This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: hfCW4qJm06QDdE+1PQmTBkAa6OyHhAnzRXdcN0xPhW4= Subject key identifier: F8:D5:C9:77:7D:D1:50:48:72:92:2F:60:BB:EC:86:FA:60:2D:27:90 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 2191CA932651BB928E115070E1EAD86D217438D3 Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa Signing time: Sun 28 Dec 2025 23:59:26 +0000 ROA not before: Sun 28 Dec 2025 23:54:26 +0000 ROA not after: Sun 27 Dec 2026 23:59:26 +0000 asID: 204211 IP address blocks: 2a14:7586:6100::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:91:ca:93:26:51:bb:92:8e:11:50:70:e1:ea:d8:6d:21:74:38:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Dec 28 23:54:26 2025 GMT Not After : Dec 27 23:59:26 2026 GMT Subject: CN=F8D5C9777DD1504872922F60BBEC86FA602D2790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c5:ad:86:51:af:92:d3:c7:fa:30:f8:2f:6f: a0:cd:56:f2:5e:0b:a2:4c:6c:89:a7:cb:ec:9e:40: 0d:c8:d3:3b:12:08:be:6c:fa:af:84:04:8b:93:17: b4:5f:71:43:06:8f:9c:b0:56:45:b6:19:87:81:97: fd:a7:f5:62:11:9c:82:6b:02:d7:d6:92:e2:aa:98: 23:62:5b:24:92:a5:d8:01:05:fd:ee:3a:14:b5:bf: b3:f6:de:c9:7d:46:64:73:ff:eb:3e:e7:0b:c7:9d: af:09:7a:58:5f:f8:24:92:29:75:df:55:9b:fc:d0: 05:f9:ca:73:8e:19:8b:75:c8:40:3d:18:63:5c:f3: d0:d6:41:ec:26:3b:f5:21:e7:89:f0:03:48:3b:45: bc:7d:ca:00:8e:08:32:9a:d3:39:e1:5b:cb:87:66: 01:60:00:33:c8:1b:08:04:08:e6:c8:81:a9:98:03: 8e:56:b7:0e:24:e9:ed:e9:ec:54:07:c9:f6:b0:37: a3:74:f9:2f:1f:fb:ca:75:d7:b1:98:c0:32:27:b4: 7f:b4:5b:c2:80:48:5b:16:49:61:a5:ae:57:aa:e1: 1e:39:48:57:80:7b:bb:63:03:67:b5:cd:72:9a:91: 64:f0:e9:e6:8b:c7:bb:4e:3d:e2:f2:28:3f:63:91: 9d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D5:C9:77:7D:D1:50:48:72:92:2F:60:BB:EC:86:FA:60:2D:27:90 X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6100::/48 Signature Algorithm: sha256WithRSAEncryption b4:99:d0:40:66:fb:c0:62:f0:a7:b6:0a:18:a4:57:06:ca:a3: 08:f2:4e:c0:5c:91:48:fc:18:54:0a:4b:a2:96:a3:02:25:7a: 59:0e:04:85:43:c1:fa:4c:5c:db:6a:7e:a9:58:4a:ea:3e:19: ac:aa:3a:4c:22:da:08:1b:a0:e4:e7:8f:85:1d:19:bf:b3:84: 92:cc:da:c7:62:b5:8b:1c:6f:c5:bd:4f:84:38:e0:7f:d0:4c: b1:13:a7:76:3f:f4:be:d9:c4:23:83:ff:00:0d:5b:09:8e:51: 4f:e5:90:0c:ab:e0:e1:24:40:93:52:33:e1:62:8f:8b:5e:c8: 15:f8:9e:d9:e6:ff:4d:21:83:10:44:41:46:3d:b3:f8:a8:1f: eb:bd:c6:03:e6:42:93:b9:80:29:87:e4:f1:f7:d6:28:a6:7e: 45:9b:dd:ea:8b:aa:e2:9a:2a:6c:18:c6:e5:3f:2b:ff:10:b4: cb:c3:9a:5e:91:40:7d:0d:4d:62:02:35:a3:82:ea:32:d1:db: e2:15:f2:1e:c7:74:b2:96:ce:d6:74:c3:2f:7c:a3:4a:75:7f: 6e:e2:62:35:d6:51:91:8f:bd:93:28:a2:18:9e:c0:28:27:46: 5d:44:74:5c:70:69:23:3d:3b:15:f1:e0:6e:76:ee:0c:8e:9a: 84:2d:7a:40 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUIZHKkyZRu5KOEVBw4erYbSF0ONMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNTEyMjgyMzU0MjZaFw0yNjEyMjcyMzU5MjZaMDMxMTAvBgNV BAMTKEY4RDVDOTc3N0REMTUwNDg3MjkyMkY2MEJCRUM4NkZBNjAyRDI3OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtxa2GUa+S08f6MPgvb6DNVvJe C6JMbImny+yeQA3I0zsSCL5s+q+EBIuTF7RfcUMGj5ywVkW2GYeBl/2n9WIRnIJr AtfWkuKqmCNiWySSpdgBBf3uOhS1v7P23sl9RmRz/+s+5wvHna8Jelhf+CSSKXXf VZv80AX5ynOOGYt1yEA9GGNc89DWQewmO/Uh54nwA0g7Rbx9ygCOCDKa0znhW8uH ZgFgADPIGwgECObIgamYA45Wtw4k6e3p7FQHyfawN6N0+S8f+8p117GYwDIntH+0 W8KASFsWSWGlrleq4R45SFeAe7tjA2e1zXKakWTw6eaLx7tOPeLyKD9jkZ1ZAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU+NXJd33RUEhyki9gu+yG+mAtJ5AwHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmEAMA0GCSqGSIb3DQEBCwUAA4IBAQC0 mdBAZvvAYvCntgoYpFcGyqMI8k7AXJFI/BhUCkuilqMCJXpZDgSFQ8H6TFzban6p WErqPhmsqjpMItoIG6Dk54+FHRm/s4SSzNrHYrWLHG/FvU+EOOB/0EyxE6d2P/S+ 2cQjg/8ADVsJjlFP5ZAMq+DhJECTUjPhYo+LXsgV+J7Z5v9NIYMQREFGPbP4qB/r vcYD5kKTuYAph+Tx99Yopn5Fm93qi6rimipsGMblPyv/ELTLw5pekUB9DU1iAjWj guoy0dviFfIex3Syls7WdMMvfKNKdX9u4mI11lGRj72TKKIYnsAoJ0ZdRHRccGkj PTsV8eBudu4MjpqELXpA -----END CERTIFICATE-----Generated at Wed Jan 21 01:15:34 2026 by rpki-client