This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: odpWIoGfrHyjA/EqLrY/tj6kKgasd1C7YcR9JizUkBA= Subject key identifier: 21:C5:49:29:30:21:33:25:1C:82:19:01:B3:C1:E2:27:68:90:00:DD Certificate issuer: /CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Certificate serial: 41A85EA0369E73DC6E9AECA6F1E9425499687FEE Authority key identifier: B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 19 Dec 2025 14:51:09 +0000 ROA not before: Fri 19 Dec 2025 14:46:09 +0000 ROA not after: Fri 18 Dec 2026 14:51:09 +0000 asID: 214344 IP address blocks: 2a14:7581:9903::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a8:5e:a0:36:9e:73:dc:6e:9a:ec:a6:f1:e9:42:54:99:68:7f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Validity Not Before: Dec 19 14:46:09 2025 GMT Not After : Dec 18 14:51:09 2026 GMT Subject: CN=21C54929302133251C821901B3C1E227689000DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:60:ab:79:37:e6:c7:f2:09:32:3c:88:df:6b: 70:b6:e2:a5:af:8b:f7:a8:8c:10:71:57:cc:56:e5: d0:32:73:58:8e:5a:a5:6c:9e:24:52:2d:f0:d4:a1: a9:f0:5b:df:06:83:0b:7b:dd:26:3a:6b:4a:ac:45: e2:2b:14:30:99:dc:35:21:dd:39:fb:bd:10:66:b0: 07:5c:d1:0d:c9:15:45:1c:2d:6c:bc:92:89:ac:51: 95:5d:01:35:fe:7b:b8:91:d6:5f:3e:32:7a:4e:a7: e9:10:0c:55:b0:c6:dc:ee:b2:2f:4b:98:ce:04:b7: ba:c4:1a:29:c7:c3:6c:19:4b:ea:8e:6e:fd:9c:55: 0c:72:96:ad:a9:cc:9f:46:73:7c:21:03:c0:32:ad: 74:7a:84:2f:b9:6c:db:86:1e:ac:d5:9d:62:ea:98: 5a:8b:91:31:89:61:e1:8b:6a:3d:7f:34:bc:1a:78: 58:97:16:17:c4:5f:c2:61:ab:9c:ab:40:22:4e:32: 46:a0:52:da:f0:34:36:9d:80:d7:cc:54:2e:46:1e: 1d:e9:df:b7:c8:7c:df:d6:2a:2e:d3:24:38:60:7f: d6:aa:19:e1:87:24:2e:27:3b:b5:d5:f6:0c:9d:7e: 92:31:0c:6c:99:da:93:99:a3:e7:cb:b5:fc:da:7a: 75:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C5:49:29:30:21:33:25:1C:82:19:01:B3:C1:E2:27:68:90:00:DD X509v3 Authority Key Identifier: keyid:B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9903::/48 Signature Algorithm: sha256WithRSAEncryption 92:d3:c5:ef:67:98:7c:16:6c:5f:33:d1:f9:7a:80:f6:08:92: 3e:c4:5a:57:7c:9e:23:3e:b4:f6:28:48:d3:c7:e9:c1:25:32: b1:5d:d9:b0:8c:75:a9:36:ca:3f:cb:8d:c8:f6:b9:df:5a:ee: 72:e8:48:d3:30:d3:fa:7d:37:f2:68:ba:52:71:ae:8b:2e:e9: 73:a3:af:71:08:d0:31:87:16:c3:37:c4:ef:12:7f:e4:3b:c8: 68:fd:12:7f:2f:ba:13:0c:ac:53:5a:30:3b:62:a2:3b:5e:48: d2:c5:fc:f9:49:2d:6b:de:b2:f7:29:89:6e:9a:32:96:da:29: 45:62:48:e3:24:b0:b9:9e:b6:cb:5e:c7:ae:e0:e1:ab:97:e7: ce:d4:b0:6f:67:50:12:e2:73:23:cd:f0:93:99:3c:72:20:d7: 45:22:8b:4c:11:c4:68:b7:e9:76:ec:04:f1:f4:c6:91:95:76: ef:9c:17:38:c2:1a:36:84:a5:f9:03:1f:e2:ac:86:a4:65:82: 3d:71:7b:e0:82:37:0e:24:27:b6:04:61:2d:c6:93:41:d2:03: 96:19:af:b7:d5:6a:bb:89:b7:cf:86:84:ed:77:c4:03:a3:6a: 64:c9:20:de:7a:53:4b:01:cd:ea:60:f9:e1:ac:99:0a:e9:2a: 45:66:8a:1f -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUQaheoDaec9xumuym8elCVJlof+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVB RjZBNkJDMjAeFw0yNTEyMTkxNDQ2MDlaFw0yNjEyMTgxNDUxMDlaMDMxMTAvBgNV BAMTKDIxQzU0OTI5MzAyMTMzMjUxQzgyMTkwMUIzQzFFMjI3Njg5MDAwREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLYKt5N+bH8gkyPIjfa3C24qWv i/eojBBxV8xW5dAyc1iOWqVsniRSLfDUoanwW98Ggwt73SY6a0qsReIrFDCZ3DUh 3Tn7vRBmsAdc0Q3JFUUcLWy8komsUZVdATX+e7iR1l8+MnpOp+kQDFWwxtzusi9L mM4Et7rEGinHw2wZS+qObv2cVQxylq2pzJ9Gc3whA8AyrXR6hC+5bNuGHqzVnWLq mFqLkTGJYeGLaj1/NLwaeFiXFhfEX8Jhq5yrQCJOMkagUtrwNDadgNfMVC5GHh3p 37fIfN/WKi7TJDhgf9aqGeGHJC4nO7XV9gydfpIxDGyZ2pOZo+fLtfzaenVbAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUIcVJKTAhMyUcghkBs8HiJ2iQAN0wHwYDVR0j BBgwFoAUtSMAxa5ieLYI4jHkMcPdDq9qa8IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzMvQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVBRjZBNkJDMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CNTIzMDBDNUFFNjI3OEI2MDhFMjMxRTQz MUMzREQwRUFGNkE2QkMyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvMy8zMjYxMzEz NDNhMzczNTM4MzEzYTM5MzkzMDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gZkDMA0GCSqGSIb3DQEBCwUAA4IBAQCS 08XvZ5h8FmxfM9H5eoD2CJI+xFpXfJ4jPrT2KEjTx+nBJTKxXdmwjHWpNso/y43I 9rnfWu5y6EjTMNP6fTfyaLpSca6LLulzo69xCNAxhxbDN8TvEn/kO8ho/RJ/L7oT DKxTWjA7YqI7XkjSxfz5SS1r3rL3KYlumjKW2ilFYkjjJLC5nrbLXseu4OGrl+fO 1LBvZ1AS4nMjzfCTmTxyINdFIotMEcRot+l27ATx9MaRlXbvnBc4who2hKX5Ax/i rIakZYI9cXvggjcOJCe2BGEtxpNB0gOWGa+31Wq7ibfPhoTtd8QDo2pkySDeelNL Ac3qYPnhrJkK6SpFZoof -----END CERTIFICATE-----Generated at Sun Dec 21 08:02:01 2025 by rpki-client