This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/326131343a373538303a666634313a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538303a666634313a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: FSeGkTavy6E/PYG9xOOh6cS7WX/ehiQ2P+nWL6HUfzA= Subject key identifier: 58:49:FE:EF:44:C2:0B:E1:AF:89:0E:FA:C8:BA:06:7F:28:1F:DB:FE Certificate issuer: /CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Certificate serial: 3994A7951F45BC93A64D50E5D608A25DFD394E13 Authority key identifier: BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/326131343a373538303a666634313a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 19 Dec 2025 14:46:42 +0000 ROA not before: Fri 19 Dec 2025 14:41:42 +0000 ROA not after: Fri 18 Dec 2026 14:46:42 +0000 asID: 214344 IP address blocks: 2a14:7580:ff41::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:94:a7:95:1f:45:bc:93:a6:4d:50:e5:d6:08:a2:5d:fd:39:4e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Validity Not Before: Dec 19 14:41:42 2025 GMT Not After : Dec 18 14:46:42 2026 GMT Subject: CN=5849FEEF44C20BE1AF890EFAC8BA067F281FDBFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8e:5a:14:a8:84:94:30:e7:d3:b1:89:50:31: 24:f6:37:10:2e:3f:60:4c:9a:39:c4:7e:1e:3e:e2: 2d:1f:0f:b9:57:f8:ea:da:e0:ac:fe:8e:6a:c5:5c: a4:97:89:5d:6f:e9:63:7c:87:3f:74:fe:ab:7c:a6: 25:35:79:7c:fe:3b:1a:7f:0f:12:77:23:63:99:f8: ac:e0:95:d7:a9:2e:a4:87:80:4e:a0:de:98:c2:41: 5e:45:be:62:7b:8f:68:32:7c:23:ee:74:2d:e5:ee: 02:8f:99:f3:8d:1b:c1:67:ce:e9:5d:4b:9c:27:e4: 6b:33:fa:1d:13:c3:05:28:4a:23:a2:4f:b9:d8:b5: 85:9a:97:21:6e:6f:39:67:d2:51:3a:3f:4a:42:01: 38:37:a4:e4:d6:89:0e:7d:e6:1b:d8:00:ff:19:83: f3:c6:07:4d:86:c4:a4:71:f0:eb:b0:40:33:42:a2: 49:97:91:02:9c:5b:26:a6:79:48:97:71:d5:13:a1: 05:3d:ed:a5:2d:8d:e6:32:ab:86:ea:b7:55:43:be: 98:6e:3e:39:60:c4:78:0a:76:3c:e6:ba:45:ec:65: d1:52:55:d6:24:f0:8b:fb:35:f2:7d:0f:fe:02:29: 4a:d9:d4:c2:6f:4d:3c:4a:a5:58:2b:08:94:72:bc: 9b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:49:FE:EF:44:C2:0B:E1:AF:89:0E:FA:C8:BA:06:7F:28:1F:DB:FE X509v3 Authority Key Identifier: keyid:BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/326131343a373538303a666634313a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff41::/48 Signature Algorithm: sha256WithRSAEncryption 4d:eb:bd:62:90:55:c8:32:ff:0d:ae:93:67:82:87:75:e9:90: 48:8c:f2:a1:0b:e7:89:72:07:54:49:f5:2e:eb:2d:9e:44:3e: ce:4f:51:66:94:2e:1a:d3:6b:1b:d8:af:dc:bf:51:16:d2:ef: 07:db:fa:7a:f6:10:e0:ad:c5:06:3b:5a:5d:60:a7:85:6c:24: ed:70:0b:09:0b:86:a2:2d:64:7b:ba:c5:b3:4f:40:87:a1:28: 68:78:98:28:09:30:d5:62:a8:d7:62:83:ea:0a:c5:53:54:37: 6e:3d:be:03:d5:a7:99:ad:df:83:b1:4a:8b:09:4a:af:b6:4e: 62:73:f7:96:9f:c2:7a:ad:3f:a8:dd:d0:15:f2:30:7e:43:cb: 2c:f8:78:6b:17:62:d9:e2:8a:5d:46:c2:59:93:c6:b5:eb:d2: 1f:59:44:ed:ee:27:4b:0c:e0:ef:07:88:94:74:7a:a0:1c:d3: c5:bb:8e:cb:da:0a:85:5f:0b:75:1f:29:9a:e7:89:0c:2f:2b: 04:58:f0:9c:fe:ea:e6:a2:c6:e5:b2:7a:50:27:c0:b1:85:78: 0c:bd:e1:38:8d:8b:65:2b:02:d4:87:18:a4:34:a2:3c:5d:18: 32:7d:41:ac:2d:13:3a:80:81:ab:10:0f:50:47:4d:9f:fc:0e: 50:56:9b:94 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUOZSnlR9FvJOmTVDl1giiXf05ThMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMy RkNERjlDNDAeFw0yNTEyMTkxNDQxNDJaFw0yNjEyMTgxNDQ2NDJaMDMxMTAvBgNV BAMTKDU4NDlGRUVGNDRDMjBCRTFBRjg5MEVGQUM4QkEwNjdGMjgxRkRCRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkjloUqISUMOfTsYlQMST2NxAu P2BMmjnEfh4+4i0fD7lX+Ora4Kz+jmrFXKSXiV1v6WN8hz90/qt8piU1eXz+Oxp/ DxJ3I2OZ+KzgldepLqSHgE6g3pjCQV5FvmJ7j2gyfCPudC3l7gKPmfONG8Fnzuld S5wn5Gsz+h0TwwUoSiOiT7nYtYWalyFubzln0lE6P0pCATg3pOTWiQ595hvYAP8Z g/PGB02GxKRx8OuwQDNCokmXkQKcWyameUiXcdUToQU97aUtjeYyq4bqt1VDvphu PjlgxHgKdjzmukXsZdFSVdYk8Iv7NfJ9D/4CKUrZ1MJvTTxKpVgrCJRyvJthAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUWEn+70TCC+GviQ76yLoGfygf2/4wHwYDVR0j BBgwFoAUuwsCgGrjw09FOt7d42rfQy/N+cQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzIvQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMyRkNERjlDNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQjBCMDI4MDZBRTNDMzRGNDUzQURFRERF MzZBREY0MzJGQ0RGOUM0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvMi8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9BMA0GCSqGSIb3DQEBCwUAA4IBAQBN 671ikFXIMv8NrpNngod16ZBIjPKhC+eJcgdUSfUu6y2eRD7OT1FmlC4a02sb2K/c v1EW0u8H2/p69hDgrcUGO1pdYKeFbCTtcAsJC4aiLWR7usWzT0CHoShoeJgoCTDV YqjXYoPqCsVTVDduPb4D1aeZrd+DsUqLCUqvtk5ic/eWn8J6rT+o3dAV8jB+Q8ss +HhrF2LZ4opdRsJZk8a169IfWUTt7idLDODvB4iUdHqgHNPFu47L2gqFXwt1Hyma 54kMLysEWPCc/urmosblsnpQJ8CxhXgMveE4jYtlKwLUhxikNKI8XRgyfUGsLRM6 gIGrEA9QR02f/A5QVpuU -----END CERTIFICATE-----Generated at Sun Dec 21 08:01:59 2025 by rpki-client