This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a3a2f33392d3438203d3e20323130343634.roa File: 326131343a373538333a3a2f33392d3438203d3e20323130343634.roa (raw, json) Hash identifier: vW1fGYMrYSYz3dMO9eci0Q6WugN6uOArURnsJ7uQq7I= Subject key identifier: 0F:91:65:9E:1E:5A:40:F3:50:2C:EC:40:10:E4:E3:4F:73:EC:40:35 Certificate issuer: /CN=9B848163C7049122702E8D37941241ED5ADD94D9 Certificate serial: 219BCEDB305A31D611C153E6A0D13C950B55AC06 Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a3a2f33392d3438203d3e20323130343634.roa Signing time: Sat 03 Jan 2026 07:47:03 +0000 ROA not before: Sat 03 Jan 2026 07:42:03 +0000 ROA not after: Sat 02 Jan 2027 07:47:03 +0000 asID: 210464 IP address blocks: 2a14:7583::/39 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:9b:ce:db:30:5a:31:d6:11:c1:53:e6:a0:d1:3c:95:0b:55:ac:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9 Validity Not Before: Jan 3 07:42:03 2026 GMT Not After : Jan 2 07:47:03 2027 GMT Subject: CN=0F91659E1E5A40F3502CEC4010E4E34F73EC4035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8a:d5:62:45:06:a0:2b:bc:e6:a0:95:a4:df: f6:15:a8:24:e0:cc:bd:3a:c7:39:92:05:75:94:f8: c9:76:59:b5:07:fd:91:58:df:b4:8a:c7:3a:e8:d2: 90:18:01:a3:5e:a1:49:c8:44:dc:54:75:25:58:18: 4b:42:1c:f5:2c:63:52:25:33:0c:f4:f0:30:27:00: 42:e4:00:1f:dc:dd:a5:81:72:aa:66:73:c6:15:02: fa:b5:cc:69:51:51:ba:d8:7e:4b:0e:39:df:80:c6: ff:a7:90:a2:9d:6c:b0:53:9d:fc:ac:81:0d:4d:d8: 54:7d:5e:84:29:bb:57:26:c8:9f:34:ce:db:d4:9b: af:d0:6c:ad:ba:b6:1e:a9:fb:24:e1:7d:9e:90:90: d4:86:b9:46:52:90:e5:03:e6:cc:b3:96:a4:1e:fe: b5:9f:26:db:b1:41:a3:96:91:38:f2:64:35:0c:10: 5e:22:68:af:19:70:39:09:d6:40:7f:45:6c:77:ea: f3:ef:20:77:e2:12:31:ed:11:67:5a:26:07:2a:39: 5e:42:ba:95:2a:99:03:76:f7:21:43:9f:32:4b:46: 28:35:1e:61:bc:3b:a8:24:79:88:86:78:43:b9:c5: 00:3a:5c:3a:0b:1e:27:9a:cb:d9:74:eb:23:7e:7c: ed:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:91:65:9E:1E:5A:40:F3:50:2C:EC:40:10:E4:E3:4F:73:EC:40:35 X509v3 Authority Key Identifier: keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a3a2f33392d3438203d3e20323130343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583::/39 Signature Algorithm: sha256WithRSAEncryption 58:e5:ed:e0:02:2e:6b:6e:d3:5f:21:53:e6:c8:25:5d:1c:01: 17:2a:e2:4a:fb:4a:ec:0c:53:32:18:49:85:d0:3b:2b:bc:1b: 4f:d5:24:66:d0:48:c8:35:17:a5:aa:18:3a:67:4b:7a:06:1b: 7d:87:b6:27:5d:f6:4a:bf:f3:1b:31:38:d1:6f:67:9d:07:fb: 