This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a3230303a3a2f33392d3438203d3e20323130343634.roa File: 326131343a373538333a3230303a3a2f33392d3438203d3e20323130343634.roa (raw, json) Hash identifier: xKU1YO819a7VQTTpF+nB40wFij16/Jgq+O6qShtQ1sQ= Subject key identifier: 37:45:8F:5F:1C:87:34:D5:E6:63:15:D5:0F:EF:00:E1:00:12:90:08 Certificate issuer: /CN=9B848163C7049122702E8D37941241ED5ADD94D9 Certificate serial: 6C2F04F1F196E302D373B3BFE1E0138F81AC97BC Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a3230303a3a2f33392d3438203d3e20323130343634.roa Signing time: Sat 03 Jan 2026 07:48:07 +0000 ROA not before: Sat 03 Jan 2026 07:43:07 +0000 ROA not after: Sat 02 Jan 2027 07:48:07 +0000 asID: 210464 IP address blocks: 2a14:7583:200::/39 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:2f:04:f1:f1:96:e3:02:d3:73:b3:bf:e1:e0:13:8f:81:ac:97:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9 Validity Not Before: Jan 3 07:43:07 2026 GMT Not After : Jan 2 07:48:07 2027 GMT Subject: CN=37458F5F1C8734D5E66315D50FEF00E100129008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:26:fb:0a:81:e0:5e:91:1e:7c:01:6a:97:85: 8b:41:8c:e3:5b:9e:8c:35:ae:a3:1f:e3:69:72:64: d9:cb:b4:2f:31:28:13:c7:a0:06:7e:d5:8a:34:c4: 93:cb:54:e8:dc:a1:68:3c:e7:ca:0d:84:23:20:94: 93:1c:81:63:29:fd:08:26:51:99:51:68:a0:36:ab: 76:eb:d0:79:1e:f1:01:c8:85:c8:f5:b1:3f:f7:31: 89:e8:f2:40:1e:27:95:6a:2a:2a:db:d8:21:6f:cf: 8f:2c:f6:6b:ba:87:86:28:de:eb:99:6c:5b:aa:ac: 10:64:4e:21:05:3f:b8:db:9b:88:27:90:af:ab:a2: 3e:37:80:a6:a6:40:70:0a:ee:a1:da:b4:f8:44:96: 15:29:fa:5a:a0:a3:25:53:25:d8:99:c4:4a:27:6b: 0f:c3:1f:e2:a6:c2:95:5d:c8:d5:90:61:12:d3:5b: 93:a8:9b:65:f3:b2:4f:3a:fb:e2:a6:99:71:93:ca: ac:38:9f:24:63:cb:63:43:20:80:40:f1:d8:7f:5c: 25:44:14:89:8a:64:8c:93:1c:34:da:f0:3a:5e:a3: bc:54:87:32:3b:cb:af:75:1c:e7:99:ea:a8:49:3c: 4e:37:ca:4f:0d:18:ec:6d:09:7c:f2:7c:71:01:0c: 14:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:45:8F:5F:1C:87:34:D5:E6:63:15:D5:0F:EF:00:E1:00:12:90:08 X509v3 Authority Key Identifier: keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a3230303a3a2f33392d3438203d3e20323130343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:200::/39 Signature Algorithm: sha256WithRSAEncryption 5f:b1:c5:a8:1f:61:81:45:d4:c9:ce:d5:a4:77:4a:7c:cc:2d: 38:8a:ec:e3:82:41:dc:40:9c:2e:a7:51:74:f6:21:de:a3:58: d8:a6:c9:4e:1a:f9:40:a6:51:7e:0e:29:b8:53:a0:8f:e0:a8: 