This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a3a2f34302d3430203d3e203432333636.roa File: 326130313a3666303a3a2f34302d3430203d3e203432333636.roa (raw, json) Hash identifier: ryUQoOajdeDlZjHNfvEXz6+9PE2t5VBN6JG2WlprBz8= Subject key identifier: 2B:FE:36:DB:77:8D:E7:4A:05:7C:17:BC:BF:1F:9C:76:2F:92:5C:ED Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 304F54CD5F7D1623CB320A44269244F587E87BF5 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a3a2f34302d3430203d3e203432333636.roa Signing time: Mon 29 Dec 2025 09:50:41 +0000 ROA not before: Mon 29 Dec 2025 09:45:41 +0000 ROA not after: Mon 28 Dec 2026 09:50:41 +0000 asID: 42366 IP address blocks: 2a01:6f0::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:4f:54:cd:5f:7d:16:23:cb:32:0a:44:26:92:44:f5:87:e8:7b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:41 2025 GMT Not After : Dec 28 09:50:41 2026 GMT Subject: CN=2BFE36DB778DE74A057C17BCBF1F9C762F925CED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:eb:77:97:82:fb:61:24:34:ae:73:b7:ec:b9: 48:3c:a9:c9:d4:1e:0c:22:74:33:2b:79:8a:30:12: f6:eb:62:16:41:88:0c:e0:0d:82:ac:74:0c:66:b2: 27:d2:8c:ac:00:2e:0e:5b:06:69:86:18:15:b5:45: 49:16:ad:b5:0d:ed:e7:17:a4:59:ba:61:58:a8:b5: 35:aa:7d:09:67:3b:19:db:87:8f:db:97:ec:c9:99: 74:ef:9b:37:7d:8d:38:51:3d:1b:0e:8d:66:81:00: eb:12:42:0a:fd:5e:9d:fd:31:96:9c:70:a7:1d:1f: f1:1c:e7:d0:62:f6:a4:c4:e0:fc:05:ec:45:03:cd: 25:13:19:fa:a6:e7:18:1a:77:ac:92:e0:09:8c:7d: 8c:7b:46:d2:ec:4d:92:f5:4e:64:bc:44:94:3f:89: 7a:65:8f:bd:ca:89:b1:4e:d2:75:8d:3d:11:9e:54: dd:f7:79:f5:d4:2d:a4:72:e7:1d:99:93:82:fa:3d: 58:e0:fc:e1:24:d0:2b:8b:a8:6d:39:5e:59:b6:ab: 41:52:9e:a4:29:d3:9b:e7:73:2d:0c:dd:5a:39:b6: 69:25:74:10:a7:8c:94:cc:d9:00:c8:b7:4c:4a:5e: 69:89:fa:29:f8:f1:81:49:9c:31:f2:52:29:f0:2d: e9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FE:36:DB:77:8D:E7:4A:05:7C:17:BC:BF:1F:9C:76:2F:92:5C:ED X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a3a2f34302d3430203d3e203432333636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:6f0::/40 Signature Algorithm: sha256WithRSAEncryption 73:63:65:b8:eb:df:75:99:a2:f9:e4:56:fe:ba:18:5d:14:f9: 18:fd:23:35:e8:9e:58:c3:16:d0:24:f2:36:a9:39:65:a0:23: 85:1c:72:6a:e5:9e:85:a0:b7:ca:04:0b:1a:93:a5:61:db:2c: 0b:2b:88:7d:8e:b7:0f:03:b0:d2:63:3c:e5:56:12:b8:49:08: 45:67:a6:39:f8:b8:7f:a9:24:ee:9a:ce:17:f1:e2:02:65:80: a0:f7:f0:4b:48:9e:ba:99:66:27:c2:12:81:2e:c2:7e:23:f6: 99:d7:06:ab:2b:55:40:28:56:e1:1f:20:51:c1:e0:e3:83:94: 2c:bf:8a:fe:12:98:7e:dc:b0:3d:dd:eb:04:66:3e:71:5f:df: 2a:21:fc:60:85:de:36:bc:33:3a:48:54:d2:ea:6e:9a:c5:2e: 90:84:27:70:c1:83:8b:87:16:f1:3d:09:58:67:55:18:8f:14: e2:e2:6c:1c:5a:82:df:a8:11:99:cb:ff:57:30:ee:d0:57:d3: 66:41:c0:32:db:85:a2:8a:d9:39:6a:03:99:c9:16:19:4f:5b: fb:4c:8c:49:31:63:a6:61:49:10:50:64:f3:7d:36:22:c8:38: 3d:c9:42:60:10:05:41:2b:db:29:e9:ee:c6:62:27:83:31:3e: 64:4f:dc:d2 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUME9UzV99FiPLMgpEJpJE9Yfoe/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDFaFw0yNjEyMjgwOTUwNDFaMDMxMTAvBgNV BAMTKDJCRkUzNkRCNzc4REU3NEEwNTdDMTdCQ0JGMUY5Qzc2MkY5MjVDRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC363eXgvthJDSuc7fsuUg8qcnU HgwidDMreYowEvbrYhZBiAzgDYKsdAxmsifSjKwALg5bBmmGGBW1RUkWrbUN7ecX pFm6YViotTWqfQlnOxnbh4/bl+zJmXTvmzd9jThRPRsOjWaBAOsSQgr9Xp39MZac cKcdH/Ec59Bi9qTE4PwF7EUDzSUTGfqm5xgad6yS4AmMfYx7RtLsTZL1TmS8RJQ/ iXplj73KibFO0nWNPRGeVN33efXULaRy5x2Zk4L6PVjg/OEk0CuLqG05Xlm2q0FS nqQp05vncy0M3Vo5tmkldBCnjJTM2QDIt0xKXmmJ+in48YFJnDHyUinwLel/AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUK/4223eN50oFfBe8vx+cdi+SXO0wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzI2MTMwMzEzYTM2NjYzMDNh M2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM0MzIzMzM2MzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqAQbw ADANBgkqhkiG9w0BAQsFAAOCAQEAc2NluOvfdZmi+eRW/roYXRT5GP0jNeieWMMW 0CTyNqk5ZaAjhRxyauWehaC3ygQLGpOlYdssCyuIfY63DwOw0mM85VYSuEkIRWem Ofi4f6kk7prOF/HiAmWAoPfwS0ieuplmJ8ISgS7CfiP2mdcGqytVQChW4R8gUcHg 44OULL+K/hKYftywPd3rBGY+cV/fKiH8YIXeNrwzOkhU0upumsUukIQncMGDi4cW 8T0JWGdVGI8U4uJsHFqC36gRmcv/VzDu0FfTZkHAMtuFoorZOWoDmckWGU9b+0yM STFjpmFJEFBk8302Isg4PclCYBAFQSvbKenuxmIngzE+ZE/c0g== -----END CERTIFICATE-----Generated at Sun Jan 25 08:57:52 2026 by rpki-client