This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/323030313a3637633a3563303a3a2f34382d3438203d3e203331383938.roa File: 323030313a3637633a3563303a3a2f34382d3438203d3e203331383938.roa (raw, json) Hash identifier: h30Dg7Gto1CP4CxRRR4O2MZbtOznQz3YpLb+FDGoD+A= Subject key identifier: A7:C4:A3:0A:26:C9:9C:92:66:6F:0A:13:FF:33:D1:6D:93:BE:19:31 Certificate issuer: /CN=827a5bdf8acaa1e616f6213d1cdcbe187bfe0605 Certificate serial: 6D6154CCB3CD2C1EA64CA7C746A1A66CF6948922 Authority key identifier: 82:7A:5B:DF:8A:CA:A1:E6:16:F6:21:3D:1C:DC:BE:18:7B:FE:06:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnpb34rKoeYW9iE9HNy-GHv-BgU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/323030313a3637633a3563303a3a2f34382d3438203d3e203331383938.roa Signing time: Tue 13 Jan 2026 22:42:48 +0000 ROA not before: Tue 13 Jan 2026 22:37:48 +0000 ROA not after: Tue 12 Jan 2027 22:42:48 +0000 asID: 31898 IP address blocks: 2001:67c:5c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.mft rsync://rpki.ripe.net/repository/DEFAULT/gnpb34rKoeYW9iE9HNy-GHv-BgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:61:54:cc:b3:cd:2c:1e:a6:4c:a7:c7:46:a1:a6:6c:f6:94:89:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827a5bdf8acaa1e616f6213d1cdcbe187bfe0605 Validity Not Before: Jan 13 22:37:48 2026 GMT Not After : Jan 12 22:42:48 2027 GMT Subject: CN=A7C4A30A26C99C92666F0A13FF33D16D93BE1931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9c:f0:ca:cf:78:0f:d6:a6:9c:26:09:4d:3a: f2:40:cc:60:46:a2:35:b6:54:5f:df:b7:be:7b:21: 61:5f:7f:72:51:1d:9c:28:1c:90:d0:17:8d:80:a2: b7:f2:2a:69:d8:cb:e1:d5:c5:8e:a7:16:ee:e3:07: 1c:d2:df:4d:ea:0b:ae:cf:00:7d:82:4d:35:50:40: c5:d9:9b:e8:68:ae:2d:46:8b:bc:d7:99:e1:1e:9a: 80:73:9d:fd:53:df:32:69:58:fa:37:f5:a4:7f:9a: f3:93:de:5b:28:f2:b6:fc:5c:10:b7:1a:20:db:c1: 49:d1:0c:23:e5:cf:3b:3d:e2:f8:03:14:a6:50:ac: 53:1b:c5:d8:3e:c8:76:35:bd:12:d3:e6:d3:30:4e: 5b:56:3a:d9:94:9d:b8:4a:0a:7e:0a:9a:d1:29:8a: 47:f6:a9:40:46:12:dd:0a:19:eb:d9:7f:a4:bf:42: 8c:0b:62:1e:1d:80:0f:a3:0a:42:12:8e:db:3d:65: 45:a8:32:06:dd:08:d6:07:ca:bb:f0:d7:a9:89:e8: eb:71:59:c0:93:b7:e8:6d:d5:6a:36:f6:7a:96:db: 70:13:1e:c5:40:42:60:2b:85:f2:de:06:0f:a4:4f: 26:e2:39:f7:34:e8:7d:47:e7:62:ed:9d:f5:e4:37: ab:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C4:A3:0A:26:C9:9C:92:66:6F:0A:13:FF:33:D1:6D:93:BE:19:31 X509v3 Authority Key Identifier: keyid:82:7A:5B:DF:8A:CA:A1:E6:16:F6:21:3D:1C:DC:BE:18:7B:FE:06:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnpb34rKoeYW9iE9HNy-GHv-BgU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/323030313a3637633a3563303a3a2f34382d3438203d3e203331383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:5c0::/48 