This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: TyFBqgR7vYeMd4/BuVueO5zwkcDAg7G5uk0/d+OPki0= Subject key identifier: 98:25:20:85:1E:EF:D0:5A:14:F0:C2:5D:0B:B6:AC:3B:9A:A3:F5:4C Certificate issuer: /CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Certificate serial: 61E8301F577FC2B68EFEBDBF7D8338381DEA5D40 Authority key identifier: B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 19 Dec 2025 14:50:55 +0000 ROA not before: Fri 19 Dec 2025 14:45:55 +0000 ROA not after: Fri 18 Dec 2026 14:50:55 +0000 asID: 214344 IP address blocks: 2a14:7581:9902::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:e8:30:1f:57:7f:c2:b6:8e:fe:bd:bf:7d:83:38:38:1d:ea:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Validity Not Before: Dec 19 14:45:55 2025 GMT Not After : Dec 18 14:50:55 2026 GMT Subject: CN=982520851EEFD05A14F0C25D0BB6AC3B9AA3F54C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d8:21:d2:c1:e7:8c:1c:50:f2:8e:32:cf:dc: ff:46:8b:3a:3d:0d:d7:f5:cd:ad:48:f5:ad:f6:13: 3f:86:3f:1b:55:0c:ca:7e:4c:a6:04:db:4f:94:c5: c8:a1:7a:a9:8d:60:81:b7:3e:c1:23:be:f3:2a:82: 0b:53:42:c5:b4:df:63:c9:55:bf:c5:07:6f:be:bd: 63:55:f1:4f:e0:0b:41:dd:28:a8:ed:8d:fc:40:52: b4:e4:53:6e:17:32:58:4d:86:88:9a:65:3c:06:7a: e2:9a:3c:b7:86:91:6f:25:ab:f6:e1:d9:72:15:b5: 66:9b:41:45:b4:0b:3a:d4:17:ab:b1:68:03:a5:ce: 9a:72:e2:51:0c:98:8e:00:bb:cb:07:04:8a:34:5f: 4c:0c:85:52:1b:c7:c4:44:33:16:da:46:99:fa:93: 6a:e0:88:31:5d:d6:bf:fc:5c:93:35:61:43:05:cb: c2:9d:a7:c2:c9:7c:74:c3:a9:ff:17:f3:e9:37:3d: ae:53:a7:9a:10:89:4d:fa:c5:8d:6e:b1:63:af:8f: 35:3f:a1:2d:89:0c:51:7b:a4:ca:fc:8a:0b:14:78: cb:f3:eb:a1:91:f7:6a:57:a2:ee:f1:af:43:26:17: d9:54:d1:4a:37:30:85:df:eb:4c:ba:e6:02:b5:4c: 93:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:25:20:85:1E:EF:D0:5A:14:F0:C2:5D:0B:B6:AC:3B:9A:A3:F5:4C X509v3 Authority Key Identifier: keyid:B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9902::/48 Signature Algorithm: sha256WithRSAEncryption 2b:e6:4d:0c:6f:cd:41:d9:d0:d9:85:b6:a9:13:34:ed:8a:29: a1:e1:82:91:32:79:66:27:e7:44:64:e7:61:ac:da:82:65:07: 54:ed:1b:82:41:b5:b0:a4:1d:b6:61:40:1a:ac:9f:38:17:45: 17:d5:47:bb:ed:e6:e9:3c:06:22:76:e5:ef:70:57:23:99:4b: 2e:a2:5d:d6:1b:82:86:68:21:25:9b:c1:20:14:f4:bb:26:47: 4f:d7:c0:1a:9c:58:fb:45:4d:3d:9b:67:45:9b:9f:16:c0:41: 48:f0:15:ce:21:fe:79:66:ca:94:1b:71:d2:52:43:96:33:ad: 43:70:b3:b6:28:3c:06:fc:0e:a3:bd:27:7e:d6:76:21:1d:35: 4c:5d:40:88:04:68:72:dd:41:f7:a8:8b:58:b8:bf:7f:5e:6f: f6:48:c0:c9:61:f2:ba:0e:6e:9f:60:0b:bb:d9:c7:bb:12:82: 72:1a:d7:a0:ad:d4:4f:29:25:6f:36:0f:96:de:89:e5:21:fe: e0:1f:b9:07:b9:b6:9c:ee:d2:96:26:78:c4:86:11:33:4e:e5: 9d:fd:d2:eb:27:df:e8:2d:ec:f8:95:a8:66:e0:95:e1:db:06: a6:20:27:90:d9:22:9a:25:53:98:88:25:26:3c:a7:fa:c5:26: 0e:33:e7:d6 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUYegwH1d/wraO/r2/fYM4OB3qXUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVB RjZBNkJDMjAeFw0yNTEyMTkxNDQ1NTVaFw0yNjEyMTgxNDUwNTVaMDMxMTAvBgNV BAMTKDk4MjUyMDg1MUVFRkQwNUExNEYwQzI1RDBCQjZBQzNCOUFBM0Y1NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa2CHSweeMHFDyjjLP3P9Gizo9 Ddf1za1I9a32Ez+GPxtVDMp+TKYE20+UxciheqmNYIG3PsEjvvMqggtTQsW032PJ Vb/FB2++vWNV8U/gC0HdKKjtjfxAUrTkU24XMlhNhoiaZTwGeuKaPLeGkW8lq/bh 2XIVtWabQUW0CzrUF6uxaAOlzppy4lEMmI4Au8sHBIo0X0wMhVIbx8REMxbaRpn6 k2rgiDFd1r/8XJM1YUMFy8Kdp8LJfHTDqf8X8+k3Pa5Tp5oQiU36xY1usWOvjzU/ oS2JDFF7pMr8igsUeMvz66GR92pXou7xr0MmF9lU0Uo3MIXf60y65gK1TJMvAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUmCUghR7v0FoU8MJdC7asO5qj9UwwHwYDVR0j BBgwFoAUtSMAxa5ieLYI4jHkMcPdDq9qa8IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzMvQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVBRjZBNkJDMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CNTIzMDBDNUFFNjI3OEI2MDhFMjMxRTQz MUMzREQwRUFGNkE2QkMyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvMy8zMjYxMzEz NDNhMzczNTM4MzEzYTM5MzkzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gZkCMA0GCSqGSIb3DQEBCwUAA4IBAQAr 5k0Mb81B2dDZhbapEzTtiimh4YKRMnlmJ+dEZOdhrNqCZQdU7RuCQbWwpB22YUAa rJ84F0UX1Ue77ebpPAYiduXvcFcjmUsuol3WG4KGaCElm8EgFPS7JkdP18AanFj7 RU09m2dFm58WwEFI8BXOIf55ZsqUG3HSUkOWM61DcLO2KDwG/A6jvSd+1nYhHTVM XUCIBGhy3UH3qItYuL9/Xm/2SMDJYfK6Dm6fYAu72ce7EoJyGtegrdRPKSVvNg+W 3onlIf7gH7kHubac7tKWJnjEhhEzTuWd/dLrJ9/oLez4lahm4JXh2wamICeQ2SKa JVOYiCUmPKf6xSYOM+fW -----END CERTIFICATE-----Generated at Sun Dec 21 08:02:02 2025 by rpki-client