This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa File: 326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa (raw, json) Hash identifier: eK2I8NNfEPTCbHsIoeKMUzU2EbiQp+1aLucAqTV09UA= Subject key identifier: DC:C8:72:DB:F9:95:67:54:FB:9D:3F:1D:BE:CC:C5:21:8C:6F:85:1D Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 08B1DA24E0884C828AA02DD98F758645E15C8227 Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa Signing time: Sat 27 Dec 2025 13:24:04 +0000 ROA not before: Sat 27 Dec 2025 13:19:04 +0000 ROA not after: Sat 26 Dec 2026 13:24:04 +0000 asID: 204539 IP address blocks: 2a14:7583:f460::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b1:da:24:e0:88:4c:82:8a:a0:2d:d9:8f:75:86:45:e1:5c:82:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Dec 27 13:19:04 2025 GMT Not After : Dec 26 13:24:04 2026 GMT Subject: CN=DCC872DBF9956754FB9D3F1DBECCC5218C6F851D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:82:36:a4:be:34:c5:f3:19:5e:e8:94:eb:6c: dd:b5:2a:2b:82:bf:8e:d8:8f:67:5c:a7:35:e0:fc: b6:65:63:27:10:8f:bc:68:68:de:63:54:44:84:a5: b4:80:92:91:17:47:fc:7b:21:ee:a0:47:a9:58:59: eb:02:48:b6:d8:62:06:3a:51:b8:83:12:4c:f0:95: d1:df:cf:89:f4:ee:77:f1:1c:c5:ad:99:e4:c9:16: a8:0f:8e:2a:a0:0e:57:16:8b:3b:28:d9:0b:fb:c5: a9:de:3a:74:27:e9:dc:80:73:ea:e2:30:c0:63:ee: 0a:3b:b0:ea:99:dd:2a:fa:36:ce:0c:84:4c:0c:a8: 18:09:1d:92:1a:5c:e3:58:ef:c5:ce:bc:a8:bb:5a: 52:dc:04:b9:49:c0:00:cf:54:9e:8b:ed:c1:8c:51: 6a:f5:dc:41:84:59:1b:fa:d6:df:48:b8:bb:8e:d2: e5:93:01:f7:24:da:63:47:e2:24:1e:ff:9f:00:47: 15:87:a8:32:fb:68:65:a3:6e:a5:ad:e2:2c:52:a6: 45:84:34:5c:48:b4:2f:1f:81:f2:6e:a0:fb:3e:14: f4:89:8e:c8:46:ed:99:21:34:e6:66:55:7f:aa:c9: a7:80:d8:c0:71:61:0e:2e:98:3d:77:49:bd:eb:d4: 67:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C8:72:DB:F9:95:67:54:FB:9D:3F:1D:BE:CC:C5:21:8C:6F:85:1D X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f460::/44 Signature Algorithm: sha256WithRSAEncryption 4f:86:0b:0d:4c:d7:1d:3d:60:50:18:f7:b7:7f:90:99:d2:a3: cd:a8:b6:bf:52:30:83:2c:26:15:1b:d2:92:d9:77:30:34:0d: d6:fe:f2:bd:32:b6:9d:eb:21:63:70:6e:8d:e2:3e:3c:4e:ba: 83:8c:fb:4f:eb:67:aa:47:5b:a9:6b:24:4b:7d:5b:2b:06:c2: 13:c6:11:e5:6d:de:6b:3c:ee:f9:47:ca:ae:c0:9f:17:61:3d: af:04:06:5b:67:ed:b5:f0:cf:48:ff:71:ae:df:7d:f3:45:d7: fd:36:f5:42:35:d2:29:7b:da:8e:2b:79:8d:33:99:f9:19:bf: 4b:18:a3:e9:85:56:3d:09:5e:1c:ae:4c:22:07:51:e9:ec:db: da:e1:6f:b5:1e:e8:25:4d:25:db:f5:9f:46:55:bf:77:59:f8: 5a:52:6d:e0:cf:10:e9:5f:fb:5e:18:87:88:bf:42:c0:8b:6e: 1f:43:04:59:eb:52:3b:7e:6e:88:64:65:20:a7:d4:fd:3d:89: b1:5c:71:4c:f4:1c:81:f7:bc:2b:5a:70:b3:9a:8b:d4:18:3a: 14:65:b2:2b:aa:3d:47:1c:d8:93:cd:f8:5a:98:90:e4:92:1e: 07:cd:f1:03:3e:e3:dc:b3:b7:34:9e:3a:80:69:2b:8d:92:1f: 71:f3:c8:cd -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUCLHaJOCITIKKoC3Zj3WGReFcgicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNTEyMjcxMzE5MDRaFw0yNjEyMjYxMzI0MDRaMDMxMTAvBgNV BAMTKERDQzg3MkRCRjk5NTY3NTRGQjlEM0YxREJFQ0NDNTIxOEM2Rjg1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHgjakvjTF8xle6JTrbN21KiuC v47Yj2dcpzXg/LZlYycQj7xoaN5jVESEpbSAkpEXR/x7Ie6gR6lYWesCSLbYYgY6 UbiDEkzwldHfz4n07nfxHMWtmeTJFqgPjiqgDlcWizso2Qv7xaneOnQn6dyAc+ri MMBj7go7sOqZ3Sr6Ns4MhEwMqBgJHZIaXONY78XOvKi7WlLcBLlJwADPVJ6L7cGM UWr13EGEWRv61t9IuLuO0uWTAfck2mNH4iQe/58ARxWHqDL7aGWjbqWt4ixSpkWE NFxItC8fgfJuoPs+FPSJjshG7ZkhNOZmVX+qyaeA2MBxYQ4umD13Sb3r1GdbAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU3Mhy2/mVZ1T7nT8dvszFIYxvhR0wHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85ODFmOTc4Mi04OThlLTRiODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzQzNjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MDM0MzUzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1g/RgMA0GCSqGSIb3DQEBCwUAA4IBAQBP hgsNTNcdPWBQGPe3f5CZ0qPNqLa/UjCDLCYVG9KS2XcwNA3W/vK9Mrad6yFjcG6N 4j48TrqDjPtP62eqR1upayRLfVsrBsITxhHlbd5rPO75R8quwJ8XYT2vBAZbZ+21 8M9I/3Gu333zRdf9NvVCNdIpe9qOK3mNM5n5Gb9LGKPphVY9CV4crkwiB1Hp7Nva 4W+1HuglTSXb9Z9GVb93WfhaUm3gzxDpX/teGIeIv0LAi24fQwRZ61I7fm6IZGUg p9T9PYmxXHFM9ByB97wrWnCzmovUGDoUZbIrqj1HHNiTzfhamJDkkh4HzfEDPuPc s7c0njqAaSuNkh9x88jN -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:21 2026 by rpki-client