This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: dJUl+RAxxY+nIO2HtMh4e2KW3S6TxZr3e2E6ku/vRA8= Subject key identifier: 5E:DD:ED:1F:CB:47:25:D5:69:9C:A1:84:E6:8E:3C:57:40:85:4C:1D Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 69D47A42B9A61F998A2EDF8717D3EA1A2AD132FA Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa Signing time: Tue 30 Dec 2025 08:53:16 +0000 ROA not before: Tue 30 Dec 2025 08:48:16 +0000 ROA not after: Tue 29 Dec 2026 08:53:16 +0000 asID: 204211 IP address blocks: 2a14:7586:6105::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d4:7a:42:b9:a6:1f:99:8a:2e:df:87:17:d3:ea:1a:2a:d1:32:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Dec 30 08:48:16 2025 GMT Not After : Dec 29 08:53:16 2026 GMT Subject: CN=5EDDED1FCB4725D5699CA184E68E3C5740854C1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:93:fb:d2:b1:9d:d5:52:b7:c6:1c:88:3c:e9: 97:74:3e:39:c1:5d:77:99:a1:af:5f:77:a2:75:53: 1f:c7:89:2d:56:0d:ef:65:32:93:29:3d:f1:35:84: 81:65:20:46:bc:c5:e6:67:04:c1:ef:44:6e:ff:6f: dd:29:c0:27:86:cd:09:2d:e9:2e:cf:8a:78:3d:1a: 7a:26:45:28:ed:d2:bf:d8:7a:6c:3c:c8:52:78:a1: 2e:05:49:42:54:b8:f7:62:1e:42:d9:4d:45:94:e5: b3:44:03:c2:1f:df:09:8d:a4:a3:1b:e7:2f:c8:60: 96:8a:18:e0:e1:c8:98:3f:02:9d:b0:a0:75:f0:32: e1:80:cd:3a:0d:cf:29:73:fe:26:2c:e8:0a:6a:33: 92:a3:19:a6:13:b7:7c:33:98:43:1a:2e:77:65:f4: 50:80:52:7d:25:7d:94:10:b9:62:a5:91:f2:89:02: 6c:9f:3d:b8:0b:2f:95:d6:dc:37:91:af:66:38:05: 61:af:0d:4f:af:39:48:f4:ba:6c:64:58:28:0a:e1: b5:22:ad:62:00:5d:15:3c:75:c7:6e:9d:13:6e:c4: 47:b6:12:3d:e1:c1:9b:27:54:68:32:b9:f0:96:0e: 22:6a:c0:89:dc:ab:21:e0:46:66:19:d9:b6:05:f7: 5a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DD:ED:1F:CB:47:25:D5:69:9C:A1:84:E6:8E:3C:57:40:85:4C:1D X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6105::/48 Signature Algorithm: sha256WithRSAEncryption 92:ee:17:08:25:62:23:a8:bf:63:69:87:9c:e2:2f:38:3a:fc: dd:8b:1c:cd:01:a5:ff:7e:84:d0:be:18:a2:55:93:4a:35:7a: 84:ee:92:47:97:60:17:05:66:b6:db:5f:88:32:fd:34:2d:d3: f6:24:da:48:7a:99:9d:fa:83:df:67:c7:4b:14:d3:00:3c:76: 05:17:a0:96:f7:68:7d:ae:d6:39:98:0d:fa:b2:39:21:bf:e6: 62:38:f4:b0:1a:22:0a:91:27:2a:30:8f:5e:c2:66:eb:e1:ea: 87:2f:07:43:c6:e3:98:43:eb:a3:25:c7:a1:d4:37:ea:62:b3: 62:db:13:d3:5d:3e:81:f4:6c:6d:9c:d0:f6:50:05:fa:1e:e4: a1:2b:b6:be:a0:4c:2d:b6:33:30:eb:e9:85:9c:13:91:f5:6c: 89:7b:21:97:34:fe:c9:de:c9:0b:c7:a4:e2:6c:f8:7d:4a:9a: cc:2e:07:1b:fa:02:e1:ad:47:04:c6:72:66:78:f4:f2:1e:12: f9:29:e0:38:43:2e:16:f2:3d:a5:22:da:6b:a7:08:c5:21:c0: 95:74:5f:c4:de:7f:23:c3:ee:39:97:c7:1f:31:33:2c:e5:76: a5:d8:b9:0b:58:fb:17:9c:40:bb:3c:01:59:f0:8e:3e:a0:7e: 04:11:d7:35 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUadR6QrmmH5mKLt+HF9PqGirRMvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNTEyMzAwODQ4MTZaFw0yNjEyMjkwODUzMTZaMDMxMTAvBgNV BAMTKDVFRERFRDFGQ0I0NzI1RDU2OTlDQTE4NEU2OEUzQzU3NDA4NTRDMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyk/vSsZ3VUrfGHIg86Zd0PjnB XXeZoa9fd6J1Ux/HiS1WDe9lMpMpPfE1hIFlIEa8xeZnBMHvRG7/b90pwCeGzQkt 6S7Ping9GnomRSjt0r/Yemw8yFJ4oS4FSUJUuPdiHkLZTUWU5bNEA8If3wmNpKMb 5y/IYJaKGODhyJg/Ap2woHXwMuGAzToNzylz/iYs6ApqM5KjGaYTt3wzmEMaLndl 9FCAUn0lfZQQuWKlkfKJAmyfPbgLL5XW3DeRr2Y4BWGvDU+vOUj0umxkWCgK4bUi rWIAXRU8dcdunRNuxEe2Ej3hwZsnVGgyufCWDiJqwIncqyHgRmYZ2bYF91rFAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUXt3tH8tHJdVpnKGE5o48V0CFTB0wHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMDM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmEFMA0GCSqGSIb3DQEBCwUAA4IBAQCS 7hcIJWIjqL9jaYec4i84OvzdixzNAaX/foTQvhiiVZNKNXqE7pJHl2AXBWa221+I Mv00LdP2JNpIepmd+oPfZ8dLFNMAPHYFF6CW92h9rtY5mA36sjkhv+ZiOPSwGiIK kScqMI9ewmbr4eqHLwdDxuOYQ+ujJceh1DfqYrNi2xPTXT6B9GxtnND2UAX6HuSh K7a+oEwttjMw6+mFnBOR9WyJeyGXNP7J3skLx6TibPh9SprMLgcb+gLhrUcExnJm ePTyHhL5KeA4Qy4W8j2lItprpwjFIcCVdF/E3n8jw+45l8cfMTMs5Xal2LkLWPsX nEC7PAFZ8I4+oH4EEdc1 -----END CERTIFICATE-----Generated at Wed Jan 21 01:15:34 2026 by rpki-client