This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6230303a3a2f34302d3430203d3e20323130343634.roa File: 326131343a373538333a6230303a3a2f34302d3430203d3e20323130343634.roa (raw, json) Hash identifier: SkZGavhoTJC5ic0mJF3ZGqoq5jWXKF9H+0oYVlFuDaQ= Subject key identifier: 21:84:DC:52:BE:6F:AA:F4:9F:F5:24:86:66:17:E1:F2:8B:4F:20:68 Certificate issuer: /CN=9B848163C7049122702E8D37941241ED5ADD94D9 Certificate serial: 32BC675EF88E26B1035AC6298101B4CFC14D86CE Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6230303a3a2f34302d3430203d3e20323130343634.roa Signing time: Sat 03 Jan 2026 07:50:58 +0000 ROA not before: Sat 03 Jan 2026 07:45:58 +0000 ROA not after: Sat 02 Jan 2027 07:50:58 +0000 asID: 210464 IP address blocks: 2a14:7583:b00::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:bc:67:5e:f8:8e:26:b1:03:5a:c6:29:81:01:b4:cf:c1:4d:86:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9 Validity Not Before: Jan 3 07:45:58 2026 GMT Not After : Jan 2 07:50:58 2027 GMT Subject: CN=2184DC52BE6FAAF49FF524866617E1F28B4F2068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5c:80:8e:4b:c2:4a:81:3a:03:e9:16:b4:d6: 37:65:60:92:ad:1e:d9:ab:39:bc:fd:0c:09:e9:06: 6c:09:7e:b6:17:b3:a1:c7:46:9f:67:c2:b4:db:df: 08:59:c1:d6:c0:91:04:18:22:79:c9:dd:e5:84:34: db:fe:49:ba:e6:ca:08:59:9a:53:75:c3:68:f7:b5: f7:8a:fe:56:e5:55:2e:91:b5:e2:bb:34:13:b8:6f: 44:fd:aa:ed:f7:cc:d9:1e:d2:e0:97:b7:5a:42:bb: 61:ba:57:d4:ba:f4:59:53:b7:8b:eb:3f:a7:73:18: 18:06:85:11:b7:d9:21:3d:f8:32:a2:57:28:fa:78: 35:0a:32:39:9d:6b:02:89:35:ee:94:61:d5:ac:03: ce:9f:5c:13:86:3f:e9:d8:9c:39:2c:ca:ea:0f:5f: 44:fa:9d:a9:de:f9:21:36:a0:92:1f:0a:c3:62:78: d2:73:f5:ba:5a:9a:c0:8e:24:92:ca:0f:d4:fa:b8: 8e:15:52:ec:2b:47:f5:80:7b:70:0b:d0:dc:68:fe: 82:df:75:98:97:dc:12:d6:75:ea:19:ba:43:72:71: e6:1f:66:c9:64:8f:72:cb:b2:b0:25:52:72:93:31: 65:c2:2b:b6:9c:5b:c8:18:3c:fc:83:c4:58:ed:67: d3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:84:DC:52:BE:6F:AA:F4:9F:F5:24:86:66:17:E1:F2:8B:4F:20:68 X509v3 Authority Key Identifier: keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6230303a3a2f34302d3430203d3e20323130343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:b00::/40 Signature Algorithm: sha256WithRSAEncryption 2c:07:13:d6:33:18:39:ac:b5:a2:3a:19:a5:8a:ad:d3:8b:9d: c0:49:9c:9f:dc:a2:5c:c9:ed:ed:c0:df:9b:64:48:98:5f:f2: c4:96:b1:88:f7:d1:d2:90:ce:e9:72:47:ae:66:e3:ea:5c:b8: 51:ef:bd:02:46:0f:87:33:3b:55:8d:85:e8:90:23:22:22:fa: 7d:b9:b2:6b:9a:b1:c4:8f:41:5b:41:91:3a:7e:e2:e7:12:cd: 56:22:b1:5e:54:b9:b3:0c:fb:b8:5f:be:25:7e:f4:7d:d4:f7: 67:12:bb:f2:86:53:3b:0b:3c:02:64:5b:9e:e1:23:db:bf:09: 98:4b:ae:7c:b7:e9:4f:5f:51:32:0f:8e:be:61:70:bc:4a:ca: af:a6:98:be:51:0d:74:5a:26:f9:f1:77:bf:1a:08:1b:5f:3d: b6:05:a6:23:96:58:af:57:b9:cb:a8:27:5c:48:fa:a3:a4:fb: b1:5c:a8:a2:c7:09:0f:44:aa:3c:60:55:03:71:e6:0a:d6:d1: 7a:d4:8c:73:16:5c:a8:5f:22:32:e5:91:96:df:aa:74:4c:f0: dc:93:29:ae:a5:dc:24:69:20:c8:a4:a5:cb:9d:67:92:f5:27: 82:87:2f:67:2a:a9:0c:81:a1:05:4a:9f:68:2b:21:fc:2a:52: 67:16:fc:a8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMrxnXviOJrEDWsYpgQG0z8FNhs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1 QUREOTREOTAeFw0yNjAxMDMwNzQ1NThaFw0yNzAxMDIwNzUwNThaMDMxMTAvBgNV BAMTKDIxODREQzUyQkU2RkFBRjQ5RkY1MjQ4NjY2MTdFMUYyOEI0RjIwNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBXICOS8JKgToD6Ra01jdlYJKt HtmrObz9DAnpBmwJfrYXs6HHRp9nwrTb3whZwdbAkQQYInnJ3eWENNv+SbrmyghZ mlN1w2j3tfeK/lblVS6RteK7NBO4b0T9qu33zNke0uCXt1pCu2G6V9S69FlTt4vr P6dzGBgGhRG32SE9+DKiVyj6eDUKMjmdawKJNe6UYdWsA86fXBOGP+nYnDksyuoP X0T6nane+SE2oJIfCsNieNJz9bpamsCOJJLKD9T6uI4VUuwrR/WAe3AL0Nxo/oLf dZiX3BLWdeoZukNyceYfZslkj3LLsrAlUnKTMWXCK7acW8gYPPyDxFjtZ9PTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUIYTcUr5vqvSf9SSGZhfh8otPIGgwHwYDVR0j BBgwFoAUm4SBY8cEkSJwLo03lBJB7VrdlNkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzMvOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1QUREOTREOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85Qjg0ODE2M0M3MDQ5MTIyNzAyRThEMzc5 NDEyNDFFRDVBREQ5NEQ5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82YzQzZDNhNi03ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvMy8zMjYxMzEz NDNhMzczNTM4MzMzYTYyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEz MDM0MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYMLMA0GCSqGSIb3DQEBCwUAA4IBAQAsBxPW Mxg5rLWiOhmliq3Ti53ASZyf3KJcye3twN+bZEiYX/LElrGI99HSkM7pckeuZuPq XLhR770CRg+HMztVjYXokCMiIvp9ubJrmrHEj0FbQZE6fuLnEs1WIrFeVLmzDPu4 X74lfvR91PdnErvyhlM7CzwCZFue4SPbvwmYS658t+lPX1EyD46+YXC8Ssqvppi+ UQ10Wib58Xe/GggbXz22BaYjllivV7nLqCdcSPqjpPuxXKiixwkPRKo8YFUDceYK 1tF61IxzFlyoXyIy5ZGW36p0TPDckymupdwkaSDIpKXLnWeS9SeChy9nKqkMgaEF Sp9oKyH8KlJnFvyo -----END CERTIFICATE-----Generated at Wed Jan 21 01:17:12 2026 by rpki-client