Signature Algorithm: sha256WithRSAEncryption 46:b5:27:ec:ed:04:18:4a:10:c3:0a:78:30:6c:7c:01:59:0c: 4f:14:9c:10:9a:cb:0e:94:ce:73:10:11:f4:56:a2:95:bd:87: 19:ff:2d:e6:46:a5:27:80:8c:c2:cf:19:4c:75:e1:14:13:4d: 8c:a4:90:bd:b2:61:6a:9f:54:2a:04:9d:3c:ce:ae:9b:fd:ba: 53:a2:ce:94:9c:08:f2:f5:67:ae:5e:c8:74:81:c8:5c:6f:e7: e3:47:ad:73:a7:95:5d:75:7f:81:cc:da:f6:b4:86:4b:07:c7: 16:e6:12:76:77:33:70:47:38:14:81:77:0b:60:2b:e3:9e:f4: 78:28:01:03:68:ac:25:ae:39:c5:e9:31:d2:ea:76:7f:33:68: 74:0a:62:b3:db:61:42:2b:9d:d1:b6:c3:16:a2:cd:2d:37:62: 77:60:5b:39:dc:ee:af:1c:89:85:4d:4a:43:03:83:78:28:ee: 57:72:e5:89:2c:31:df:ed:20:ff:b2:9f:e6:18:54:ea:4b:7e: 21:cb:79:72:ec:a0:dc:79:1c:d7:84:05:bc:fb:e1:cf:b4:b0: 5c:c3:70:85:cb:4a:0f:89:fa:f3:9a:20:8b:4f:d5:4b:11:7a: ff:4d:41:65:6a:48:be:f2:9e:44:4f:e3:ef:80:73:09:35:6c: 47:d2:8d:13 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUbWFUzLPNLB6mTKfHRqGmbPaUiSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI3YTViZGY4YWNhYTFlNjE2ZjYyMTNkMWNkY2JlMTg3 YmZlMDYwNTAeFw0yNjAxMTMyMjM3NDhaFw0yNzAxMTIyMjQyNDhaMDMxMTAvBgNV BAMTKEE3QzRBMzBBMjZDOTlDOTI2NjZGMEExM0ZGMzNEMTZEOTNCRTE5MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCenPDKz3gP1qacJglNOvJAzGBG ojW2VF/ft757IWFff3JRHZwoHJDQF42AorfyKmnYy+HVxY6nFu7jBxzS303qC67P AH2CTTVQQMXZm+hori1Gi7zXmeEemoBznf1T3zJpWPo39aR/mvOT3lso8rb8XBC3 GiDbwUnRDCPlzzs94vgDFKZQrFMbxdg+yHY1vRLT5tMwTltWOtmUnbhKCn4KmtEp ikf2qUBGEt0KGevZf6S/QowLYh4dgA+jCkISjts9ZUWoMgbdCNYHyrvw16mJ6Otx WcCTt+ht1Wo29nqW23ATHsVAQmArhfLeBg+kTybiOfc06H1H52LtnfXkN6uJAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUp8SjCibJnJJmbwoT/zPRbZO+GTEwHwYDVR0j BBgwFoAUgnpb34rKoeYW9iE9HNy+GHv+BgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzAvODI3QTVCREY4QUNBQTFFNjE2RjYyMTNEMUNEQ0JFMTg3QkZFMDYwNS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ducGIzNHJLb2VZVzlpRTlITnktR0h2 LUJnVS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgt MjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2ZDAzLzAvMzIzMDMwMzEzYTM2Mzc2MzNh MzU2MzMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzMzMTM4MzkzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACABBnwFwDANBgkqhkiG9w0BAQsFAAOCAQEARrUn7O0EGEoQwwp4MGx8AVkM TxScEJrLDpTOcxAR9Failb2HGf8t5kalJ4CMws8ZTHXhFBNNjKSQvbJhap9UKgSd PM6um/26U6LOlJwI8vVnrl7IdIHIXG/n40etc6eVXXV/gcza9rSGSwfHFuYSdncz cEc4FIF3C2Ar4570eCgBA2isJa45xekx0up2fzNodApis9thQiud0bbDFqLNLTdi d2BbOdzurxyJhU1KQwODeCjuV3LliSwx3+0g/7Kf5hhU6kt+Ict5cuyg3Hkc14QF vPvhz7SwXMNwhctKD4n685ogi0/VSxF6/01BZWpIvvKeRE/j74BzCTVsR9KNEw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:50:15 2026 by rpki-client