This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/326131343a373538303a666634343a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538303a666634343a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: 5NZsbS3/ECNwsIkfwekBTuMsstws0S9jzGJtHhbmy3k= Subject key identifier: 5C:4E:EF:C0:9B:15:55:27:C7:B8:73:B3:FC:56:3E:66:8C:25:C7:3A Certificate issuer: /CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Certificate serial: 1C28C7524ADAA77CECA60E88186C093B5AC040E0 Authority key identifier: BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/326131343a373538303a666634343a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 19 Dec 2025 14:48:02 +0000 ROA not before: Fri 19 Dec 2025 14:43:02 +0000 ROA not after: Fri 18 Dec 2026 14:48:02 +0000 asID: 214344 IP address blocks: 2a14:7580:ff44::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:28:c7:52:4a:da:a7:7c:ec:a6:0e:88:18:6c:09:3b:5a:c0:40:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Validity Not Before: Dec 19 14:43:02 2025 GMT Not After : Dec 18 14:48:02 2026 GMT Subject: CN=5C4EEFC09B155527C7B873B3FC563E668C25C73A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3c:ab:a6:6f:13:13:90:03:90:0f:85:67:dd: 08:79:5c:72:47:aa:e4:c9:77:f5:6a:85:2a:d7:59: fe:8e:78:bf:e2:f3:4e:79:3a:2e:3d:1e:ce:46:1b: 0c:d5:29:2d:ed:53:10:bb:a0:4a:6f:65:0c:25:bb: 71:49:63:21:2b:61:8f:35:66:7b:f6:0b:34:39:64: 1a:a0:7a:76:a5:ce:5e:9f:5e:e2:fa:ee:1a:bf:10: 7d:91:24:80:67:f4:26:48:e2:7f:30:93:6e:14:79: 9b:5d:9b:95:f2:cd:26:5b:72:ff:8d:62:42:80:5b: 36:de:ff:b8:d4:e2:78:8f:2e:95:3f:ea:ae:fc:8f: 51:e1:7a:3c:ed:cc:bb:89:7f:c6:96:37:09:a9:4c: 4a:b5:e2:61:6d:08:38:34:b8:fa:d4:ec:f6:22:34: 5d:99:1a:82:77:3d:fc:5d:6e:ed:a1:e4:6b:70:20: 9f:1c:e5:23:47:36:57:32:c9:f5:b5:55:28:38:7e: 91:d5:2f:4e:4d:79:03:7c:bd:42:a3:b1:58:8b:65: d2:6d:ba:1b:07:ed:57:43:d1:70:15:b3:04:1e:f9: fe:41:a1:88:d8:bb:1c:40:45:51:49:d9:49:8a:bf: 19:27:7c:25:cf:8d:ec:1d:e3:ec:8e:31:22:33:ca: 4a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4E:EF:C0:9B:15:55:27:C7:B8:73:B3:FC:56:3E:66:8C:25:C7:3A X509v3 Authority Key Identifier: keyid:BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/326131343a373538303a666634343a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff44::/48 Signature Algorithm: sha256WithRSAEncryption 41:02:84:c1:81:3f:a9:29:d9:1e:a9:36:8f:34:ea:47:fa:ec: 77:a7:8d:12:07:33:fc:e0:1f:1b:66:a3:5b:29:df:f4:ce:b8: 14:de:62:79:0b:1c:53:c1:6d:0f:aa:af:72:ef:6e:e1:a3:48: 31:22:49:98:e1:93:d6:f8:22:5d:f9:57:7b:0e:70:69:f0:ed: 8c:e0:44:7b:9e:7b:4e:52:58:eb:00:78:ae:4d:57:a9:77:fb: ec:7c:29:8a:32:b5:ae:de:57:9b:dd:e7:75:36:94:3b:81:03: 4c:a3:eb:81:65:af:31:17:2a:1d:90:f8:7e:d4:87:78:ec:9e: 68:f1:ac:84:43:d2:64:6e:df:62:99:9b:4d:50:3d:8f:8a:67: 92:d2:19:f2:c4:af:20:d4:15:72:8a:73:64:46:e1:5b:3b:4a: 1f:8b:53:95:47:8c:31:4c:e0:0a:e1:9c:6b:37:81:e8:7f:74: c5:4c:1d:84:99:db:d4:de:b6:2f:df:dd:00:4e:69:53:de:1f: ae:a0:89:7b:b7:41:bf:77:c6:95:23:45:e0:4d:5b:f7:76:53: 91:8f:8a:69:28:be:c1:92:8b:6b:2a:e8:dd:e4:12:01:42:8b: 30:24:9a:d6:e1:33:1a:e6:dd:96:67:e3:c1:ae:da:f6:21:dd: 94:ee:f0:df -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUHCjHUkrap3zspg6IGGwJO1rAQOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMy RkNERjlDNDAeFw0yNTEyMTkxNDQzMDJaFw0yNjEyMTgxNDQ4MDJaMDMxMTAvBgNV BAMTKDVDNEVFRkMwOUIxNTU1MjdDN0I4NzNCM0ZDNTYzRTY2OEMyNUM3M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPKumbxMTkAOQD4Vn3Qh5XHJH quTJd/VqhSrXWf6OeL/i8055Oi49Hs5GGwzVKS3tUxC7oEpvZQwlu3FJYyErYY81 Znv2CzQ5ZBqgenalzl6fXuL67hq/EH2RJIBn9CZI4n8wk24UeZtdm5XyzSZbcv+N YkKAWzbe/7jU4niPLpU/6q78j1HhejztzLuJf8aWNwmpTEq14mFtCDg0uPrU7PYi NF2ZGoJ3Pfxdbu2h5GtwIJ8c5SNHNlcyyfW1VSg4fpHVL05NeQN8vUKjsViLZdJt uhsH7VdD0XAVswQe+f5BoYjYuxxARVFJ2UmKvxknfCXPjewd4+yOMSIzykr7AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUXE7vwJsVVSfHuHOz/FY+ZowlxzowHwYDVR0j BBgwFoAUuwsCgGrjw09FOt7d42rfQy/N+cQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzIvQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMyRkNERjlDNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQjBCMDI4MDZBRTNDMzRGNDUzQURFRERF MzZBREY0MzJGQ0RGOUM0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvMi8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9EMA0GCSqGSIb3DQEBCwUAA4IBAQBB AoTBgT+pKdkeqTaPNOpH+ux3p40SBzP84B8bZqNbKd/0zrgU3mJ5CxxTwW0Pqq9y 727ho0gxIkmY4ZPW+CJd+Vd7DnBp8O2M4ER7nntOUljrAHiuTVepd/vsfCmKMrWu 3leb3ed1NpQ7gQNMo+uBZa8xFyodkPh+1Id47J5o8ayEQ9Jkbt9imZtNUD2PimeS 0hnyxK8g1BVyinNkRuFbO0ofi1OVR4wxTOAK4ZxrN4Hof3TFTB2EmdvU3rYv390A TmlT3h+uoIl7t0G/d8aVI0XgTVv3dlORj4ppKL7BkotrKujd5BIBQoswJJrW4TMa 5t2WZ+PBrtr2Id2U7vDf -----END CERTIFICATE-----Generated at Sun Dec 21 08:01:59 2025 by rpki-client