9e:6d:33:bd:63:3a:f7:6b:5a:82:42:f8:72:d3:a0:0a:75:8e: 70:dd:9e:e4:c6:14:1a:94:f1:92:47:48:eb:43:ab:a3:53:61: e7:83:9d:e1:7f:9b:3f:72:e7:3c:fa:b7:26:8b:46:51:e4:58: 9e:6b:ad:6a:30:c5:c1:8a:ce:a5:96:07:2a:13:1e:b3:f5:f4: a5:8c:d9:6c:30:ca:eb:7b:57:cc:5c:35:93:3f:99:c3:0c:98: 45:0f:98:04:f0:1f:d6:d4:9a:35:66:a6:3d:07:a7:d2:d7:66: f0:65:51:63:c2:04:3f:39:be:15:9a:e5:6c:79:82:44:2a:b2: 22:2f:67:59:f5:33:3a:51:6f:98:a4:ff:bf:46:54:7b:a4:8e: 70:c6:54:0b:8e:65:87:d8:c6:49:cc:c4:cf:78:30:8c:cb:77: 7f:d4:9d:a7:58:75:27:a9:3e:68:a3:ad:f1:15:20:4e:a0:66: cf:d4:fb:b9 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUIZvO2zBaMdYRwVPmoNE8lQtVrAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1 QUREOTREOTAeFw0yNjAxMDMwNzQyMDNaFw0yNzAxMDIwNzQ3MDNaMDMxMTAvBgNV BAMTKDBGOTE2NTlFMUU1QTQwRjM1MDJDRUM0MDEwRTRFMzRGNzNFQzQwMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKitViRQagK7zmoJWk3/YVqCTg zL06xzmSBXWU+Ml2WbUH/ZFY37SKxzro0pAYAaNeoUnIRNxUdSVYGEtCHPUsY1Il Mwz08DAnAELkAB/c3aWBcqpmc8YVAvq1zGlRUbrYfksOOd+Axv+nkKKdbLBTnfys gQ1N2FR9XoQpu1cmyJ80ztvUm6/QbK26th6p+yThfZ6QkNSGuUZSkOUD5syzlqQe /rWfJtuxQaOWkTjyZDUMEF4iaK8ZcDkJ1kB/RWx36vPvIHfiEjHtEWdaJgcqOV5C upUqmQN29yFDnzJLRig1HmG8O6gkeYiGeEO5xQA6XDoLHieay9l06yN+fO3HAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUD5Flnh5aQPNQLOxAEOTjT3PsQDUwHwYDVR0j BBgwFoAUm4SBY8cEkSJwLo03lBJB7VrdlNkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzMvOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1QUREOTREOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85Qjg0ODE2M0M3MDQ5MTIyNzAyRThEMzc5 NDEyNDFFRDVBREQ5NEQ5LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUF BzALhoGNcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82YzQzZDNhNi03ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvMy8zMjYxMzEz NDNhMzczNTM4MzMzYTNhMmYzMzM5MmQzNDM4MjAzZDNlMjAzMjMxMzAzNDM2MzQu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MA4EAgACMAgDBgEqFHWDADANBgkqhkiG9w0BAQsFAAOCAQEAWOXt4AIua27TXyFT 5sglXRwBFyriSvtK7AxTMhhJhdA7K7wbT9UkZtBIyDUXpaoYOmdLegYbfYe2J132 Sr/zGzE40W9nnQf7nm0zvWM692tagkL4ctOgCnWOcN2e5MYUGpTxkkdI60Oro1Nh 54Od4X+bP3LnPPq3JotGUeRYnmutajDFwYrOpZYHKhMes/X0pYzZbDDK63tXzFw1 kz+ZwwyYRQ+YBPAf1tSaNWamPQen0tdm8GVRY8IEPzm+FZrlbHmCRCqyIi9nWfUz OlFvmKT/v0ZUe6SOcMZUC45lh9jGSczEz3gwjMt3f9Sdp1h1J6k+aKOt8RUgTqBm z9T7uQ== -----END CERTIFICATE-----Generated at Wed Jan 21 01:16:27 2026 by rpki-client