This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/326131343a373538363a363330303a3a2f34342d3438203d3e20313533333736.roa File: 326131343a373538363a363330303a3a2f34342d3438203d3e20313533333736.roa (raw, json) Hash identifier: EmjH1JU+BsV2c2yZp0xHpfbOG+X2vne6qXcNiETAM44= Subject key identifier: 34:6D:AC:A5:E3:EF:63:72:7A:7F:91:4B:FD:D5:37:40:73:A6:E6:B4 Certificate issuer: /CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Certificate serial: 28B46DEAE8E3B07040A58D5DA86BD161CC239639 Authority key identifier: 67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/326131343a373538363a363330303a3a2f34342d3438203d3e20313533333736.roa Signing time: Fri 23 Jan 2026 14:17:50 +0000 ROA not before: Fri 23 Jan 2026 14:12:50 +0000 ROA not after: Fri 22 Jan 2027 14:17:50 +0000 asID: 153376 IP address blocks: 2a14:7586:6300::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b4:6d:ea:e8:e3:b0:70:40:a5:8d:5d:a8:6b:d1:61:cc:23:96:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Validity Not Before: Jan 23 14:12:50 2026 GMT Not After : Jan 22 14:17:50 2027 GMT Subject: CN=346DACA5E3EF63727A7F914BFDD5374073A6E6B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:c0:04:90:43:c7:85:dd:6f:c5:8d:bd:42: 9d:e4:b8:29:ee:c9:72:28:10:1c:5c:02:6e:5e:54: 06:e7:be:69:52:24:5e:75:76:c6:8b:66:ea:3a:40: 44:6f:39:00:89:6c:4e:03:4f:b6:04:30:d1:1c:59: 0b:aa:80:55:67:ea:e2:26:35:e5:5c:98:b4:5f:4a: 04:e1:66:6a:e2:a3:8f:f0:fb:af:2a:29:60:8a:ff: 00:21:95:8e:06:ed:60:ec:a0:f0:ab:a1:b0:05:47: 28:7a:fe:3a:58:6c:45:12:fb:6c:75:37:c7:61:6c: 08:b1:8e:70:fe:b9:0a:0f:a1:76:13:44:f2:76:4d: af:9a:db:87:60:b4:7c:32:bb:2a:ee:fe:e1:c2:39: 1a:c8:3d:5e:89:cd:80:27:66:fc:60:05:ab:65:de: d9:20:21:53:cc:f6:0d:25:ac:79:dc:6d:11:e7:13: 28:6d:07:26:04:c8:06:93:f6:fd:84:dd:c9:66:36: e2:f2:71:c3:d9:83:c8:1d:02:04:d4:47:c8:b2:37: 36:81:86:d9:6c:fd:78:2a:0c:20:aa:11:a7:be:68: 93:20:7e:c8:95:a8:42:2e:80:16:2d:6e:cc:e1:df: de:8c:c0:41:6e:98:75:30:12:8e:20:c8:94:38:c4: 3b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6D:AC:A5:E3:EF:63:72:7A:7F:91:4B:FD:D5:37:40:73:A6:E6:B4 X509v3 Authority Key Identifier: keyid:67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/326131343a373538363a363330303a3a2f34342d3438203d3e20313533333736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6300::/44 Signature Algorithm: sha256WithRSAEncryption ca:fa:a1:33:ed:47:85:56:a5:eb:b3:a6:73:7e:55:fe:6f:26: 3e:4c:51:28:43:cd:a7:3e:b6:3b:00:a3:03:55:01:32:fb:66: