This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: DvKmhwWtZsD6TNvQ0eoVfIFrblMkYKUJ35ZR+X3ClBk= Subject key identifier: 46:8C:CF:FC:22:8C:17:50:4B:10:BB:0A:2E:EF:D7:88:1B:62:5F:2D Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 70C8260C27F743440657F6EA620EC4C1E2C9747E Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa Signing time: Mon 29 Dec 2025 06:21:28 +0000 ROA not before: Mon 29 Dec 2025 06:16:28 +0000 ROA not after: Mon 28 Dec 2026 06:21:28 +0000 asID: 204211 IP address blocks: 2a14:7586:6101::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c8:26:0c:27:f7:43:44:06:57:f6:ea:62:0e:c4:c1:e2:c9:74:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Dec 29 06:16:28 2025 GMT Not After : Dec 28 06:21:28 2026 GMT Subject: CN=468CCFFC228C17504B10BB0A2EEFD7881B625F2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9c:d9:4a:1e:d7:ed:30:f4:66:58:05:d3:d6: 45:91:24:2b:6e:c6:68:db:af:2b:c0:e3:65:f8:ce: 1a:ee:77:73:35:b5:9e:12:f6:b6:3c:aa:ef:00:cd: ac:b0:a1:68:a9:49:80:5f:47:db:70:2d:33:75:8a: 06:ce:1c:e2:8b:3f:13:95:93:84:02:27:c6:bd:35: 56:7b:f9:56:12:f4:43:97:28:2d:7f:9d:22:70:63: 5b:b3:c2:f7:65:55:3e:b9:4b:09:f1:ab:8d:e5:56: 87:87:e0:f8:9f:74:d8:5e:36:98:8f:2a:d9:ef:1f: f4:ec:d1:d6:5c:ea:a2:01:71:a1:b8:f2:ef:38:52: 25:e2:d7:8a:a3:a1:e8:ec:f4:7a:0d:12:c7:40:27: f6:d8:86:1b:95:0f:8b:ad:ca:81:87:23:1a:32:1f: 61:71:fa:87:61:57:13:99:9c:75:1e:fc:72:07:b5: 11:af:e3:ef:c2:9c:56:ee:86:8a:c5:a9:83:8c:6f: c6:a6:2d:8d:8e:38:4a:da:69:ec:69:14:d3:04:88: 12:6f:36:e3:a8:4f:fb:85:2f:77:45:ba:3c:48:44: d0:d7:b6:31:82:a4:b9:db:71:02:a8:9f:55:9d:31: d7:7a:2a:a0:59:cf:68:7e:ce:e6:ac:55:b5:c1:cc: 3b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8C:CF:FC:22:8C:17:50:4B:10:BB:0A:2E:EF:D7:88:1B:62:5F:2D X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6101::/48 Signature Algorithm: sha256WithRSAEncryption 3d:95:df:69:5a:8a:da:f3:de:48:49:bf:4a:1e:38:29:01:cd: cc:e2:f8:e1:e0:1a:a1:ce:6a:36:3a:38:6a:28:05:d1:a7:d3: 10:26:3d:83:1f:1f:b8:e7:97:b0:7a:c4:1c:60:a3:79:3f:a5: 6f:10:10:cd:6f:45:92:d9:8f:7e:b4:0b:54:67:59:67:1a:96: 96:f8:a1:be:71:76:dc:6e:47:5b:a0:3a:2e:42:9b:33:39:4e: 02:7f:4f:77:80:79:d2:c7:9e:f7:a3:83:40:0f:fa:dd:a3:84: b3:c0:3c:65:fc:59:fd:a4:f8:a1:e0:61:7f:3a:da:d5:a9:67: 52:91:a0:4a:74:9c:2b:77:3f:67:f7:a2:8b:05:91:1b:6e:42: 34:f8:3e:3f:f1:1e:dd:4a:2a:01:1a:95:71:1c:39:9a:2f:b8: 10:39:4f:ac:04:bb:1c:ba:42:e6:33:88:c1:ac:07:11:8f:43: ff:58:76:86:aa:ef:5d:94:cf:02:7d:d9:c0:ac:23:70:a3:3c: 1e:72:ea:23:83:16:af:a4:27:55:2b:7f:22:bf:38:07:f3:dd: 35:00:3a:b3:89:ab:ad:a7:3c:64:73:52:b6:aa:c0:dd:59:36: 2f:cb:98:7f:f6:2f:b3:44:b4:7b:a8:69:d2:43:db:37:fd:c2: 42:21:88:b3 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUcMgmDCf3Q0QGV/bqYg7EweLJdH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNTEyMjkwNjE2MjhaFw0yNjEyMjgwNjIxMjhaMDMxMTAvBgNV BAMTKDQ2OENDRkZDMjI4QzE3NTA0QjEwQkIwQTJFRUZENzg4MUI2MjVGMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPnNlKHtftMPRmWAXT1kWRJCtu xmjbryvA42X4zhrud3M1tZ4S9rY8qu8AzaywoWipSYBfR9twLTN1igbOHOKLPxOV k4QCJ8a9NVZ7+VYS9EOXKC1/nSJwY1uzwvdlVT65Swnxq43lVoeH4PifdNheNpiP KtnvH/Ts0dZc6qIBcaG48u84UiXi14qjoejs9HoNEsdAJ/bYhhuVD4utyoGHIxoy H2Fx+odhVxOZnHUe/HIHtRGv4+/CnFbuhorFqYOMb8amLY2OOEraaexpFNMEiBJv NuOoT/uFL3dFujxIRNDXtjGCpLnbcQKon1WdMdd6KqBZz2h+zuasVbXBzDsZAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQURozP/CKMF1BLELsKLu/XiBtiXy0wHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmEBMA0GCSqGSIb3DQEBCwUAA4IBAQA9 ld9pWora895ISb9KHjgpAc3M4vjh4Bqhzmo2OjhqKAXRp9MQJj2DHx+455ewesQc YKN5P6VvEBDNb0WS2Y9+tAtUZ1lnGpaW+KG+cXbcbkdboDouQpszOU4Cf093gHnS x573o4NAD/rdo4SzwDxl/Fn9pPih4GF/OtrVqWdSkaBKdJwrdz9n96KLBZEbbkI0 +D4/8R7dSioBGpVxHDmaL7gQOU+sBLscukLmM4jBrAcRj0P/WHaGqu9dlM8CfdnA rCNwozwecuojgxavpCdVK38ivzgH8901ADqziautpzxkc1K2qsDdWTYvy5h/9i+z RLR7qGnSQ9s3/cJCIYiz -----END CERTIFICATE-----Generated at Wed Jan 21 01:15:50 2026 by rpki-client