This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa File: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (raw, json) Hash identifier: WHkf4m6DzfoyrufCoOAxeFwtqFzFGCors6ZbsGaGLa8= Subject key identifier: BD:39:D6:B9:03:E0:99:CD:5C:71:55:53:0D:CC:88:22:AE:B9:3A:8A Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 3FA93BC9696D752CFBF0C6C9FAD0A7CB177C1014 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa Signing time: Wed 24 Dec 2025 15:18:25 +0000 ROA not before: Wed 24 Dec 2025 15:13:25 +0000 ROA not after: Wed 23 Dec 2026 15:18:25 +0000 asID: 401386 IP address blocks: 2a14:7581:2200::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a9:3b:c9:69:6d:75:2c:fb:f0:c6:c9:fa:d0:a7:cb:17:7c:10:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Dec 24 15:13:25 2025 GMT Not After : Dec 23 15:18:25 2026 GMT Subject: CN=BD39D6B903E099CD5C7155530DCC8822AEB93A8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ba:92:c5:db:72:08:d4:42:da:6d:57:6e:a8: f4:96:a9:29:66:48:e8:82:d2:d4:a6:d8:94:2b:fd: cf:29:66:63:b7:6c:72:a6:3d:34:94:5b:7c:42:01: 89:c7:08:b2:e3:87:52:38:c5:da:e2:95:12:0b:1a: ba:2c:71:c4:e4:e7:0c:3b:38:ae:6a:bb:a7:3c:62: 56:32:5c:f5:a4:53:fd:32:05:71:91:aa:44:28:e8: 3e:b1:8a:54:ae:b9:73:59:4f:40:16:56:d2:46:e9: a5:ce:7e:3c:15:76:67:5b:d8:3f:77:5a:f7:f1:76: e1:37:22:1a:41:50:20:a0:cc:1f:4b:5d:8f:5e:ac: 63:ef:ad:83:13:62:f1:47:32:19:0b:dc:9a:8f:74: b5:d5:eb:6a:22:d4:c5:15:55:c8:72:e3:91:4f:6e: 06:e2:73:05:7f:ab:fc:9f:fa:06:cc:3a:9c:8f:73: 21:f1:59:c6:2d:07:79:81:a8:d9:c2:c4:44:41:e0: 81:dc:92:c8:37:cf:81:cf:1f:c4:66:c1:6b:1e:33: 61:19:66:84:eb:9a:c4:0f:db:c2:a3:1f:92:1d:c1: c1:5d:1d:7f:52:d9:63:ba:aa:7f:ff:a1:cb:27:1e: cd:a1:b4:82:05:cc:cb:b5:bf:fb:3a:d3:25:5b:e3: 09:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:39:D6:B9:03:E0:99:CD:5C:71:55:53:0D:CC:88:22:AE:B9:3A:8A X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:2200::/40 Signature Algorithm: sha256WithRSAEncryption 7b:f5:67:28:32:4d:80:ce:53:e0:50:ae:89:40:bf:fb:40:b1: aa:ef:7f:34:5b:a3:c2:1b:9f:a3:77:7a:7f:90:a8:17:13:b0: 83:41:07:46:36:8f:ca:ea:12:36:fd:1e:cf:d5:7f:c8:fc:37: af:20:43:37:b7:d3:46:bf:db:81:52:70:97:6b:9e:e8:eb:70: c6:81:d2:91:06:d7:4d:6d:d5:85:7d:14:ad:e8:7c:d2:08:13: 6d:9f:2b:25:d5:1b:92:31:28:cc:cd:6d:d0:ef:9c:05:38:33: f1:14:2f:24:49:c1:8c:31:3a:73:49:76:63:f8:03:07:a1:ae: 81:16:3c:d2:70:78:bf:24:7b:8c:b2:9e:29:4b:b4:b3:d1:3c: 73:5f:6d:ba:ff:94:ae:fc:be:b7:2d:d6:f9:6e:87:af:30:1e: de:5a:a3:25:99:9e:03:3e:fc:1b:f2:cb:66:87:9c:83:5e:a3: 9d:eb:fe:8b:ab:05:f7:60:f0:dd:fd:3c:ab:47:1c:dd:f5:29: 2e:94:dd:a0:c7:8b:a4:86:70:47:3c:22:d5:35:62:90:1f:99: 2a:e5:75:bf:04:2a:8b:2b:d8:14:c6:2b:9e:65:c3:32:7e:51: 0c:95:1d:78:59:16:7e:75:f9:33:60:ef:ac:0e:bc:bb:b6:fe: b8:80:36:66 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUP6k7yWltdSz78MbJ+tCnyxd8EBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTEyMjQxNTEzMjVaFw0yNjEyMjMxNTE4MjVaMDMxMTAvBgNV BAMTKEJEMzlENkI5MDNFMDk5Q0Q1QzcxNTU1MzBEQ0M4ODIyQUVCOTNBOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPupLF23II1ELabVduqPSWqSlm SOiC0tSm2JQr/c8pZmO3bHKmPTSUW3xCAYnHCLLjh1I4xdrilRILGrosccTk5ww7 OK5qu6c8YlYyXPWkU/0yBXGRqkQo6D6xilSuuXNZT0AWVtJG6aXOfjwVdmdb2D93 WvfxduE3IhpBUCCgzB9LXY9erGPvrYMTYvFHMhkL3JqPdLXV62oi1MUVVchy45FP bgbicwV/q/yf+gbMOpyPcyHxWcYtB3mBqNnCxERB4IHcksg3z4HPH8RmwWseM2EZ ZoTrmsQP28KjH5IdwcFdHX9S2WO6qn//ocsnHs2htIIFzMu1v/s60yVb4wkVAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUvTnWuQPgmc1ccVVTDcyIIq65OoowHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mYWRlYmI5ZC0zM2NjLTQyOWItYWEzNS0xMDYzNGE4YjFkZDQvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMyMzIzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzQz MDMxMzMzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gSIwDQYJKoZIhvcNAQELBQADggEBAHv1 ZygyTYDOU+BQrolAv/tAsarvfzRbo8Ibn6N3en+QqBcTsINBB0Y2j8rqEjb9Hs/V f8j8N68gQze300a/24FScJdrnujrcMaB0pEG101t1YV9FK3ofNIIE22fKyXVG5Ix KMzNbdDvnAU4M/EULyRJwYwxOnNJdmP4AwehroEWPNJweL8ke4yynilLtLPRPHNf bbr/lK78vrct1vluh68wHt5aoyWZngM+/Bvyy2aHnINeo53r/ourBfdg8N39PKtH HN31KS6U3aDHi6SGcEc8ItU1YpAfmSrldb8EKosr2BTGK55lwzJ+UQyVHXhZFn51 +TNg76wOvLu2/riANmY= -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:25 2026 by rpki-client