This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa File: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (raw, json) Hash identifier: vWCzOnh12VtJGg6RfrslnpFyun0vAz+2wk8UKDM7sNo= Subject key identifier: 14:5D:7A:47:E0:4E:22:3A:B0:9B:A1:66:BF:D1:39:65:CB:F2:46:D8 Certificate issuer: /CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Certificate serial: 026AC033375378B930418BA100C935A2D8A196E9 Authority key identifier: 2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa Signing time: Sat 10 Jan 2026 13:56:46 +0000 ROA not before: Sat 10 Jan 2026 13:51:46 +0000 ROA not after: Sat 09 Jan 2027 13:56:46 +0000 asID: 214749 IP address blocks: 2a11:f2c0:ffe0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6a:c0:33:37:53:78:b9:30:41:8b:a1:00:c9:35:a2:d8:a1:96:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Validity Not Before: Jan 10 13:51:46 2026 GMT Not After : Jan 9 13:56:46 2027 GMT Subject: CN=145D7A47E04E223AB09BA166BFD13965CBF246D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5a:36:59:8c:2d:30:03:4a:71:ff:35:09:f3: b7:5c:e7:12:fa:36:5d:c5:83:81:b0:4c:f8:ab:a1: 3a:1b:38:01:84:8e:c0:2d:ca:43:8a:88:76:ef:28: 33:ea:ed:fc:aa:c6:2e:05:52:aa:2a:0a:66:7e:1e: 7a:e7:a8:f1:77:a8:76:94:d2:6e:15:fb:13:65:18: a3:c9:27:d5:51:a8:24:f8:24:12:e1:1b:4b:b7:38: fa:9f:49:0f:31:4b:d9:34:96:56:89:ae:2d:60:ab: 07:04:73:d7:5d:7e:bf:c3:c2:90:d3:e0:59:21:e8: d6:78:45:7f:2e:d4:8b:1c:ef:98:2b:78:00:7d:b1: 60:02:76:fd:f8:b7:00:33:c4:65:ae:97:8c:b5:93: d1:8c:95:54:bb:6c:4a:87:e2:ff:48:fe:ac:84:f4: 3b:73:81:27:53:b5:a7:ee:79:9c:b2:a7:c8:77:ec: 4b:eb:ef:8b:c5:0a:5f:8d:26:46:a9:35:44:72:0c: a0:19:a4:ef:fd:f2:14:72:78:11:be:c6:cf:39:af: da:c5:ef:a8:10:77:86:0b:64:0c:d0:40:7f:82:1d: 98:c6:a6:92:8a:18:4a:0b:f2:c2:1d:c4:cb:d6:09: 9b:de:ff:fb:ff:d6:d2:14:f4:54:99:b7:d6:41:bf: 49:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5D:7A:47:E0:4E:22:3A:B0:9B:A1:66:BF:D1:39:65:CB:F2:46:D8 X509v3 Authority Key Identifier: keyid:2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:ffe0::/48 Signature Algorithm: sha256WithRSAEncryption 23:30:2e:64:2b:36:ea:c8:82:27:9e:51:bf:fa:0c:81:e0:73: 36:e0:92:7e:e0:0f:db:cd:f3:71:bc:53:28:a4:55:18:c1:f4: cf:26:17:28:8c:39:c6:44:c5:f0:9d:0e:c3:84:ce:4d:d5:f6: c7:63:e1:46:11:53:f5:51:e6:f8:a8:ce:d2:61:64:5d:64:56: d9:de:5d:59:82:87:73:31:7f:09:c2:4c:5b:cc:09:ed:fe:fd: 1f:f5:bc:24:2b:83:a5:73:23:6a:75:2f:5e:de:17:4e:94:b7: dc:fe:a9:85:90:1a:48:f0:6c:32:0e:41:83:0b:1c:94:75:d7: bb:96:cb:2e:a5:44:c7:50:4f:d8:63:99:73:e5:ea:12:ba:5a: 1d:95:47:31:7e:0e:ac:17:10:62:f6:b9:aa:77:44:66:0b:1d: 71:53:3a:ee:55:80:ea:79:cd:46:68:49:3c:f2:34:b4:15:96: 5c:76:c6:84:d7:01:a1:3c:33:18:bd:4e:44:87:b7:e2:00:f2: 19:4b:56:88:08:60:f6:c3:26:f9:af:4b:9b:f0:3d:ae:7e:c9: 9e:03:a5:3f:5b:06:ee:6a:f7:f7:49:8c:8b:49:a0:bc:92:bb: 7c:65:ae:b4:6c:b1:26:de:3f:0c:0c:e2:1c:e2:76:aa:55:2c: 11:05:3b:cb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUAmrAMzdTeLkwQYuhAMk1otihlukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4 NUU4MjMxRTAeFw0yNjAxMTAxMzUxNDZaFw0yNzAxMDkxMzU2NDZaMDMxMTAvBgNV BAMTKDE0NUQ3QTQ3RTA0RTIyM0FCMDlCQTE2NkJGRDEzOTY1Q0JGMjQ2RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoWjZZjC0wA0px/zUJ87dc5xL6 Nl3Fg4GwTPiroTobOAGEjsAtykOKiHbvKDPq7fyqxi4FUqoqCmZ+HnrnqPF3qHaU 0m4V+xNlGKPJJ9VRqCT4JBLhG0u3OPqfSQ8xS9k0llaJri1gqwcEc9ddfr/DwpDT 4Fkh6NZ4RX8u1Isc75greAB9sWACdv34twAzxGWul4y1k9GMlVS7bEqH4v9I/qyE 9DtzgSdTtafueZyyp8h37Evr74vFCl+NJkapNURyDKAZpO/98hRyeBG+xs85r9rF 76gQd4YLZAzQQH+CHZjGppKKGEoL8sIdxMvWCZve//v/1tIU9FSZt9ZBv0mhAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUFF16R+BOIjqwm6Fmv9E5ZcvyRtgwHwYDVR0j BBgwFoAUKzuXM02gaXgYXax2ovPqNYXoIx4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAv MkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8yQjNCOTczMzREQTA2OTc4MTg1REFDNzZBMkYzRUEz NTg1RTgyMzFFLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV9mMTE0 YzFlYTc3ODg0NTJjYmYzOGJlODU0ZWE4MzU5ZC8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjY1MzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzQzNzM0Mzku cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqEfLA/+AwDQYJKoZIhvcNAQELBQADggEBACMwLmQrNurIgiee Ub/6DIHgczbgkn7gD9vN83G8UyikVRjB9M8mFyiMOcZExfCdDsOEzk3V9sdj4UYR U/VR5vioztJhZF1kVtneXVmCh3MxfwnCTFvMCe3+/R/1vCQrg6VzI2p1L17eF06U t9z+qYWQGkjwbDIOQYMLHJR117uWyy6lRMdQT9hjmXPl6hK6Wh2VRzF+DqwXEGL2 uap3RGYLHXFTOu5VgOp5zUZoSTzyNLQVllx2xoTXAaE8Mxi9TkSHt+IA8hlLVogI YPbDJvmvS5vwPa5+yZ4DpT9bBu5q9/dJjItJoLySu3xlrrRssSbePwwM4hzidqpV LBEFO8s= -----END CERTIFICATE-----Generated at Sun Jan 25 14:57:45 2026 by rpki-client