This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: LrJY5RvJFU1hFw5kwe9OHrsNrGlMAHPKFkyFsYYWBwM= Subject key identifier: 86:FB:41:87:21:1D:FB:0D:2F:49:BB:90:C5:D6:71:36:33:CF:1E:C7 Certificate issuer: /CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Certificate serial: 25C92044878266590224537C2E9FAE4C03CF2D89 Authority key identifier: BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 19 Dec 2025 14:47:15 +0000 ROA not before: Fri 19 Dec 2025 14:42:15 +0000 ROA not after: Fri 18 Dec 2026 14:47:15 +0000 asID: 214344 IP address blocks: 2a14:7580:ff43::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c9:20:44:87:82:66:59:02:24:53:7c:2e:9f:ae:4c:03:cf:2d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Validity Not Before: Dec 19 14:42:15 2025 GMT Not After : Dec 18 14:47:15 2026 GMT Subject: CN=86FB4187211DFB0D2F49BB90C5D6713633CF1EC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ee:fd:5b:5e:86:98:71:01:02:73:25:4c:04: 51:cd:17:fd:4f:e6:52:7d:37:c6:3c:0d:52:16:6f: 8a:90:ac:e9:bb:9b:04:8c:3d:40:76:95:80:f5:86: 6a:0e:ef:2c:68:e7:df:50:e8:92:24:23:ed:6c:27: c7:ca:91:46:95:14:8c:a0:c0:15:9d:84:da:08:8b: ce:5e:5e:07:52:cd:84:3b:78:47:18:0d:f9:a3:49: db:ff:0f:ce:fe:71:9c:14:b6:3b:f9:52:a3:bf:e1: 85:0c:2b:d1:51:00:2a:35:73:ad:95:37:e1:99:7d: d0:d0:ab:53:7c:7a:7a:73:00:37:fc:4e:19:31:83: 9b:aa:a1:ac:e6:32:f0:c3:a1:79:9a:a1:57:58:9d: 20:8f:6d:8d:b0:56:68:e1:a3:d5:ef:bf:e8:22:4d: 81:c3:ba:4b:15:01:21:fc:85:4c:a2:be:ef:40:ac: 81:26:a2:4e:0c:c0:be:2c:3d:09:f6:9b:9f:c1:29: 34:3f:21:b5:04:d8:21:2f:54:39:e5:38:23:06:ee: ee:12:31:50:c2:80:63:4a:68:9d:30:34:70:fd:d8: 93:ed:32:11:b2:d6:79:14:b1:9a:ce:9a:20:75:d1: 69:fb:86:ef:0c:ed:57:1f:c4:b4:6f:27:58:0c:ff: d5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FB:41:87:21:1D:FB:0D:2F:49:BB:90:C5:D6:71:36:33:CF:1E:C7 X509v3 Authority Key Identifier: keyid:BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff43::/48 Signature Algorithm: sha256WithRSAEncryption 26:14:96:30:45:ef:e8:ce:be:4e:8b:e9:cb:1e:28:98:45:83: ae:ef:19:38:f8:df:20:1b:bc:ab:10:7e:c9:02:5d:a1:84:0c: 79:ad:8a:6a:f8:26:dd:e5:25:c0:e0:ae:ed:ff:26:3d:6a:ea: 1d:68:18:e6:b0:da:d8:9a:fa:3c:a2:5c:f3:5d:80:da:23:40: 81:c2:e7:54:f6:03:aa:5f:5f:66:58:19:70:f0:b3:e0:d3:90: 8a:ab:dc:c0:f1:35:47:31:77:0b:cf:c8:af:a4:d7:6d:71:88: 7c:da:08:99:86:90:95:48:80:60:39:61:b2:c1:3a:2a:79:d8: d5:43:d5:4b:b3:8a:26:13:68:ec:f3:cd:3c:14:cb:34:2e:24: 61:d2:2d:9e:75:8b:e2:3c:d5:7c:7d:b4:8c:f4:03:53:af:f2: c9:67:14:7d:25:81:a1:6a:57:fb:00:04:45:d8:8e:21:31:0c: 14:c9:f5:40:5e:0f:59:46:92:f8:24:17:64:b3:ae:f2:09:c7: 05:bd:52:79:2f:80:96:a9:fc:bf:0a:a2:61:16:09:1c:cf:a6: 1d:d1:83:c3:2c:5b:90:a2:fe:26:6a:eb:3a:d5:1a:a0:c7:24: 61:7b:06:38:de:bd:5c:93:dc:e8:80:b9:58:42:b4:c5:64:5d: 1e:30:07:42 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUJckgRIeCZlkCJFN8Lp+uTAPPLYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMy RkNERjlDNDAeFw0yNTEyMTkxNDQyMTVaFw0yNjEyMTgxNDQ3MTVaMDMxMTAvBgNV BAMTKDg2RkI0MTg3MjExREZCMEQyRjQ5QkI5MEM1RDY3MTM2MzNDRjFFQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL7v1bXoaYcQECcyVMBFHNF/1P 5lJ9N8Y8DVIWb4qQrOm7mwSMPUB2lYD1hmoO7yxo599Q6JIkI+1sJ8fKkUaVFIyg wBWdhNoIi85eXgdSzYQ7eEcYDfmjSdv/D87+cZwUtjv5UqO/4YUMK9FRACo1c62V N+GZfdDQq1N8enpzADf8Thkxg5uqoazmMvDDoXmaoVdYnSCPbY2wVmjho9Xvv+gi TYHDuksVASH8hUyivu9ArIEmok4MwL4sPQn2m5/BKTQ/IbUE2CEvVDnlOCMG7u4S MVDCgGNKaJ0wNHD92JPtMhGy1nkUsZrOmiB10Wn7hu8M7VcfxLRvJ1gM/9UtAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUhvtBhyEd+w0vSbuQxdZxNjPPHscwHwYDVR0j BBgwFoAUuwsCgGrjw09FOt7d42rfQy/N+cQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzIvQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMyRkNERjlDNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQjBCMDI4MDZBRTNDMzRGNDUzQURFRERF MzZBREY0MzJGQ0RGOUM0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvMi8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9DMA0GCSqGSIb3DQEBCwUAA4IBAQAm FJYwRe/ozr5Oi+nLHiiYRYOu7xk4+N8gG7yrEH7JAl2hhAx5rYpq+Cbd5SXA4K7t /yY9auodaBjmsNrYmvo8olzzXYDaI0CBwudU9gOqX19mWBlw8LPg05CKq9zA8TVH MXcLz8ivpNdtcYh82giZhpCVSIBgOWGywToqedjVQ9VLs4omE2js8808FMs0LiRh 0i2edYviPNV8fbSM9ANTr/LJZxR9JYGhalf7AARF2I4hMQwUyfVAXg9ZRpL4JBdk s67yCccFvVJ5L4CWqfy/CqJhFgkcz6Yd0YPDLFuQov4maus61RqgxyRhewY43r1c k9zogLlYQrTFZF0eMAdC -----END CERTIFICATE-----Generated at Sun Dec 21 08:01:57 2025 by rpki-client