This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa File: 326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa (raw, json) Hash identifier: VyqY9yrEjpVeGa7fC0EnkjbydVqfbidJLnALhbzwu3k= Subject key identifier: AC:E4:7B:B7:E5:39:8F:E1:2E:63:41:72:2C:C7:D1:17:91:67:70:F5 Certificate issuer: /CN=140CF895225100CF571959173341D92070FF6E7C Certificate serial: 0822D8C2F4CDDA9BB0D67648B1D001083E071F94 Authority key identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa Signing time: Tue 30 Dec 2025 09:58:11 +0000 ROA not before: Tue 30 Dec 2025 09:53:11 +0000 ROA not after: Tue 29 Dec 2026 09:58:11 +0000 asID: 210352 IP address blocks: 2a14:7586:6200::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 11:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:22:d8:c2:f4:cd:da:9b:b0:d6:76:48:b1:d0:01:08:3e:07:1f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140CF895225100CF571959173341D92070FF6E7C Validity Not Before: Dec 30 09:53:11 2025 GMT Not After : Dec 29 09:58:11 2026 GMT Subject: CN=ACE47BB7E5398FE12E6341722CC7D117916770F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:30:a4:5c:b6:e7:18:f3:0b:5d:54:81:63:7c: b9:63:18:c8:53:65:76:a7:b6:0a:74:96:2c:f3:46: 34:b5:08:32:f3:70:ea:2a:ee:1b:01:e1:11:1d:ee: 7f:80:42:e6:a2:d5:89:2d:2b:6e:72:29:01:bf:36: b6:7f:d6:00:4b:cd:f1:2c:75:82:53:6d:41:b5:6b: cf:f8:e7:e5:0a:13:0c:e0:55:2e:13:68:81:da:4d: 4e:98:76:5d:44:76:61:24:2a:f9:ac:7e:a4:7c:6b: 12:3d:c3:75:9c:c2:26:db:38:a7:bc:d7:6f:31:3c: 63:dc:bf:09:54:5b:23:8c:f4:ac:90:f5:b8:d8:4a: 1f:b4:93:70:bb:79:2a:ce:04:c3:be:03:b5:17:19: 36:e9:7f:5b:29:43:b8:3f:80:96:67:e3:1c:d2:c9: 15:a7:47:4f:64:6e:4a:73:c2:f3:d7:fe:11:98:a2: 2e:38:49:87:85:8e:e4:18:c0:3b:66:98:f7:58:01: f2:40:73:ed:7d:c8:2d:02:c8:66:6f:5e:4b:76:3b: d4:ab:98:20:25:d6:c9:2c:9e:80:27:ab:1a:63:c3: 30:ed:3b:19:73:51:d1:4c:ef:5b:a9:1a:06:c8:cd: db:ce:dd:cd:a1:9b:d4:dc:90:0e:f1:6c:42:6a:65: 33:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E4:7B:B7:E5:39:8F:E1:2E:63:41:72:2C:C7:D1:17:91:67:70:F5 X509v3 Authority Key Identifier: keyid:14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6200::/40 Signature Algorithm: sha256WithRSAEncryption 1b:f4:51:34:e7:fc:8e:ff:74:ac:b8:b3:08:c0:7a:3f:eb:fe: b3:97:e3:92:b0:18:f9:c2:ea:91:a9:f2:31:bc:32:e1:54:a5: 6c:07:df:ac:35:a9:aa:1e:bd:d8:fa:d2:c4:ea:b7:f4:7e:83: 9d:90:4d:76:b1:53:23:fc:12:26:d0:69:ac:0e:df:9f:07:04: 7b:89:28:17:80:f8:7d:a4:ab:41:d0:c3:c2:72:99:dd:68:84: 66:36:d4:8f:63:92:c6:2a:97:a8:6d:18:f7:3d:c2:4a:90:27: 83:6c:e2:72:0b:a7:7b:f9:cf:20:70:e3:b3:96:a0:59:83:9a: 97:1c:8c:66:85:39:d9:b7:49:74:aa:d0:a0:cd:9e:02:d6:bb: 58:44:c5:ec:86:3e:a6:f9:7c:6f:d8:0e:3f:5d:d0:09:df:5c: 95:ca:ee:ac:aa:f2:45:d7:51:da:5d:3f:a6:3b:12:00:34:cc: a5:ae:ff:6d:5f:cf:11:15:8a:05:c0:d8:1a:44:f9:ef:bc:cb: 3a:f9:0d:5e:0f:0f:fb:6a:6a:d6:af:c0:04:19:ff:0c:8e:b1: b0:c4:8f:2a:6a:c6:c5:7b:8e:9c:f6:02:67:11:4b:3e:0d:f1: 3c:9d:3d:f1:04:ac:8b:91:27:e2:22:96:74:5b:e0:4e:ce:95: d5:31:61:f6 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUCCLYwvTN2puw1nZIsdABCD4HH5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3 MEZGNkU3QzAeFw0yNTEyMzAwOTUzMTFaFw0yNjEyMjkwOTU4MTFaMDMxMTAvBgNV BAMTKEFDRTQ3QkI3RTUzOThGRTEyRTYzNDE3MjJDQzdEMTE3OTE2NzcwRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkMKRctucY8wtdVIFjfLljGMhT ZXantgp0lizzRjS1CDLzcOoq7hsB4REd7n+AQuai1YktK25yKQG/NrZ/1gBLzfEs dYJTbUG1a8/45+UKEwzgVS4TaIHaTU6Ydl1EdmEkKvmsfqR8axI9w3WcwibbOKe8 128xPGPcvwlUWyOM9KyQ9bjYSh+0k3C7eSrOBMO+A7UXGTbpf1spQ7g/gJZn4xzS yRWnR09kbkpzwvPX/hGYoi44SYeFjuQYwDtmmPdYAfJAc+19yC0CyGZvXkt2O9Sr mCAl1sksnoAnqxpjwzDtOxlzUdFM71upGgbIzdvO3c2hm9TckA7xbEJqZTOfAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUrOR7t+U5j+EuY0FyLMfRF5FncPUwHwYDVR0j BBgwFoAUFAz4lSJRAM9XGVkXM0HZIHD/bnwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzEvMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3MEZGNkU3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8xNDBDRjg5NTIyNTEwMENGNTcxOTU5MTcz MzQxRDkyMDcwRkY2RTdDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xNTE3YjVkMC0zMzE3LTRiNDktOGVjNS1iZTkwYmM3MDA2MmYvMS8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzIzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MTMwMzMzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1hmIwDQYJKoZIhvcNAQELBQADggEBABv0 UTTn/I7/dKy4swjAej/r/rOX45KwGPnC6pGp8jG8MuFUpWwH36w1qaoevdj60sTq t/R+g52QTXaxUyP8EibQaawO358HBHuJKBeA+H2kq0HQw8Jymd1ohGY21I9jksYq l6htGPc9wkqQJ4Ns4nILp3v5zyBw47OWoFmDmpccjGaFOdm3SXSq0KDNngLWu1hE xeyGPqb5fG/YDj9d0AnfXJXK7qyq8kXXUdpdP6Y7EgA0zKWu/21fzxEVigXA2BpE +e+8yzr5DV4PD/tqatavwAQZ/wyOsbDEjypqxsV7jpz2AmcRSz4N8TydPfEErIuR J+IilnRb4E7OldUxYfY= -----END CERTIFICATE-----Generated at Wed Jan 21 04:23:26 2026 by rpki-client