This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: Mx3SvpD488YSM7QhBcQhFXDhTEiCBu3kBzOrFFQvDHI= Subject key identifier: A5:91:A1:A0:6F:4C:99:F3:86:7C:2C:37:C8:B0:6D:24:A1:A7:87:87 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 6F93884D098BA317D637A4B51A505AB5C6C211FF Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa Signing time: Tue 30 Dec 2025 05:25:01 +0000 ROA not before: Tue 30 Dec 2025 05:20:01 +0000 ROA not after: Tue 29 Dec 2026 05:25:01 +0000 asID: 204211 IP address blocks: 2a14:7586:6104::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:93:88:4d:09:8b:a3:17:d6:37:a4:b5:1a:50:5a:b5:c6:c2:11:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Dec 30 05:20:01 2025 GMT Not After : Dec 29 05:25:01 2026 GMT Subject: CN=A591A1A06F4C99F3867C2C37C8B06D24A1A78787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4d:6e:38:f4:1f:dd:16:a3:eb:78:13:93:5f: b9:b3:ff:0d:33:a9:8f:c1:20:d0:0a:06:b4:fb:d5: 04:35:a3:10:6c:19:8d:be:4d:6d:5a:dd:4e:e9:4f: df:30:4f:97:44:a0:3f:9a:83:3d:b6:79:7e:01:67: 51:c4:03:8a:93:ad:08:20:32:07:39:bf:dc:84:82: f5:c9:27:f2:6b:38:23:a4:28:d8:84:e5:66:87:75: ca:c1:f7:1f:c7:4c:30:19:a3:95:6d:4e:72:38:f1: f1:b4:8c:6e:3a:6d:e2:47:1a:b1:43:71:82:76:fa: 04:c8:8e:2c:61:4e:6c:c5:6e:0a:ba:72:ff:81:cc: 0c:c1:30:b0:dc:bd:5f:5a:e3:a3:8a:e6:1d:16:89: 23:2e:4f:80:25:0c:d7:8a:90:ab:74:46:ba:84:6c: 45:6e:74:49:34:34:e9:32:bb:8a:e1:c9:71:3c:84: 4b:6d:c5:f3:ac:33:97:eb:9d:5f:35:74:00:f0:ec: b2:65:b9:f9:cd:5a:c9:a0:15:dd:f4:6c:be:b9:09: 92:c7:e4:3c:05:20:44:ef:f7:50:0a:00:8f:99:aa: d4:c8:28:c0:ea:95:52:d3:93:ad:8b:5e:9e:2f:42: 74:27:ce:ea:cb:8b:34:35:60:b7:3c:c4:7f:d3:4b: af:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:91:A1:A0:6F:4C:99:F3:86:7C:2C:37:C8:B0:6D:24:A1:A7:87:87 X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6104::/48 Signature Algorithm: sha256WithRSAEncryption 1b:43:8f:08:c2:7a:f2:98:24:8a:c8:db:c6:2a:a3:7a:ec:97: e7:62:38:f9:44:cb:75:b6:6d:b5:1e:91:32:3e:2f:4b:3c:2d: 81:04:13:37:4d:df:e5:da:29:a2:89:6e:a1:d8:2d:1d:7a:f6: 6f:d6:c0:40:20:f7:4f:90:ef:a1:e9:90:55:70:97:1d:14:82: da:8a:08:f0:6c:64:d5:99:75:b1:63:21:23:a4:b7:b3:ab:6d: f5:d0:34:17:d9:3c:04:f1:54:05:e1:5f:49:72:9f:c2:64:54: a3:2d:ca:9f:a0:a9:18:a0:d1:10:93:b3:f6:c5:52:6c:4b:cb: 6d:2d:5e:7b:0a:38:1c:1d:85:df:0a:8f:3d:4d:91:7e:0c:26: 3a:25:92:d1:fa:12:3e:d1:bc:f5:04:41:1b:34:cb:de:c9:1d: 19:6b:75:5c:32:c3:87:3f:0e:fd:8b:4a:2a:50:ba:8b:98:c7: 45:f3:f7:e7:41:14:cb:e9:83:05:ce:77:74:00:9e:de:7c:10: 4a:49:e3:c3:f0:b1:46:ec:a5:8b:90:ba:3e:9b:83:3d:31:63: 82:3b:ce:67:84:f4:e9:d9:31:b5:90:7a:d8:4c:8f:b6:81:00: 5d:7c:60:ce:ab:d0:49:b4:ad:86:8e:73:6a:2d:6f:15:b9:05: a3:08:a4:93 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUb5OITQmLoxfWN6S1GlBatcbCEf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNTEyMzAwNTIwMDFaFw0yNjEyMjkwNTI1MDFaMDMxMTAvBgNV BAMTKEE1OTFBMUEwNkY0Qzk5RjM4NjdDMkMzN0M4QjA2RDI0QTFBNzg3ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcTW449B/dFqPreBOTX7mz/w0z qY/BINAKBrT71QQ1oxBsGY2+TW1a3U7pT98wT5dEoD+agz22eX4BZ1HEA4qTrQgg Mgc5v9yEgvXJJ/JrOCOkKNiE5WaHdcrB9x/HTDAZo5VtTnI48fG0jG46beJHGrFD cYJ2+gTIjixhTmzFbgq6cv+BzAzBMLDcvV9a46OK5h0WiSMuT4AlDNeKkKt0RrqE bEVudEk0NOkyu4rhyXE8hEttxfOsM5frnV81dADw7LJlufnNWsmgFd30bL65CZLH 5DwFIETv91AKAI+ZqtTIKMDqlVLTk62LXp4vQnQnzurLizQ1YLc8xH/TS69bAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUpZGhoG9MmfOGfCw3yLBtJKGnh4cwHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmEEMA0GCSqGSIb3DQEBCwUAA4IBAQAb Q48IwnrymCSKyNvGKqN67JfnYjj5RMt1tm21HpEyPi9LPC2BBBM3Td/l2imiiW6h 2C0devZv1sBAIPdPkO+h6ZBVcJcdFILaigjwbGTVmXWxYyEjpLezq2310DQX2TwE 8VQF4V9Jcp/CZFSjLcqfoKkYoNEQk7P2xVJsS8ttLV57CjgcHYXfCo89TZF+DCY6 JZLR+hI+0bz1BEEbNMveyR0Za3VcMsOHPw79i0oqULqLmMdF8/fnQRTL6YMFznd0 AJ7efBBKSePD8LFG7KWLkLo+m4M9MWOCO85nhPTp2TG1kHrYTI+2gQBdfGDOq9BJ tK2GjnNqLW8VuQWjCKST -----END CERTIFICATE-----Generated at Wed Jan 21 01:15:14 2026 by rpki-client