This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/323030313a3637633a3563303a3a2f34382d3438203d3e20323135373630.roa File: 323030313a3637633a3563303a3a2f34382d3438203d3e20323135373630.roa (raw, json) Hash identifier: kIRA//Sw9bWgaot2FQ6UbnKhzjLroyGFy2eWLT662TU= Subject key identifier: 86:18:E0:BF:6C:CE:E6:78:92:39:24:B8:B8:A4:C8:D3:CF:C0:82:7F Certificate issuer: /CN=827a5bdf8acaa1e616f6213d1cdcbe187bfe0605 Certificate serial: 6A60DABCBA9404B7A7F0C1967B3F2415643C5829 Authority key identifier: 82:7A:5B:DF:8A:CA:A1:E6:16:F6:21:3D:1C:DC:BE:18:7B:FE:06:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnpb34rKoeYW9iE9HNy-GHv-BgU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/323030313a3637633a3563303a3a2f34382d3438203d3e20323135373630.roa Signing time: Tue 13 Jan 2026 22:37:28 +0000 ROA not before: Tue 13 Jan 2026 22:32:28 +0000 ROA not after: Tue 12 Jan 2027 22:37:28 +0000 asID: 215760 IP address blocks: 2001:67c:5c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.mft rsync://rpki.ripe.net/repository/DEFAULT/gnpb34rKoeYW9iE9HNy-GHv-BgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:60:da:bc:ba:94:04:b7:a7:f0:c1:96:7b:3f:24:15:64:3c:58:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827a5bdf8acaa1e616f6213d1cdcbe187bfe0605 Validity Not Before: Jan 13 22:32:28 2026 GMT Not After : Jan 12 22:37:28 2027 GMT Subject: CN=8618E0BF6CCEE678923924B8B8A4C8D3CFC0827F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2b:06:b6:b3:9d:1c:6a:12:36:00:c8:9c:25: da:b7:84:c2:bc:d7:05:89:dc:cf:4b:bc:d1:c3:b3: ec:c3:86:92:82:72:1f:c1:fe:4e:13:9f:c4:3f:c0: 62:e7:45:39:46:d7:ae:84:84:c4:51:2e:26:6a:1d: b3:4c:36:5d:9d:29:be:1b:5f:b8:80:4c:f8:0d:de: c0:34:be:54:2e:ef:5a:6a:33:9d:1b:b3:1d:4c:cc: 42:41:5f:5d:9d:ee:99:cc:25:93:e3:5b:0e:19:e5: 18:dd:4b:98:6e:39:a5:3a:35:a2:d2:0a:6d:ad:e3: 45:53:94:1e:f9:66:21:20:89:4d:0e:63:e7:65:0a: d9:d1:6d:18:09:d0:55:b9:4a:94:34:d9:7f:20:a6: f0:60:5a:88:8c:f5:74:2d:b8:a0:dc:b8:0f:52:2b: f2:2e:2f:76:d9:44:fb:c1:2e:60:f2:ce:bb:56:8d: 68:01:6d:85:f9:c0:2c:f7:78:bc:62:9d:1f:4a:82: 89:37:e3:a5:93:49:0e:8b:f0:2d:58:3b:47:dd:a1: 89:a9:64:23:07:08:48:06:fc:46:1d:dd:1f:4c:77: 60:49:41:a3:79:6f:f6:f8:fd:c7:28:b5:5d:34:cc: 2b:bd:98:ea:7d:cc:b6:a8:29:3b:a6:65:25:73:71: d9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:18:E0:BF:6C:CE:E6:78:92:39:24:B8:B8:A4:C8:D3:CF:C0:82:7F X509v3 Authority Key Identifier: keyid:82:7A:5B:DF:8A:CA:A1:E6:16:F6:21:3D:1C:DC:BE:18:7B:FE:06:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnpb34rKoeYW9iE9HNy-GHv-BgU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/323030313a3637633a3563303a3a2f34382d3438203d3e20323135373630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:5c0::/48 