This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa File: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (raw, json) Hash identifier: DLjQUjmP+DsaW9+BMh56ieI2Ec94mZJVyHTBFU7NtcI= Subject key identifier: B1:EB:6E:30:BE:3B:AC:D2:89:A1:4E:B8:0A:09:15:88:20:86:28:9B Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 7D74FBBC5E535FC13F0E26218EDAFC3D8826D548 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa Signing time: Wed 24 Dec 2025 15:18:26 +0000 ROA not before: Wed 24 Dec 2025 15:13:26 +0000 ROA not after: Wed 23 Dec 2026 15:18:26 +0000 asID: 401386 IP address blocks: 2a14:7581:2100::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:74:fb:bc:5e:53:5f:c1:3f:0e:26:21:8e:da:fc:3d:88:26:d5:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Dec 24 15:13:26 2025 GMT Not After : Dec 23 15:18:26 2026 GMT Subject: CN=B1EB6E30BE3BACD289A14EB80A0915882086289B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e2:ec:d6:70:92:8a:c8:d8:0e:ee:05:51:35: a2:38:31:c7:76:f8:7c:54:41:b3:05:f5:67:2d:31: f9:02:5c:7f:90:a0:25:e9:fd:83:16:db:f4:f2:35: dc:a8:2a:4f:4c:77:74:ab:64:f1:52:44:17:2c:18: 0e:9b:98:f5:ac:01:50:38:dc:48:37:ad:05:80:be: 7c:93:ec:7a:8d:6b:75:05:de:73:49:95:17:83:51: e3:cd:ee:7e:98:24:ee:b4:17:b0:e0:4f:03:90:c8: a1:10:50:10:6a:d7:5e:a0:54:cc:41:10:f6:d8:6a: 03:6c:84:bf:e8:6d:04:04:43:41:aa:ff:65:99:ec: 4f:91:99:c5:27:0f:87:84:6e:35:4a:16:b5:75:4f: c7:2c:ca:cb:91:f0:7a:c2:c3:e0:59:ea:63:33:05: 57:50:54:94:e1:a7:4e:53:c5:3c:98:3b:5c:29:51: ed:1a:a9:85:af:0d:67:5c:1b:fb:4e:e8:fb:ff:ba: 22:02:36:73:03:0c:3f:20:8b:e8:72:32:7c:cd:d7: aa:13:fd:a8:b2:ca:9e:b8:8c:8c:7e:f3:b4:b9:6d: 5f:ec:96:3b:71:3c:21:93:c3:ca:bb:2a:7d:72:e6: dc:6f:d8:13:bb:e4:a9:a6:39:e0:c0:4d:9b:58:ee: 75:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EB:6E:30:BE:3B:AC:D2:89:A1:4E:B8:0A:09:15:88:20:86:28:9B X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:2100::/40 Signature Algorithm: sha256WithRSAEncryption ad:74:64:f4:f5:24:e0:45:9c:34:32:95:03:aa:53:73:8a:de: f5:e4:88:18:e1:02:c1:1c:d5:88:c9:e9:14:06:86:ac:2e:2b: 54:8e:be:d2:b2:21:89:76:aa:c3:20:87:38:72:38:ff:6a:88: 26:03:89:5f:90:6d:5b:1d:b5:39:1f:bc:27:10:59:9a:4d:a5: 72:37:2c:0e:c0:93:6a:e3:7a:7b:80:c0:98:0f:92:8c:2f:4d: e9:be:d6:dd:69:af:b5:23:b6:26:5f:df:ba:db:c3:76:32:c3: 39:00:7c:d9:b5:b6:72:03:04:2b:33:af:95:0f:57:02:76:9f: fa:b2:52:c9:2f:d7:83:d7:bc:b3:c8:98:79:65:57:fd:7e:f8: 61:f9:fb:59:66:9c:f6:d7:6b:83:1b:9a:b7:0e:eb:c2:b0:b9: 59:6b:43:bc:86:29:de:f6:c9:fe:6b:f3:a2:37:36:0d:de:55: 4a:bd:41:54:18:11:44:80:09:40:85:c4:82:24:3a:d6:d3:ed: b2:ec:26:07:9e:5c:f4:f7:3c:82:3b:a6:cc:17:c3:c8:c8:53: 92:0d:b5:37:9b:40:9a:14:22:64:b3:75:d1:a0:31:73:4a:57: 0c:56:71:32:0a:f3:76:d4:ac:e8:4b:03:e5:87:82:c0:00:14: 96:df:74:22 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUfXT7vF5TX8E/DiYhjtr8PYgm1UgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTEyMjQxNTEzMjZaFw0yNjEyMjMxNTE4MjZaMDMxMTAvBgNV BAMTKEIxRUI2RTMwQkUzQkFDRDI4OUExNEVCODBBMDkxNTg4MjA4NjI4OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv4uzWcJKKyNgO7gVRNaI4Mcd2 +HxUQbMF9WctMfkCXH+QoCXp/YMW2/TyNdyoKk9Md3SrZPFSRBcsGA6bmPWsAVA4 3Eg3rQWAvnyT7HqNa3UF3nNJlReDUePN7n6YJO60F7DgTwOQyKEQUBBq116gVMxB EPbYagNshL/obQQEQ0Gq/2WZ7E+RmcUnD4eEbjVKFrV1T8csysuR8HrCw+BZ6mMz BVdQVJThp05TxTyYO1wpUe0aqYWvDWdcG/tO6Pv/uiICNnMDDD8gi+hyMnzN16oT /aiyyp64jIx+87S5bV/sljtxPCGTw8q7Kn1y5txv2BO75KmmOeDATZtY7nWBAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUsetuML47rNKJoU64CgkViCCGKJswHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mYWRlYmI5ZC0zM2NjLTQyOWItYWEzNS0xMDYzNGE4YjFkZDQvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMyMzEzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzQz MDMxMzMzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gSEwDQYJKoZIhvcNAQELBQADggEBAK10 ZPT1JOBFnDQylQOqU3OK3vXkiBjhAsEc1YjJ6RQGhqwuK1SOvtKyIYl2qsMghzhy OP9qiCYDiV+QbVsdtTkfvCcQWZpNpXI3LA7Ak2rjenuAwJgPkowvTem+1t1pr7Uj tiZf37rbw3YywzkAfNm1tnIDBCszr5UPVwJ2n/qyUskv14PXvLPImHllV/1++GH5 +1lmnPbXa4MbmrcO68KwuVlrQ7yGKd72yf5r86I3Ng3eVUq9QVQYEUSACUCFxIIk OtbT7bLsJgeeXPT3PII7pswXw8jIU5INtTebQJoUImSzddGgMXNKVwxWcTIK83bU rOhLA+WHgsAAFJbfdCI= -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:24 2026 by rpki-client