This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa File: 326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa (raw, json) Hash identifier: aFhwRSDU+t/TQvGHJmF4CgULB5DA6EuNIybmGsacNPY= Subject key identifier: 6F:8A:C8:BC:A5:89:A7:55:EA:1C:FE:96:E4:5F:B8:34:FF:76:7A:1B Certificate issuer: /CN=9B848163C7049122702E8D37941241ED5ADD94D9 Certificate serial: 49A55D3F533D04AA1F13BA59ECEBAD6E75684DC8 Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa Signing time: Sat 03 Jan 2026 07:50:10 +0000 ROA not before: Sat 03 Jan 2026 07:45:10 +0000 ROA not after: Sat 02 Jan 2027 07:50:10 +0000 asID: 210464 IP address blocks: 2a14:7583:a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a5:5d:3f:53:3d:04:aa:1f:13:ba:59:ec:eb:ad:6e:75:68:4d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9 Validity Not Before: Jan 3 07:45:10 2026 GMT Not After : Jan 2 07:50:10 2027 GMT Subject: CN=6F8AC8BCA589A755EA1CFE96E45FB834FF767A1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:ea:9a:c9:4b:24:dc:3a:c2:28:d4:34:62: 6f:70:fc:9a:d9:6c:25:8b:80:dc:47:90:a1:03:82: 15:36:d1:0a:21:d4:49:2b:49:25:c1:11:ad:f9:76: 7d:10:8d:aa:5b:4c:38:38:d0:b2:a0:08:f7:bc:94: e6:12:7f:de:1e:77:c9:a7:f0:0f:c6:b1:b8:e9:87: 92:d7:18:c6:67:5b:fe:62:67:20:74:9c:62:f6:ab: ed:28:8a:13:df:24:e4:8c:a3:bf:4e:78:75:a2:0e: de:cb:a7:f9:db:41:0b:21:f6:69:16:f5:e3:83:65: 57:f2:bb:6e:a1:69:fc:a0:e7:6e:44:cc:46:13:03: 3f:d3:54:51:37:6d:ce:18:9d:79:8d:04:c3:8e:73: ef:bb:17:c8:b5:00:a3:92:e5:39:d4:55:fc:cf:c7: e8:0e:19:4f:e5:28:de:46:1c:1f:cf:08:94:aa:3a: 1e:9d:f7:1b:48:02:75:42:67:4d:d1:51:6b:0b:37: 3b:4f:b8:e4:d9:44:83:79:f2:77:b4:46:d7:bd:44: 1d:3a:91:da:cd:34:d9:23:96:b1:e3:75:b5:6d:69: c2:e6:b0:36:9a:12:61:5e:27:d8:9c:46:1a:c2:c1: 98:59:3f:89:e6:3f:5b:a3:f6:b1:ff:ab:1a:f5:41: ea:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8A:C8:BC:A5:89:A7:55:EA:1C:FE:96:E4:5F:B8:34:FF:76:7A:1B X509v3 Authority Key Identifier: keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:a00::/40 Signature Algorithm: sha256WithRSAEncryption 3a:a0:66:ed:7e:e1:89:29:13:e5:37:f9:ba:a5:0a:75:6b:3e: ef:73:c8:03:95:94:62:d7:40:3b:53:8b:89:ec:5b:c4:00:5b: 73:93:a1:29:17:69:64:62:94:19:f7:93:be:11:04:51:3f:27: 34:18:63:4c:8d:b7:a9:d0:a7:ea:d8:cb:e3:a8:21:d1:bb:d9: 7a:3d:b7:3e:b8:e6:78:34:37:04:83:1e:d4:94:c3:38:cf:3a: 98:99:90:bb:4b:e2:3b:3d:b8:48:4a:d3:ad:0c:21:f6:f9:13: 1b:78:85:25:4b:f4:be:88:e2:f4:a2:3d:0b:77:77:90:bc:70: dc:35:dc:68:a4:a0:d5:97:9a:26:67:76:89:ba:d2:bc:07:4c: c1:db:64:dc:7b:d3:95:1f:78:45:e9:1b:7d:2f:dd:13:9f:89: df:57:80:ff:64:bb:b3:00:15:20:ac:21:90:12:2d:19:ea:cb: 98:8a:5e:fe:aa:a1:a8:85:78:91:c9:50:21:48:f8:08:72:d1: d1:c3:63:5a:84:f0:3d:4d:5a:ca:0c:3f:15:09:85:96:72:1a: 81:eb:6b:71:f1:69:54:df:99:a7:e5:bb:fe:c1:af:66:7e:49: 1e:f1:11:e8:9c:c0:93:f8:a7:e1:ea:a5:73:f5:fa:a5:29:09: ef:9e:da:5e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSaVdP1M9BKofE7pZ7OutbnVoTcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1 QUREOTREOTAeFw0yNjAxMDMwNzQ1MTBaFw0yNzAxMDIwNzUwMTBaMDMxMTAvBgNV BAMTKDZGOEFDOEJDQTU4OUE3NTVFQTFDRkU5NkU0NUZCODM0RkY3NjdBMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQuqayUsk3DrCKNQ0Ym9w/JrZ bCWLgNxHkKEDghU20Qoh1EkrSSXBEa35dn0QjapbTDg40LKgCPe8lOYSf94ed8mn 8A/Gsbjph5LXGMZnW/5iZyB0nGL2q+0oihPfJOSMo79OeHWiDt7Lp/nbQQsh9mkW 9eODZVfyu26hafyg525EzEYTAz/TVFE3bc4YnXmNBMOOc++7F8i1AKOS5TnUVfzP x+gOGU/lKN5GHB/PCJSqOh6d9xtIAnVCZ03RUWsLNztPuOTZRIN58ne0Rte9RB06 kdrNNNkjlrHjdbVtacLmsDaaEmFeJ9icRhrCwZhZP4nmP1uj9rH/qxr1QeoVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUb4rIvKWJp1XqHP6W5F+4NP92ehswHwYDVR0j BBgwFoAUm4SBY8cEkSJwLo03lBJB7VrdlNkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzMvOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1QUREOTREOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85Qjg0ODE2M0M3MDQ5MTIyNzAyRThEMzc5 NDEyNDFFRDVBREQ5NEQ5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82YzQzZDNhNi03ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvMy8zMjYxMzEz NDNhMzczNTM4MzMzYTYxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEz MDM0MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYMKMA0GCSqGSIb3DQEBCwUAA4IBAQA6oGbt fuGJKRPlN/m6pQp1az7vc8gDlZRi10A7U4uJ7FvEAFtzk6EpF2lkYpQZ95O+EQRR Pyc0GGNMjbep0Kfq2MvjqCHRu9l6Pbc+uOZ4NDcEgx7UlMM4zzqYmZC7S+I7PbhI StOtDCH2+RMbeIUlS/S+iOL0oj0Ld3eQvHDcNdxopKDVl5omZ3aJutK8B0zB22Tc e9OVH3hF6Rt9L90Tn4nfV4D/ZLuzABUgrCGQEi0Z6suYil7+qqGohXiRyVAhSPgI ctHRw2NahPA9TVrKDD8VCYWWchqB62tx8WlU35mn5bv+wa9mfkke8RHonMCT+Kfh 6qVz9fqlKQnvntpe -----END CERTIFICATE-----Generated at Wed Jan 21 01:18:17 2026 by rpki-client