Signature Algorithm: sha256WithRSAEncryption 98:b6:86:d4:20:1f:3d:64:8b:df:e3:b1:57:40:be:34:5c:28: b9:5a:b0:59:18:26:0c:5e:20:b6:29:b5:51:76:b1:67:59:34: 1f:b2:fc:68:ba:3a:0c:f5:6b:cf:55:97:d2:b5:48:35:da:77: ee:84:7e:34:22:e3:9a:56:28:05:85:d9:d2:6b:c1:be:fa:1d: fd:48:71:23:0c:70:cb:80:e1:cc:7b:1d:25:03:b7:0b:d7:21: cf:75:a6:2d:fa:a7:e7:72:66:5d:04:a2:f2:d6:b2:3d:6c:6f: 91:df:a6:68:d8:20:f8:d3:bc:e7:3e:a1:ec:81:01:f6:2e:17: 2a:72:8a:f8:a2:2a:3b:9c:64:09:27:6c:fd:35:e8:c0:48:9b: 6c:4f:3f:30:c8:ad:74:3c:21:68:43:7a:cf:15:7d:41:5e:dd: bc:32:a6:c3:c5:31:f4:73:f7:1f:3d:ac:e8:95:04:69:6b:4c: d7:75:6e:d9:c5:fa:bc:f8:39:63:4b:ae:5e:c5:b3:c2:ab:ae: db:ff:a1:fc:4c:02:a8:14:2f:ed:92:6d:ed:e0:d1:9f:ba:6e: db:b4:d5:60:1c:12:ed:38:96:55:de:65:36:84:2d:f4:3e:5b: 39:56:aa:72:b3:de:6a:9c:21:8b:87:6d:5b:21:c1:f0:5a:ec: 9f:fc:a9:b0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUamDavLqUBLen8MGWez8kFWQ8WCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI3YTViZGY4YWNhYTFlNjE2ZjYyMTNkMWNkY2JlMTg3 YmZlMDYwNTAeFw0yNjAxMTMyMjMyMjhaFw0yNzAxMTIyMjM3MjhaMDMxMTAvBgNV BAMTKDg2MThFMEJGNkNDRUU2Nzg5MjM5MjRCOEI4QTRDOEQzQ0ZDMDgyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Kwa2s50cahI2AMicJdq3hMK8 1wWJ3M9LvNHDs+zDhpKCch/B/k4Tn8Q/wGLnRTlG166EhMRRLiZqHbNMNl2dKb4b X7iATPgN3sA0vlQu71pqM50bsx1MzEJBX12d7pnMJZPjWw4Z5RjdS5huOaU6NaLS Cm2t40VTlB75ZiEgiU0OY+dlCtnRbRgJ0FW5SpQ02X8gpvBgWoiM9XQtuKDcuA9S K/IuL3bZRPvBLmDyzrtWjWgBbYX5wCz3eLxinR9Kgok346WTSQ6L8C1YO0fdoYmp ZCMHCEgG/EYd3R9Md2BJQaN5b/b4/ccotV00zCu9mOp9zLaoKTumZSVzcdkRAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUhhjgv2zO5niSOSS4uKTI08/Agn8wHwYDVR0j BBgwFoAUgnpb34rKoeYW9iE9HNy+GHv+BgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzAvODI3QTVCREY4QUNBQTFFNjE2RjYyMTNEMUNEQ0JFMTg3QkZFMDYwNS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ducGIzNHJLb2VZVzlpRTlITnktR0h2 LUJnVS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgt MjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2ZDAzLzAvMzIzMDMwMzEzYTM2Mzc2MzNh MzU2MzMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTM1MzczNjMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEGfAXAMA0GCSqGSIb3DQEBCwUAA4IBAQCYtobUIB89ZIvf47FXQL40 XCi5WrBZGCYMXiC2KbVRdrFnWTQfsvxoujoM9WvPVZfStUg12nfuhH40IuOaVigF hdnSa8G++h39SHEjDHDLgOHMex0lA7cL1yHPdaYt+qfncmZdBKLy1rI9bG+R36Zo 2CD407znPqHsgQH2Lhcqcor4oio7nGQJJ2z9NejASJtsTz8wyK10PCFoQ3rPFX1B Xt28MqbDxTH0c/cfPazolQRpa0zXdW7Zxfq8+DljS65exbPCq67b/6H8TAKoFC/t km3t4NGfum7btNVgHBLtOJZV3mU2hC30Pls5Vqpys95qnCGLh21bIcHwWuyf/Kmw -----END CERTIFICATE-----Generated at Sun Jan 25 13:06:15 2026 by rpki-client