This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa File: 326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa (raw, json) Hash identifier: c/SHLHo2u//fub298bFboq1gpoyciy9cj/euJmiNfvQ= Subject key identifier: 0A:BD:13:74:E6:99:40:2B:CB:3D:03:1D:C4:4D:1C:2C:C0:1D:EB:44 Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Certificate serial: 08520E2A3B9F51FB5A16A8079DBDB12303DEFCB2 Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa Signing time: Sat 03 Jan 2026 00:25:49 +0000 ROA not before: Sat 03 Jan 2026 00:20:49 +0000 ROA not after: Sat 02 Jan 2027 00:25:49 +0000 asID: 396064 IP address blocks: 2a14:38c0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:52:0e:2a:3b:9f:51:fb:5a:16:a8:07:9d:bd:b1:23:03:de:fc:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Validity Not Before: Jan 3 00:20:49 2026 GMT Not After : Jan 2 00:25:49 2027 GMT Subject: CN=0ABD1374E699402BCB3D031DC44D1C2CC01DEB44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1d:78:4d:1a:b5:15:e2:7d:ae:87:95:a1:53: 68:c4:75:eb:97:e0:59:1e:4a:ff:e2:1c:d9:af:72: 15:47:e2:14:99:83:47:a4:58:34:a6:80:02:a4:28: e5:98:e7:a5:ba:e7:b3:ad:86:87:cd:20:2c:29:ab: 8b:81:a3:f4:bd:2a:cc:78:17:f9:09:4b:c1:94:82: f8:60:36:2f:4a:03:30:a9:49:e8:09:a7:2d:5c:90: 5b:c3:b5:a0:39:53:ad:7f:3a:61:13:1a:f6:41:f4: 2b:13:06:2b:ba:e1:ea:9d:8f:4a:82:1b:e5:78:87: 57:26:f9:82:07:e7:17:81:ba:63:f4:33:c0:ef:52: a0:46:b8:3f:1c:b9:18:1e:55:b8:c3:ce:dc:cf:99: 41:90:b7:e1:aa:1b:86:03:01:fd:04:93:52:86:c9: 60:74:b1:08:43:73:4a:a5:15:90:ed:d7:77:57:95: 67:a7:23:4d:ff:e9:83:a6:14:2e:50:9e:2e:a7:fb: 2c:16:84:1d:f6:85:19:7a:2b:9b:33:57:ac:84:eb: 53:1f:08:4a:0f:13:63:68:2c:80:aa:33:5d:02:8e: 7b:a4:d3:2d:6d:e6:d9:e9:1e:68:ea:83:8c:fb:3c: e6:c1:0b:db:5a:8a:03:00:d7:ce:d1:8c:53:c8:45: 93:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BD:13:74:E6:99:40:2B:CB:3D:03:1D:C4:4D:1C:2C:C0:1D:EB:44 X509v3 Authority Key Identifier: keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:38c0:4::/48 Signature Algorithm: sha256WithRSAEncryption 0f:b5:00:a3:f1:f0:92:5d:94:98:d2:93:a2:6e:0a:77:24:75: b0:64:e0:49:4b:b2:27:1b:8c:5c:cc:cb:db:1c:de:07:db:69: 3d:ca:18:c7:65:75:b3:90:ce:2f:3b:9d:88:5d:9a:3c:3f:ce: 59:15:95:95:77:a2:f3:25:17:39:5c:b4:95:f8:f6:8a:4e:7d: 36:ee:28:ad:20:f4:c0:4c:e5:84:ea:45:03:fa:a3:19:8b:43: 7b:6d:5c:a9:37:ac:03:9c:5d:b7:74:2b:ca:c9:de:5d:d9:f6: da:6c:4c:2e:c8:55:03:77:dc:9c:c2:e2:dc:a0:05:b5:e2:24: e8:4c:f3:95:72:73:81:cf:02:6d:a1:41:8b:6c:07:45:8f:e8: 54:c2:83:49:84:51:63:13:51:24:9a:70:77:34:b4:fd:8a:24: 95:74:c4:b3:b2:ba:67:21:9f:04:48:20:aa:1d:22:d4:d9:92: 68:26:aa:2a:fa:a0:50:f5:71:8a:e8:12:80:89:c9:f7:5e:fd: dd:a5:18:d4:0a:5c:fe:62:32:3f:39:a0:0a:bc:4e:9a:c9:09: e3:37:90:fe:bd:7e:02:a3:56:6d:8b:c9:96:0a:bf:87:35:ef: 5d:0e:f5:90:07:07:2c:9a:00:da:c4:9d:9f:20:50:27:c6:01: df:c2:c3:0a -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUCFIOKjufUftaFqgHnb2xIwPe/LIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3 ZTc5N2I2ODAeFw0yNjAxMDMwMDIwNDlaFw0yNzAxMDIwMDI1NDlaMDMxMTAvBgNV BAMTKDBBQkQxMzc0RTY5OTQwMkJDQjNEMDMxREM0NEQxQzJDQzAxREVCNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChHXhNGrUV4n2uh5WhU2jEdeuX 4FkeSv/iHNmvchVH4hSZg0ekWDSmgAKkKOWY56W657OthofNICwpq4uBo/S9Ksx4 F/kJS8GUgvhgNi9KAzCpSegJpy1ckFvDtaA5U61/OmETGvZB9CsTBiu64eqdj0qC G+V4h1cm+YIH5xeBumP0M8DvUqBGuD8cuRgeVbjDztzPmUGQt+GqG4YDAf0Ek1KG yWB0sQhDc0qlFZDt13dXlWenI03/6YOmFC5Qni6n+ywWhB32hRl6K5szV6yE61Mf CEoPE2NoLICqM10Cjnuk0y1t5tnpHmjqg4z7PObBC9taigMA187RjFPIRZMdAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUCr0TdOaZQCvLPQMdxE0cLMAd60QwHwYDVR0j BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1 NWUyZy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAt NDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzAvMzI2MTMxMzQzYTMzMzg2MzMw M2EzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMzMzkzNjMwMzYzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACoUOMAABDANBgkqhkiG9w0BAQsFAAOCAQEAD7UAo/Hwkl2UmNKTom4KdyR1 sGTgSUuyJxuMXMzL2xzeB9tpPcoYx2V1s5DOLzudiF2aPD/OWRWVlXei8yUXOVy0 lfj2ik59Nu4orSD0wEzlhOpFA/qjGYtDe21cqTesA5xdt3QrysneXdn22mxMLshV A3fcnMLi3KAFteIk6EzzlXJzgc8CbaFBi2wHRY/oVMKDSYRRYxNRJJpwdzS0/Yok lXTEs7K6ZyGfBEggqh0i1NmSaCaqKvqgUPVxiugSgInJ91793aUY1Apc/mIyPzmg CrxOmskJ4zeQ/r1+AqNWbYvJlgq/hzXvXQ71kAcHLJoA2sSdnyBQJ8YB38LDCg== -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:22 2026 by rpki-client