This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6430303a3a2f34302d3430203d3e20323130343634.roa File: 326131343a373538333a6430303a3a2f34302d3430203d3e20323130343634.roa (raw, json) Hash identifier: 966xfzbp7XI2tIIl6RtKV8fWr+EKvskhBHx3zk5WK2Y= Subject key identifier: F7:DF:39:E1:3D:3E:C3:E1:8F:09:9B:F3:14:B7:1D:09:88:CE:B4:BE Certificate issuer: /CN=9B848163C7049122702E8D37941241ED5ADD94D9 Certificate serial: 4ECCBE1761BF82BBA4F49F3761BCFE95834A83B5 Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6430303a3a2f34302d3430203d3e20323130343634.roa Signing time: Sat 03 Jan 2026 07:52:17 +0000 ROA not before: Sat 03 Jan 2026 07:47:17 +0000 ROA not after: Sat 02 Jan 2027 07:52:17 +0000 asID: 210464 IP address blocks: 2a14:7583:d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:cc:be:17:61:bf:82:bb:a4:f4:9f:37:61:bc:fe:95:83:4a:83:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9 Validity Not Before: Jan 3 07:47:17 2026 GMT Not After : Jan 2 07:52:17 2027 GMT Subject: CN=F7DF39E13D3EC3E18F099BF314B71D0988CEB4BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:18:fc:d6:3a:62:9e:c0:fa:fe:f1:3d:2f:e3: 95:8a:e5:f1:ab:5a:62:bc:96:cf:ee:a6:cd:d9:6a: 2a:8d:1e:56:c4:4a:80:a9:1b:ad:ec:ae:de:ab:48: bb:bf:c4:d4:83:2c:91:05:5a:13:08:3c:34:71:df: 34:7c:e8:0d:c5:2d:73:17:95:b1:f3:f2:03:48:d5: 1c:61:42:e6:f3:e9:c2:15:76:e2:08:1e:d2:93:7e: 57:fe:1d:1b:5e:dc:76:c0:1d:b6:30:bf:5f:5e:5e: 1b:82:05:7d:48:4c:6d:28:c4:80:8c:48:7b:52:5b: 19:eb:88:f0:bb:a6:86:79:f1:ad:b8:c4:af:a8:6f: 2d:07:ad:0b:b3:0d:44:43:6b:8c:1a:94:3f:c2:38: cd:61:6e:47:a4:94:95:ea:2f:00:d1:76:46:57:91: 0e:d8:7f:62:e6:06:12:86:57:6e:51:66:d9:bd:0c: 44:92:7f:d6:f3:7c:41:05:47:43:56:ea:67:25:49: 3e:df:e8:30:a6:11:5c:92:a7:29:b6:e5:31:7a:04: 7b:a1:ef:61:04:9a:64:e6:51:b5:45:c7:1c:57:a7: 87:eb:52:91:6e:52:6f:28:b1:0a:a1:1b:7e:29:a2: c3:d4:db:e9:c5:a8:08:7f:43:ee:28:9a:b6:a9:be: 22:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DF:39:E1:3D:3E:C3:E1:8F:09:9B:F3:14:B7:1D:09:88:CE:B4:BE X509v3 Authority Key Identifier: keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6430303a3a2f34302d3430203d3e20323130343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:d00::/40 Signature Algorithm: sha256WithRSAEncryption 2d:a4:95:16:61:7c:3e:a0:59:d4:dc:5c:55:3b:35:04:c0:31: 2c:d2:0c:2d:7a:a1:7e:fe:7d:7f:5f:4d:95:d7:04:bc:be:36: 78:35:8f:d9:fc:1f:1b:b6:34:50:02:6b:e3:15:d3:d5:c8:1d: e9:c8:e9:05:c3:69:a4:49:d2:6f:80:86:6e:1f:21:0f:19:86: c4:31:1c:df:b5:28:58:5b:da:aa:88:80:60:34:3f:f7:62:64: d9:eb:b1:3e:ab:e7:39:88:92:ce:c0:e9:02:1a:07:b2:4d:b7: c3:8d:9b:36:a2:c2:d6:98:76:0f:4e:36:c9:ae:2f:4f:be:22: d0:3c:8e:22:d4:59:9e:2f:42:df:c9:c4:01:88:77:fa:3a:7a: 21:60:8b:ec:a6:5f:c0:f4:e0:ce:e5:55:21:37:65:5a:16:c6: dc:7c:51:75:b8:86:d1:9d:8d:bf:99:7b:aa:c1:78:bb:3b:4d: 75:22:bd:07:c3:e2:e4:52:5f:14:ad:2b:aa:ab:42:75:f0:5b: da:ca:98:1d:5b:58:76:c7:d4:fe:15:42:94:a7:88:36:7c:e8: 56:58:9b:d2:74:53:37:8e:31:9e:c9:9a:9e:97:c2:a0:ea:60: e6:ca:29:ed:4e:0d:c2:0e:75:f8:e9:c9:65:6e:43:b1:ef:3c: b1:92:84:d8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTsy+F2G/gruk9J83Ybz+lYNKg7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1 QUREOTREOTAeFw0yNjAxMDMwNzQ3MTdaFw0yNzAxMDIwNzUyMTdaMDMxMTAvBgNV BAMTKEY3REYzOUUxM0QzRUMzRTE4RjA5OUJGMzE0QjcxRDA5ODhDRUI0QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClGPzWOmKewPr+8T0v45WK5fGr WmK8ls/ups3ZaiqNHlbESoCpG63srt6rSLu/xNSDLJEFWhMIPDRx3zR86A3FLXMX lbHz8gNI1RxhQubz6cIVduIIHtKTflf+HRte3HbAHbYwv19eXhuCBX1ITG0oxICM SHtSWxnriPC7poZ58a24xK+oby0HrQuzDURDa4walD/COM1hbkeklJXqLwDRdkZX kQ7Yf2LmBhKGV25RZtm9DESSf9bzfEEFR0NW6mclST7f6DCmEVySpym25TF6BHuh 72EEmmTmUbVFxxxXp4frUpFuUm8osQqhG34posPU2+nFqAh/Q+4omrapviLhAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU99854T0+w+GPCZvzFLcdCYjOtL4wHwYDVR0j BBgwFoAUm4SBY8cEkSJwLo03lBJB7VrdlNkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzMvOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1QUREOTREOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85Qjg0ODE2M0M3MDQ5MTIyNzAyRThEMzc5 NDEyNDFFRDVBREQ5NEQ5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82YzQzZDNhNi03ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvMy8zMjYxMzEz NDNhMzczNTM4MzMzYTY0MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEz MDM0MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYMNMA0GCSqGSIb3DQEBCwUAA4IBAQAtpJUW YXw+oFnU3FxVOzUEwDEs0gwteqF+/n1/X02V1wS8vjZ4NY/Z/B8btjRQAmvjFdPV yB3pyOkFw2mkSdJvgIZuHyEPGYbEMRzftShYW9qqiIBgND/3YmTZ67E+q+c5iJLO wOkCGgeyTbfDjZs2osLWmHYPTjbJri9PviLQPI4i1FmeL0LfycQBiHf6OnohYIvs pl/A9ODO5VUhN2VaFsbcfFF1uIbRnY2/mXuqwXi7O011Ir0Hw+LkUl8UrSuqq0J1 8FvaypgdW1h2x9T+FUKUp4g2fOhWWJvSdFM3jjGeyZqel8Kg6mDmyintTg3CDnX4 6cllbkOx7zyxkoTY -----END CERTIFICATE-----Generated at Wed Jan 21 01:18:17 2026 by rpki-client