This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa File: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (raw, json) Hash identifier: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8= Subject key identifier: 70:78:A2:44:11:75:35:0F:04:A8:FD:62:A7:8D:0A:24:A7:62:34:71 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 42D21C950311C6F2884A34CD747F9010ACC02C98 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa Signing time: Fri 09 Jan 2026 21:50:39 +0000 ROA not before: Fri 09 Jan 2026 21:45:39 +0000 ROA not after: Fri 08 Jan 2027 21:50:39 +0000 asID: 215242 IP address blocks: 2a0f:85c1:7f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d2:1c:95:03:11:c6:f2:88:4a:34:cd:74:7f:90:10:ac:c0:2c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Jan 9 21:45:39 2026 GMT Not After : Jan 8 21:50:39 2027 GMT Subject: CN=7078A2441175350F04A8FD62A78D0A24A7623471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3b:12:2e:82:ef:1a:0f:5a:05:64:85:71:02: e9:9b:bd:bd:f1:28:13:25:60:66:8e:b8:92:59:b6: 0e:d8:5d:e0:90:41:24:92:21:d7:23:87:c2:67:84: f1:03:a5:ea:cc:8e:44:c0:3e:68:ee:c4:75:b4:6f: 0b:38:45:ae:a2:94:cc:09:8c:cc:ec:2e:43:94:ac: 5b:29:e2:d8:9b:ff:37:ee:50:1f:83:04:14:2a:ed: ea:fc:29:d8:59:59:82:c7:c1:bb:0b:b1:46:2b:02: 6c:fd:12:ad:33:ce:46:cb:e0:f1:2e:ab:72:6f:ef: 18:61:dd:b2:ff:32:c3:d0:c1:be:0b:c1:98:6f:81: 2c:ff:1c:e1:c3:15:b5:a4:a4:92:cd:23:05:3c:18: d8:a7:b5:a3:61:a0:7f:47:e5:1f:29:57:b1:5c:70: 46:54:d8:5f:15:ed:29:b8:c9:3b:92:59:a4:48:74: 1b:9a:c5:49:ea:a2:34:20:69:e8:77:cf:41:22:d3: e9:44:13:ea:e4:f8:e3:f8:41:1c:a1:b7:f8:dc:6b: b4:58:a5:a5:ea:bd:33:d9:29:ec:b4:9d:ac:62:3b: 0c:d8:bf:4f:8c:4f:74:24:a4:04:22:ab:d8:56:14: ab:08:19:ee:a1:43:61:5b:8a:1a:9f:b8:d3:41:9e: 4c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:78:A2:44:11:75:35:0F:04:A8:FD:62:A7:8D:0A:24:A7:62:34:71 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:7f7::/48 Signature Algorithm: sha256WithRSAEncryption 5c:9a:57:dc:71:73:48:b0:0d:72:f5:74:1f:0c:78:47:2f:e0: 49:0c:8e:ac:6a:24:c0:6c:7b:85:75:df:ec:55:92:a5:4f:58: c4:9b:dc:66:7d:62:ee:5e:41:9d:4c:6a:cc:c8:77:00:38:97: ed:63:af:0f:7e:57:96:7d:b8:23:7b:f1:b7:d4:90:69:5a:47: b3:30:59:f0:11:3c:b7:75:a2:3a:88:3a:67:4d:65:08:70:fc: 9e:a0:1d:74:7c:d5:7f:de:14:81:79:3a:93:fe:8d:58:62:a9: de:39:5a:4c:42:93:67:6b:1f:3c:6e:73:35:a5:44:cc:bc:d6: a6:7f:0b:55:04:0a:e7:1e:54:50:34:98:af:61:ab:1b:05:41: 9b:e5:54:16:67:4c:a2:e5:d4:1c:38:5b:4c:94:5b:7a:78:64: 57:14:3e:3c:9b:f2:20:62:b4:92:c0:9b:30:2f:3d:70:8d:db: 01:9c:43:08:ea:3a:e6:12:09:ac:e3:f9:c6:56:9c:7c:a3:53: dc:3a:ab:8b:fb:fa:5c:69:95:83:68:a8:33:81:73:9c:db:fe: ae:f9:9b:7e:0a:46:f2:57:3b:e2:8c:92:79:2b:ba:3c:8e:2e: 73:43:b3:b6:2e:56:bf:a5:56:f1:f2:06:73:8a:d0:e9:16:7a: 54:37:e8:a5 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUQtIclQMRxvKISjTNdH+QEKzALJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAxMDkyMTQ1MzlaFw0yNzAxMDgyMTUwMzlaMDMxMTAvBgNV BAMTKDcwNzhBMjQ0MTE3NTM1MEYwNEE4RkQ2MkE3OEQwQTI0QTc2MjM0NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+OxIugu8aD1oFZIVxAumbvb3x KBMlYGaOuJJZtg7YXeCQQSSSIdcjh8JnhPEDperMjkTAPmjuxHW0bws4Ra6ilMwJ jMzsLkOUrFsp4tib/zfuUB+DBBQq7er8KdhZWYLHwbsLsUYrAmz9Eq0zzkbL4PEu q3Jv7xhh3bL/MsPQwb4LwZhvgSz/HOHDFbWkpJLNIwU8GNintaNhoH9H5R8pV7Fc cEZU2F8V7Sm4yTuSWaRIdBuaxUnqojQgaeh3z0Ei0+lEE+rk+OP4QRyht/jca7RY paXqvTPZKey0naxiOwzYv0+MT3QkpAQiq9hWFKsIGe6hQ2FbihqfuNNBnkyrAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUcHiiRBF1NQ8EqP1ip40KJKdiNHEwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMDYzMzNjNi05NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMS8zMjYxMzA2 NjNhMzgzNTYzMzEzYTM3NjYzNzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEH9zANBgkqhkiG9w0BAQsFAAOCAQEAXJpX 3HFzSLANcvV0Hwx4Ry/gSQyOrGokwGx7hXXf7FWSpU9YxJvcZn1i7l5BnUxqzMh3 ADiX7WOvD35Xln24I3vxt9SQaVpHszBZ8BE8t3WiOog6Z01lCHD8nqAddHzVf94U gXk6k/6NWGKp3jlaTEKTZ2sfPG5zNaVEzLzWpn8LVQQK5x5UUDSYr2GrGwVBm+VU FmdMouXUHDhbTJRbenhkVxQ+PJvyIGK0ksCbMC89cI3bAZxDCOo65hIJrOP5xlac fKNT3Dqri/v6XGmVg2ioM4FznNv+rvmbfgpG8lc74oySeSu6PI4uc0Ozti5Wv6VW 8fIGc4rQ6RZ6VDfopQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:34:44 2026 by rpki-client