This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/326131343a373538343a333030333a3a2f34382d3438203d3e20313339323035.roa File: 326131343a373538343a333030333a3a2f34382d3438203d3e20313339323035.roa (raw, json) Hash identifier: 9ZoNZzedjMW/hf781igM4diVUdg7uGMSYFboVTuDa9U= Subject key identifier: 2D:D2:15:A5:0D:D7:69:01:4B:1E:38:F4:C5:55:48:56:58:51:C9:86 Certificate issuer: /CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Certificate serial: 54A56242F3749B5554C9C4C5CCB4C380A168EC3E Authority key identifier: 94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/326131343a373538343a333030333a3a2f34382d3438203d3e20313339323035.roa Signing time: Wed 07 Jan 2026 15:24:19 +0000 ROA not before: Wed 07 Jan 2026 15:19:19 +0000 ROA not after: Wed 06 Jan 2027 15:24:19 +0000 asID: 139205 IP address blocks: 2a14:7584:3003::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 08:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a5:62:42:f3:74:9b:55:54:c9:c4:c5:cc:b4:c3:80:a1:68:ec:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Validity Not Before: Jan 7 15:19:19 2026 GMT Not After : Jan 6 15:24:19 2027 GMT Subject: CN=2DD215A50DD769014B1E38F4C55548565851C986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:39:e0:ad:4c:ac:e8:78:64:6c:fd:7c:1e: 44:37:a2:be:92:f6:31:62:00:61:9a:90:37:e8:8c: 24:6d:c6:fa:b3:8d:b2:31:59:9e:e6:04:ef:62:65: 33:2c:6e:60:72:5c:d7:0c:d4:f1:da:9e:0c:42:87: c9:23:ab:6c:f3:34:5f:e6:e5:c0:48:33:45:db:0c: eb:ca:1b:a0:f5:ff:df:08:1a:39:a8:47:a5:4f:c2: 80:93:49:ee:49:43:69:2d:07:24:95:9e:b9:e5:d9: a7:8f:42:26:a9:9e:98:76:f0:9b:af:91:3e:cd:7f: 9c:87:52:af:1c:f1:4c:aa:1b:64:43:26:73:29:8e: 7a:42:dd:af:df:c3:b4:b3:07:9e:d0:72:0e:13:d1: a3:b6:1a:6e:1c:a0:87:f1:03:b6:21:f3:26:12:76: 33:95:d0:11:4f:9e:82:43:2c:fa:a9:08:2b:29:bb: 4b:a7:9f:aa:d8:1a:2a:6a:82:7b:00:9a:3a:42:81: f4:56:21:da:70:18:ce:88:3b:b2:47:f3:7b:9c:d2: 47:fa:32:dc:c5:34:12:fa:7c:5b:fc:bb:a1:9d:d6: 7a:0c:a3:43:2b:bd:da:8f:04:03:de:66:18:46:2c: ac:6b:12:d5:88:3b:4a:0f:01:27:dc:df:1f:95:24: ec:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D2:15:A5:0D:D7:69:01:4B:1E:38:F4:C5:55:48:56:58:51:C9:86 X509v3 Authority Key Identifier: keyid:94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/326131343a373538343a333030333a3a2f34382d3438203d3e20313339323035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:3003::/48 Signature Algorithm: sha256WithRSAEncryption 14:4b:d3:4e:4f:7c:9b:68:ca:65:86:46:fa:e5:ee:56:aa:f2: