This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa File: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (raw, json) Hash identifier: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg= Subject key identifier: 7B:8B:05:80:7B:0F:A9:FE:C0:D6:49:95:F7:2F:E7:D5:71:4E:94:4F Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 2DA291BF47C46FB30ECB177BE0FD4E07B7BA2449 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa Signing time: Sat 10 Jan 2026 01:50:40 +0000 ROA not before: Sat 10 Jan 2026 01:45:40 +0000 ROA not after: Sat 09 Jan 2027 01:50:40 +0000 asID: 215242 IP address blocks: 2a0f:85c1:7f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a2:91:bf:47:c4:6f:b3:0e:cb:17:7b:e0:fd:4e:07:b7:ba:24:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Jan 10 01:45:40 2026 GMT Not After : Jan 9 01:50:40 2027 GMT Subject: CN=7B8B05807B0FA9FEC0D64995F72FE7D5714E944F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bf:77:32:e6:ee:e5:bd:bd:1f:f5:72:50:2a: 01:43:19:ea:2e:ac:eb:24:cf:4b:df:cb:c2:d7:28: 8f:73:bb:ae:67:13:87:71:e1:6c:a6:f2:e0:02:3e: 22:76:ca:6a:f8:93:2d:4d:87:80:c2:cc:90:d2:ff: 88:66:5b:65:70:b0:d1:8a:b9:18:89:19:49:e9:2d: 86:20:b2:b4:d2:48:a6:36:f4:27:c6:0a:00:cc:17: c5:17:02:61:2d:07:f8:35:b4:f6:a4:89:ca:80:6e: bb:4d:c2:a6:7d:c0:65:63:f9:a5:a0:28:90:02:69: af:7a:10:32:8e:61:13:01:f4:48:72:80:8a:09:c8: da:52:c7:ad:cd:64:54:57:bd:08:37:4e:85:77:3a: 43:2a:cd:a6:80:81:cd:58:0d:4e:f0:22:3e:5a:51: 51:b2:11:9f:e0:36:57:95:e8:cc:b0:6d:3d:2e:d2: a4:70:39:70:2a:91:31:7a:62:48:3d:92:87:34:c9: 6e:23:6f:b5:55:a2:da:8f:c8:01:cf:a6:1f:f6:7b: 2a:03:7f:00:74:55:b5:8e:43:e2:f8:77:80:5b:31: 98:67:77:21:62:92:ff:c8:33:36:09:4d:7b:db:72: ad:c4:c6:a1:dd:93:29:75:8a:68:97:71:14:a3:e3: 33:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8B:05:80:7B:0F:A9:FE:C0:D6:49:95:F7:2F:E7:D5:71:4E:94:4F X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:7f9::/48 Signature Algorithm: sha256WithRSAEncryption 25:b8:ca:09:dd:ab:4c:55:ac:fb:1f:6b:6c:0d:d8:ea:06:2f: 8c:5d:d1:6e:47:4f:63:b3:fa:fc:d5:7f:93:fc:fd:33:3f:cd: 4d:77:10:9b:79:21:3c:35:0d:93:05:85:f7:88:ec:43:a1:81: d0:d7:42:12:40:3d:2a:4b:61:70:f0:2c:58:98:f5:47:1a:43: 27:b5:20:10:a6:9e:63:ff:3f:83:b3:17:bb:5b:a3:62:d4:ad: 5f:93:14:91:c1:15:44:14:eb:ac:68:41:c1:3b:6f:f5:47:66: 29:a7:65:0c:3d:88:35:85:03:5e:e3:28:a6:4d:94:27:50:43: d4:cb:c6:39:6e:4f:63:36:6a:1d:03:ed:47:37:41:e2:e2:65: 52:7f:71:75:7b:81:e5:c1:d4:f1:b8:36:f3:a6:63:c6:86:99: 01:e9:85:23:2f:4f:44:c0:d6:2c:e4:2a:5a:07:b9:9a:a0:74: 42:10:c8:b6:d3:10:92:05:00:92:44:60:85:10:52:b4:ca:c1: 45:79:1c:39:9a:d8:74:00:aa:14:f3:0d:22:62:c9:62:45:20: 23:bb:7b:b8:58:2a:3e:fe:47:94:21:22:6d:23:bd:6d:4f:3c: d6:92:f5:7d:7f:1a:86:47:4a:23:bc:62:0b:e8:1a:f3:5c:04: 4c:fb:8b:6e -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIULaKRv0fEb7MOyxd74P1OB7e6JEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAxMTAwMTQ1NDBaFw0yNzAxMDkwMTUwNDBaMDMxMTAvBgNV BAMTKDdCOEIwNTgwN0IwRkE5RkVDMEQ2NDk5NUY3MkZFN0Q1NzE0RTk0NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHv3cy5u7lvb0f9XJQKgFDGeou rOskz0vfy8LXKI9zu65nE4dx4Wym8uACPiJ2ymr4ky1Nh4DCzJDS/4hmW2VwsNGK uRiJGUnpLYYgsrTSSKY29CfGCgDMF8UXAmEtB/g1tPakicqAbrtNwqZ9wGVj+aWg KJACaa96EDKOYRMB9EhygIoJyNpSx63NZFRXvQg3ToV3OkMqzaaAgc1YDU7wIj5a UVGyEZ/gNleV6MywbT0u0qRwOXAqkTF6Ykg9koc0yW4jb7VVotqPyAHPph/2eyoD fwB0VbWOQ+L4d4BbMZhndyFikv/IMzYJTXvbcq3ExqHdkyl1imiXcRSj4zMXAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUe4sFgHsPqf7A1kmV9y/n1XFOlE8wHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMDYzMzNjNi05NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMS8zMjYxMzA2 NjNhMzgzNTYzMzEzYTM3NjYzOTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEH+TANBgkqhkiG9w0BAQsFAAOCAQEAJbjK Cd2rTFWs+x9rbA3Y6gYvjF3RbkdPY7P6/NV/k/z9Mz/NTXcQm3khPDUNkwWF94js Q6GB0NdCEkA9KkthcPAsWJj1RxpDJ7UgEKaeY/8/g7MXu1ujYtStX5MUkcEVRBTr rGhBwTtv9UdmKadlDD2INYUDXuMopk2UJ1BD1MvGOW5PYzZqHQPtRzdB4uJlUn9x dXuB5cHU8bg286ZjxoaZAemFIy9PRMDWLOQqWge5mqB0QhDIttMQkgUAkkRghRBS tMrBRXkcOZrYdACqFPMNImLJYkUgI7t7uFgqPv5HlCEibSO9bU881pL1fX8ahkdK I7xiC+ga81wETPuLbg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:48 2026 by rpki-client