This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/326131343a373538303a666634303a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538303a666634303a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: NMvj9zoeOL/7ubYXVejRPUJJs+qt+8DS24zEbTeKmfE= Subject key identifier: 24:69:CC:A0:AD:26:3F:06:AB:BA:FB:08:8B:4A:AC:CF:B8:41:5B:3C Certificate issuer: /CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Certificate serial: 4268CB7DFC1FA706A940CC3049CA77D5966258CE Authority key identifier: BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/326131343a373538303a666634303a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 19 Dec 2025 14:46:25 +0000 ROA not before: Fri 19 Dec 2025 14:41:25 +0000 ROA not after: Fri 18 Dec 2026 14:46:25 +0000 asID: 214344 IP address blocks: 2a14:7580:ff40::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:68:cb:7d:fc:1f:a7:06:a9:40:cc:30:49:ca:77:d5:96:62:58:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Validity Not Before: Dec 19 14:41:25 2025 GMT Not After : Dec 18 14:46:25 2026 GMT Subject: CN=2469CCA0AD263F06ABBAFB088B4AACCFB8415B3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6c:13:aa:46:af:fe:c8:a1:2a:33:2a:f5:1b: ad:ee:b0:3c:5c:be:a3:cc:dd:14:b7:2f:41:2e:7d: 1f:8a:f2:2e:a2:70:3a:a8:ea:29:3a:de:f3:26:42: 6c:79:0f:07:cc:bd:0b:65:03:e3:09:b8:12:4d:f6: 8b:2e:6e:b0:15:36:1f:0d:a4:8c:63:0f:ff:30:f8: b8:32:54:93:c1:67:54:c0:4e:ca:c0:5d:0f:ca:f3: 83:42:34:1a:33:ea:34:e5:85:4c:b2:85:42:1d:ea: 52:26:1d:23:1e:5b:49:06:7d:eb:a4:91:7c:5e:05: b6:44:6e:85:68:49:6d:cb:c7:98:fa:03:b9:cf:6e: dd:45:08:bd:6b:68:c2:1a:7f:f2:79:9d:d4:1d:7d: 6b:a5:7d:74:2c:b4:63:c2:8a:21:23:2c:db:bd:30: 19:7b:13:f8:28:f2:1a:34:a2:07:bd:47:97:69:7f: 10:bd:8a:16:99:0a:b0:e2:f4:ea:c6:65:91:7e:49: 3c:fb:a6:ad:6e:3c:15:3b:26:b4:42:4a:cd:2a:50: a4:27:6f:c2:f9:3a:9a:97:3e:33:b8:50:bf:8c:9b: b8:c1:7c:d4:4b:11:b9:e1:61:3a:f7:a9:58:ce:3b: d2:5b:62:64:b9:8e:78:be:86:51:f2:51:a7:7d:86: d4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:69:CC:A0:AD:26:3F:06:AB:BA:FB:08:8B:4A:AC:CF:B8:41:5B:3C X509v3 Authority Key Identifier: keyid:BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/326131343a373538303a666634303a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff40::/48 Signature Algorithm: sha256WithRSAEncryption 5c:2e:80:da:46:b1:ba:98:90:b3:77:fe:48:fa:c2:a4:2c:56: 8b:e0:ec:76:06:f6:88:7a:4b:4e:8f:2b:c2:63:64:81:a0:8e: 24:1a:7a:9d:a0:21:7a:ef:6f:e7:2b:90:4d:91:47:4d:25:bc: f9:4b:c2:1a:ea:cd:5a:0a:ec:12:ab:54:3e:92:de:80:43:20: 49:f6:5a:2c:87:50:38:cd:dc:be:bb:08:1b:ff:41:97:aa:9a: 5f:4f:03:0d:33:c6:c2:22:d4:fa:1b:35:29:b0:16:be:ee:64: 03:e7:47:53:98:9f:8c:74:45:76:99:9a:6c:44:4e:bc:6a:43: c0:f5:06:d6:e6:97:b9:da:87:12:8e:02:d4:ab:38:b5:e8:46: bd:ba:6c:49:05:c4:c7:65:61:94:e6:b6:3c:54:26:56:94:09: bf:5f:51:f5:85:70:f7:a4:f5:be:4c:ea:52:33:74:6a:f1:7a: 7d:69:55:fa:ad:eb:f8:e5:d9:cf:b4:8f:f8:18:9d:29:7c:12: 25:5b:d6:0c:ab:60:ac:6f:c7:82:6b:5e:8f:a9:27:c2:76:e5: 8d:a6:2d:c0:f2:3d:e6:7a:be:3b:88:2b:a2:b9:d3:52:b2:40: be:a4:8a:02:7b:7e:09:82:ea:17:62:7c:fe:a7:c5:96:89:0b: 7c:e4:25:84 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUQmjLffwfpwapQMwwScp31ZZiWM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMy RkNERjlDNDAeFw0yNTEyMTkxNDQxMjVaFw0yNjEyMTgxNDQ2MjVaMDMxMTAvBgNV BAMTKDI0NjlDQ0EwQUQyNjNGMDZBQkJBRkIwODhCNEFBQ0NGQjg0MTVCM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbBOqRq/+yKEqMyr1G63usDxc vqPM3RS3L0EufR+K8i6icDqo6ik63vMmQmx5DwfMvQtlA+MJuBJN9osubrAVNh8N pIxjD/8w+LgyVJPBZ1TATsrAXQ/K84NCNBoz6jTlhUyyhUId6lImHSMeW0kGfeuk kXxeBbZEboVoSW3Lx5j6A7nPbt1FCL1raMIaf/J5ndQdfWulfXQstGPCiiEjLNu9 MBl7E/go8ho0oge9R5dpfxC9ihaZCrDi9OrGZZF+STz7pq1uPBU7JrRCSs0qUKQn b8L5OpqXPjO4UL+Mm7jBfNRLEbnhYTr3qVjOO9JbYmS5jni+hlHyUad9htRlAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUJGnMoK0mPwaruvsIi0qsz7hBWzwwHwYDVR0j BBgwFoAUuwsCgGrjw09FOt7d42rfQy/N+cQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzIvQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMyRkNERjlDNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQjBCMDI4MDZBRTNDMzRGNDUzQURFRERF MzZBREY0MzJGQ0RGOUM0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvMi8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9AMA0GCSqGSIb3DQEBCwUAA4IBAQBc LoDaRrG6mJCzd/5I+sKkLFaL4Ox2BvaIektOjyvCY2SBoI4kGnqdoCF672/nK5BN kUdNJbz5S8Ia6s1aCuwSq1Q+kt6AQyBJ9losh1A4zdy+uwgb/0GXqppfTwMNM8bC ItT6GzUpsBa+7mQD50dTmJ+MdEV2mZpsRE68akPA9QbW5pe52ocSjgLUqzi16Ea9 umxJBcTHZWGU5rY8VCZWlAm/X1H1hXD3pPW+TOpSM3Rq8Xp9aVX6rev45dnPtI/4 GJ0pfBIlW9YMq2Csb8eCa16PqSfCduWNpi3A8j3mer47iCuiudNSskC+pIoCe34J guoXYnz+p8WWiQt85CWE -----END CERTIFICATE-----Generated at Sun Dec 21 08:01:57 2025 by rpki-client