This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa File: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (raw, json) Hash identifier: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I= Subject key identifier: 4C:21:58:30:E5:E5:B7:E2:D1:7E:21:2E:1F:49:93:51:2A:1C:BB:D3 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 1BF5BCE3B0632618A64761A09210A7374D3FA389 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa Signing time: Sat 10 Jan 2026 03:50:41 +0000 ROA not before: Sat 10 Jan 2026 03:45:41 +0000 ROA not after: Sat 09 Jan 2027 03:50:41 +0000 asID: 215242 IP address blocks: 2a0f:85c1:7fb::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f5:bc:e3:b0:63:26:18:a6:47:61:a0:92:10:a7:37:4d:3f:a3:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Jan 10 03:45:41 2026 GMT Not After : Jan 9 03:50:41 2027 GMT Subject: CN=4C215830E5E5B7E2D17E212E1F4993512A1CBBD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fe:95:27:33:5e:25:e5:40:2a:fb:0f:00:da: f1:f2:68:ac:8a:eb:ca:2b:07:71:b3:9f:c9:6a:b1: 4d:36:02:62:ff:0a:59:c2:db:b4:0b:70:31:19:3c: b5:ab:1c:c1:a4:15:2c:14:6a:92:f9:c9:0d:c3:5a: ad:13:5c:af:7a:f4:17:14:0c:a0:fe:9d:eb:39:65: 8b:19:20:31:96:30:cc:53:34:2d:d1:17:f6:c8:f1: e7:d2:70:2f:d8:9e:b6:72:ef:70:31:ee:57:56:7c: 0b:c4:a1:c6:85:61:50:a7:e4:d3:c1:f8:5a:55:0f: a8:31:08:e0:02:15:ea:45:80:e7:19:ad:b0:8f:8d: 97:a0:25:78:e2:f8:51:86:cf:24:56:8a:9e:69:f6: e7:f3:4c:0b:4c:f6:af:be:a5:a4:0c:15:b1:ac:d7: c1:d7:8f:b8:0d:ae:04:aa:e0:0e:72:32:35:17:2a: 26:02:28:c9:55:0a:3d:7b:fe:70:ac:e2:c8:68:a3: 56:aa:0a:ed:59:de:58:54:3e:10:fe:bc:1b:6f:e0: 01:3c:76:4d:ec:5a:35:53:a3:71:50:7b:e2:99:74: 1a:a1:97:b9:8d:3a:30:e3:ea:b8:15:ae:b0:f4:c2: 2c:fa:7e:fa:b6:6c:4b:a0:3e:b3:2c:45:a7:cf:11: c7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:21:58:30:E5:E5:B7:E2:D1:7E:21:2E:1F:49:93:51:2A:1C:BB:D3 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:7fb::/48 Signature Algorithm: sha256WithRSAEncryption 70:1f:64:11:05:a6:e1:fd:74:cc:3c:19:af:45:1b:bc:a6:6a: c9:1d:74:8b:4a:cb:7b:a0:18:29:9f:dc:f0:67:77:b6:30:80: 15:a0:5c:b5:49:a3:b5:58:04:a4:7b:16:f6:0e:d5:63:41:e5: 89:88:46:b9:55:e8:6a:e1:a7:00:7c:a8:cd:5b:4f:37:48:61: 8e:29:ca:d1:02:2b:cd:c4:77:61:2f:8c:f3:b8:58:21:a9:96: 39:11:04:7e:a4:63:65:97:15:67:0b:88:83:dc:3e:0f:69:f5: 55:d5:0f:b1:40:d1:d1:c8:c1:c8:c3:46:1b:f3:df:d1:c0:90: 09:04:8d:32:10:e5:66:d0:d3:02:1b:2e:20:59:08:90:6a:5d: 16:39:9d:53:1b:4e:d4:41:35:9e:1b:d6:3b:5f:e7:36:07:d0: c2:cc:ec:9d:a9:ee:62:6d:13:42:d1:b7:85:36:6c:c5:f8:70: de:48:ad:98:72:24:f0:98:18:67:7e:48:d9:70:17:26:8b:12: 5f:82:bb:08:20:66:d7:dd:a0:57:8a:f5:ca:46:d1:e0:1a:71: 8d:2c:c5:85:8a:e2:6f:04:73:49:cf:70:af:e5:f0:35:13:2f: 12:f4:bd:7e:65:f2:3e:c5:8c:22:79:57:32:79:08:40:98:59: e5:5e:ba:b7 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUG/W847BjJhimR2GgkhCnN00/o4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAxMTAwMzQ1NDFaFw0yNzAxMDkwMzUwNDFaMDMxMTAvBgNV BAMTKDRDMjE1ODMwRTVFNUI3RTJEMTdFMjEyRTFGNDk5MzUxMkExQ0JCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo/pUnM14l5UAq+w8A2vHyaKyK 68orB3Gzn8lqsU02AmL/ClnC27QLcDEZPLWrHMGkFSwUapL5yQ3DWq0TXK969BcU DKD+nes5ZYsZIDGWMMxTNC3RF/bI8efScC/YnrZy73Ax7ldWfAvEocaFYVCn5NPB +FpVD6gxCOACFepFgOcZrbCPjZegJXji+FGGzyRWip5p9ufzTAtM9q++paQMFbGs 18HXj7gNrgSq4A5yMjUXKiYCKMlVCj17/nCs4shoo1aqCu1Z3lhUPhD+vBtv4AE8 dk3sWjVTo3FQe+KZdBqhl7mNOjDj6rgVrrD0wiz6fvq2bEugPrMsRafPEcddAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUTCFYMOXlt+LRfiEuH0mTUSocu9MwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMDYzMzNjNi05NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMS8zMjYxMzA2 NjNhMzgzNTYzMzEzYTM3NjY2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEH+zANBgkqhkiG9w0BAQsFAAOCAQEAcB9k EQWm4f10zDwZr0UbvKZqyR10i0rLe6AYKZ/c8Gd3tjCAFaBctUmjtVgEpHsW9g7V Y0HliYhGuVXoauGnAHyozVtPN0hhjinK0QIrzcR3YS+M87hYIamWOREEfqRjZZcV ZwuIg9w+D2n1VdUPsUDR0cjByMNGG/Pf0cCQCQSNMhDlZtDTAhsuIFkIkGpdFjmd UxtO1EE1nhvWO1/nNgfQwszsnanuYm0TQtG3hTZsxfhw3kitmHIk8JgYZ35I2XAX JosSX4K7CCBm192gV4r1ykbR4BpxjSzFhYribwRzSc9wr+XwNRMvEvS9fmXyPsWM InlXMnkIQJhZ5V66tw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:53 2026 by rpki-client