This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/326131343a373538303a666634323a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538303a666634323a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: O/PJi/N0ASXeoDd9xkm5e+vUVYHvnrMhoRT9Q5UqBNM= Subject key identifier: 51:5C:22:76:98:4B:7A:E8:C2:C8:7B:7E:0B:B8:0F:66:16:9C:65:0F Certificate issuer: /CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Certificate serial: 47F95414400EB5445241E5FA4C0F141691067CCC Authority key identifier: BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/326131343a373538303a666634323a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 19 Dec 2025 14:46:55 +0000 ROA not before: Fri 19 Dec 2025 14:41:55 +0000 ROA not after: Fri 18 Dec 2026 14:46:55 +0000 asID: 214344 IP address blocks: 2a14:7580:ff42::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f9:54:14:40:0e:b5:44:52:41:e5:fa:4c:0f:14:16:91:06:7c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Validity Not Before: Dec 19 14:41:55 2025 GMT Not After : Dec 18 14:46:55 2026 GMT Subject: CN=515C2276984B7AE8C2C87B7E0BB80F66169C650F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bb:ad:48:3b:0c:dc:60:8e:09:16:37:50:96: 1a:fa:fd:52:c3:d4:44:b9:63:4c:37:0d:8b:9b:a2: 5d:db:ca:17:e5:06:05:d1:6a:c0:70:25:0f:e6:71: 52:8b:26:c3:f5:05:16:c1:ee:f9:ff:51:2e:d9:dd: d0:6f:cf:55:57:20:72:ca:e3:63:b1:0c:56:cb:14: 70:7d:9f:15:7c:d2:2e:be:e3:d5:19:f4:e1:b0:ff: a5:0f:8a:f8:e7:06:cc:5c:7e:0b:e8:5f:bc:76:50: 3d:cf:b8:1b:97:6a:55:82:30:b7:7f:2e:2b:ba:73: c5:f3:b2:af:01:48:a9:35:5e:4c:c5:a1:8a:ff:58: b7:5b:9c:4f:57:42:39:43:e7:6d:b8:02:2b:e4:f3: e6:d8:1e:7e:0f:4a:95:5b:4b:60:7a:14:a0:07:3b: 1d:65:6c:6f:18:d4:63:fe:0a:7b:55:62:2f:d3:15: b3:37:c5:cb:14:c4:43:b9:62:57:7f:56:95:80:eb: 22:fe:38:b5:92:de:48:45:4d:95:18:0d:7c:08:25: 1e:f3:75:dd:56:82:da:5a:27:c3:28:4c:cb:c3:c8: ab:35:a4:8c:34:bf:47:0d:47:7c:16:33:f3:22:fc: 70:95:27:1c:15:5f:d5:5f:a9:ec:6d:1c:3e:ec:50: ea:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5C:22:76:98:4B:7A:E8:C2:C8:7B:7E:0B:B8:0F:66:16:9C:65:0F X509v3 Authority Key Identifier: keyid:BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/326131343a373538303a666634323a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff42::/48 Signature Algorithm: sha256WithRSAEncryption a9:41:48:2e:08:6a:a2:e1:ab:28:96:48:b0:0f:88:9c:27:57: 04:46:72:4c:d3:cf:97:26:26:57:c7:3e:b9:1f:df:ff:93:fd: 17:bc:7a:a0:ca:b8:e8:76:65:96:86:b0:1b:37:e9:f9:1b:f5: 9a:3f:d9:6d:64:c5:25:dc:53:be:93:65:c7:ce:21:f0:1d:f6: 5a:a2:0b:69:06:a7:90:fc:97:21:77:6c:0b:6d:61:c3:26:24: 56:dc:f1:5a:0e:00:d1:bd:fa:7b:d6:ad:c5:7e:cd:9e:0d:49: 7a:32:1a:07:30:6f:c4:10:a4:66:90:62:7d:3f:2f:38:6b:92: 6d:d8:ee:be:4a:3a:63:70:c2:9e:f6:04:59:13:92:c7:38:8a: d7:0b:9d:09:74:5b:81:f1:c2:e6:10:1a:f0:30:8e:1e:ec:af: e0:59:84:0d:d4:0f:ad:f8:c3:96:9d:ba:12:d0:8b:9d:f0:1e: 19:6d:37:0e:e9:b6:3b:ff:50:26:5d:26:5d:df:fd:42:e1:2f: 28:4e:7e:42:2c:9c:e5:a7:38:cd:cf:66:6e:24:e8:f1:40:a9: 8a:09:c9:c4:01:1a:09:d7:f0:be:23:77:4b:cd:a0:fe:7e:77: f8:ce:a7:6c:fe:35:96:a6:91:a7:fa:79:9c:68:ab:1b:e2:a6: 00:58:b7:77 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUR/lUFEAOtURSQeX6TA8UFpEGfMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMy RkNERjlDNDAeFw0yNTEyMTkxNDQxNTVaFw0yNjEyMTgxNDQ2NTVaMDMxMTAvBgNV BAMTKDUxNUMyMjc2OTg0QjdBRThDMkM4N0I3RTBCQjgwRjY2MTY5QzY1MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJu61IOwzcYI4JFjdQlhr6/VLD 1ES5Y0w3DYubol3byhflBgXRasBwJQ/mcVKLJsP1BRbB7vn/US7Z3dBvz1VXIHLK 42OxDFbLFHB9nxV80i6+49UZ9OGw/6UPivjnBsxcfgvoX7x2UD3PuBuXalWCMLd/ Liu6c8Xzsq8BSKk1XkzFoYr/WLdbnE9XQjlD5224Aivk8+bYHn4PSpVbS2B6FKAH Ox1lbG8Y1GP+CntVYi/TFbM3xcsUxEO5Yld/VpWA6yL+OLWS3khFTZUYDXwIJR7z dd1WgtpaJ8MoTMvDyKs1pIw0v0cNR3wWM/Mi/HCVJxwVX9VfqextHD7sUOq3AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUUVwidphLeujCyHt+C7gPZhacZQ8wHwYDVR0j BBgwFoAUuwsCgGrjw09FOt7d42rfQy/N+cQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzIvQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMyRkNERjlDNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQjBCMDI4MDZBRTNDMzRGNDUzQURFRERF MzZBREY0MzJGQ0RGOUM0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvMi8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9CMA0GCSqGSIb3DQEBCwUAA4IBAQCp QUguCGqi4asolkiwD4icJ1cERnJM08+XJiZXxz65H9//k/0XvHqgyrjodmWWhrAb N+n5G/WaP9ltZMUl3FO+k2XHziHwHfZaogtpBqeQ/Jchd2wLbWHDJiRW3PFaDgDR vfp71q3Ffs2eDUl6MhoHMG/EEKRmkGJ9Py84a5Jt2O6+SjpjcMKe9gRZE5LHOIrX C50JdFuB8cLmEBrwMI4e7K/gWYQN1A+t+MOWnboS0Iud8B4ZbTcO6bY7/1AmXSZd 3/1C4S8oTn5CLJzlpzjNz2ZuJOjxQKmKCcnEARoJ1/C+I3dLzaD+fnf4zqds/jWW ppGn+nmcaKsb4qYAWLd3 -----END CERTIFICATE-----Generated at Sun Dec 21 08:01:58 2025 by rpki-client