This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a663030643a3a2f34382d3438203d3e20323037313138.roa File: 326131343a366634343a663030643a3a2f34382d3438203d3e20323037313138.roa (raw, json) Hash identifier: ccOOAjxyylksS3iqkMGCPb0MvRpljc/bOW2a58HaGeg= Subject key identifier: 00:46:16:56:D5:BE:76:45:D6:BE:B1:2E:F3:69:7F:D5:C7:B1:DD:E8 Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Certificate serial: 5A552E8FF30D54B69712EB068CF22E2BAC56B858 Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a663030643a3a2f34382d3438203d3e20323037313138.roa Signing time: Wed 07 Jan 2026 10:38:25 +0000 ROA not before: Wed 07 Jan 2026 10:33:25 +0000 ROA not after: Wed 06 Jan 2027 10:38:25 +0000 asID: 207118 IP address blocks: 2a14:6f44:f00d::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 00:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:55:2e:8f:f3:0d:54:b6:97:12:eb:06:8c:f2:2e:2b:ac:56:b8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Validity Not Before: Jan 7 10:33:25 2026 GMT Not After : Jan 6 10:38:25 2027 GMT Subject: CN=00461656D5BE7645D6BEB12EF3697FD5C7B1DDE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:06:cc:cd:c1:e6:70:d9:bd:f5:a3:b2:b6:a1: 73:ed:bd:2f:7e:06:ea:71:f3:04:54:1c:5f:e1:f3: 28:21:88:0d:29:cd:a3:77:45:eb:68:94:3b:cc:63: 3b:78:32:2f:44:0a:98:db:45:c1:93:b8:4e:9f:29: 6e:c3:03:92:13:f2:03:f3:1a:55:ea:0e:2c:f1:8c: 7f:50:ae:a6:d4:af:7a:d9:e3:9d:77:6a:76:29:86: 45:32:d3:52:c8:08:f5:3e:f1:29:18:48:80:be:c1: 18:d6:71:cd:49:3f:2e:97:ea:a8:8e:95:51:d0:31: cd:2d:2a:84:af:6f:75:be:52:9f:9f:75:1d:09:83: 33:b8:ee:74:23:e0:7f:66:4c:4a:1b:fb:81:42:a1: 12:6e:89:29:3c:6e:3f:8b:94:4f:8a:fd:85:00:a1: b5:8d:46:b2:a2:69:bf:ca:52:f6:7a:dd:75:f4:6c: 0c:fd:28:d1:a0:7e:0c:a7:10:0c:01:c3:e3:34:cd: 84:e7:d9:e1:7a:7a:5d:f4:00:51:fb:c0:33:06:11: bc:5e:17:c1:c5:86:ff:c1:e1:ff:d6:cd:cc:1a:6e: 1c:d6:95:f6:13:c3:2f:76:c6:ba:57:ba:fe:9c:f4: 92:41:4c:7f:b6:18:88:aa:80:d6:68:91:14:a1:35: 24:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:46:16:56:D5:BE:76:45:D6:BE:B1:2E:F3:69:7F:D5:C7:B1:DD:E8 X509v3 Authority Key Identifier: keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a663030643a3a2f34382d3438203d3e20323037313138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6f44:f00d::/48 Signature Algorithm: sha256WithRSAEncryption 3d:77:ac:e0:35:7a:b1:3e:73:56:e1:0d:b1:ec:e1:e3:3e:3d: 3f:05:4a:83:e2:eb:1e:a4:74:51:35:38:4a:b1:bb:c3:14:fa: 26:7d:de:07:49:f6:c8:bf:4b:3c:fa:08:d7:eb:ad:d5:7e:21: 04:55:e6:a6:56:20:b8:5c:de:c8:dd:23:cd:76:49:1a:6a:ea: c2:ab:0b:ab:95:8f:8e:56:a9:f9:dc:c1:b3:ca:df:12:ec:df: d2:c6:75:0b:4e:c6:5e:69:8c:ab:e5:98:19:fb:2e:d9:71:34: e0:b6:a8:e0:44:7f:7c:8b:0c:50:4d:90:5c:b2:99:59:a1:42: 76:e6:32:c3:26:4b:9b:e1:5e:6e:82:27:eb:7b:b8:aa:f5:03: de:b4:f3:30:e2:9a:c6:1b:5b:23:31:ce:6b:56:6f:61:49:55: 25:0a:5e:5c:a2:5c:11:24:ab:ae:d8:8d:f3:ef:23:96:57:c6: 14:a7:2e:a4:25:09:27:7a:d2:fd:c4:09:16:7d:7b:05:74:ac: a9:23:94:f7:3c:55:8e:48:74:12:03:21:2e:2d:6e:00:cc:de: 3d:33:b2:15:28:f8:7a:47:a4:01:fc:82:46:0c:2c:12:c0:e4: dd:0d:07:4a:2f:e5:51:bb:bc:b2:61:c6:59:30:cd:e3:04:ac: d8:2c:4a:73 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUWlUuj/MNVLaXEusGjPIuK6xWuFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi YjJhYzMyZTAeFw0yNjAxMDcxMDMzMjVaFw0yNzAxMDYxMDM4MjVaMDMxMTAvBgNV BAMTKDAwNDYxNjU2RDVCRTc2NDVENkJFQjEyRUYzNjk3RkQ1QzdCMURERTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXBszNweZw2b31o7K2oXPtvS9+ Bupx8wRUHF/h8yghiA0pzaN3RetolDvMYzt4Mi9ECpjbRcGTuE6fKW7DA5IT8gPz GlXqDizxjH9QrqbUr3rZ4513anYphkUy01LICPU+8SkYSIC+wRjWcc1JPy6X6qiO lVHQMc0tKoSvb3W+Up+fdR0JgzO47nQj4H9mTEob+4FCoRJuiSk8bj+LlE+K/YUA obWNRrKiab/KUvZ63XX0bAz9KNGgfgynEAwBw+M0zYTn2eF6el30AFH7wDMGEbxe F8HFhv/B4f/WzcwabhzWlfYTwy92xrpXuv6c9JJBTH+2GIiqgNZokRShNSRxAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUAEYWVtW+dkXWvrEu82l/1cex3egwHwYDVR0j BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz cXd5NC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZmN2E5ODkt ZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzQvMzI2MTMxMzQzYTM2NjYzNDM0 M2E2NjMwMzA2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNzMxMzEzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoUb0TwDTANBgkqhkiG9w0BAQsFAAOCAQEAPXes4DV6sT5zVuEN sezh4z49PwVKg+LrHqR0UTU4SrG7wxT6Jn3eB0n2yL9LPPoI1+ut1X4hBFXmplYg uFzeyN0jzXZJGmrqwqsLq5WPjlap+dzBs8rfEuzf0sZ1C07GXmmMq+WYGfsu2XE0 4Lao4ER/fIsMUE2QXLKZWaFCduYywyZLm+FeboIn63u4qvUD3rTzMOKaxhtbIzHO a1ZvYUlVJQpeXKJcESSrrtiN8+8jllfGFKcupCUJJ3rS/cQJFn17BXSsqSOU9zxV jkh0EgMhLi1uAMzePTOyFSj4ekekAfyCRgwsEsDk3Q0HSi/lUbu8smHGWTDN4wSs 2CxKcw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:13 2026 by rpki-client