This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6530303a3a2f34302d3430203d3e20323130343634.roa File: 326131343a373538333a6530303a3a2f34302d3430203d3e20323130343634.roa (raw, json) Hash identifier: lZqMqZa8igc4AoCDRmP6SzhiPgp0yN3qUzgnbipm9bo= Subject key identifier: 57:CC:A8:89:CB:CF:CB:79:1B:D7:0D:A5:B5:82:95:EB:1F:02:84:1F Certificate issuer: /CN=9B848163C7049122702E8D37941241ED5ADD94D9 Certificate serial: 6CCE66FBB42D69CF06707D5C98F791C778890671 Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6530303a3a2f34302d3430203d3e20323130343634.roa Signing time: Sat 03 Jan 2026 07:52:52 +0000 ROA not before: Sat 03 Jan 2026 07:47:52 +0000 ROA not after: Sat 02 Jan 2027 07:52:52 +0000 asID: 210464 IP address blocks: 2a14:7583:e00::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:ce:66:fb:b4:2d:69:cf:06:70:7d:5c:98:f7:91:c7:78:89:06:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9 Validity Not Before: Jan 3 07:47:52 2026 GMT Not After : Jan 2 07:52:52 2027 GMT Subject: CN=57CCA889CBCFCB791BD70DA5B58295EB1F02841F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2d:c6:a5:88:f7:5f:8b:1d:21:43:82:49:b5: 3b:8e:d4:ec:23:39:f2:03:7b:c0:fd:8e:44:d6:45: 7b:ff:03:9d:f5:83:08:b0:ef:00:a4:0a:00:2f:f3: 5b:78:1d:6c:66:18:1a:44:8f:b3:c4:8d:1f:6d:ac: 2b:1e:e9:99:ee:ca:2a:8b:ae:d7:00:e0:73:de:f7: d1:d8:ed:90:ae:e8:c3:3b:68:7f:18:88:d5:5b:3b: 91:ba:51:c4:d8:f0:38:72:c8:43:e6:e8:9d:a6:84: 35:14:43:51:1d:53:6a:70:db:04:46:ed:61:fa:d8: bc:c4:de:c2:65:c6:93:1b:fe:9d:fb:86:3d:64:90: f1:42:4e:5d:4d:f6:64:79:c2:a7:3b:b4:14:fc:d5: aa:54:63:0a:da:dc:15:12:86:35:26:b8:38:e0:a5: 38:da:43:77:f7:c9:63:c2:96:74:f0:b7:bb:74:37: 60:9c:de:cd:25:35:be:b3:61:69:e2:d0:bb:af:97: 3f:5f:4a:a2:4a:e2:fe:86:21:1f:fc:8e:8a:0c:1f: 4d:bc:8a:ff:ef:f2:5f:db:09:82:ed:c2:fc:39:6a: 82:d8:f9:86:92:c1:d6:5d:64:da:c0:91:6a:9d:7c: cf:3e:fa:4a:a7:72:e6:64:40:c7:f4:2c:96:a1:48: 81:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CC:A8:89:CB:CF:CB:79:1B:D7:0D:A5:B5:82:95:EB:1F:02:84:1F X509v3 Authority Key Identifier: keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6530303a3a2f34302d3430203d3e20323130343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:e00::/40 Signature Algorithm: sha256WithRSAEncryption 89:39:51:e9:28:28:ba:1a:05:0f:f4:d0:62:c2:f5:14:66:57: c9:af:20:a3:25:7e:c6:30:c1:1a:7e:a5:8e:67:22:f0:1a:92: 96:4f:62:5c:84:2d:87:c7:0e:22:fd:63:62:8e:ff:04:92:12: a2:f8:5b:e8:42:c3:cd:88:9f:b2:f1:24:c7:c5:79:11:9d:03: 91:45:8a:87:fd:57:04:e6:d1:e8:b4:fa:e0:5b:67:09:a9:c5: 98:19:0c:6f:55:bb:43:05:92:b8:00:e6:3a:a0:57:dc:50:91: 72:b1:78:27:fa:7d:16:a6:28:ab:e1:a8:d8:bc:bd:6c:96:c3: 6d:d5:02:81:7f:6a:d9:4b:6c:b3:5e:0f:df:71:7c:2d:5e:d9: b5:5f:d7:2d:f2:6c:bc:9f:ea:df:12:34:01:e5:12:79:c0:80: aa:be:33:fb:cc:30:22:ad:c4:59:a6:f9:fb:8c:a8:9b:6c:a2: c1:8c:94:5f:e3:af:20:bf:d1:a4:54:d3:70:c6:2b:e5:ed:c4: 94:6e:f2:17:1e:68:b8:42:ca:1d:56:02:d9:94:6a:08:de:ba: e6:23:5d:6f:22:94:b0:2b:ab:5a:a1:2e:4a:9b:63:76:99:dd: 6b:2c:5d:82:9e:45:ee:28:7e:5b:5b:b3:30:e0:ff:08:a8:87: de:81:90:0b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbM5m+7Qtac8GcH1cmPeRx3iJBnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1 QUREOTREOTAeFw0yNjAxMDMwNzQ3NTJaFw0yNzAxMDIwNzUyNTJaMDMxMTAvBgNV BAMTKDU3Q0NBODg5Q0JDRkNCNzkxQkQ3MERBNUI1ODI5NUVCMUYwMjg0MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYLcaliPdfix0hQ4JJtTuO1Owj OfIDe8D9jkTWRXv/A531gwiw7wCkCgAv81t4HWxmGBpEj7PEjR9trCse6ZnuyiqL rtcA4HPe99HY7ZCu6MM7aH8YiNVbO5G6UcTY8DhyyEPm6J2mhDUUQ1EdU2pw2wRG 7WH62LzE3sJlxpMb/p37hj1kkPFCTl1N9mR5wqc7tBT81apUYwra3BUShjUmuDjg pTjaQ3f3yWPClnTwt7t0N2Cc3s0lNb6zYWni0Luvlz9fSqJK4v6GIR/8jooMH028 iv/v8l/bCYLtwvw5aoLY+YaSwdZdZNrAkWqdfM8++kqncuZkQMf0LJahSIF5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUV8yoicvPy3kb1w2ltYKV6x8ChB8wHwYDVR0j BBgwFoAUm4SBY8cEkSJwLo03lBJB7VrdlNkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzMvOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1QUREOTREOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85Qjg0ODE2M0M3MDQ5MTIyNzAyRThEMzc5 NDEyNDFFRDVBREQ5NEQ5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82YzQzZDNhNi03ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvMy8zMjYxMzEz NDNhMzczNTM4MzMzYTY1MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEz MDM0MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYMOMA0GCSqGSIb3DQEBCwUAA4IBAQCJOVHp KCi6GgUP9NBiwvUUZlfJryCjJX7GMMEafqWOZyLwGpKWT2JchC2Hxw4i/WNijv8E khKi+FvoQsPNiJ+y8STHxXkRnQORRYqH/VcE5tHotPrgW2cJqcWYGQxvVbtDBZK4 AOY6oFfcUJFysXgn+n0Wpiir4ajYvL1slsNt1QKBf2rZS2yzXg/fcXwtXtm1X9ct 8my8n+rfEjQB5RJ5wICqvjP7zDAircRZpvn7jKibbKLBjJRf468gv9GkVNNwxivl 7cSUbvIXHmi4QsodVgLZlGoI3rrmI11vIpSwK6taoS5Km2N2md1rLF2CnkXuKH5b W7Mw4P8IqIfegZAL -----END CERTIFICATE-----Generated at Wed Jan 21 01:16:26 2026 by rpki-client