43:0d:f3:52:f9:fe:a3:b2:9a:c3:93:6a:0a:3e:f1:bc:11:c6: 48:d9:55:b0:97:f9:87:dd:4b:fd:83:fb:3a:83:59:15:ea:85: 50:18:72:29:1b:e8:0c:3e:e1:51:4c:df:5b:4e:af:13:4b:41: a1:7b:67:58:34:b1:9a:08:69:e6:55:de:c7:2f:a7:63:ae:11: ff:b6:38:3f:df:66:ef:cf:f1:84:cc:69:a6:95:46:95:db:b0: df:bd:4e:ad:1a:2a:b8:04:0e:03:27:d7:71:91:fd:97:14:ba: 9b:ca:dc:fd:79:12:34:3a:be:c8:75:3f:73:ce:3a:a4:7d:f6: 78:38:29:cd:01:4a:4f:b5:df:ed:28:bf:c1:2f:7c:38:9e:52: 39:0d:18:5b:a3:38:ba:f5:36:7b:37:29:3c:7d:21:c0:c6:30: 26:a2:4f:34:fb:d0:f5:c3:e6:1c:61:f9:d9:f5:60:a7:8e:3d: 63:ef:d8:45:f5:e8:30:63:e1:0b:10:f1:14:09:1a:f7:89:74: 3b:76:3c:37 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbC8E8fGW4wLTc7O/4eATj4Gsl7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1 QUREOTREOTAeFw0yNjAxMDMwNzQzMDdaFw0yNzAxMDIwNzQ4MDdaMDMxMTAvBgNV BAMTKDM3NDU4RjVGMUM4NzM0RDVFNjYzMTVENTBGRUYwMEUxMDAxMjkwMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7JvsKgeBekR58AWqXhYtBjONb now1rqMf42lyZNnLtC8xKBPHoAZ+1Yo0xJPLVOjcoWg858oNhCMglJMcgWMp/Qgm UZlRaKA2q3br0Hke8QHIhcj1sT/3MYno8kAeJ5VqKirb2CFvz48s9mu6h4Yo3uuZ bFuqrBBkTiEFP7jbm4gnkK+roj43gKamQHAK7qHatPhElhUp+lqgoyVTJdiZxEon aw/DH+KmwpVdyNWQYRLTW5Oom2Xzsk86++KmmXGTyqw4nyRjy2NDIIBA8dh/XCVE FImKZIyTHDTa8Dpeo7xUhzI7y691HOeZ6qhJPE43yk8NGOxtCXzyfHEBDBT3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUN0WPXxyHNNXmYxXVD+8A4QASkAgwHwYDVR0j BBgwFoAUm4SBY8cEkSJwLo03lBJB7VrdlNkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzMvOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1QUREOTREOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85Qjg0ODE2M0M3MDQ5MTIyNzAyRThEMzc5 NDEyNDFFRDVBREQ5NEQ5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82YzQzZDNhNi03ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvMy8zMjYxMzEz NDNhMzczNTM4MzMzYTMyMzAzMDNhM2EyZjMzMzkyZDM0MzgyMDNkM2UyMDMyMzEz MDM0MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGASoUdYMCMA0GCSqGSIb3DQEBCwUAA4IBAQBfscWo H2GBRdTJztWkd0p8zC04iuzjgkHcQJwup1F09iHeo1jYpslOGvlAplF+Dim4U6CP 4KhDDfNS+f6jsprDk2oKPvG8EcZI2VWwl/mH3Uv9g/s6g1kV6oVQGHIpG+gMPuFR TN9bTq8TS0Ghe2dYNLGaCGnmVd7HL6djrhH/tjg/32bvz/GEzGmmlUaV27DfvU6t Giq4BA4DJ9dxkf2XFLqbytz9eRI0Or7IdT9zzjqkffZ4OCnNAUpPtd/tKL/BL3w4 nlI5DRhbozi69TZ7Nyk8fSHAxjAmok80+9D1w+YcYfnZ9WCnjj1j79hF9egwY+EL EPEUCRr3iXQ7djw3 -----END CERTIFICATE-----Generated at Wed Jan 21 01:17:22 2026 by rpki-client