This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a3534303a3a2f34322d3432203d3e20323039373130.roa File: 326131343a373538303a3534303a3a2f34322d3432203d3e20323039373130.roa (raw, json) Hash identifier: Av1B/CsfeimpaPDyAr/GwqgA0mmdJ8tWvzjK+NZ598o= Subject key identifier: A4:D4:6B:33:19:7A:E8:B8:96:10:C9:0D:2E:67:4D:CA:2B:FA:F3:C8 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 024025E9FF50EFA1EBB342DA4804D494B20FB87A Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a3534303a3a2f34322d3432203d3e20323039373130.roa Signing time: Fri 02 Jan 2026 01:28:43 +0000 ROA not before: Fri 02 Jan 2026 01:23:43 +0000 ROA not after: Fri 01 Jan 2027 01:28:43 +0000 asID: 209710 IP address blocks: 2a14:7580:540::/42 maxlen: 42 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:40:25:e9:ff:50:ef:a1:eb:b3:42:da:48:04:d4:94:b2:0f:b8:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Jan 2 01:23:43 2026 GMT Not After : Jan 1 01:28:43 2027 GMT Subject: CN=A4D46B33197AE8B89610C90D2E674DCA2BFAF3C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:eb:fe:1f:80:2d:c3:39:94:d5:52:ac:af:bc: fa:c7:f8:57:9c:da:71:98:20:79:6d:f4:0b:3e:b5: 91:8b:11:9c:92:5b:b9:3c:7e:9d:8e:2c:3f:e1:8b: 59:7c:d5:08:85:9d:6b:cb:50:93:d1:66:40:7d:81: 3f:01:0e:9b:8f:4b:fb:b4:33:40:0c:29:b3:7a:1b: d9:79:37:af:5f:cb:b6:38:b6:dd:8a:2b:03:a5:5f: c0:79:ef:8f:78:09:5a:f6:dd:01:46:0c:36:c7:61: 57:e2:9e:bb:1e:84:99:61:fa:da:1e:77:c8:bc:44: 74:69:1f:90:f1:a3:5c:72:b5:08:b4:f6:67:50:3d: ff:43:6a:c4:98:e6:38:3c:5e:cf:0c:76:c9:e4:59: 4a:49:8c:de:7a:3f:b1:35:c5:6f:78:fb:fa:35:59: 4e:7a:64:87:84:2b:a2:dd:3f:b3:3b:30:cd:ee:a0: 13:e6:b4:d0:12:ae:52:7b:6f:02:84:02:d4:cb:60: 03:c4:48:dc:94:94:da:d8:00:17:3a:8a:b0:07:26: c9:74:a6:35:c5:50:75:f2:73:2c:d9:0e:14:de:6f: ac:34:f6:20:fc:46:88:74:bf:2b:64:cf:d4:89:35: 96:6c:b3:7b:de:1e:85:3e:df:ba:1a:da:3c:da:60: 68:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D4:6B:33:19:7A:E8:B8:96:10:C9:0D:2E:67:4D:CA:2B:FA:F3:C8 X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a3534303a3a2f34322d3432203d3e20323039373130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:540::/42 Signature Algorithm: sha256WithRSAEncryption 48:0f:2e:8d:ab:aa:60:ab:33:65:91:d2:5f:a3:55:95:1d:9f: 02:3f:82:30:81:a2:90:9e:08:17:fb:05:19:1e:58:d0:0c:3f: 5d:2f:e3:bf:d2:cd:45:93:7a:7c:da:d5:bb:87:8b:4f:ae:fb: 38:89:a9:40:c0:a2:11:0f:0e:33:6f:a9:fd:00:85:6d:5b:74: af:64:72:00:e2:2f:0b:8d:fe:29:80:03:3c:6e:a7:22:22:46: 40:91:ec:2b:6c:d3:5d:73:80:06:95:ea:08:fa:ae:8c:9c:c7: 0e:cf:19:33:01:8c:b3:19:aa:fa:5c:b0:b5:32:7f:16:72:ce: a7:6b:40:b6:69:fe:4b:32:bd:b5:b8:87:ed:62:b6:14:66:67: 5d:af:92:26:fb:d3:90:04:3d:29:71:85:48:03:6b:73:b1:32: e6:12:3d:bc:76:ed:c3:de:19:20:02:dc:84:a5:38:2e:03:7d: 0e:70:71:a2:d2:92:0d:cc:2b:15:45:6d:a6:31:da:33:d5:65: 8c:88:a0:e6:90:a1:ea:fd:ee:5c:69:0e:4a:68:c6:7a:d4:ee: 30:2a:82:76:d5:95:08:1e:80:75:84:53:e4:a0:9a:22:14:5f: 38:02:47:30:ad:eb:dc:33:4d:1e:5b:a7:fb:aa:66:93:72:2c: d3:5f:7a:d1 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUAkAl6f9Q76Hrs0LaSATUlLIPuHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNjAxMDIwMTIzNDNaFw0yNzAxMDEwMTI4NDNaMDMxMTAvBgNV BAMTKEE0RDQ2QjMzMTk3QUU4Qjg5NjEwQzkwRDJFNjc0RENBMkJGQUYzQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo6/4fgC3DOZTVUqyvvPrH+Fec 2nGYIHlt9As+tZGLEZySW7k8fp2OLD/hi1l81QiFnWvLUJPRZkB9gT8BDpuPS/u0 M0AMKbN6G9l5N69fy7Y4tt2KKwOlX8B57494CVr23QFGDDbHYVfinrsehJlh+toe d8i8RHRpH5Dxo1xytQi09mdQPf9DasSY5jg8Xs8MdsnkWUpJjN56P7E1xW94+/o1 WU56ZIeEK6LdP7M7MM3uoBPmtNASrlJ7bwKEAtTLYAPESNyUlNrYABc6irAHJsl0 pjXFUHXycyzZDhTeb6w09iD8Roh0vytkz9SJNZZss3veHoU+37oa2jzaYGiRAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUpNRrMxl66LiWEMkNLmdNyiv688gwHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85ZWNhYzQxMy00Y2QyLTQ3MmMtYjAxZS03NDQ1OGNlYTM4NmMvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTM1MzQzMDNhM2EyZjM0MzIyZDM0MzIyMDNkM2UyMDMyMzAz OTM3MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHBioUdYAFQDANBgkqhkiG9w0BAQsFAAOCAQEASA8u jauqYKszZZHSX6NVlR2fAj+CMIGikJ4IF/sFGR5Y0Aw/XS/jv9LNRZN6fNrVu4eL T677OImpQMCiEQ8OM2+p/QCFbVt0r2RyAOIvC43+KYADPG6nIiJGQJHsK2zTXXOA BpXqCPqujJzHDs8ZMwGMsxmq+lywtTJ/FnLOp2tAtmn+SzK9tbiH7WK2FGZnXa+S JvvTkAQ9KXGFSANrc7Ey5hI9vHbtw94ZIALchKU4LgN9DnBxotKSDcwrFUVtpjHa M9VljIig5pCh6v3uXGkOSmjGetTuMCqCdtWVCB6AdYRT5KCaIhRfOAJHMK3r3DNN Hlun+6pmk3Is01960Q== -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:40 2026 by rpki-client