This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a3266663a3a2f34382d3438203d3e203432333636.roa File: 326130313a3666303a3266663a3a2f34382d3438203d3e203432333636.roa (raw, json) Hash identifier: akkPFeWIfqnsRR4fUJx74bHVqTEc6Xp4ZSlFtkPS/Dg= Subject key identifier: 8A:97:A2:43:21:CC:FC:82:5B:2B:DA:F6:34:80:1D:F1:0D:DD:00:8A Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 7E39742C22C1FF88020DF9F43888DC103CA7AC58 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a3266663a3a2f34382d3438203d3e203432333636.roa Signing time: Thu 22 Jan 2026 09:23:10 +0000 ROA not before: Thu 22 Jan 2026 09:18:10 +0000 ROA not after: Thu 21 Jan 2027 09:23:10 +0000 asID: 42366 IP address blocks: 2a01:6f0:2ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:39:74:2c:22:c1:ff:88:02:0d:f9:f4:38:88:dc:10:3c:a7:ac:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 22 09:18:10 2026 GMT Not After : Jan 21 09:23:10 2027 GMT Subject: CN=8A97A24321CCFC825B2BDAF634801DF10DDD008A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:67:c4:cd:e6:de:80:0b:92:3f:14:ae:91:89: 94:9d:72:cd:36:fe:99:f5:e8:ce:4a:2c:69:eb:a4: 91:bb:0d:b7:e2:75:a6:43:32:00:ab:13:27:2b:03: 14:0f:f1:bb:73:92:b0:9a:1a:18:ff:f4:84:4c:d0: f7:5b:1a:b6:a1:93:e0:d6:6f:77:1a:d7:9d:15:23: 91:8f:41:a6:94:50:6c:56:9a:9d:27:eb:4a:ce:ba: 5d:fc:f1:c1:ac:10:97:f6:90:b0:f6:1b:10:45:05: 4d:54:10:10:b8:2c:e7:51:40:82:85:38:a4:3b:c8: 38:4a:ea:b1:90:39:37:3a:b5:5a:c0:6e:6f:29:fd: 4f:be:fa:2e:9e:fe:47:6c:27:81:6d:57:7e:65:06: 0d:07:0e:c2:b9:c2:a1:02:0f:c5:32:b7:47:b4:e6: 47:2f:51:a8:1e:7a:2c:97:07:1b:a9:a4:43:58:d5: 0f:78:eb:f2:8e:b3:57:14:de:f0:ce:cf:40:92:05: 0c:4b:22:b7:9c:51:41:f4:a7:25:f6:ac:d4:53:5a: 05:66:70:ad:9a:b8:4d:5a:96:a6:d3:e9:e6:81:02: d8:34:57:e1:22:a7:c5:b7:12:c3:15:aa:6b:07:61: f2:62:c7:83:03:23:e4:49:26:c3:62:6b:49:2a:de: 9f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:97:A2:43:21:CC:FC:82:5B:2B:DA:F6:34:80:1D:F1:0D:DD:00:8A X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a3266663a3a2f34382d3438203d3e203432333636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:6f0:2ff::/48 Signature Algorithm: sha256WithRSAEncryption 9c:2a:a3:31:93:f5:b0:db:a3:e6:56:06:b8:6b:e6:9e:9f:8c: c5:2d:0a:5d:db:9a:4a:31:94:e6:01:ba:85:a9:13:cc:5f:ab: ae:db:4f:ce:5b:5c:72:db:84:1d:b4:31:57:8a:0d:08:8f:05: 3c:eb:78:5e:ce:01:3b:55:b9:9b:60:c8:b0:cb:62:75:da:ab: b3:dc:4e:e2:81:9b:7c:28:8f:da:19:d5:47:00:25:c4:15:10: 2e:0d:39:ea:a4:36:28:93:4b:ae:d9:7d:dd:6c:50:39:84:15: 0b:f7:0b:ea:f7:c9:15:25:27:cc:97:40:dc:e4:9c:60:7a:e1: 89:ef:a2:3f:d5:18:0a:a4:c3:ab:fa:38:d9:28:ab:c3:b6:60: 01:22:ae:51:9c:ef:39:f9:36:07:11:6f:bd:b4:80:84:1f:23: ee:82:f6:c2:d3:75:10:4f:48:82:bf:7d:28:4f:e0:1a:73:fe: 0a:d0:ba:b2:a4:e5:cb:4d:7f:13:37:0c:23:fa:46:ca:21:39: c8:8a:53:da:25:b7:31:94:b0:d6:5c:9b:29:e2:11:05:76:dc: b1:da:cf:1a:2b:58:ce:52:bd:c9:a8:73:de:bc:fa:c9:10:2d: 1d:5c:d7:02:88:11:1b:3c:1e:f9:d3:e9:5e:e9:6e:70:74:79: fc:ba:90:c4 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUfjl0LCLB/4gCDfn0OIjcEDynrFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMjIwOTE4MTBaFw0yNzAxMjEwOTIzMTBaMDMxMTAvBgNV BAMTKDhBOTdBMjQzMjFDQ0ZDODI1QjJCREFGNjM0ODAxREYxMERERDAwOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Z8TN5t6AC5I/FK6RiZSdcs02 /pn16M5KLGnrpJG7DbfidaZDMgCrEycrAxQP8btzkrCaGhj/9IRM0PdbGrahk+DW b3ca150VI5GPQaaUUGxWmp0n60rOul388cGsEJf2kLD2GxBFBU1UEBC4LOdRQIKF OKQ7yDhK6rGQOTc6tVrAbm8p/U+++i6e/kdsJ4FtV35lBg0HDsK5wqECD8Uyt0e0 5kcvUageeiyXBxuppENY1Q946/KOs1cU3vDOz0CSBQxLIrecUUH0pyX2rNRTWgVm cK2auE1alqbT6eaBAtg0V+Eip8W3EsMVqmsHYfJix4MDI+RJJsNia0kq3p95AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUipeiQyHM/IJbK9r2NIAd8Q3dAIowHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzI2MTMwMzEzYTM2NjYzMDNh MzI2NjY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzQzMjMzMzYzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACoBBvAC/zANBgkqhkiG9w0BAQsFAAOCAQEAnCqjMZP1sNuj5lYGuGvmnp+M xS0KXduaSjGU5gG6hakTzF+rrttPzltcctuEHbQxV4oNCI8FPOt4Xs4BO1W5m2DI sMtiddqrs9xO4oGbfCiP2hnVRwAlxBUQLg056qQ2KJNLrtl93WxQOYQVC/cL6vfJ FSUnzJdA3OScYHrhie+iP9UYCqTDq/o42Sirw7ZgASKuUZzvOfk2BxFvvbSAhB8j 7oL2wtN1EE9Igr99KE/gGnP+CtC6sqTly01/EzcMI/pGyiE5yIpT2iW3MZSw1lyb KeIRBXbcsdrPGitYzlK9yahz3rz6yRAtHVzXAogRGzwe+dPpXulucHR5/LqQxA== -----END CERTIFICATE-----Generated at Sun Jan 25 08:59:08 2026 by rpki-client