This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa File: 326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa (raw, json) Hash identifier: a5s0weSMSVAZOPtcCLRRCAjoiXiAH1m3fzt4R/LeqXA= Subject key identifier: 50:BA:B9:18:32:D7:03:2A:A1:01:35:83:C2:4E:1C:9E:B0:4B:32:37 Certificate issuer: /CN=4B7AFD45B30392C9F4665CE2A7692D56E755DCEA Certificate serial: 1B6B7A8E219AB814799AA8E78954BBE9E1BD1E4A Authority key identifier: 4B:7A:FD:45:B3:03:92:C9:F4:66:5C:E2:A7:69:2D:56:E7:55:DC:EA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa Signing time: Thu 15 Jan 2026 16:33:07 +0000 ROA not before: Thu 15 Jan 2026 16:28:07 +0000 ROA not after: Thu 14 Jan 2027 16:33:07 +0000 asID: 151673 IP address blocks: 2a14:7586:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.crl rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 11:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:6b:7a:8e:21:9a:b8:14:79:9a:a8:e7:89:54:bb:e9:e1:bd:1e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B7AFD45B30392C9F4665CE2A7692D56E755DCEA Validity Not Before: Jan 15 16:28:07 2026 GMT Not After : Jan 14 16:33:07 2027 GMT Subject: CN=50BAB91832D7032AA1013583C24E1C9EB04B3237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:66:3b:5a:17:95:e5:48:71:43:31:cb:91:4c: 68:af:d2:c1:07:1c:70:88:e0:07:ca:55:94:a6:0e: 29:50:2a:9e:80:bf:be:ca:7a:7f:f1:f4:17:8d:b7: cd:bb:5c:59:42:91:0a:96:2c:49:a3:4c:a5:dc:c5: 17:b4:71:90:fd:27:2d:49:21:89:25:23:61:d8:4e: d7:c2:f0:3d:02:42:80:53:bd:cd:2c:7d:2f:e6:6c: ee:8c:a2:b8:9b:7b:8d:2f:d9:52:f1:e2:80:af:b2: 7e:02:41:a5:8f:78:91:a6:1d:92:13:78:54:59:8e: 35:cb:19:06:62:3b:a0:81:61:c8:3b:95:74:b7:8d: 31:5e:ee:b8:55:38:da:30:06:89:a9:6f:da:a3:5c: 88:b7:fd:f5:f1:e9:a2:98:55:f2:01:7d:86:45:0a: 5a:ca:cd:a9:fc:5a:a6:0e:28:bf:ce:34:a8:77:7f: 55:92:6c:d9:3d:1f:f0:67:cb:90:e5:da:92:06:89: a8:6b:68:25:35:76:a4:d5:ed:16:45:60:9c:b6:9a: 77:0a:2b:b1:7f:61:2e:5b:88:b8:69:ac:45:10:7f: 30:d9:5f:42:9b:e9:df:3d:41:7d:43:aa:10:40:23: e1:26:12:f3:2e:bd:e5:ca:3b:5d:d0:fe:bd:96:ee: d9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BA:B9:18:32:D7:03:2A:A1:01:35:83:C2:4E:1C:9E:B0:4B:32:37 X509v3 Authority Key Identifier: keyid:4B:7A:FD:45:B3:03:92:C9:F4:66:5C:E2:A7:69:2D:56:E7:55:DC:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6000::/40 Signature Algorithm: sha256WithRSAEncryption 6a:48:a0:c7:c8:75:d8:3b:da:b2:87:b0:22:85:fc:56:67:de: ec:f4:b7:2b:ae:78:a6:91:7f:30:fe:1a:62:d9:bd:cb:98:79: 83:53:a0:60:55:2b:a6:4a:8d:cd:4c:65:c2:f2:a7:c5:f1:8c: 