This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a3830303a3a2f34302d3430203d3e20323130343634.roa File: 326131343a373538333a3830303a3a2f34302d3430203d3e20323130343634.roa (raw, json) Hash identifier: 6HRIzRgoHlrwDg0x+dQ+QTPqwbR2buVOX5nau8igN3A= Subject key identifier: 6B:D5:78:76:2D:46:62:2C:DB:1C:5A:11:2B:3C:65:80:C7:86:DF:1E Certificate issuer: /CN=9B848163C7049122702E8D37941241ED5ADD94D9 Certificate serial: 45675EB88CB972BF014EAF6C60A2CAFD91EA93AC Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a3830303a3a2f34302d3430203d3e20323130343634.roa Signing time: Sat 03 Jan 2026 07:49:18 +0000 ROA not before: Sat 03 Jan 2026 07:44:18 +0000 ROA not after: Sat 02 Jan 2027 07:49:18 +0000 asID: 210464 IP address blocks: 2a14:7583:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:67:5e:b8:8c:b9:72:bf:01:4e:af:6c:60:a2:ca:fd:91:ea:93:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9 Validity Not Before: Jan 3 07:44:18 2026 GMT Not After : Jan 2 07:49:18 2027 GMT Subject: CN=6BD578762D46622CDB1C5A112B3C6580C786DF1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6d:68:a7:8e:5f:00:79:eb:47:43:bd:6d:4c: 1f:2b:d4:ca:71:6a:14:83:07:82:5d:35:8e:66:82: f8:69:6b:b1:7c:37:11:65:13:93:be:d9:59:57:81: b7:6b:45:33:a3:bf:27:c9:41:fe:56:c2:d5:d8:3a: 4b:91:ef:8e:89:ec:20:28:64:a2:d8:00:c1:be:84: aa:a5:18:43:41:c7:d0:39:23:4f:5c:dd:61:29:8a: 6d:ec:cc:ba:46:da:77:ed:88:7a:b7:93:e0:de:07: 66:4b:16:f5:d3:5c:96:cf:c8:81:cc:52:f0:42:16: c1:d2:9f:de:44:17:9d:e5:ad:7a:8b:b6:2a:b0:48: 79:5e:a6:12:84:50:e3:55:36:c4:2b:5d:bf:e5:82: 7e:79:7b:10:69:78:d8:d6:aa:5b:c3:f0:9c:16:b3: 52:89:af:dc:2d:01:4e:26:3a:8a:2e:84:aa:29:b6: 66:c4:dd:74:86:5b:dd:0d:1a:a1:df:0c:0d:bf:57: a7:92:a3:e8:bf:ac:7e:f7:87:46:88:0a:12:eb:64: 01:f1:04:90:16:d8:44:4d:20:e9:4b:4c:ef:f0:f6: eb:51:30:d5:11:4d:21:8f:c4:e8:a2:bb:bd:9e:e7: 6e:37:ae:9b:98:dd:13:06:1c:e3:6b:01:d3:e3:fd: e0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D5:78:76:2D:46:62:2C:DB:1C:5A:11:2B:3C:65:80:C7:86:DF:1E X509v3 Authority Key Identifier: keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a3830303a3a2f34302d3430203d3e20323130343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:800::/40 Signature Algorithm: sha256WithRSAEncryption 41:71:c2:5d:e4:20:d5:9e:43:6f:88:4a:f1:72:9a:01:5b:fa: 1a:37:00:0f:47:2f:72:e3:e6:b3:66:9e:04:2f:b7:e1:f3:6c: b0:62:0c:6c:4c:b2:b6:bb:70:a4:77:ea:d0:a6:af:41:8f:07: 36:86:40:bf:e3:d5:49:a6:73:25:5f:ae:f5:57:68:87:7d:4c: f9:98:08:e8:37:db:85:3e:a0:37:85:2f:2d:e5:68:49:75:97: 96:6b:ae:23:df:a8:90:8d:41:90:22:30:4c:dd:f8:37:d7:03: 5c:85:63:b7:77:4d:55:1f:0b:2c:78:1f:3c:49:21:82:f3:7c: 1a:2a:8e:18:81:49:59:15:a5:5a:be:59:97:83:cf:af:29:80: 50:4f:59:d1:39:3f:96:5b:0e:0d:93:69:d3:bd:d9:03:1c:08: 9e:db:ad:e5:94:c3:18:5f:00:e9:59:75:12:e8:fd:83:34:e6: c5:55:5b:b4:5e:6c:85:00:f4:5e:56:12:c5:40:f7:c3:c9:77: 66:f9:0b:51:11:83:b4:78:41:b1:5e:6c:ca:c9:b3:79:73:6a: fe:89:14:48:8e:65:f8:95:e1:ae:d5:f0:36:c8:0d:9c:56:4c: 70:99:d0:51:e8:98:35:88:8e:f3:ef:b4:aa:47:1a:3b:d6:f1: b8:6f:81:4a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURWdeuIy5cr8BTq9sYKLK/ZHqk6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1 QUREOTREOTAeFw0yNjAxMDMwNzQ0MThaFw0yNzAxMDIwNzQ5MThaMDMxMTAvBgNV BAMTKDZCRDU3ODc2MkQ0NjYyMkNEQjFDNUExMTJCM0M2NTgwQzc4NkRGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzbWinjl8AeetHQ71tTB8r1Mpx ahSDB4JdNY5mgvhpa7F8NxFlE5O+2VlXgbdrRTOjvyfJQf5WwtXYOkuR746J7CAo ZKLYAMG+hKqlGENBx9A5I09c3WEpim3szLpG2nftiHq3k+DeB2ZLFvXTXJbPyIHM UvBCFsHSn95EF53lrXqLtiqwSHlephKEUONVNsQrXb/lgn55exBpeNjWqlvD8JwW s1KJr9wtAU4mOoouhKoptmbE3XSGW90NGqHfDA2/V6eSo+i/rH73h0aIChLrZAHx BJAW2ERNIOlLTO/w9utRMNURTSGPxOiiu72e5243rpuY3RMGHONrAdPj/eBfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUa9V4di1GYizbHFoRKzxlgMeG3x4wHwYDVR0j BBgwFoAUm4SBY8cEkSJwLo03lBJB7VrdlNkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzMvOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1QUREOTREOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85Qjg0ODE2M0M3MDQ5MTIyNzAyRThEMzc5 NDEyNDFFRDVBREQ5NEQ5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82YzQzZDNhNi03ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvMy8zMjYxMzEz NDNhMzczNTM4MzMzYTM4MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEz MDM0MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYMIMA0GCSqGSIb3DQEBCwUAA4IBAQBBccJd 5CDVnkNviErxcpoBW/oaNwAPRy9y4+azZp4EL7fh82ywYgxsTLK2u3Ckd+rQpq9B jwc2hkC/49VJpnMlX671V2iHfUz5mAjoN9uFPqA3hS8t5WhJdZeWa64j36iQjUGQ IjBM3fg31wNchWO3d01VHwsseB88SSGC83waKo4YgUlZFaVavlmXg8+vKYBQT1nR OT+WWw4Nk2nTvdkDHAie263llMMYXwDpWXUS6P2DNObFVVu0XmyFAPReVhLFQPfD yXdm+QtREYO0eEGxXmzKybN5c2r+iRRIjmX4leGu1fA2yA2cVkxwmdBR6Jg1iI7z 77SqRxo71vG4b4FK -----END CERTIFICATE-----Generated at Wed Jan 21 01:16:31 2026 by rpki-client