This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: 7D9SE9hA3IauYZMWcroODdOii1KjgZ4/x1FBa76tU3Q= Subject key identifier: B7:20:44:17:20:20:10:5F:C7:F6:4A:C4:4A:AD:E6:6A:5A:98:00:9E Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 2DE0524A19AB561C5E7DD0DCCE0790F995197688 Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa Signing time: Mon 29 Dec 2025 06:33:24 +0000 ROA not before: Mon 29 Dec 2025 06:28:24 +0000 ROA not after: Mon 28 Dec 2026 06:33:24 +0000 asID: 204211 IP address blocks: 2a14:7586:6102::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e0:52:4a:19:ab:56:1c:5e:7d:d0:dc:ce:07:90:f9:95:19:76:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Dec 29 06:28:24 2025 GMT Not After : Dec 28 06:33:24 2026 GMT Subject: CN=B72044172020105FC7F64AC44AADE66A5A98009E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bd:b7:d0:81:c1:50:8a:3b:f6:4f:14:d0:45: 47:62:67:bc:84:30:d0:6f:92:84:3e:17:de:ae:58: 84:5f:b4:db:5b:e2:b0:6a:52:95:33:e5:05:78:75: d8:ad:82:ee:cc:54:f7:48:ba:16:02:4e:75:d2:31: ac:f7:d7:6e:c9:a5:89:23:50:e2:56:c6:2b:8e:05: 4b:0b:58:fe:4a:ba:8e:5d:9e:a1:cb:92:b3:b8:d6: e5:b3:cf:4d:86:06:df:f6:87:23:fe:1d:c2:fd:e9: ba:00:d7:d3:a5:07:d5:54:37:3a:f0:1a:5f:06:9f: c1:b6:c2:4d:7c:5b:3f:d9:96:43:44:68:6a:6d:b7: 1d:54:ae:b4:f0:91:57:cd:ab:71:b6:df:c7:b6:d0: ba:8c:0f:e0:2f:b3:61:9d:cc:95:82:dd:ec:18:33: 32:e4:81:9b:f4:ce:41:67:23:e4:c1:ff:2f:a9:c8: a4:6f:e1:e2:98:7b:1e:02:43:ca:25:11:a4:5e:2d: f3:ad:8c:c2:d7:70:4d:08:0c:7c:78:69:8d:56:c4: ca:cb:1c:79:9d:78:8e:fb:ad:e6:b5:17:21:ab:01: 3f:26:a7:84:94:77:3c:ea:9d:d0:e1:de:21:59:1c: cb:f2:61:05:ea:4b:fe:dc:20:02:3d:6c:d1:b9:7b: 0e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:20:44:17:20:20:10:5F:C7:F6:4A:C4:4A:AD:E6:6A:5A:98:00:9E X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6102::/48 Signature Algorithm: sha256WithRSAEncryption 0c:25:1a:72:b3:64:a2:c9:61:b4:dd:ef:f5:ea:cb:52:24:95: 0c:f5:e2:e7:88:25:41:85:6c:57:3a:9f:07:2c:f2:27:b3:9a: ab:eb:a3:38:70:a3:b2:e8:d8:c7:af:b7:57:93:2f:a7:c6:91: a3:9b:d2:bf:2f:8c:50:8f:94:e5:40:d3:63:1a:4d:2c:02:09: f5:aa:dc:fe:61:77:5e:87:f4:48:48:e3:3c:a6:01:07:3b:51: a1:e8:aa:06:f5:e6:8b:02:29:98:ea:0a:c9:1f:14:4d:2b:a1: 6d:5c:08:bc:bc:54:f3:53:f2:f0:e6:c0:dc:93:84:9e:df:ce: 9c:b8:d0:55:13:1d:43:61:0d:90:9d:50:aa:fc:80:86:5f:48: 31:a0:77:84:ab:1c:3f:b5:3e:bd:7f:f1:ea:b0:89:27:4f:79: 72:8f:5b:39:af:c0:be:7d:82:3e:f7:db:82:e4:32:9f:d2:7f: e0:a9:99:be:05:cf:ed:3d:6b:ca:3f:29:a6:5e:7e:f0:8a:70: 19:18:a5:ba:fa:86:0e:31:f4:05:52:72:a0:83:88:36:01:5b: b4:59:ad:fb:3b:d6:84:b3:7d:e1:ac:00:89:22:1b:3e:e8:63: 9c:25:a3:14:10:14:c8:66:45:3f:18:ce:15:79:da:45:c8:41: 98:d5:c7:37 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIULeBSShmrVhxefdDczgeQ+ZUZdogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNTEyMjkwNjI4MjRaFw0yNjEyMjgwNjMzMjRaMDMxMTAvBgNV BAMTKEI3MjA0NDE3MjAyMDEwNUZDN0Y2NEFDNDRBQURFNjZBNUE5ODAwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCivbfQgcFQijv2TxTQRUdiZ7yE MNBvkoQ+F96uWIRftNtb4rBqUpUz5QV4dditgu7MVPdIuhYCTnXSMaz3127JpYkj UOJWxiuOBUsLWP5Kuo5dnqHLkrO41uWzz02GBt/2hyP+HcL96boA19OlB9VUNzrw Gl8Gn8G2wk18Wz/ZlkNEaGpttx1UrrTwkVfNq3G238e20LqMD+Avs2GdzJWC3ewY MzLkgZv0zkFnI+TB/y+pyKRv4eKYex4CQ8olEaReLfOtjMLXcE0IDHx4aY1WxMrL HHmdeI77rea1FyGrAT8mp4SUdzzqndDh3iFZHMvyYQXqS/7cIAI9bNG5ew4DAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUtyBEFyAgEF/H9krESq3malqYAJ4wHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmECMA0GCSqGSIb3DQEBCwUAA4IBAQAM JRpys2SiyWG03e/16stSJJUM9eLniCVBhWxXOp8HLPIns5qr66M4cKOy6NjHr7dX ky+nxpGjm9K/L4xQj5TlQNNjGk0sAgn1qtz+YXdeh/RISOM8pgEHO1Gh6KoG9eaL AimY6grJHxRNK6FtXAi8vFTzU/Lw5sDck4Se386cuNBVEx1DYQ2QnVCq/ICGX0gx oHeEqxw/tT69f/HqsIknT3lyj1s5r8C+fYI+99uC5DKf0n/gqZm+Bc/tPWvKPymm Xn7winAZGKW6+oYOMfQFUnKgg4g2AVu0Wa37O9aEs33hrACJIhs+6GOcJaMUEBTI ZkU/GM4VedpFyEGY1cc3 -----END CERTIFICATE-----Generated at Wed Jan 21 01:15:50 2026 by rpki-client