This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a3a2f32392d3239203d3e20323135323438.roa File: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (raw, json) Hash identifier: bqsY4FQ10AI29Vxl2YGsNnTvNpFvBsuO3ChiwTJi6QE= Subject key identifier: C9:F1:25:6B:BB:CE:F1:57:89:AF:24:0E:21:5A:D6:B7:F7:FD:D7:16 Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Certificate serial: 3C5689502CEE78E489964A8D7B538ECF7029CAFF Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a3a2f32392d3239203d3e20323135323438.roa Signing time: Sat 17 Jan 2026 22:17:19 +0000 ROA not before: Sat 17 Jan 2026 22:12:19 +0000 ROA not after: Sat 16 Jan 2027 22:17:19 +0000 asID: 215248 IP address blocks: 2a14:38c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:56:89:50:2c:ee:78:e4:89:96:4a:8d:7b:53:8e:cf:70:29:ca:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Validity Not Before: Jan 17 22:12:19 2026 GMT Not After : Jan 16 22:17:19 2027 GMT Subject: CN=C9F1256BBBCEF15789AF240E215AD6B7F7FDD716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f0:95:46:fb:67:42:bd:11:fe:bc:0f:2f:14: 2c:6c:65:1a:5e:ac:95:84:9b:c7:f2:62:01:ba:61: 93:f8:03:16:3b:80:7e:87:a1:d3:55:c5:00:ff:85: 03:a1:30:f4:4d:d7:2d:69:96:70:ee:f6:e3:73:a9: ce:6b:19:a6:e2:02:be:68:e8:b5:9d:e8:ce:72:a2: 7b:b9:96:9d:e1:db:24:8a:7b:a6:ad:62:5e:2e:e7: 87:81:84:bf:f5:95:d6:4e:55:8b:7d:06:ac:a8:f7: 9f:b9:ac:c4:2e:e3:91:2f:98:88:26:11:96:20:e2: 65:4d:68:02:85:86:fe:87:95:77:04:ff:68:e9:26: 1e:f9:ce:87:9e:14:e8:08:6b:9f:18:e3:50:1f:c2: f6:92:b6:29:2c:e7:08:13:fd:fb:ec:34:f7:50:e9: c2:69:4c:eb:d1:f9:98:fb:b0:1e:4a:bb:ac:6d:a5: 52:55:fb:b5:4f:56:63:d9:49:c8:2c:fa:85:64:c3: e8:7c:90:39:44:a5:db:80:f5:90:3f:4f:94:c0:6d: 75:2a:af:ca:49:dd:01:b0:85:98:4c:2a:f4:6b:57: 37:db:a4:3e:3c:9b:fe:d7:99:be:f1:c0:60:fb:d7: 74:84:58:e8:99:93:17:8c:2c:dc:95:a2:6a:36:1e: 6e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F1:25:6B:BB:CE:F1:57:89:AF:24:0E:21:5A:D6:B7:F7:FD:D7:16 X509v3 Authority Key Identifier: keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a3a2f32392d3239203d3e20323135323438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:38c0::/29 Signature Algorithm: sha256WithRSAEncryption 3f:06:68:a8:8e:0d:94:9e:cf:e1:c8:b0:3c:13:22:68:70:d1: c7:25:61:b4:57:9f:61:e5:9a:a3:91:2a:63:53:51:e5:d2:f6: fe:37:4b:5a:82:cc:f7:0a:34:a3:ca:cd:b4:db:39:4c:a9:f3: 54:40:7a:c8:07:f6:4c:9a:7b:81:00:7c:df:f7:2b:e9:18:2f: 31:29:ea:b5:60:ea:df:81:46:75:4a:cf:4e:98:1c:ae:97:e6: 2b:f9:01:e5:9c:ee:d9:2d:d7:66:b9:e2:27:5d:3b:16:4b:09: 1f:a6:a5:45:a6:f1:c3:ba:fd:2d:2b:86:b1:1d:e7:2e:03:df: 42:94:31:29:6b:83:17:62:d3:e7:30:67:77:5d:c8:cc:18:6c: 33:dd:09:59:0b:20:be:24:db:a6:f5:fc:35:36:bc:de:c1:f6: cb:fa:bd:4f:b7:bd:d2:d8:b8:1b:84:91:d0:6f:29:cf:b1:9d: ca:d2:65:5f:72:83:df:d1:5b:10:82:1e:1a:c9:bc:30:03:bd: a6:74:bc:19:61:6d:82:71:86:e4:84:55:66:05:f8:62:ed:ab: a9:a8:0f:cf:f2:d4:b0:53:ec:8f:3b:fa:fc:c4:ea:3d:22:a9: 45:46:82:bb:ab:70:49:f6:38:34:9b:4b:3c:25:b8:38:96:5b: 58:3d:f1:14 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUPFaJUCzueOSJlkqNe1OOz3Apyv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3 ZTc5N2I2ODAeFw0yNjAxMTcyMjEyMTlaFw0yNzAxMTYyMjE3MTlaMDMxMTAvBgNV BAMTKEM5RjEyNTZCQkJDRUYxNTc4OUFGMjQwRTIxNUFENkI3RjdGREQ3MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ8JVG+2dCvRH+vA8vFCxsZRpe rJWEm8fyYgG6YZP4AxY7gH6HodNVxQD/hQOhMPRN1y1plnDu9uNzqc5rGabiAr5o 6LWd6M5yonu5lp3h2ySKe6atYl4u54eBhL/1ldZOVYt9Bqyo95+5rMQu45EvmIgm EZYg4mVNaAKFhv6HlXcE/2jpJh75zoeeFOgIa58Y41AfwvaStiks5wgT/fvsNPdQ 6cJpTOvR+Zj7sB5Ku6xtpVJV+7VPVmPZScgs+oVkw+h8kDlEpduA9ZA/T5TAbXUq r8pJ3QGwhZhMKvRrVzfbpD48m/7Xmb7xwGD713SEWOiZkxeMLNyVomo2Hm4ZAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUyfEla7vO8VeJryQOIVrWt/f91xYwHwYDVR0j BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1 NWUyZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAt NDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzAvMzI2MTMxMzQzYTMzMzg2MzMw M2EzYTJmMzIzOTJkMzIzOTIwM2QzZTIwMzIzMTM1MzIzNDM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUD KhQ4wDANBgkqhkiG9w0BAQsFAAOCAQEAPwZoqI4NlJ7P4ciwPBMiaHDRxyVhtFef YeWao5EqY1NR5dL2/jdLWoLM9wo0o8rNtNs5TKnzVEB6yAf2TJp7gQB83/cr6Rgv MSnqtWDq34FGdUrPTpgcrpfmK/kB5Zzu2S3XZrniJ107FksJH6alRabxw7r9LSuG sR3nLgPfQpQxKWuDF2LT5zBnd13IzBhsM90JWQsgviTbpvX8NTa83sH2y/q9T7e9 0ti4G4SR0G8pz7GdytJlX3KD39FbEIIeGsm8MAO9pnS8GWFtgnGG5IRVZgX4Yu2r qagPz/LUsFPsjzv6/MTqPSKpRUaCu6twSfY4NJtLPCW4OJZbWD3xFA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:38 2026 by rpki-client