This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130303a3a2f34302d3430203d3e20323034323131.roa File: 326131343a373538363a363130303a3a2f34302d3430203d3e20323034323131.roa (raw, json) Hash identifier: 19M0+L8lsNIFDtff0HfVclIoXr1C9PUiZKAd5BnzLVk= Subject key identifier: 6F:06:75:81:92:F5:42:C5:62:5A:09:50:53:CD:08:DE:FA:EB:99:94 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 166212F8E0FE6E7017D48FBBA57A4A09F0433519 Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130303a3a2f34302d3430203d3e20323034323131.roa Signing time: Wed 31 Dec 2025 04:53:16 +0000 ROA not before: Wed 31 Dec 2025 04:48:16 +0000 ROA not after: Wed 30 Dec 2026 04:53:16 +0000 asID: 204211 IP address blocks: 2a14:7586:6100::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:62:12:f8:e0:fe:6e:70:17:d4:8f:bb:a5:7a:4a:09:f0:43:35:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Dec 31 04:48:16 2025 GMT Not After : Dec 30 04:53:16 2026 GMT Subject: CN=6F06758192F542C5625A095053CD08DEFAEB9994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a4:ef:c5:c3:b8:38:ff:b8:d8:f2:68:00:7d: 3b:8c:10:6c:51:16:92:6e:3f:4a:57:6e:52:40:02: 95:8f:9b:c7:3a:f5:75:77:7f:c1:5a:61:e9:b1:bc: 0a:f1:73:6a:82:f9:25:30:65:72:98:3b:67:7a:09: 06:ed:5d:36:1d:ba:6d:ce:19:2d:ad:71:5a:c4:f1: 1f:59:2d:98:86:e2:f7:44:69:76:3b:f7:d6:00:2a: c5:b2:0d:0d:44:71:9f:fd:ca:e9:85:22:1c:fd:f9: 05:b2:6e:18:08:da:07:ba:c2:b9:2b:b7:ab:f4:93: 6e:7e:08:8f:98:ec:67:a0:1f:9e:f3:00:d8:42:fb: 30:51:ec:95:2b:c5:da:19:16:c8:94:be:d1:e2:27: 5d:3a:1c:f1:26:a0:7c:74:da:d0:6c:bd:32:f1:e5: d3:bb:33:51:98:9f:da:fa:83:3d:a6:0e:66:be:fa: 85:fe:4e:58:ec:8d:ff:03:27:0c:23:77:8f:73:4c: 3e:0c:57:86:0b:93:b9:ae:43:ee:55:6e:ec:31:db: 53:b2:78:d4:8c:57:bf:c8:1e:04:0d:8d:c8:72:89: 99:57:23:50:79:c7:e4:cb:1a:b1:94:6f:76:03:ad: bf:4f:7f:20:d1:de:c7:28:29:f4:d1:27:6e:c8:8c: cf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:06:75:81:92:F5:42:C5:62:5A:09:50:53:CD:08:DE:FA:EB:99:94 X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130303a3a2f34302d3430203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6100::/40 Signature Algorithm: sha256WithRSAEncryption 0e:ea:26:5a:67:2b:ae:11:80:8b:93:4d:da:eb:86:81:54:fc: 68:19:3a:76:43:fb:84:72:b2:ce:5a:cc:5a:09:42:f0:36:e5: a1:98:8e:11:4e:64:1e:37:c9:8b:c7:54:8c:43:56:9d:fd:59: a8:60:e5:68:62:1a:98:c2:ba:2e:36:7c:78:90:e8:89:76:34: 02:79:ba:fb:75:ad:d7:55:e9:0b:aa:f0:70:b3:f4:5b:e4:04: 5f:04:22:f1:fa:aa:7d:18:3a:48:a6:04:67:02:09:74:51:f4: 29:96:1e:3c:b6:19:a8:cf:c6:dd:92:ba:35:92:65:40:97:91: d5:57:51:e4:47:5c:3f:e0:c1:43:e0:12:02:28:71:c4:5e:01: e5:eb:39:da:4c:de:16:65:98:07:80:9d:0b:90:05:5b:d7:22: 84:b4:31:73:74:6c:9b:d4:85:40:0e:d2:92:9b:63:3b:6c:ad: 23:e9:0e:54:13:90:1c:bb:b4:96:61:18:af:1c:7e:02:e2:97: c9:54:59:4e:39:2a:6a:16:da:23:8f:bf:d2:63:aa:57:d6:5d: 16:73:5f:f2:01:a7:8f:b6:e7:52:8e:5e:81:65:ce:58:34:89: 26:19:f2:5c:b0:63:3b:ac:c5:fb:de:cc:66:17:3c:2f:83:d9: 7f:53:49:5f -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUFmIS+OD+bnAX1I+7pXpKCfBDNRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNTEyMzEwNDQ4MTZaFw0yNjEyMzAwNDUzMTZaMDMxMTAvBgNV BAMTKDZGMDY3NTgxOTJGNTQyQzU2MjVBMDk1MDUzQ0QwOERFRkFFQjk5OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmpO/Fw7g4/7jY8mgAfTuMEGxR FpJuP0pXblJAApWPm8c69XV3f8FaYemxvArxc2qC+SUwZXKYO2d6CQbtXTYdum3O GS2tcVrE8R9ZLZiG4vdEaXY799YAKsWyDQ1EcZ/9yumFIhz9+QWybhgI2ge6wrkr t6v0k25+CI+Y7GegH57zANhC+zBR7JUrxdoZFsiUvtHiJ106HPEmoHx02tBsvTLx 5dO7M1GYn9r6gz2mDma++oX+Tljsjf8DJwwjd49zTD4MV4YLk7muQ+5Vbuwx21Oy eNSMV7/IHgQNjchyiZlXI1B5x+TLGrGUb3YDrb9PfyDR3scoKfTRJ27IjM/lAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUbwZ1gZL1QsViWglQU80I3vrrmZQwHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1hmEwDQYJKoZIhvcNAQELBQADggEBAA7q JlpnK64RgIuTTdrrhoFU/GgZOnZD+4Ryss5azFoJQvA25aGYjhFOZB43yYvHVIxD Vp39Wahg5WhiGpjCui42fHiQ6Il2NAJ5uvt1rddV6Quq8HCz9FvkBF8EIvH6qn0Y OkimBGcCCXRR9CmWHjy2GajPxt2SujWSZUCXkdVXUeRHXD/gwUPgEgIoccReAeXr OdpM3hZlmAeAnQuQBVvXIoS0MXN0bJvUhUAO0pKbYztsrSPpDlQTkBy7tJZhGK8c fgLil8lUWU45KmoW2iOPv9JjqlfWXRZzX/IBp4+251KOXoFlzlg0iSYZ8lywYzus xfvezGYXPC+D2X9TSV8= -----END CERTIFICATE-----Generated at Wed Jan 21 01:15:02 2026 by rpki-client