This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6330303a3a2f34302d3430203d3e20323130343634.roa File: 326131343a373538333a6330303a3a2f34302d3430203d3e20323130343634.roa (raw, json) Hash identifier: u9LwYErQUKmq8o1Cp9FlrT7DQfjHnm37GLoiMAQKUWk= Subject key identifier: 85:E3:DC:58:9D:F0:34:61:99:C6:0A:08:E9:D3:03:2F:58:D8:2A:37 Certificate issuer: /CN=9B848163C7049122702E8D37941241ED5ADD94D9 Certificate serial: 038D4778BAD063B043D7AA60E45ED3473F64A674 Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6330303a3a2f34302d3430203d3e20323130343634.roa Signing time: Sat 03 Jan 2026 07:51:16 +0000 ROA not before: Sat 03 Jan 2026 07:46:16 +0000 ROA not after: Sat 02 Jan 2027 07:51:16 +0000 asID: 210464 IP address blocks: 2a14:7583:c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8d:47:78:ba:d0:63:b0:43:d7:aa:60:e4:5e:d3:47:3f:64:a6:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9 Validity Not Before: Jan 3 07:46:16 2026 GMT Not After : Jan 2 07:51:16 2027 GMT Subject: CN=85E3DC589DF0346199C60A08E9D3032F58D82A37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:42:eb:c8:5a:5c:51:a0:c3:3d:3b:eb:e8:bc: 2e:76:cf:ca:87:9e:51:bf:d1:9d:0d:31:08:0e:af: 31:c4:d5:1d:e5:8d:d8:7f:f9:c4:ec:66:01:e8:45: 4a:eb:cb:79:0f:bd:67:27:37:1a:0b:91:60:3d:b5: e9:c9:ec:50:cf:ac:43:a7:32:3d:d0:8d:f7:38:93: 91:e8:95:e2:36:2d:c3:95:84:2c:cd:23:37:c9:80: 4d:b2:a5:12:cc:72:0e:43:dc:3f:0f:d9:43:99:be: d7:f8:ff:96:d2:a3:c7:44:82:2f:5c:74:78:9a:4c: 52:ba:2b:25:06:0e:ba:2a:b9:51:f5:e8:e3:1c:9d: 24:30:37:0d:52:c9:01:27:9f:18:58:e2:24:c1:73: 2d:7a:8a:1e:e9:a7:18:ad:eb:6d:21:8f:32:54:ee: 03:de:ee:e7:a6:2c:c6:21:aa:0a:1c:ec:01:07:ea: f2:68:44:50:88:cd:be:9b:6b:fc:61:79:b6:70:9b: fe:6b:42:f4:93:e5:3e:b3:c3:ad:27:4b:85:d7:3d: 6a:ae:08:92:b5:80:2d:a0:ce:db:d7:ef:ed:89:0e: 47:7c:08:e4:5c:b5:90:2d:c2:6f:3f:1f:b4:a4:14: e1:69:80:f3:90:64:05:b6:fd:86:94:1d:63:ac:f4: fc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E3:DC:58:9D:F0:34:61:99:C6:0A:08:E9:D3:03:2F:58:D8:2A:37 X509v3 Authority Key Identifier: keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6330303a3a2f34302d3430203d3e20323130343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:c00::/40 Signature Algorithm: sha256WithRSAEncryption 06:be:97:45:90:e9:42:c6:2b:d8:2c:13:d9:2a:04:12:c4:02: eb:21:54:a2:ec:fc:f3:b6:a3:42:ad:ce:06:47:4f:d4:ca:8b: 0e:55:c1:66:d1:11:e6:1d:ea:ab:a3:27:29:88:c8:c3:24:9b: 2c:79:5d:6f:7f:1f:4a:01:c2:55:01:09:3d:d4:b3:50:a1:db: 1f:12:a7:5f:fe:ee:1e:5f:fd:5a:c4:73:5c:6e:ff:f1:8d:0d: 4e:1c:02:ae:88:44:17:97:7e:6c:27:d4:9e:db:c5:63:04:81: dc:23:77:e5:8b:59:db:74:f9:2e:14:72:d0:d5:e6:a3:8a:f1: 5b:e5:e2:27:a0:84:03:01:9f:6f:7c:ce:cb:95:d1:3e:cf:0e: bc:1e:d4:38:06:b7:ae:6f:b7:49:c7:89:37:8c:0c:62:63:bd: cf:55:cc:16:a9:06:42:c9:7c:8a:37:c3:32:54:8f:3a:2b:bc: 15:2c:a3:24:5b:ba:df:5f:c2:16:9e:2a:4b:82:05:0c:04:a6: 97:98:5a:f5:f8:f0:1a:9a:80:bf:65:e7:2a:b3:50:87:1e:2b: 7d:25:dc:f6:35:99:ff:56:b5:45:f7:79:24:ea:1e:a2:a0:43: 3f:60:7a:1f:bb:15:b3:28:1e:60:18:f0:21:20:e8:c7:17:1e: 0f:60:cb:61 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUA41HeLrQY7BD16pg5F7TRz9kpnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1 QUREOTREOTAeFw0yNjAxMDMwNzQ2MTZaFw0yNzAxMDIwNzUxMTZaMDMxMTAvBgNV BAMTKDg1RTNEQzU4OURGMDM0NjE5OUM2MEEwOEU5RDMwMzJGNThEODJBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLQuvIWlxRoMM9O+vovC52z8qH nlG/0Z0NMQgOrzHE1R3ljdh/+cTsZgHoRUrry3kPvWcnNxoLkWA9tenJ7FDPrEOn Mj3Qjfc4k5HoleI2LcOVhCzNIzfJgE2ypRLMcg5D3D8P2UOZvtf4/5bSo8dEgi9c dHiaTFK6KyUGDroquVH16OMcnSQwNw1SyQEnnxhY4iTBcy16ih7ppxit620hjzJU 7gPe7uemLMYhqgoc7AEH6vJoRFCIzb6ba/xhebZwm/5rQvST5T6zw60nS4XXPWqu CJK1gC2gztvX7+2JDkd8CORctZAtwm8/H7SkFOFpgPOQZAW2/YaUHWOs9PwrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUhePcWJ3wNGGZxgoI6dMDL1jYKjcwHwYDVR0j BBgwFoAUm4SBY8cEkSJwLo03lBJB7VrdlNkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzMvOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1QUREOTREOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85Qjg0ODE2M0M3MDQ5MTIyNzAyRThEMzc5 NDEyNDFFRDVBREQ5NEQ5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82YzQzZDNhNi03ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvMy8zMjYxMzEz NDNhMzczNTM4MzMzYTYzMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEz MDM0MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYMMMA0GCSqGSIb3DQEBCwUAA4IBAQAGvpdF kOlCxivYLBPZKgQSxALrIVSi7PzztqNCrc4GR0/UyosOVcFm0RHmHeqroycpiMjD JJsseV1vfx9KAcJVAQk91LNQodsfEqdf/u4eX/1axHNcbv/xjQ1OHAKuiEQXl35s J9Se28VjBIHcI3fli1nbdPkuFHLQ1eajivFb5eInoIQDAZ9vfM7LldE+zw68HtQ4 Breub7dJx4k3jAxiY73PVcwWqQZCyXyKN8MyVI86K7wVLKMkW7rfX8IWnipLggUM BKaXmFr1+PAamoC/Zecqs1CHHit9Jdz2NZn/VrVF93kk6h6ioEM/YHofuxWzKB5g GPAhIOjHFx4PYMth -----END CERTIFICATE-----Generated at Wed Jan 21 01:18:17 2026 by rpki-client