e8:e7:64:07:6a:e9:e3:ac:58:67:32:1f:5f:3b:ff:20:bb:45: e2:4f:65:c3:6e:ca:53:ae:74:e8:8e:f8:bd:70:30:f1:eb:82: 73:0c:82:3f:14:3a:34:ee:f5:e1:bc:75:c7:20:e5:a4:9a:26: a8:c0:be:22:08:f0:a0:fd:b9:a3:9c:77:ee:af:e9:84:0a:d2: d8:05:8d:90:1e:92:eb:63:2a:63:fa:b1:fd:95:7d:b1:86:ce: c1:d4:d7:cf:91:60:c4:fb:b0:d7:74:0c:53:83:34:de:72:64: a7:a6:65:01:5d:be:a9:72:84:89:77:4a:16:94:64:d5:fc:5b: 6a:17:6c:1e:9e:08:a3:65:c3:a1:3c:04:06:94:5e:1c:a0:63: 00:d0:26:f3:2e:21:c9:29:77:8a:25:08:1a:0c:a6:ce:e1:37: 12:a1:36:76:bf:ec:4a:4f:9f:a1:5b:95:8e:13:09:60:d5:04: df:22:ee:30:fc:12:d4:46:d7:a4:ab:4f:d7:0e:cc:5e:d4:10: 34:eb:24:1e:db:24:b0:7f:1a:b1:d7:f1:85:32:d2:9d:53:51: c8:26:b8:cb -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUKLRt6ujjsHBApY1dqGvRYcwjljkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThG NDM5OUIwRjAeFw0yNjAxMjMxNDEyNTBaFw0yNzAxMjIxNDE3NTBaMDMxMTAvBgNV BAMTKDM0NkRBQ0E1RTNFRjYzNzI3QTdGOTE0QkZERDUzNzQwNzNBNkU2QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vcAEkEPHhd1vxY29Qp3kuCnu yXIoEBxcAm5eVAbnvmlSJF51dsaLZuo6QERvOQCJbE4DT7YEMNEcWQuqgFVn6uIm NeVcmLRfSgThZmrio4/w+68qKWCK/wAhlY4G7WDsoPCrobAFRyh6/jpYbEUS+2x1 N8dhbAixjnD+uQoPoXYTRPJ2Ta+a24dgtHwyuyru/uHCORrIPV6JzYAnZvxgBatl 3tkgIVPM9g0lrHncbRHnEyhtByYEyAaT9v2E3clmNuLyccPZg8gdAgTUR8iyNzaB htls/XgqDCCqEae+aJMgfsiVqEIugBYtbszh396MwEFumHUwEo4gyJQ4xDshAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUNG2spePvY3J6f5FL/dU3QHOm5rQwHwYDVR0j BBgwFoAUZ+LbzpwAsYmEysLturQsWPQ5mw8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmI4MDY5NzgtNTU3MS00ZGM5LWE4NzItOTIzOTdjNGM4 ODgwLzAvNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThGNDM5OUIwRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy82N0UyREJDRTlDMDBCMTg5ODRDQUMyRURC QUI0MkM1OEY0Mzk5QjBGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mYjgwNjk3OC01NTcxLTRkYzktYTg3Mi05MjM5N2M0Yzg4ODAvMC8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzMzMDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEz NTMzMzMzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1hmMAMA0GCSqGSIb3DQEBCwUAA4IBAQDK +qEz7UeFVqXrs6ZzflX+byY+TFEoQ82nPrY7AKMDVQEy+2bo52QHaunjrFhnMh9f O/8gu0XiT2XDbspTrnTojvi9cDDx64JzDII/FDo07vXhvHXHIOWkmiaowL4iCPCg /bmjnHfur+mECtLYBY2QHpLrYypj+rH9lX2xhs7B1NfPkWDE+7DXdAxTgzTecmSn pmUBXb6pcoSJd0oWlGTV/FtqF2wengijZcOhPAQGlF4coGMA0CbzLiHJKXeKJQga DKbO4TcSoTZ2v+xKT5+hW5WOEwlg1QTfIu4w/BLURtekq0/XDsxe1BA06yQe2ySw fxqx1/GFMtKdU1HIJrjL -----END CERTIFICATE-----Generated at Sun Jan 25 19:19:36 2026 by rpki-client