This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/326131343a373538303a666634353a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538303a666634353a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: hdVzeFM1qIVbiHCOPfcZVjzE07zDvwiz6q8IHeNVQA0= Subject key identifier: 52:FE:E4:EA:C3:93:1D:BE:1C:2E:46:C2:9F:3F:A2:79:A1:60:B0:8B Certificate issuer: /CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Certificate serial: 53A8E8906CD00D553BD22956CDAC62112D4C4735 Authority key identifier: BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/326131343a373538303a666634353a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 19 Dec 2025 14:48:25 +0000 ROA not before: Fri 19 Dec 2025 14:43:25 +0000 ROA not after: Fri 18 Dec 2026 14:48:25 +0000 asID: 214344 IP address blocks: 2a14:7580:ff45::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a8:e8:90:6c:d0:0d:55:3b:d2:29:56:cd:ac:62:11:2d:4c:47:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Validity Not Before: Dec 19 14:43:25 2025 GMT Not After : Dec 18 14:48:25 2026 GMT Subject: CN=52FEE4EAC3931DBE1C2E46C29F3FA279A160B08B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:a3:85:88:d6:72:c2:cb:76:d1:11:2d:f6: b6:6b:23:54:78:a3:46:1f:90:26:b9:fd:15:10:54: 78:dc:e0:d4:f3:23:44:c3:7b:35:68:32:a7:e9:44: f0:4d:7a:27:86:3b:16:98:1c:35:c4:e8:db:45:cc: 54:ff:c9:46:2c:a6:d7:76:e9:0b:78:17:39:51:3d: 34:d6:1b:8f:b6:47:cc:ff:04:d0:bd:38:bf:fb:39: 6b:65:cc:fe:88:8e:a1:32:62:4b:f1:62:27:d2:65: 76:91:49:26:0c:0c:30:94:1f:e6:52:6b:87:9f:1f: ec:d9:8f:bf:57:6a:1d:4d:ed:af:4a:77:df:7e:19: bb:a6:99:ba:2c:1c:fd:44:18:3e:33:05:e0:8a:9c: ac:5e:6a:78:12:ca:62:37:ad:7a:ed:51:31:49:ca: 39:1e:df:87:ab:0e:35:85:23:98:26:be:fb:e1:39: 10:39:39:a2:f6:d5:a4:2d:60:79:4b:36:6b:fb:56: 93:82:70:cb:66:58:33:36:50:39:3c:de:f4:c5:45: 74:a1:08:56:91:9b:b0:4c:16:46:59:41:f8:49:b8: c5:ca:c9:25:9c:4e:8c:53:62:e5:b8:9e:08:10:96: 0d:01:56:89:ab:47:03:db:08:3b:47:a5:7c:38:c5: c7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FE:E4:EA:C3:93:1D:BE:1C:2E:46:C2:9F:3F:A2:79:A1:60:B0:8B X509v3 Authority Key Identifier: keyid:BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/326131343a373538303a666634353a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff45::/48 Signature Algorithm: sha256WithRSAEncryption 22:cc:ec:fe:92:09:bd:89:6a:c1:1a:eb:cc:97:71:bb:3a:e9: dd:a2:13:f5:1f:0a:bd:b0:54:73:d0:76:30:48:13:fa:a4:8c: a3:d2:e4:54:bf:48:f1:35:59:d5:17:e8:73:00:6d:52:07:24: 51:d4:e1:84:26:34:72:ef:be:4e:37:1d:fe:f2:3b:d8:2b:a9: 65:08:df:4f:8a:22:71:db:ae:4e:87:4d:b5:cf:fd:5e:46:21: 80:d3:fd:3a:72:10:02:38:d8:d6:64:9f:e5:65:28:41:a2:48: de:52:50:db:da:a9:b8:87:9f:9d:ce:f5:d5:c8:97:87:e2:5d: ec:72:ff:43:48:1b:76:9a:20:25:42:ff:23:05:70:6f:fd:a5: 1f:d3:29:e8:55:60:87:ff:95:82:a1:23:38:96:5c:c4:ca:82: 68:10:d3:27:f1:5f:cf:6e:40:8b:6a:26:9c:71:0f:33:4b:96: a8:eb:83:30:97:d1:d4:a1:13:31:bd:d8:b4:2a:c0:9d:65:63: 91:6b:6d:b6:2b:01:0a:c5:43:b1:93:a2:b2:96:10:5f:37:6c: 6b:5b:b4:a5:5d:0d:c7:64:d9:f6:4c:13:9a:9b:7b:5d:dc:f2: 56:fd:00:34:3d:1d:c2:97:63:cf:81:47:fa:e0:1b:42:fd:ca: 78:3a:1f:99 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUU6jokGzQDVU70ilWzaxiES1MRzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMy RkNERjlDNDAeFw0yNTEyMTkxNDQzMjVaFw0yNjEyMTgxNDQ4MjVaMDMxMTAvBgNV BAMTKDUyRkVFNEVBQzM5MzFEQkUxQzJFNDZDMjlGM0ZBMjc5QTE2MEIwOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3eaOFiNZywst20REt9rZrI1R4 o0YfkCa5/RUQVHjc4NTzI0TDezVoMqfpRPBNeieGOxaYHDXE6NtFzFT/yUYsptd2 6Qt4FzlRPTTWG4+2R8z/BNC9OL/7OWtlzP6IjqEyYkvxYifSZXaRSSYMDDCUH+ZS a4efH+zZj79Xah1N7a9Kd99+GbummbosHP1EGD4zBeCKnKxeangSymI3rXrtUTFJ yjke34erDjWFI5gmvvvhORA5OaL21aQtYHlLNmv7VpOCcMtmWDM2UDk83vTFRXSh CFaRm7BMFkZZQfhJuMXKySWcToxTYuW4nggQlg0BVomrRwPbCDtHpXw4xce9AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUUv7k6sOTHb4cLkbCnz+ieaFgsIswHwYDVR0j BBgwFoAUuwsCgGrjw09FOt7d42rfQy/N+cQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzIvQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMyRkNERjlDNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQjBCMDI4MDZBRTNDMzRGNDUzQURFRERF MzZBREY0MzJGQ0RGOUM0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvMi8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNDM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9FMA0GCSqGSIb3DQEBCwUAA4IBAQAi zOz+kgm9iWrBGuvMl3G7OundohP1Hwq9sFRz0HYwSBP6pIyj0uRUv0jxNVnVF+hz AG1SByRR1OGEJjRy775ONx3+8jvYK6llCN9PiiJx265Oh021z/1eRiGA0/06chAC ONjWZJ/lZShBokjeUlDb2qm4h5+dzvXVyJeH4l3scv9DSBt2miAlQv8jBXBv/aUf 0ynoVWCH/5WCoSM4llzEyoJoENMn8V/PbkCLaiaccQ8zS5ao64Mwl9HUoRMxvdi0 KsCdZWORa222KwEKxUOxk6KylhBfN2xrW7SlXQ3HZNn2TBOam3td3PJW/QA0PR3C l2PPgUf64BtC/cp4Oh+Z -----END CERTIFICATE-----Generated at Sun Dec 21 08:01:58 2025 by rpki-client