This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa File: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (raw, json) Hash identifier: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI= Subject key identifier: 40:2F:4B:70:85:5F:B3:18:AE:A8:C4:8A:55:E1:6A:E6:90:20:90:57 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 5608E204A5A8FD69769EB97A3F4BF835E8DFA7C4 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa Signing time: Sat 10 Jan 2026 01:50:40 +0000 ROA not before: Sat 10 Jan 2026 01:45:40 +0000 ROA not after: Sat 09 Jan 2027 01:50:40 +0000 asID: 215242 IP address blocks: 2a0f:85c1:7fa::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:08:e2:04:a5:a8:fd:69:76:9e:b9:7a:3f:4b:f8:35:e8:df:a7:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Jan 10 01:45:40 2026 GMT Not After : Jan 9 01:50:40 2027 GMT Subject: CN=402F4B70855FB318AEA8C48A55E16AE690209057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5a:da:4a:f5:25:7e:59:5c:07:22:1c:b6:04: ec:89:95:63:54:41:87:f6:46:25:0f:de:14:e6:05: 06:e7:47:4b:99:be:88:5e:42:8d:de:2a:dc:45:b4: 37:9f:4a:fc:7e:b7:a1:cb:92:be:64:55:c2:e2:ca: 51:83:05:14:ca:77:94:a0:c5:e4:e6:14:50:e0:a6: 89:41:90:d1:1c:d3:03:6c:4d:43:55:af:b8:80:e1: 04:4e:6e:6a:c9:18:5b:72:3a:11:b0:23:55:46:3e: 63:3f:d3:14:f5:2c:38:5a:99:79:23:31:fe:b8:73: f4:3b:db:17:27:b1:f5:05:42:9c:12:a5:f8:1e:77: 60:0b:9e:dd:fe:fa:d0:21:05:10:ae:26:27:e5:c7: 23:97:3e:4c:9a:61:5c:ed:4e:ff:f3:b8:d9:a2:7d: 32:34:29:91:4f:b0:ac:7c:bf:98:7b:42:9d:56:39: ab:4e:62:dc:07:a8:7f:8b:3a:41:4a:e8:8e:d7:08: d0:f1:bc:63:9f:21:e4:0e:9e:c2:fb:04:71:e3:92: 9f:98:7c:80:2f:41:de:5b:b6:d4:7b:8b:51:6c:bf: 51:33:a8:8f:ce:06:84:c5:9f:7b:aa:ee:4d:e9:05: 3b:f6:b5:ae:18:bd:14:3c:cf:86:0a:54:4e:b0:dd: 26:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2F:4B:70:85:5F:B3:18:AE:A8:C4:8A:55:E1:6A:E6:90:20:90:57 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:7fa::/48 Signature Algorithm: sha256WithRSAEncryption 7b:e4:4b:7e:59:74:cc:b2:e5:68:ac:1d:62:db:e4:b9:32:d1: f9:6b:53:22:3c:ea:0d:c3:02:2d:5c:17:97:ea:05:01:3f:53: a9:94:14:4c:e7:5c:58:8a:b5:11:7c:e1:d0:1e:a6:22:36:c2: 44:76:96:ea:dc:92:c9:00:d7:7d:5e:88:c3:cf:e7:6b:28:bb: cf:de:04:c0:0b:ca:1b:d6:dd:36:f4:01:1f:04:bc:fb:e5:7b: ad:48:42:f9:cb:4f:a8:8a:bc:c2:a5:8d:3c:82:a1:d1:1f:0f: 92:23:5b:0b:41:ee:cc:51:ad:1e:53:5f:62:e5:39:0a:cc:52: ed:b4:fb:54:7f:d0:48:a5:69:7b:f8:03:fc:b8:6c:bf:67:bc: 70:b7:d6:9c:af:c8:c5:cb:92:ec:c6:10:54:00:dd:95:34:86: 4c:26:4a:76:d8:63:3a:d2:4a:8d:ad:20:46:1f:c2:c3:1c:c3: ae:4a:fb:af:90:25:b9:fe:60:4e:a2:26:d9:a4:1c:95:4c:ce: 11:53:f6:0a:5b:8b:4f:da:8e:21:0c:59:c3:61:cc:0e:fc:ef: 08:81:18:af:fd:02:90:3c:8d:15:0f:e0:a0:23:e1:5d:73:02: 4a:b4:c1:d5:7a:09:1a:df:37:76:90:68:ac:34:b7:0d:f9:ff: f4:47:7a:b1 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUVgjiBKWo/Wl2nrl6P0v4Nejfp8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAxMTAwMTQ1NDBaFw0yNzAxMDkwMTUwNDBaMDMxMTAvBgNV BAMTKDQwMkY0QjcwODU1RkIzMThBRUE4QzQ4QTU1RTE2QUU2OTAyMDkwNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkWtpK9SV+WVwHIhy2BOyJlWNU QYf2RiUP3hTmBQbnR0uZvoheQo3eKtxFtDefSvx+t6HLkr5kVcLiylGDBRTKd5Sg xeTmFFDgpolBkNEc0wNsTUNVr7iA4QRObmrJGFtyOhGwI1VGPmM/0xT1LDhamXkj Mf64c/Q72xcnsfUFQpwSpfged2ALnt3++tAhBRCuJiflxyOXPkyaYVztTv/zuNmi fTI0KZFPsKx8v5h7Qp1WOatOYtwHqH+LOkFK6I7XCNDxvGOfIeQOnsL7BHHjkp+Y fIAvQd5bttR7i1Fsv1EzqI/OBoTFn3uq7k3pBTv2ta4YvRQ8z4YKVE6w3Sb1AgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUQC9LcIVfsxiuqMSKVeFq5pAgkFcwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMDYzMzNjNi05NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMS8zMjYxMzA2 NjNhMzgzNTYzMzEzYTM3NjY2MTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEH+jANBgkqhkiG9w0BAQsFAAOCAQEAe+RL fll0zLLlaKwdYtvkuTLR+WtTIjzqDcMCLVwXl+oFAT9TqZQUTOdcWIq1EXzh0B6m IjbCRHaW6tySyQDXfV6Iw8/nayi7z94EwAvKG9bdNvQBHwS8++V7rUhC+ctPqIq8 wqWNPIKh0R8PkiNbC0HuzFGtHlNfYuU5CsxS7bT7VH/QSKVpe/gD/Lhsv2e8cLfW nK/IxcuS7MYQVADdlTSGTCZKdthjOtJKja0gRh/CwxzDrkr7r5Aluf5gTqIm2aQc lUzOEVP2CluLT9qOIQxZw2HMDvzvCIEYr/0CkDyNFQ/goCPhXXMCSrTB1XoJGt83 dpBorDS3Dfn/9Ed6sQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:19:51 2026 by rpki-client