This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a3730303a3a2f34302d3430203d3e20323130343634.roa File: 326131343a373538333a3730303a3a2f34302d3430203d3e20323130343634.roa (raw, json) Hash identifier: txMtmYCSrCjAQUsz3jwIOMVv2WDfMNs3rFGjXdQ1uHI= Subject key identifier: 50:97:38:08:CB:11:58:F7:8C:9E:D6:F2:98:25:C7:A3:82:FB:39:4D Certificate issuer: /CN=9B848163C7049122702E8D37941241ED5ADD94D9 Certificate serial: 2C18E5E5A307183E6B1654AF415467255832CFD3 Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a3730303a3a2f34302d3430203d3e20323130343634.roa Signing time: Sat 03 Jan 2026 07:48:59 +0000 ROA not before: Sat 03 Jan 2026 07:43:59 +0000 ROA not after: Sat 02 Jan 2027 07:48:59 +0000 asID: 210464 IP address blocks: 2a14:7583:700::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:18:e5:e5:a3:07:18:3e:6b:16:54:af:41:54:67:25:58:32:cf:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9 Validity Not Before: Jan 3 07:43:59 2026 GMT Not After : Jan 2 07:48:59 2027 GMT Subject: CN=50973808CB1158F78C9ED6F29825C7A382FB394D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:00:75:ba:ef:70:06:7b:11:ea:68:4d:e9:16: c2:14:9d:2f:0e:83:7b:49:82:57:dd:70:5f:13:d8: 87:c9:4b:49:10:f6:6b:23:13:4c:c8:a6:fc:81:0a: ef:7f:22:2d:90:d0:e4:7d:b6:83:9e:16:15:99:4c: cc:0f:fb:96:59:9a:85:f7:1b:14:cf:c8:68:2b:1f: 92:94:00:60:6e:d5:8d:20:b3:78:36:e8:6e:d4:4e: bc:bb:26:f1:d1:a0:e9:0d:9f:57:33:f9:68:ca:c1: 94:f0:db:e3:76:a1:fb:91:13:6b:ef:31:70:ef:77: e6:95:ab:64:e5:66:11:3c:95:7c:72:84:91:7f:4b: 7e:59:21:a5:6d:ac:51:01:e8:ec:71:50:8e:9d:c1: 8f:29:62:4e:47:86:d0:c0:d2:00:96:3f:24:45:68: 59:dc:d6:65:6f:2e:9c:39:cd:cf:91:a5:c0:89:60: f3:31:f3:ba:a0:e9:a4:de:92:9b:2b:f2:e1:66:70: de:31:80:1a:c8:08:98:cd:a7:af:bf:f8:70:e5:bb: dc:7b:28:5b:97:46:fc:11:29:9f:0d:e4:de:d1:9f: 90:5b:f1:0a:b8:88:b9:81:7c:b4:3e:93:6f:e3:de: 72:d3:98:6b:d1:6a:e2:08:23:22:46:53:a8:ca:71: 85:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:97:38:08:CB:11:58:F7:8C:9E:D6:F2:98:25:C7:A3:82:FB:39:4D X509v3 Authority Key Identifier: keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a3730303a3a2f34302d3430203d3e20323130343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:700::/40 Signature Algorithm: sha256WithRSAEncryption 6d:38:ff:7a:8e:af:9f:99:29:d1:92:b8:19:bb:13:0a:96:8f: 8a:8b:78:bb:d4:62:84:ea:28:10:da:bb:82:0e:d4:6a:26:81: a2:b1:96:dc:db:86:4d:ca:b5:9f:df:ae:0a:6e:2b:9f:81:af: df:00:4c:02:da:46:a9:2f:dc:7a:4d:91:0d:d1:5a:fc:b8:0f: 9e:c2:98:d0:f2:59:bf:71:4f:74:5d:1f:29:d4:bf:ac:0d:d2: 98:f9:c8:3a:32:fb:df:e5:cc:7d:d1:b7:a8:a2:ad:71:26:61: e4:33:93:05:61:62:e8:51:c7:43:c7:86:e8:83:53:00:d5:07: 3e:e4:a3:d4:e3:4f:4c:82:41:83:3d:d8:f3:47:00:eb:1b:2a: a8:8b:69:7d:57:81:9d:82:e6:2d:f9:98:1f:eb:ab:7f:5c:37: c9:15:14:4a:db:bb:2e:b0:78:18:9e:90:ea:5b:82:f0:e7:97: 54:f8:ef:10:a4:f0:d6:6b:4c:30:71:b6:b2:44:66:55:fc:a0: dd:c9:9b:11:3b:a5:6d:99:02:c6:27:86:a0:aa:a0:a6:45:83: e6:b7:89:c8:4b:21:d6:f0:c8:74:5f:ab:20:c7:05:db:b4:0f: 34:23:02:2d:05:c6:18:f4:4d:bb:c2:ba:9d:48:e9:c8:e5:6d: d0:36:98:b3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULBjl5aMHGD5rFlSvQVRnJVgyz9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1 QUREOTREOTAeFw0yNjAxMDMwNzQzNTlaFw0yNzAxMDIwNzQ4NTlaMDMxMTAvBgNV BAMTKDUwOTczODA4Q0IxMTU4Rjc4QzlFRDZGMjk4MjVDN0EzODJGQjM5NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoAHW673AGexHqaE3pFsIUnS8O g3tJglfdcF8T2IfJS0kQ9msjE0zIpvyBCu9/Ii2Q0OR9toOeFhWZTMwP+5ZZmoX3 GxTPyGgrH5KUAGBu1Y0gs3g26G7UTry7JvHRoOkNn1cz+WjKwZTw2+N2ofuRE2vv MXDvd+aVq2TlZhE8lXxyhJF/S35ZIaVtrFEB6OxxUI6dwY8pYk5HhtDA0gCWPyRF aFnc1mVvLpw5zc+RpcCJYPMx87qg6aTekpsr8uFmcN4xgBrICJjNp6+/+HDlu9x7 KFuXRvwRKZ8N5N7Rn5Bb8Qq4iLmBfLQ+k2/j3nLTmGvRauIIIyJGU6jKcYWhAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUUJc4CMsRWPeMntbymCXHo4L7OU0wHwYDVR0j BBgwFoAUm4SBY8cEkSJwLo03lBJB7VrdlNkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzMvOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1QUREOTREOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85Qjg0ODE2M0M3MDQ5MTIyNzAyRThEMzc5 NDEyNDFFRDVBREQ5NEQ5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82YzQzZDNhNi03ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvMy8zMjYxMzEz NDNhMzczNTM4MzMzYTM3MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEz MDM0MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYMHMA0GCSqGSIb3DQEBCwUAA4IBAQBtOP96 jq+fmSnRkrgZuxMKlo+Ki3i71GKE6igQ2ruCDtRqJoGisZbc24ZNyrWf364Kbiuf ga/fAEwC2kapL9x6TZEN0Vr8uA+ewpjQ8lm/cU90XR8p1L+sDdKY+cg6Mvvf5cx9 0beooq1xJmHkM5MFYWLoUcdDx4bog1MA1Qc+5KPU409MgkGDPdjzRwDrGyqoi2l9 V4GdguYt+Zgf66t/XDfJFRRK27susHgYnpDqW4Lw55dU+O8QpPDWa0wwcbayRGZV /KDdyZsRO6VtmQLGJ4agqqCmRYPmt4nISyHW8Mh0X6sgxwXbtA80IwItBcYY9E27 wrqdSOnI5W3QNpiz -----END CERTIFICATE-----Generated at Wed Jan 21 01:18:13 2026 by rpki-client