8b:f7:2e:cb:36:59:17:c9:e3:df:9e:9e:23: c8:d4:3d:34:07:2c:8f:60:c8:79:98:77:77:45:e5: 93:75:fe:01:11:1d:9b:d4:c6:04:59:4d:5e:d1:23: fb:48:8c:7c:0d:ef:9a:85:a6:33:7e:4c:05:b7:6d: 38:ab:f9:27:46:6c:69:c9:d9:5f:db:e4:fa:32:40: 1d:19:9b:6d:3c:be:2f:dd:b2:cf:45:43:85:94:cf: d5:ba:0a:52:e8:bd:3e:a5:66:b6:2c:31:40:97:23: b4:d4:59:3e:6a:d7:84:9d:15:69:82:6d:e3:68:af: 3f:4b:26:1c:45:89:57:61:ba:db:c7:08:bd:69:35: d6:2d:4d:ac:ff:37:24:d8:8a:8a:cb:95:3b:64:60: 1a:e7:5e:ce:0e:57:e3:02:f5:0a:8d:58:5f:65:d5: 58:d9:0b:28:b4:17:61:e8:9d:02:70:f8:a0:4a:13: c5:05:bb:ff:2d:10:f5:37:77:04:60:88:17:55:9c: ed:64:e3:3a:80:ae:da:f3:83:80:c0:5d:85:9d:d4: e9:30:46:b7:02:ca:29:44:76:02:2a:34:7c:f4:36: 47:87:d7:ab:e5:a7:ae:1b:e6:0e:1a:2b:c5:d2:5a: 07:bb:f1:41:13:b5:c0:5f:7c:0c:ff:7b:c0:d4:bd: 84:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B4:CD:29:69:27:8F:68:90:27:13:1D:C6:56:90:93:41:EB:16:3D X509v3 Authority Key Identifier: keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/323030313a3637383a313161303a3a2f34382d3438203d3e203531303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:11a0::/48 Signature Algorithm: sha256WithRSAEncryption 8c:96:23:e3:86:7d:b4:a9:f6:bc:64:81:19:c6:e4:cd:97:ad: 33:33:6b:55:3d:45:88:e5:b8:e6:a3:cb:44:fd:59:ec:e1:b7: 08:6a:27:16:11:b5:6c:3c:30:14:85:00:4d:ab:ea:a1:b4:83: c6:9f:7e:fd:cd:47:96:36:fa:1e:63:06:11:8c:9f:24:f8:fa: 81:7f:6d:f8:46:86:99:1b:8e:8e:c1:95:90:29:24:a8:da:8b: 62:82:41:ed:8b:7f:d8:43:e9:ac:25:9d:1f:af:d6:3e:06:64: 78:03:df:f0:71:bc:ed:0b:ba:0b:e8:e0:1f:17:5c:47:78:71: 57:fd:42:1a:27:19:5b:9f:87:7b:b9:d8:76:84:b3:84:91:ce: 75:64:cd:95:56:66:69:4f:dc:44:c8:36:bf:f2:67:99:97:e5: a1:23:4f:77:73:cb:54:19:88:8e:08:44:89:3f:8f:39:f1:a9: 20:61:98:bd:d9:77:1c:a8:6a:1b:24:4f:92:11:7f:d1:0b:1e: 9a:2d:5f:89:93:b5:6b:f0:61:ce:34:78:bb:7e:ab:36:38:5c: 30:61:67:39:79:05:39:96:d5:fb:f2:22:30:05:30:21:59:ca: 3b:c8:c4:a1:f6:be:a6:23:88:44:f0:c9:71:00:8e:87:e4:ed: 20:fa:4f:c8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUXEMaTt+UcRBxtQtS11j9Bq0WSgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDJmZjA3OTMyYzNmNGMxYjM0NjVmZjRmMGQ5NjQ4NDcz M2UwMmVhZDAeFw0yNjAxMTMxNjAwMzhaFw0yNzAxMTIxNjA1MzhaMDMxMTAvBgNV BAMTKDY5QjRDRDI5NjkyNzhGNjg5MDI3MTMxREM2NTY5MDkzNDFFQjE2M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCri/cuyzZZF8nj356eI8jUPTQH LI9gyHmYd3dF5ZN1/gERHZvUxgRZTV7RI/tIjHwN75qFpjN+TAW3bTir+SdGbGnJ 2V/b5PoyQB0Zm208vi/dss9FQ4WUz9W6ClLovT6lZrYsMUCXI7TUWT5q14SdFWmC beNorz9LJhxFiVdhutvHCL1pNdYtTaz/NyTYiorLlTtkYBrnXs4OV+MC9QqNWF9l 1VjZCyi0F2HonQJw+KBKE8UFu/8tEPU3dwRgiBdVnO1k4zqArtrzg4DAXYWd1Okw RrcCyilEdgIqNHz0NkeH16vlp64b5g4aK8XSWge78UETtcBffAz/e8DUvYQbAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUabTNKWknj2iQJxMdxlaQk0HrFj0wHwYDVR0j BBgwFoAU0v8Hkyw/TBs0Zf9PDZZIRzPgLq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzIvRDJGRjA3OTMyQzNGNEMxQjM0NjVGRjRGMEQ5NjQ4NDczM0UwMkVBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzB2OEhreXdfVEJzMFpmOVBEWlpJUnpQ Z0xxMC5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEt NDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNmLzIvMzIzMDMwMzEzYTM2MzczODNh MzEzMTYxMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMxMzAzMTM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEGeBGgMA0GCSqGSIb3DQEBCwUAA4IBAQCMliPjhn20qfa8ZIEZxuTN l60zM2tVPUWI5bjmo8tE/Vns4bcIaicWEbVsPDAUhQBNq+qhtIPGn379zUeWNvoe YwYRjJ8k+PqBf234RoaZG46OwZWQKSSo2otigkHti3/YQ+msJZ0fr9Y+BmR4A9/w cbztC7oL6OAfF1xHeHFX/UIaJxlbn4d7udh2hLOEkc51ZM2VVmZpT9xEyDa/8meZ l+WhI093c8tUGYiOCESJP4858akgYZi92XccqGobJE+SEX/RCx6aLV+Jk7Vr8GHO NHi7fqs2OFwwYWc5eQU5ltX78iIwBTAhWco7yMSh9r6mI4hE8MlxAI6H5O0g+k/I -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:51 2026 by rpki-client