This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa File: 326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa (raw, json) Hash identifier: WXZZhktlKD9T2nrBzZ0hLrkDPYKvkgJO3m6d5vMac1U= Subject key identifier: 09:26:DA:3C:E4:B6:48:40:F7:F6:E2:26:70:B1:11:C9:6C:46:C4:8C Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Certificate serial: 49411E8419EBFEFC3DC46C883703C75296910FC4 Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa Signing time: Sat 03 Jan 2026 00:25:39 +0000 ROA not before: Sat 03 Jan 2026 00:20:39 +0000 ROA not after: Sat 02 Jan 2027 00:25:39 +0000 asID: 215248 IP address blocks: 2a14:38c0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:41:1e:84:19:eb:fe:fc:3d:c4:6c:88:37:03:c7:52:96:91:0f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Validity Not Before: Jan 3 00:20:39 2026 GMT Not After : Jan 2 00:25:39 2027 GMT Subject: CN=0926DA3CE4B64840F7F6E22670B111C96C46C48C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f0:46:a9:2d:d4:c7:09:c6:c2:98:d4:a8:e7: 34:09:f2:87:b8:82:73:76:4e:84:53:99:7a:7f:87: f9:99:c3:9b:d7:c8:76:83:ab:10:61:5d:d6:d2:6c: 08:d4:8f:e7:f3:61:14:9a:6b:d0:eb:48:0d:8d:44: 59:93:bd:1e:3e:92:40:f4:04:3e:de:ce:af:79:4d: 24:72:a9:59:c2:a0:3d:79:fd:88:c6:ac:02:68:0b: 92:1c:e8:e4:7e:25:d0:3e:18:cc:fe:da:00:6c:ee: 11:f6:bd:6d:63:42:e2:78:24:45:d4:73:9d:52:8a: 8b:16:ab:a2:8e:df:73:dd:0f:e8:d0:1c:2c:54:dc: 1f:13:c4:d3:4a:02:89:74:84:35:67:5c:67:02:1e: 59:fe:8b:fa:81:f6:9a:60:49:38:b3:6c:cf:15:3d: 74:c9:26:ba:74:d3:5c:82:b5:b4:f1:51:d9:1d:44: 2d:6d:c0:dc:8c:64:4e:ba:2d:85:9a:80:17:fe:28: a7:66:cf:eb:0e:21:1a:35:ad:cc:ef:11:c2:ca:09: 46:3e:40:69:04:72:1c:28:35:0e:b6:a6:39:ec:b0: a1:1f:a1:31:27:ba:67:70:32:d0:0b:e4:f1:20:cf: f3:8c:e0:ff:86:d6:2e:43:00:95:03:ef:cb:96:f2: 3d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:26:DA:3C:E4:B6:48:40:F7:F6:E2:26:70:B1:11:C9:6C:46:C4:8C X509v3 Authority Key Identifier: keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:38c0:4::/48 Signature Algorithm: sha256WithRSAEncryption 8a:16:1b:10:95:3d:62:45:72:57:89:78:23:25:2c:c7:00:cb: 90:cc:ce:dd:55:45:64:3f:38:25:88:6e:21:8c:45:61:17:e2: 4f:41:a7:a9:6c:57:ed:e1:31:ba:c5:eb:c0:90:8d:96:96:d9: 55:f6:08:d1:0a:94:56:aa:f5:98:99:04:24:87:dd:5b:3a:31: 41:6f:f8:89:3d:f3:8c:4d:31:5a:d8:79:ce:8f:3f:a8:76:20: 52:9f:b0:08:39:c3:97:91:59:75:50:f0:db:ae:8f:7c:58:5b: 05:9c:2d:d7:17:f2:f8:3e:4e:0e:81:98:39:b7:f3:97:cd:4e: 51:b4:cb:b3:6c:6b:a8:cd:67:9a:0d:ab:d1:32:b2:d6:d0:40: bb:7a:f2:2c:67:d8:2c:93:4f:45:e6:3b:a7:50:50:f7:24:78: e1:00:39:86:cc:df:7c:2b:1a:4d:17:c7:00:23:88:84:af:44: cf:b7:d8:58:c7:2b:6a:e6:4d:3f:62:c0:09:c4:fc:25:2f:6f: d3:f9:1e:48:84:a6:c0:a4:6b:64:61:a4:a3:07:77:b0:d1:e7: 5c:3d:4c:53:cd:33:cc:e7:c4:d3:eb:79:34:fe:e3:bd:a2:d3: cb:19:87:38:b7:e8:a1:36:a5:ad:98:9e:e9:9a:9c:86:2a:ed: 9a:e5:5b:22 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUSUEehBnr/vw9xGyINwPHUpaRD8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3 ZTc5N2I2ODAeFw0yNjAxMDMwMDIwMzlaFw0yNzAxMDIwMDI1MzlaMDMxMTAvBgNV BAMTKDA5MjZEQTNDRTRCNjQ4NDBGN0Y2RTIyNjcwQjExMUM5NkM0NkM0OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU8EapLdTHCcbCmNSo5zQJ8oe4 gnN2ToRTmXp/h/mZw5vXyHaDqxBhXdbSbAjUj+fzYRSaa9DrSA2NRFmTvR4+kkD0 BD7ezq95TSRyqVnCoD15/YjGrAJoC5Ic6OR+JdA+GMz+2gBs7hH2vW1jQuJ4JEXU c51SiosWq6KO33PdD+jQHCxU3B8TxNNKAol0hDVnXGcCHln+i/qB9ppgSTizbM8V PXTJJrp001yCtbTxUdkdRC1twNyMZE66LYWagBf+KKdmz+sOIRo1rczvEcLKCUY+ QGkEchwoNQ62pjnssKEfoTEnumdwMtAL5PEgz/OM4P+G1i5DAJUD78uW8j0nAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUCSbaPOS2SED39uImcLERyWxGxIwwHwYDVR0j BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1 NWUyZy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAt NDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzAvMzI2MTMxMzQzYTMzMzg2MzMw M2EzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNTMyMzQzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACoUOMAABDANBgkqhkiG9w0BAQsFAAOCAQEAihYbEJU9YkVyV4l4IyUsxwDL kMzO3VVFZD84JYhuIYxFYRfiT0GnqWxX7eExusXrwJCNlpbZVfYI0QqUVqr1mJkE JIfdWzoxQW/4iT3zjE0xWth5zo8/qHYgUp+wCDnDl5FZdVDw266PfFhbBZwt1xfy +D5ODoGYObfzl81OUbTLs2xrqM1nmg2r0TKy1tBAu3ryLGfYLJNPReY7p1BQ9yR4 4QA5hszffCsaTRfHACOIhK9Ez7fYWMcrauZNP2LACcT8JS9v0/keSISmwKRrZGGk owd3sNHnXD1MU80zzOfE0+t5NP7jvaLTyxmHOLfooTalrZie6ZqchirtmuVbIg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:25:31 2026 by rpki-client