This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa File: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (raw, json) Hash identifier: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw= Subject key identifier: 5F:3D:17:48:21:35:DD:34:F1:7E:4B:2E:3B:A7:8D:6E:88:00:4B:8B Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 28998C734F7DC87CCB3E4A609B22B548404CBD8E Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa Signing time: Mon 29 Dec 2025 23:39:54 +0000 ROA not before: Mon 29 Dec 2025 23:34:54 +0000 ROA not after: Mon 28 Dec 2026 23:39:54 +0000 asID: 47152 IP address blocks: 2a0d:b287:e900::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:99:8c:73:4f:7d:c8:7c:cb:3e:4a:60:9b:22:b5:48:40:4c:bd:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Dec 29 23:34:54 2025 GMT Not After : Dec 28 23:39:54 2026 GMT Subject: CN=5F3D17482135DD34F17E4B2E3BA78D6E88004B8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:71:02:f2:72:bc:60:89:f4:3d:cc:a4:4f:e4: 0d:31:21:33:07:b7:fe:66:50:16:aa:d7:53:0a:b8: db:c8:59:52:8b:ce:12:69:15:77:bf:52:ef:41:d6: 55:4d:43:93:f6:47:22:0f:95:bb:0a:7f:c9:3b:30: 81:c1:96:53:6d:2a:9b:2a:f9:7b:e4:ff:71:eb:50: a3:2d:88:06:e7:97:f1:cc:d2:e3:7b:aa:8e:eb:61: f3:ee:69:f7:5a:d1:6a:e2:30:ca:bd:67:6c:c3:54: e6:06:80:a4:2d:7f:60:82:23:ae:b5:dd:8c:88:2b: 4d:5f:89:4d:3b:be:0c:9d:fd:b9:09:13:78:50:0d: f3:20:0d:fa:14:28:8c:7a:3a:4c:e5:8a:da:eb:d9: 79:25:af:f2:c2:eb:0f:e4:09:c6:3e:6a:5c:f6:f8: 01:39:48:f5:9d:52:31:95:e3:03:b6:97:50:22:9e: c3:e5:ec:c8:28:d0:ed:23:7d:95:d8:d3:b3:75:77: 30:8f:84:32:ad:95:52:00:79:8c:08:b9:b7:9d:da: 9b:cb:0d:52:1e:fe:55:78:16:d1:bd:dd:f1:66:7c: a8:55:f2:d1:2c:18:3c:5c:f4:59:c8:80:84:7d:49: 00:c4:ca:c3:b4:8c:e6:ec:e6:c9:fa:35:a3:52:ad: 53:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3D:17:48:21:35:DD:34:F1:7E:4B:2E:3B:A7:8D:6E:88:00:4B:8B X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:b287:e900::/40 Signature Algorithm: sha256WithRSAEncryption a6:a5:70:61:0f:1f:32:ed:21:e5:4c:d5:4d:65:15:e6:df:d6: 36:03:b3:df:2f:e1:e5:67:88:a9:74:73:2c:49:34:cb:96:52: 94:02:55:9d:91:7b:aa:f6:f3:74:09:18:b5:b9:b3:02:f5:b4: 1d:83:e9:9a:d0:a4:32:a1:a0:89:d2:18:c3:e3:3e:cc:bf:0c: d1:e4:24:8e:6d:2c:df:0d:26:17:a9:77:b2:aa:9b:13:50:2f: 31:fe:1b:f2:23:78:e5:c8:50:a5:c2:ba:79:9f:1c:ac:1b:a8: 5d:00:1a:d3:f0:b7:20:d6:d3:b4:70:b1:c9:74:d2:10:7e:8f: a4:57:fb:4d:e5:80:a8:88:3d:fd:1c:0b:b2:09:07:01:56:e6: ec:be:30:ac:79:67:69:23:63:e8:2d:79:bf:86:b9:7c:bb:36: 17:ca:cd:c5:d9:c3:d4:cc:13:4f:ec:c1:26:49:fd:07:0e:23: fe:36:27:47:90:fc:50:ce:6a:f5:8d:bb:f9:64:3e:fe:86:5a: 30:d8:0e:03:b5:3c:db:35:d6:14:3e:a2:e0:9e:e2:b6:0b:97: 2d:92:2a:f1:31:4f:07:97:63:e9:40:11:d6:85:a9:09:b0:6e: 76:9f:bf:2a:c1:34:47:0d:67:02:14:81:fe:64:f5:cd:08:03: a1:c5:7b:f8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKJmMc099yHzLPkpgmyK1SEBMvY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNTEyMjkyMzM0NTRaFw0yNjEyMjgyMzM5NTRaMDMxMTAvBgNV BAMTKDVGM0QxNzQ4MjEzNUREMzRGMTdFNEIyRTNCQTc4RDZFODgwMDRCOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCocQLycrxgifQ9zKRP5A0xITMH t/5mUBaq11MKuNvIWVKLzhJpFXe/Uu9B1lVNQ5P2RyIPlbsKf8k7MIHBllNtKpsq +Xvk/3HrUKMtiAbnl/HM0uN7qo7rYfPuafda0WriMMq9Z2zDVOYGgKQtf2CCI661 3YyIK01fiU07vgyd/bkJE3hQDfMgDfoUKIx6Okzlitrr2Xklr/LC6w/kCcY+alz2 +AE5SPWdUjGV4wO2l1AinsPl7Mgo0O0jfZXY07N1dzCPhDKtlVIAeYwIubed2pvL DVIe/lV4FtG93fFmfKhV8tEsGDxc9FnIgIR9SQDEysO0jObs5sn6NaNSrVPTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUXz0XSCE13TTxfksuO6eNbogAS4swHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQt NjFjNS00MjkwLThhNmQtNWYyYjkwMjczMjJmLzAvMzI2MTMwNjQzYTYyMzIzODM3 M2E2NTM5MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM0MzczMTM1MzIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAqDbKH6TANBgkqhkiG9w0BAQsFAAOCAQEApqVwYQ8fMu0h5UzVTWUV 5t/WNgOz3y/h5WeIqXRzLEk0y5ZSlAJVnZF7qvbzdAkYtbmzAvW0HYPpmtCkMqGg idIYw+M+zL8M0eQkjm0s3w0mF6l3sqqbE1AvMf4b8iN45chQpcK6eZ8crBuoXQAa 0/C3INbTtHCxyXTSEH6PpFf7TeWAqIg9/RwLsgkHAVbm7L4wrHlnaSNj6C15v4a5 fLs2F8rNxdnD1MwTT+zBJkn9Bw4j/jYnR5D8UM5q9Y27+WQ+/oZaMNgOA7U82zXW FD6i4J7itguXLZIq8TFPB5dj6UAR1oWpCbBudp+/KsE0Rw1nAhSB/mT1zQgDocV7 +A== -----END CERTIFICATE-----Generated at Sun Jan 25 18:59:44 2026 by rpki-client