This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6630303a3a2f34302d3430203d3e20323130343634.roa
File: 326131343a373538333a6630303a3a2f34302d3430203d3e20323130343634.roa (raw, json)
Hash identifier: mmfp1swzQs8+dv25AiJSqWincq1kV1e/VcrkZp1tcVY=
Subject key identifier: 4B:19:4D:32:18:86:F8:9E:08:02:B5:1F:E5:EF:81:FF:5B:14:74:15
Certificate issuer: /CN=9B848163C7049122702E8D37941241ED5ADD94D9
Certificate serial: 2EB17AF790272836F36867B27EDBBC0AD58CA062
Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6630303a3a2f34302d3430203d3e20323130343634.roa
Signing time: Sat 03 Jan 2026 07:53:13 +0000
ROA not before: Sat 03 Jan 2026 07:48:13 +0000
ROA not after: Sat 02 Jan 2027 07:53:13 +0000
asID: 210464
IP address blocks: 2a14:7583:f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 15:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b1:7a:f7:90:27:28:36:f3:68:67:b2:7e:db:bc:0a:d5:8c:a0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9
Validity
Not Before: Jan 3 07:48:13 2026 GMT
Not After : Jan 2 07:53:13 2027 GMT
Subject: CN=4B194D321886F89E0802B51FE5EF81FF5B147415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:ad:76:ab:67:ac:78:b6:80:ec:7b:4e:27:
7e:ba:9b:89:c0:71:d9:5b:b5:dd:05:47:91:71:fb:
35:31:ee:3b:e0:e7:49:1d:7a:af:8c:e6:79:30:0a:
3b:30:cd:05:4c:96:57:0f:d1:a1:02:10:b6:39:18:
e4:f1:70:b4:59:bd:3a:d1:91:0a:0e:af:85:a3:50:
3a:a0:2d:16:f5:6b:db:3f:84:06:f6:77:77:7d:b6:
ee:4b:72:24:59:61:3e:09:b4:aa:e7:07:9e:c1:cf:
bd:a1:b2:74:04:29:b8:50:23:2c:1e:a3:2c:0e:03:
cd:50:e2:c1:80:0b:57:59:a7:c6:f4:b6:e7:41:bb:
24:cf:10:36:50:0b:22:9b:2e:07:11:73:9a:ee:c3:
62:fd:72:d6:e2:9f:48:c8:52:57:f1:0e:f0:03:c9:
03:ba:78:e7:69:65:ed:1a:6c:34:3a:eb:cc:1f:64:
52:28:16:e7:b1:37:14:9a:f5:6e:cc:1a:c3:0b:28:
ed:75:f9:a8:1e:d1:9b:41:eb:ce:73:fc:e0:05:e3:
98:49:bf:9b:30:8c:eb:83:9b:58:3e:8e:f3:e4:85:
d7:d6:bf:7a:5f:6f:52:5a:8f:c0:88:cb:42:22:ea:
ee:78:93:4f:48:a7:5b:23:f7:9e:99:94:34:38:57:
3d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:19:4D:32:18:86:F8:9E:08:02:B5:1F:E5:EF:81:FF:5B:14:74:15
X509v3 Authority Key Identifier:
keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6630303a3a2f34302d3430203d3e20323130343634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:f00::/40
Signature Algorithm: sha256WithRSAEncryption
51:98:98:1f:46:c0:76:e5:39:11:ff:b7:45:de:19:ca:73:4a:
d7:fb:00:90:90:d3:be:34:55:3f:78:a2:d5:ab:df:be:22:c1:
5e:5a:7c:7c:d2:52:3c:1d:93:b6:39:4f:17:e2:c5:d4:5c:b8:
ed:16:5e:8b:49:2c:73:95:8c:ea:92:54:e9:61:26:c8:91:db:
0b:c2:b4:41:e1:a1:75:9c:58:b0:b0:f0:f0:b9:d6:7f:ea:5e:
99:3d:b8:86:a7:12:e6:7d:53:d7:af:0a:2c:c6:2b:d8:4a:07:
ea:c2:72:a5:f3:d6:93:61:7e:c5:ab:fc:81:34:85:b9:d0:67:
ed:f4:ac:6e:1d:63:bb:46:d6:23:34:8b:ad:4c:33:83:0d:ee:
ac:f2:6f:ec:7f:61:b0:28:b7:e2:7b:48:12:5e:38:5b:8e:d2:
2c:3d:70:8a:d8:83:0e:61:5a:9f:f4:de:91:a3:26:fa:92:79:
be:14:8c:c9:f5:a3:9f:3d:6e:96:32:10:f5:99:fc:36:5a:93:
9e:b3:91:5b:ea:22:15:e6:07:cd:61:52:93:03:5b:c9:a8:03:
34:d8:42:a0:da:b6:6a:c7:13:08:a1:7e:84:61:50:39:47:4b:
75:8a:14:86:49:c4:be:a2:54:fb:ff:c8:33:3e:f0:24:18:b7:
26:1c:24:4d
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIULrF695AnKDbzaGeyftu8CtWMoGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1
QUREOTREOTAeFw0yNjAxMDMwNzQ4MTNaFw0yNzAxMDIwNzUzMTNaMDMxMTAvBgNV
BAMTKDRCMTk0RDMyMTg4NkY4OUUwODAyQjUxRkU1RUY4MUZGNUIxNDc0MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/a12q2eseLaA7HtOJ366m4nA
cdlbtd0FR5Fx+zUx7jvg50kdeq+M5nkwCjswzQVMllcP0aECELY5GOTxcLRZvTrR
kQoOr4WjUDqgLRb1a9s/hAb2d3d9tu5LciRZYT4JtKrnB57Bz72hsnQEKbhQIywe
oywOA81Q4sGAC1dZp8b0tudBuyTPEDZQCyKbLgcRc5ruw2L9ctbin0jIUlfxDvAD
yQO6eOdpZe0abDQ668wfZFIoFuexNxSa9W7MGsMLKO11+age0ZtB685z/OAF45hJ
v5swjOuDm1g+jvPkhdfWv3pfb1Jaj8CIy0Ii6u54k09Ip1sj956ZlDQ4Vz01AgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUSxlNMhiG+J4IArUf5e+B/1sUdBUwHwYDVR0j
BBgwFoAUm4SBY8cEkSJwLo03lBJB7VrdlNkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi
MzRiLzMvOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1QUREOTREOS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85Qjg0ODE2M0M3MDQ5MTIyNzAyRThEMzc5
NDEyNDFFRDVBREQ5NEQ5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS82YzQzZDNhNi03ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvMy8zMjYxMzEz
NDNhMzczNTM4MzMzYTY2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEz
MDM0MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB
BwEB/wQSMBAwDgQCAAIwCAMGACoUdYMPMA0GCSqGSIb3DQEBCwUAA4IBAQBRmJgf
RsB25TkR/7dF3hnKc0rX+wCQkNO+NFU/eKLVq9++IsFeWnx80lI8HZO2OU8X4sXU
XLjtFl6LSSxzlYzqklTpYSbIkdsLwrRB4aF1nFiwsPDwudZ/6l6ZPbiGpxLmfVPX
rwosxivYSgfqwnKl89aTYX7Fq/yBNIW50Gft9KxuHWO7RtYjNIutTDODDe6s8m/s
f2GwKLfie0gSXjhbjtIsPXCK2IMOYVqf9N6Royb6knm+FIzJ9aOfPW6WMhD1mfw2
WpOes5Fb6iIV5gfNYVKTA1vJqAM02EKg2rZqxxMIoX6EYVA5R0t1ihSGScS+olT7
/8gzPvAkGLcmHCRN
-----END CERTIFICATE-----
Generated at Wed Jan 21 01:17:12 2026 by rpki-client