e3:c5:c6:89:e3:70:8c:2f:01:22:63:fc:8c:35:da:2a:46:e9: c3:0e:8f:f0:e6:b1:39:99:b5:df:bd:43:9d:65:23:a5:fc:0b: 8e:77:29:7c:51:e2:ef:4a:0d:71:cc:b1:6e:2c:fa:5e:36:4e: 22:0c:fe:2b:fd:a3:b5:0e:00:73:f0:75:be:8a:72:84:01:b6: 1e:cc:08:2c:f4:4c:5f:35:c2:64:f3:d8:51:2e:a4:e2:6c:b5: fc:70:38:c5:97:fd:66:e0:2f:2b:2b:04:55:ee:96:d4:71:7f: a4:4f:e4:83:eb:9e:e5:a0:41:c7:a3:3c:6b:33:c8:e9:03:16: 8d:ed:18:37:f5:dd:ba:be:7a:d0:53:45:99:59:9e:65:23:dd: fb:b9:45:6a:28:56:e4:71:f8:11:da:fa:9a:6b:16:0c:f3:72: c3:44:52:77:7e:1b:41:a8:b6:fc:85:75:56:6c:ec:26:18:86: 19:d6:9b:20:7a:20:c2:92:88:dd:19:f8:36:0c:d0:b3:b2:cc: 07:4e:a7:ae:7b:5b:45:9f:c2:12:48:6d:14:6b:33:2a:7e:d6: 58:ba:ce:e9:1d:39:64:aa:4d:a3:e7:c9:38:e9:8c:9f:c3:75: b0:c2:a0:ba -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUVKViQvN0m1VUycTFzLTDgKFo7D4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkx QjI3QUQ5QzAeFw0yNjAxMDcxNTE5MTlaFw0yNzAxMDYxNTI0MTlaMDMxMTAvBgNV BAMTKDJERDIxNUE1MERENzY5MDE0QjFFMzhGNEM1NTU0ODU2NTg1MUM5ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+BDngrUys6HhkbP18HkQ3or6S 9jFiAGGakDfojCRtxvqzjbIxWZ7mBO9iZTMsbmByXNcM1PHangxCh8kjq2zzNF/m 5cBIM0XbDOvKG6D1/98IGjmoR6VPwoCTSe5JQ2ktBySVnrnl2aePQiapnph28Juv kT7Nf5yHUq8c8UyqG2RDJnMpjnpC3a/fw7SzB57Qcg4T0aO2Gm4coIfxA7Yh8yYS djOV0BFPnoJDLPqpCCspu0unn6rYGipqgnsAmjpCgfRWIdpwGM6IO7JH83uc0kf6 MtzFNBL6fFv8u6Gd1noMo0MrvdqPBAPeZhhGLKxrEtWIO0oPASfc3x+VJOzJAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQULdIVpQ3XaQFLHjj0xVVIVlhRyYYwHwYDVR0j BBgwFoAUlG3hXTS+riTinqFqP+HmWRsnrZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzcvOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkxQjI3QUQ5Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85NDZERTE1RDM0QkVBRTI0RTI5RUExNkEz RkUxRTY1OTFCMjdBRDlDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xYmQzMDZiNC1lNWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvNy8zMjYxMzEz NDNhMzczNTM4MzQzYTMzMzAzMDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz MzM5MzIzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hDADMA0GCSqGSIb3DQEBCwUAA4IBAQAU S9NOT3ybaMplhkb65e5WqvLjxcaJ43CMLwEiY/yMNdoqRunDDo/w5rE5mbXfvUOd ZSOl/AuOdyl8UeLvSg1xzLFuLPpeNk4iDP4r/aO1DgBz8HW+inKEAbYezAgs9Exf NcJk89hRLqTibLX8cDjFl/1m4C8rKwRV7pbUcX+kT+SD657loEHHozxrM8jpAxaN 7Rg39d26vnrQU0WZWZ5lI937uUVqKFbkcfgR2vqaaxYM83LDRFJ3fhtBqLb8hXVW bOwmGIYZ1psgeiDCkojdGfg2DNCzsswHTqeue1tFn8ISSG0UazMqftZYus7pHTlk qk2j58k46Yyfw3WwwqC6 -----END CERTIFICATE-----Generated at Sat Jan 10 22:07:07 2026 by rpki-client