This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666635303a3a2f34382d3438203d3e20323032333539.roa File: 326131313a663263303a666635303a3a2f34382d3438203d3e20323032333539.roa (raw, json) Hash identifier: CM6b3ajOHdrrPWpgfsa1azZ55Rw1zWzyWazoJb293Z8= Subject key identifier: B5:24:A4:82:22:DD:8A:BE:FD:E5:3A:26:77:9F:48:9E:A3:DE:14:38 Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0 Certificate serial: 6A1C5DDE83278D5B9B4BD4BB08B9471777958A23 Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666635303a3a2f34382d3438203d3e20323032333539.roa Signing time: Wed 31 Dec 2025 16:47:29 +0000 ROA not before: Wed 31 Dec 2025 16:42:29 +0000 ROA not after: Wed 30 Dec 2026 16:47:29 +0000 asID: 202359 IP address blocks: 2a11:f2c0:ff50::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:1c:5d:de:83:27:8d:5b:9b:4b:d4:bb:08:b9:47:17:77:95:8a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0 Validity Not Before: Dec 31 16:42:29 2025 GMT Not After : Dec 30 16:47:29 2026 GMT Subject: CN=B524A48222DD8ABEFDE53A26779F489EA3DE1438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:12:7e:8c:ee:ac:5b:10:8e:3f:05:fb:64:ec: e8:fd:bd:94:08:c3:d3:a2:e2:c9:e2:c6:ec:5a:ff: 04:f0:cf:f4:6f:f6:34:7b:bf:6b:0d:51:9a:28:92: db:4d:c3:bb:a6:ab:3e:e6:cc:55:a3:27:35:0c:1a: 44:92:d8:d7:f9:51:0a:d9:e4:b2:63:bb:60:b1:05: 3e:52:e1:92:84:4d:1f:ff:db:f9:6d:6d:78:ba:c2: 6f:33:bd:b4:e7:a0:66:a3:b1:11:d1:2c:21:51:aa: 82:e5:0b:54:b2:9a:c8:fa:8b:03:fe:1c:b4:16:ea: 0b:e9:44:24:16:3e:0c:6f:c2:80:69:8f:19:49:8e: c6:b7:17:0b:cb:49:df:4f:62:c8:71:10:9e:42:f1: 50:41:50:5a:bc:f5:d6:8d:ba:8a:15:e1:cb:32:32: 4f:2a:2e:82:de:ba:cf:46:00:d1:7d:18:6c:d2:d1: d4:89:23:44:3e:19:c4:2e:38:99:b2:e7:51:7a:af: 63:8c:fd:5e:55:21:12:6c:d0:24:d1:40:4f:00:e1: 22:a3:e7:c3:fc:b5:3a:b0:2c:fc:a2:ff:52:db:73: 24:fe:2b:88:bb:78:b3:ba:b7:a9:1a:da:d7:0a:dc: 92:68:31:d8:4c:60:af:79:1d:02:a1:c7:e3:2e:25: cd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:24:A4:82:22:DD:8A:BE:FD:E5:3A:26:77:9F:48:9E:A3:DE:14:38 X509v3 Authority Key Identifier: keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666635303a3a2f34382d3438203d3e20323032333539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:ff50::/48 Signature Algorithm: sha256WithRSAEncryption 48:bd:2e:6d:62:30:f1:34:23:81:13:65:18:84:a6:21:fa:a3: e2:ae:56:d1:25:19:1b:16:8b:2f:dc:4e:16:c5:03:2e:fe:8d: 29:28:a8:93:88:04:4b:e2:ba:e1:4d:6c:dc:55:7b:c2:cc:5c: 