This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a3930303a3a2f34302d3430203d3e20323130343634.roa File: 326131343a373538333a3930303a3a2f34302d3430203d3e20323130343634.roa (raw, json) Hash identifier: QxJbzcNlut2XGQpfjiGDY/VAY9MqONp8dnDCfca/jtE= Subject key identifier: 7A:9A:99:67:C4:E9:C5:A6:28:EE:A7:10:7E:34:CF:A0:6A:E3:50:3B Certificate issuer: /CN=9B848163C7049122702E8D37941241ED5ADD94D9 Certificate serial: 49B6CB42C5477AFBE1F781DA856294B999978938 Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a3930303a3a2f34302d3430203d3e20323130343634.roa Signing time: Sat 03 Jan 2026 07:49:41 +0000 ROA not before: Sat 03 Jan 2026 07:44:41 +0000 ROA not after: Sat 02 Jan 2027 07:49:41 +0000 asID: 210464 IP address blocks: 2a14:7583:900::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b6:cb:42:c5:47:7a:fb:e1:f7:81:da:85:62:94:b9:99:97:89:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9 Validity Not Before: Jan 3 07:44:41 2026 GMT Not After : Jan 2 07:49:41 2027 GMT Subject: CN=7A9A9967C4E9C5A628EEA7107E34CFA06AE3503B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0f:a4:49:5b:6d:8b:19:bf:ca:64:fe:6c:53: 38:68:af:b6:2a:fb:45:fe:0c:40:67:2e:ab:b8:f9: a3:4d:5c:34:78:f7:da:d6:66:57:63:b2:84:f5:02: aa:d4:65:58:ff:35:f2:b8:9a:c1:59:c4:c1:dc:22: 30:12:be:bb:69:48:19:af:e6:b8:75:b8:a6:d5:77: 88:1a:2e:1b:4d:8e:6f:c1:57:ee:74:6e:3f:c6:a6: 16:5e:37:75:a5:d0:94:37:98:07:fd:8a:06:e3:a7: 1b:be:3e:89:a0:20:01:6d:ea:29:8f:70:74:3e:de: 27:5d:b5:0d:1b:5a:cb:fa:0f:5f:10:4a:38:ac:de: 8d:dc:0d:17:63:dd:02:86:03:3f:dd:09:9a:41:85: 44:6d:91:d2:40:9a:39:57:51:76:39:cc:6d:cc:c7: 4d:35:a7:a2:24:d6:8c:5e:a4:e9:62:9d:8e:1c:c8: 3e:c6:16:9d:21:bc:5a:be:5e:79:f4:3d:a7:43:4c: 0a:2c:6d:a1:b3:a7:37:27:f5:ec:f7:54:c1:fe:63: b2:31:ca:70:59:77:e2:dd:97:3f:0a:63:9b:3a:42: 25:53:62:3e:78:5f:4f:03:39:41:8c:e6:80:fb:6b: 9d:de:73:e1:a1:4a:4b:00:0b:47:b0:b7:02:ac:3e: 79:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9A:99:67:C4:E9:C5:A6:28:EE:A7:10:7E:34:CF:A0:6A:E3:50:3B X509v3 Authority Key Identifier: keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a3930303a3a2f34302d3430203d3e20323130343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:900::/40 Signature Algorithm: sha256WithRSAEncryption a1:56:c5:f5:33:fb:c1:d2:09:46:32:ee:a5:52:bb:ed:b1:33: 53:d1:5b:d3:a2:b1:6e:bf:a3:ab:94:40:4a:6d:18:4b:f7:ef: 53:1f:f9:63:e0:17:23:99:54:64:51:c4:83:83:77:cd:2e:f5: dd:77:f5:7b:a8:c7:ba:76:ae:32:f0:00:10:9a:01:4a:3c:0a: 34:85:c9:c8:a1:eb:de:c9:c2:55:f6:03:48:25:a1:c7:23:87: 77:89:b3:96:5a:a5:19:e8:ea:f2:4d:41:a4:73:6c:ed:1f:64: f5:81:4f:ad:7b:6f:d6:ec:0e:f1:05:e7:a3:d6:1d:46:86:fd: 0b:05:11:d8:ea:b6:a8:75:90:f7:03:d0:bd:0b:25:5e:40:1e: 19:dd:a4:7d:59:3a:ff:1e:3f:96:af:28:76:37:31:be:58:fa: 00:3e:bd:48:b1:c9:94:5d:f2:b5:d9:38:fb:1e:4d:05:f3:27: 7e:50:2e:9a:22:55:2d:46:06:41:a9:23:c3:92:7a:d0:95:13: c3:55:af:98:fa:47:74:ec:33:c4:3c:37:44:c2:45:4c:0e:fd: 3e:1b:87:d4:df:44:62:a9:eb:bc:9c:f8:55:16:2b:34:61:72: 61:dc:48:b9:a5:45:2f:7d:70:bd:68:85:1c:64:d3:0d:d4:94: 80:e0:9f:2a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSbbLQsVHevvh94HahWKUuZmXiTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1 QUREOTREOTAeFw0yNjAxMDMwNzQ0NDFaFw0yNzAxMDIwNzQ5NDFaMDMxMTAvBgNV BAMTKDdBOUE5OTY3QzRFOUM1QTYyOEVFQTcxMDdFMzRDRkEwNkFFMzUwM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUD6RJW22LGb/KZP5sUzhor7Yq +0X+DEBnLqu4+aNNXDR499rWZldjsoT1AqrUZVj/NfK4msFZxMHcIjASvrtpSBmv 5rh1uKbVd4gaLhtNjm/BV+50bj/GphZeN3Wl0JQ3mAf9igbjpxu+PomgIAFt6imP cHQ+3iddtQ0bWsv6D18QSjis3o3cDRdj3QKGAz/dCZpBhURtkdJAmjlXUXY5zG3M x001p6Ik1oxepOlinY4cyD7GFp0hvFq+Xnn0PadDTAosbaGzpzcn9ez3VMH+Y7Ix ynBZd+Ldlz8KY5s6QiVTYj54X08DOUGM5oD7a53ec+GhSksAC0ewtwKsPnmJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUepqZZ8TpxaYo7qcQfjTPoGrjUDswHwYDVR0j BBgwFoAUm4SBY8cEkSJwLo03lBJB7VrdlNkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzMvOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1QUREOTREOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85Qjg0ODE2M0M3MDQ5MTIyNzAyRThEMzc5 NDEyNDFFRDVBREQ5NEQ5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82YzQzZDNhNi03ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvMy8zMjYxMzEz NDNhMzczNTM4MzMzYTM5MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEz MDM0MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYMJMA0GCSqGSIb3DQEBCwUAA4IBAQChVsX1 M/vB0glGMu6lUrvtsTNT0VvTorFuv6OrlEBKbRhL9+9TH/lj4BcjmVRkUcSDg3fN LvXdd/V7qMe6dq4y8AAQmgFKPAo0hcnIoeveycJV9gNIJaHHI4d3ibOWWqUZ6Ory TUGkc2ztH2T1gU+te2/W7A7xBeej1h1Ghv0LBRHY6raodZD3A9C9CyVeQB4Z3aR9 WTr/Hj+Wryh2NzG+WPoAPr1IscmUXfK12Tj7Hk0F8yd+UC6aIlUtRgZBqSPDknrQ lRPDVa+Y+kd07DPEPDdEwkVMDv0+G4fU30Riqeu8nPhVFis0YXJh3Ei5pUUvfXC9 aIUcZNMN1JSA4J8q -----END CERTIFICATE-----Generated at Wed Jan 21 01:16:32 2026 by rpki-client