This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: a3vn+r3Xd1ZweP+VfXPkybQsxnlpFwKhPGkq1Aja1ws= Subject key identifier: 46:55:59:32:0E:C3:51:72:D0:B2:B3:56:86:C8:37:C8:1F:D4:F5:CA Certificate issuer: /CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Certificate serial: 4074A77F01DC1D2A730BDC0B7E9DA26B0B7465AF Authority key identifier: B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 19 Dec 2025 14:50:42 +0000 ROA not before: Fri 19 Dec 2025 14:45:42 +0000 ROA not after: Fri 18 Dec 2026 14:50:42 +0000 asID: 214344 IP address blocks: 2a14:7581:9901::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:74:a7:7f:01:dc:1d:2a:73:0b:dc:0b:7e:9d:a2:6b:0b:74:65:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Validity Not Before: Dec 19 14:45:42 2025 GMT Not After : Dec 18 14:50:42 2026 GMT Subject: CN=465559320EC35172D0B2B35686C837C81FD4F5CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:05:7f:c0:21:e6:1b:9c:6c:7e:e6:a8:fc: 38:8c:40:71:ac:5d:36:5a:73:e3:f5:61:cd:0f:93: 90:a1:68:0d:ba:ba:1c:8d:7d:97:a2:9b:fd:9e:4e: 24:23:09:94:44:4e:b2:31:6f:e9:4f:1a:10:9a:b9: b1:83:f2:32:81:3d:87:4d:33:8b:97:a2:05:ef:e8: 34:2d:c7:cd:83:9c:01:87:19:52:ba:cf:40:6b:54: ac:95:e0:93:d3:41:67:1a:df:e7:e3:ec:25:bb:17: c8:ac:1f:85:0c:02:60:e1:c2:dc:b4:ec:b3:ed:72: 4e:27:84:5f:a0:b9:d6:a1:98:52:6d:2e:07:58:c5: b2:25:e4:a8:c3:a1:e1:eb:3a:70:a2:6d:a1:4c:44: 8e:19:03:64:40:61:1c:8c:c2:94:78:36:17:be:72: a3:cd:4e:97:b4:80:a8:94:28:24:b5:37:68:6c:aa: fd:92:6b:52:af:46:46:2b:76:49:95:79:aa:8c:43: 73:8b:47:98:af:e8:fd:b5:8e:da:2c:d9:08:8b:ad: a2:fb:24:cb:3e:75:d5:a3:90:03:b5:c7:ff:76:ef: 39:0f:c5:56:d0:da:71:42:51:31:a8:80:6e:0e:39: ff:48:15:39:0f:9e:85:06:2c:99:35:80:28:ed:cd: 71:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:55:59:32:0E:C3:51:72:D0:B2:B3:56:86:C8:37:C8:1F:D4:F5:CA X509v3 Authority Key Identifier: keyid:B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9901::/48 Signature Algorithm: sha256WithRSAEncryption 14:9c:70:72:16:1a:43:08:3c:5d:a1:42:c4:9a:72:7d:94:0f: 98:94:02:95:1d:83:4e:b4:e5:c4:b5:fd:ed:3b:94:49:c0:7b: 5c:ac:df:38:d1:3b:46:d9:1a:2c:f0:46:7b:c9:41:23:13:67: e6:45:7b:f7:68:38:71:fb:fe:a7:82:fb:6b:68:9a:b7:f8:d5: 79:22:de:ca:20:e4:b2:f6:06:6b:f2:5f:4c:ef:8f:8b:3f:39: e0:68:19:20:32:53:86:c5:a3:4a:53:b5:e8:54:87:1d:9c:d1: 28:52:3d:2f:3a:24:13:75:a5:36:5f:f2:9d:1b:96:57:ff:07: c5:31:23:e0:87:31:d0:3d:a4:1e:36:62:7d:ba:7a:c6:b6:ee: bc:70:bd:6f:02:a7:66:1a:8b:3a:dd:8c:ed:af:4f:7f:b7:50: ec:0e:c9:4f:5d:e5:58:90:27:9a:0d:71:29:0a:b3:9c:d5:af: d2:ff:01:d1:e8:45:1a:c8:1f:0f:16:ef:a5:e3:f4:e0:c2:38: dd:ff:af:45:f4:5e:c0:64:41:4a:04:df:92:07:aa:3f:e7:6a: 51:92:7e:07:ca:af:ee:0a:5c:2b:ef:14:66:6f:49:6f:32:8a: d9:bf:ed:f7:92:1e:f5:6a:ea:2b:e9:f2:65:08:a5:21:66:cf: da:a8:44:a8 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUQHSnfwHcHSpzC9wLfp2iawt0Za8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVB RjZBNkJDMjAeFw0yNTEyMTkxNDQ1NDJaFw0yNjEyMTgxNDUwNDJaMDMxMTAvBgNV BAMTKDQ2NTU1OTMyMEVDMzUxNzJEMEIyQjM1Njg2QzgzN0M4MUZENEY1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpAV/wCHmG5xsfuao/DiMQHGs XTZac+P1Yc0Pk5ChaA26uhyNfZeim/2eTiQjCZRETrIxb+lPGhCaubGD8jKBPYdN M4uXogXv6DQtx82DnAGHGVK6z0BrVKyV4JPTQWca3+fj7CW7F8isH4UMAmDhwty0 7LPtck4nhF+gudahmFJtLgdYxbIl5KjDoeHrOnCibaFMRI4ZA2RAYRyMwpR4Nhe+ cqPNTpe0gKiUKCS1N2hsqv2Sa1KvRkYrdkmVeaqMQ3OLR5iv6P21jtos2QiLraL7 JMs+ddWjkAO1x/927zkPxVbQ2nFCUTGogG4OOf9IFTkPnoUGLJk1gCjtzXEHAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQURlVZMg7DUXLQsrNWhsg3yB/U9cowHwYDVR0j BBgwFoAUtSMAxa5ieLYI4jHkMcPdDq9qa8IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzMvQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVBRjZBNkJDMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CNTIzMDBDNUFFNjI3OEI2MDhFMjMxRTQz MUMzREQwRUFGNkE2QkMyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvMy8zMjYxMzEz NDNhMzczNTM4MzEzYTM5MzkzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gZkBMA0GCSqGSIb3DQEBCwUAA4IBAQAU nHByFhpDCDxdoULEmnJ9lA+YlAKVHYNOtOXEtf3tO5RJwHtcrN840TtG2Ros8EZ7 yUEjE2fmRXv3aDhx+/6ngvtraJq3+NV5It7KIOSy9gZr8l9M74+LPzngaBkgMlOG xaNKU7XoVIcdnNEoUj0vOiQTdaU2X/KdG5ZX/wfFMSPghzHQPaQeNmJ9unrGtu68 cL1vAqdmGos63Yztr09/t1DsDslPXeVYkCeaDXEpCrOc1a/S/wHR6EUayB8PFu+l 4/Tgwjjd/69F9F7AZEFKBN+SB6o/52pRkn4Hyq/uClwr7xRmb0lvMorZv+33kh71 auor6fJlCKUhZs/aqESo -----END CERTIFICATE-----Generated at Sun Dec 21 08:02:02 2025 by rpki-client