73:8e:ad:ec:7a:bc:cd:dc:b1:21:30:20:f8:c7:64:42:35:90: 88:80:7b:34:7b:61:7a:e4:26:9c:2a:c5:e7:2e:9e:ea:72:9d: 14:db:e3:ef:bf:4e:12:9e:81:f9:bf:ef:29:2d:1f:67:1e:3a: c4:f8:13:5e:a8:8c:ca:bb:ad:36:6e:a8:76:76:29:8d:0f:95: 57:ce:83:dd:2d:58:70:e5:37:3c:ab:0e:7e:5b:84:54:82:41: 34:99:84:f4:44:4f:56:87:13:6b:e2:8c:d4:77:0c:72:3d:6a: d1:c6:27:49:c4:87:89:a7:e8:6f:34:7e:a6:f8:b1:b6:b3:9f: ed:e8:7c:93:d4:ba:d7:03:12:8e:73:f1:1a:fb:5b:23:5f:3e: 50:b4:31:ee:7d:4f:71:4f:da:46:4d:ae:47:b3:e1:7a:63:8f: fa:e8:f6:65:fb:68:fa:d3:22:a4:49:65:d4:e5:43:85:b0:ef: f1:f5:2a:c8:cb:2b:fe:98:3b:a1:57:5e:af:64:42:ed:c2:b4: 14:fc:f9:6e -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUahxd3oMnjVubS9S7CLlHF3eViiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy ODE4YjFkMDAeFw0yNTEyMzExNjQyMjlaFw0yNjEyMzAxNjQ3MjlaMDMxMTAvBgNV BAMTKEI1MjRBNDgyMjJERDhBQkVGREU1M0EyNjc3OUY0ODlFQTNERTE0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOEn6M7qxbEI4/Bftk7Oj9vZQI w9Oi4snixuxa/wTwz/Rv9jR7v2sNUZookttNw7umqz7mzFWjJzUMGkSS2Nf5UQrZ 5LJju2CxBT5S4ZKETR//2/ltbXi6wm8zvbTnoGajsRHRLCFRqoLlC1Symsj6iwP+ HLQW6gvpRCQWPgxvwoBpjxlJjsa3FwvLSd9PYshxEJ5C8VBBUFq89daNuooV4csy Mk8qLoLeus9GANF9GGzS0dSJI0Q+GcQuOJmy51F6r2OM/V5VIRJs0CTRQE8A4SKj 58P8tTqwLPyi/1LbcyT+K4i7eLO6t6ka2tcK3JJoMdhMYK95HQKhx+MuJc3TAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUtSSkgiLdir795Tomd59InqPeFDgwHwYDVR0j BBgwFoAUCDmpPatUTClv+hQ0VoRKiygYsdAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGRlODM3ZmItNjM5MC00MWI1LTgyYTAtZjBkMDJjMDNh MmM2LzcvMDgzOUE5M0RBQjU0NEMyOTZGRkExNDM0NTY4NDRBOEIyODE4QjFEMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NEbXBQYXRVVENsdi1oUTBWb1JLaXln WXNkQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGRlODM3ZmIt NjM5MC00MWI1LTgyYTAtZjBkMDJjMDNhMmM2LzcvMzI2MTMxMzEzYTY2MzI2MzMw M2E2NjY2MzUzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzMjMzMzUzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoR8sD/UDANBgkqhkiG9w0BAQsFAAOCAQEASL0ubWIw8TQjgRNl GISmIfqj4q5W0SUZGxaLL9xOFsUDLv6NKSiok4gES+K64U1s3FV7wsxcc46t7Hq8 zdyxITAg+MdkQjWQiIB7NHtheuQmnCrF5y6e6nKdFNvj779OEp6B+b/vKS0fZx46 xPgTXqiMyrutNm6odnYpjQ+VV86D3S1YcOU3PKsOfluEVIJBNJmE9ERPVocTa+KM 1HcMcj1q0cYnScSHiafobzR+pvixtrOf7eh8k9S61wMSjnPxGvtbI18+ULQx7n1P cU/aRk2uR7PhemOP+uj2Zfto+tMipEll1OVDhbDv8fUqyMsr/pg7oVder2RC7cK0 FPz5bg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:41:37 2026 by rpki-client