This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa File: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (raw, json) Hash identifier: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw= Subject key identifier: 0F:70:04:FF:E8:50:F3:86:82:F4:DF:0B:9D:13:9D:C4:AB:78:8B:2F Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 72BFAE9FBBEB32F6A25364955E2505EEF8697D6B Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa Signing time: Thu 15 Jan 2026 19:39:55 +0000 ROA not before: Thu 15 Jan 2026 19:34:55 +0000 ROA not after: Thu 14 Jan 2027 19:39:55 +0000 asID: 212539 IP address blocks: 2a0d:b287:da01::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:bf:ae:9f:bb:eb:32:f6:a2:53:64:95:5e:25:05:ee:f8:69:7d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Jan 15 19:34:55 2026 GMT Not After : Jan 14 19:39:55 2027 GMT Subject: CN=0F7004FFE850F38682F4DF0B9D139DC4AB788B2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d6:10:d5:c8:7f:f4:7a:c7:96:03:52:d5:9f: 5b:40:ab:96:b8:7a:ee:d7:65:45:d7:15:bd:06:cd: 66:32:e9:5e:76:de:17:fc:73:02:ed:fc:5e:86:95: 0a:88:38:52:70:7c:ee:a7:92:e9:27:52:de:0c:ed: 97:96:32:63:26:d6:3c:f7:d3:1b:78:95:ff:42:0f: 87:a3:5b:cc:71:54:70:27:ff:f8:3f:60:57:74:79: c1:57:3d:7d:0d:2b:d7:63:1d:4b:f4:0e:1e:a3:59: 45:c6:2c:59:4f:79:15:60:95:12:50:67:ef:50:78: 44:46:8a:55:6b:9f:0c:b9:60:cd:bc:ea:61:9b:ab: 83:ef:97:4d:41:d3:bb:1a:8b:7d:9a:2b:52:25:03: 5b:f4:85:99:b8:05:10:cb:48:b6:7f:95:e6:a0:15: c5:c3:43:46:90:11:03:7c:dc:fd:8c:ea:af:35:bd: d7:0a:a6:4a:f3:fd:bb:42:47:48:67:58:9b:77:5a: 4a:82:f4:e6:fb:ba:f5:a1:9d:b1:85:0c:aa:56:c6: e3:33:8e:0d:b8:50:bd:6e:5f:fd:2c:bd:82:6f:cd: de:f8:03:0a:c6:85:fc:f1:a9:b0:f9:5b:50:b8:76: d7:30:1d:0c:79:e7:77:34:68:c6:59:94:9c:d9:f3: 80:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:70:04:FF:E8:50:F3:86:82:F4:DF:0B:9D:13:9D:C4:AB:78:8B:2F X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:b287:da01::/48 Signature Algorithm: sha256WithRSAEncryption 5c:75:0d:9f:de:6a:d7:34:1a:a5:9d:c3:ba:a6:8a:c5:0f:f0: 4e:0c:2f:60:af:a9:c1:c0:25:83:7b:b8:67:b3:7c:fb:44:e0: c4:a4:d5:39:98:c1:2c:ed:6b:c2:7c:30:d4:ac:bf:9c:44:95: 37:b2:41:4f:29:05:f5:1c:03:6c:df:52:72:4e:3b:d3:e2:e3: 1f:4a:4a:45:2e:0c:2c:4c:af:e9:07:50:3a:7b:ab:ca:6b:b7: 6e:8f:5d:b4:f0:2c:ce:8c:73:b5:1e:88:e0:19:11:6e:ec:c4: d5:b5:b4:e7:56:3f:f1:e0:7d:64:e9:c4:19:90:67:8b:7d:73: 0e:80:2f:f7:65:ab:fc:71:58:97:bb:8c:b6:43:60:9d:13:44: 8c:6c:bd:15:74:bd:67:af:d1:0c:e1:1d:a2:73:fb:af:7f:08: 1d:f7:5b:9f:de:ed:9e:a6:5d:c1:0b:48:01:01:9c:97:13:4c: 03:40:d5:2d:f4:a3:26:68:3e:ce:a6:7b:04:03:71:05:3d:21: f4:bb:b7:3e:4b:ea:3d:fb:d4:a3:49:58:42:6b:78:ec:1a:26: de:6c:20:5b:58:07:94:6b:d1:fb:a3:44:0b:7a:98:6e:38:f2: b0:3d:58:1b:f2:5d:4a:93:4b:d6:13:19:f7:24:24:56:37:1b: bb:e1:a8:64 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUcr+un7vrMvaiU2SVXiUF7vhpfWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNjAxMTUxOTM0NTVaFw0yNzAxMTQxOTM5NTVaMDMxMTAvBgNV BAMTKDBGNzAwNEZGRTg1MEYzODY4MkY0REYwQjlEMTM5REM0QUI3ODhCMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu1hDVyH/0eseWA1LVn1tAq5a4 eu7XZUXXFb0GzWYy6V523hf8cwLt/F6GlQqIOFJwfO6nkuknUt4M7ZeWMmMm1jz3 0xt4lf9CD4ejW8xxVHAn//g/YFd0ecFXPX0NK9djHUv0Dh6jWUXGLFlPeRVglRJQ Z+9QeERGilVrnwy5YM286mGbq4Pvl01B07sai32aK1IlA1v0hZm4BRDLSLZ/leag FcXDQ0aQEQN83P2M6q81vdcKpkrz/btCR0hnWJt3WkqC9Ob7uvWhnbGFDKpWxuMz jg24UL1uX/0svYJvzd74AwrGhfzxqbD5W1C4dtcwHQx553c0aMZZlJzZ84C9AgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUD3AE/+hQ84aC9N8LnROdxKt4iy8wHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQt NjFjNS00MjkwLThhNmQtNWYyYjkwMjczMjJmLzAvMzI2MTMwNjQzYTYyMzIzODM3 M2E2NDYxMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMjM1MzMzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoNsofaATANBgkqhkiG9w0BAQsFAAOCAQEAXHUNn95q1zQapZ3D uqaKxQ/wTgwvYK+pwcAlg3u4Z7N8+0TgxKTVOZjBLO1rwnww1Ky/nESVN7JBTykF 9RwDbN9Sck470+LjH0pKRS4MLEyv6QdQOnurymu3bo9dtPAszoxztR6I4BkRbuzE 1bW051Y/8eB9ZOnEGZBni31zDoAv92Wr/HFYl7uMtkNgnRNEjGy9FXS9Z6/RDOEd onP7r38IHfdbn97tnqZdwQtIAQGclxNMA0DVLfSjJmg+zqZ7BANxBT0h9Lu3Pkvq PfvUo0lYQmt47Bom3mwgW1gHlGvR+6NEC3qYbjjysD1YG/JdSpNL1hMZ9yQkVjcb u+GoZA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:00:46 2026 by rpki-client