This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: EI2JmFR4s32Lz8tNongWwvU2DoYm1aiqo+qr8ZW+vPo= Subject key identifier: A6:0A:65:24:9B:85:FE:23:24:15:F6:EF:30:42:E2:97:A9:F9:47:D0 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 6734F73249A54A66E7FDBBB3E71016E0C9940D64 Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa Signing time: Tue 30 Dec 2025 05:18:16 +0000 ROA not before: Tue 30 Dec 2025 05:13:16 +0000 ROA not after: Tue 29 Dec 2026 05:18:16 +0000 asID: 204211 IP address blocks: 2a14:7586:6103::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:34:f7:32:49:a5:4a:66:e7:fd:bb:b3:e7:10:16:e0:c9:94:0d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Dec 30 05:13:16 2025 GMT Not After : Dec 29 05:18:16 2026 GMT Subject: CN=A60A65249B85FE232415F6EF3042E297A9F947D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:08:f7:90:6e:30:22:f7:d5:06:c4:59:22:f9: d8:63:c8:b7:c0:68:5c:0d:fa:bd:a6:92:59:da:cc: cc:06:1e:e8:95:08:de:8e:48:f9:0e:1a:fc:6d:99: 57:25:2f:01:dc:17:02:b6:ad:82:b7:c5:f9:08:1e: b9:ea:ff:27:dd:af:65:38:0b:f0:e6:69:a5:3e:65: 09:72:e6:ad:9b:3b:98:0c:9e:11:90:6f:f9:f9:96: dd:7c:07:6f:c5:3b:9d:75:73:1f:b7:10:74:33:c0: 94:47:71:77:d7:1f:ee:c7:17:99:0b:05:4e:82:7a: 4d:db:7a:52:4d:10:91:e7:38:90:44:48:67:fe:2d: 07:cf:ca:90:2b:27:0e:99:b5:42:54:af:0d:e1:ea: e0:40:bd:f2:a5:38:d1:bb:48:41:5d:01:ae:60:d3: 45:38:91:07:97:fc:8b:d5:b0:d4:62:17:6b:e0:5f: 54:90:43:07:fe:7d:c2:27:53:b2:ca:cb:e6:b2:6d: c7:12:b9:bc:2b:36:5c:23:b9:6e:ad:33:17:ee:c2: 7c:59:ff:97:0c:39:5e:05:e0:b2:9f:f5:ca:a5:a2: ff:c7:4b:92:15:22:20:19:3d:ef:4d:83:65:d1:54: 87:45:cf:ad:a8:c8:63:b7:7f:1a:3c:88:6d:b6:b6: c9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0A:65:24:9B:85:FE:23:24:15:F6:EF:30:42:E2:97:A9:F9:47:D0 X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6103::/48 Signature Algorithm: sha256WithRSAEncryption 96:b4:f0:41:81:93:41:d6:ed:79:9b:fe:56:84:77:5f:ec:72: e7:87:ad:4b:3b:1e:c5:32:87:2d:f0:92:c8:0d:a0:de:25:7d: 27:f9:62:b1:44:aa:b8:cb:4f:d7:5d:25:d8:9b:2b:cd:bb:f6: b4:6c:12:b8:20:a7:ad:0e:0c:7a:8a:0c:96:c1:8d:cd:f8:f2: be:98:55:72:0b:b9:05:28:03:c2:5a:10:95:b3:a2:40:9f:05: a7:c5:b2:33:68:44:0a:4c:fb:af:85:49:60:50:63:b3:9f:09: 7b:2b:e0:03:e3:c9:d3:51:c5:ec:c8:80:e3:47:2d:8a:51:f3: 42:2e:e2:21:34:cd:fd:ec:dd:a9:92:c3:24:0a:69:c4:75:f4: 59:09:de:ae:ef:0d:e9:be:8d:20:6a:89:06:e7:ab:9c:00:6e: ee:f9:3e:93:bb:bd:ca:58:f0:4a:ff:d1:d0:0b:32:5f:bd:9b: 1e:79:c0:c1:fa:04:08:4d:b4:96:b3:68:ad:1a:ac:ed:b9:f8: 53:bd:e1:19:21:c0:43:30:a7:f1:ff:aa:09:33:03:ff:95:f6: da:9c:7d:83:c8:20:dc:76:39:24:83:b1:41:22:0b:72:e5:0a: cb:87:f2:da:c9:85:9f:02:f4:08:d5:e6:89:36:d5:b4:46:9d: 0a:46:4a:7b -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUZzT3MkmlSmbn/buz5xAW4MmUDWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNTEyMzAwNTEzMTZaFw0yNjEyMjkwNTE4MTZaMDMxMTAvBgNV BAMTKEE2MEE2NTI0OUI4NUZFMjMyNDE1RjZFRjMwNDJFMjk3QTlGOTQ3RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoCPeQbjAi99UGxFki+dhjyLfA aFwN+r2mklnazMwGHuiVCN6OSPkOGvxtmVclLwHcFwK2rYK3xfkIHrnq/yfdr2U4 C/DmaaU+ZQly5q2bO5gMnhGQb/n5lt18B2/FO511cx+3EHQzwJRHcXfXH+7HF5kL BU6Cek3belJNEJHnOJBESGf+LQfPypArJw6ZtUJUrw3h6uBAvfKlONG7SEFdAa5g 00U4kQeX/IvVsNRiF2vgX1SQQwf+fcInU7LKy+aybccSubwrNlwjuW6tMxfuwnxZ /5cMOV4F4LKf9cqlov/HS5IVIiAZPe9Ng2XRVIdFz62oyGO3fxo8iG22tsltAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUpgplJJuF/iMkFfbvMELil6n5R9AwHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmEDMA0GCSqGSIb3DQEBCwUAA4IBAQCW tPBBgZNB1u15m/5WhHdf7HLnh61LOx7FMoct8JLIDaDeJX0n+WKxRKq4y0/XXSXY myvNu/a0bBK4IKetDgx6igyWwY3N+PK+mFVyC7kFKAPCWhCVs6JAnwWnxbIzaEQK TPuvhUlgUGOznwl7K+AD48nTUcXsyIDjRy2KUfNCLuIhNM397N2pksMkCmnEdfRZ Cd6u7w3pvo0gaokG56ucAG7u+T6Tu73KWPBK/9HQCzJfvZseecDB+gQITbSWs2it GqztufhTveEZIcBDMKfx/6oJMwP/lfbanH2DyCDcdjkkg7FBIgty5QrLh/LayYWf AvQI1eaJNtW0Rp0KRkp7 -----END CERTIFICATE-----Generated at Wed Jan 21 01:15:34 2026 by rpki-client