60:43:19:a1:84:89:82:a5:c5:a5:72:51:0d:8e:e3:10:ac:7f: c4:82:85:71:03:2c:d4:1b:33:c9:c6:8a:51:55:81:b5:c7:e3: 4b:72:12:b8:4d:22:45:a4:ae:e9:a5:30:e7:38:7e:84:b0:22: 9b:77:fb:40:df:38:1f:40:d6:20:03:f7:7e:52:e9:ce:45:d1: 9e:69:99:7a:8b:93:4b:46:c2:28:d4:42:92:0f:d2:66:28:52: 78:2b:de:96:f0:5d:6e:61:d0:97:5c:83:6d:f0:90:95:97:a9: b2:3b:a6:62:31:79:3e:c5:73:1f:2b:0a:2b:be:27:bc:f8:8a: b5:75:16:dd:7a:83:d7:1a:47:9e:04:d0:ef:b6:86:4d:ab:c4: ae:15:c2:aa:aa:ce:03:bb:24:53:aa:58:f1:a7:1a:1d:b0:fa: 0c:7c:92:2b:57:72:1b:12:de:39:8f:c6:13:34:bd:ac:96:6f: 07:40:1e:69:70:76:37:7c:6c:72:15:06:3b:98:76:28:c6:40: 68:4f:30:74 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUG2t6jiGauBR5mqjniVS76eG9HkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI3QUZENDVCMzAzOTJDOUY0NjY1Q0UyQTc2OTJENTZF NzU1RENFQTAeFw0yNjAxMTUxNjI4MDdaFw0yNzAxMTQxNjMzMDdaMDMxMTAvBgNV BAMTKDUwQkFCOTE4MzJENzAzMkFBMTAxMzU4M0MyNEUxQzlFQjA0QjMyMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgZjtaF5XlSHFDMcuRTGiv0sEH HHCI4AfKVZSmDilQKp6Av77Ken/x9BeNt827XFlCkQqWLEmjTKXcxRe0cZD9Jy1J IYklI2HYTtfC8D0CQoBTvc0sfS/mbO6Moribe40v2VLx4oCvsn4CQaWPeJGmHZIT eFRZjjXLGQZiO6CBYcg7lXS3jTFe7rhVONowBompb9qjXIi3/fXx6aKYVfIBfYZF ClrKzan8WqYOKL/ONKh3f1WSbNk9H/Bny5Dl2pIGiahraCU1dqTV7RZFYJy2mncK K7F/YS5biLhprEUQfzDZX0Kb6d89QX1DqhBAI+EmEvMuveXKO13Q/r2W7tmLAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUULq5GDLXAyqhATWDwk4cnrBLMjcwHwYDVR0j BBgwFoAUS3r9RbMDksn0Zlzip2ktVudV3OowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTA4MjE4OTktNzdhNi00M2E3LTlhODItMGEzOGZmM2I0 YWQwLzIvNEI3QUZENDVCMzAzOTJDOUY0NjY1Q0UyQTc2OTJENTZFNzU1RENFQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy80QjdBRkQ0NUIzMDM5MkM5RjQ2NjVDRTJB NzY5MkQ1NkU3NTVEQ0VBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85MDgyMTg5OS03N2E2LTQzYTctOWE4Mi0wYTM4ZmYzYjRhZDAvMi8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzAzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzEz NTMxMzYzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1hmAwDQYJKoZIhvcNAQELBQADggEBAGpI oMfIddg72rKHsCKF/FZn3uz0tyuueKaRfzD+GmLZvcuYeYNToGBVK6ZKjc1MZcLy p8XxjGBDGaGEiYKlxaVyUQ2O4xCsf8SChXEDLNQbM8nGilFVgbXH40tyErhNIkWk rumlMOc4foSwIpt3+0DfOB9A1iAD935S6c5F0Z5pmXqLk0tGwijUQpIP0mYoUngr 3pbwXW5h0Jdcg23wkJWXqbI7pmIxeT7Fcx8rCiu+J7z4irV1Ft16g9caR54E0O+2 hk2rxK4VwqqqzgO7JFOqWPGnGh2w+gx8kitXchsS3jmPxhM0vayWbwdAHmlwdjd8 bHIVBjuYdijGQGhPMHQ= -----END CERTIFICATE-----Generated at Wed Jan 21 04:23:21 2026 by rpki-client