This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: JSmiAu7ed33+J2eg2ZQ/ocsiovRypTOUdvXbpKPSbI8= Subject key identifier: B7:A3:D0:1A:B1:9C:94:DB:92:BA:33:02:3E:4D:BC:74:2C:1B:38:F0 Certificate issuer: /CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Certificate serial: 4E74A4A851CF1AACF0F2F980B0990C854E01C161 Authority key identifier: B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 19 Dec 2025 14:51:27 +0000 ROA not before: Fri 19 Dec 2025 14:46:27 +0000 ROA not after: Fri 18 Dec 2026 14:51:27 +0000 asID: 214344 IP address blocks: 2a14:7581:9904::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:74:a4:a8:51:cf:1a:ac:f0:f2:f9:80:b0:99:0c:85:4e:01:c1:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Validity Not Before: Dec 19 14:46:27 2025 GMT Not After : Dec 18 14:51:27 2026 GMT Subject: CN=B7A3D01AB19C94DB92BA33023E4DBC742C1B38F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d7:ed:ab:85:cc:ee:27:ba:62:ec:b1:b3:e2: 4b:5b:e9:b9:5d:2e:92:e4:a2:62:1d:94:8f:ce:a6: d7:56:51:60:66:81:77:42:d0:58:9f:06:20:dd:f7: 3b:9e:b4:9c:a1:84:95:9f:7e:da:97:5f:cd:a0:51: 17:5c:b3:49:e1:a9:a0:33:6d:e8:94:44:68:3e:6b: 89:32:99:18:de:8c:d3:42:22:ae:6d:94:8f:e6:4b: 5c:c3:5c:9a:d6:a9:25:38:21:23:ad:bf:81:02:dc: f9:a9:24:f8:00:f2:18:f4:11:f8:e4:a1:a0:83:29: f0:1a:9b:d5:6c:0f:6d:38:16:ef:0d:9c:82:d6:bb: d7:59:da:2d:be:71:63:a2:29:f5:fd:75:8b:17:48: 78:08:10:f1:f2:ac:d4:cb:a0:b9:7d:52:f7:8a:03: 98:90:9b:95:44:92:f7:5f:69:02:51:a1:48:70:37: 34:9d:c7:f4:58:79:94:3e:e3:f4:45:9f:92:ac:a1: 57:e0:b9:05:12:c4:b9:d0:1a:f9:1c:37:f7:f6:59: 9b:0d:85:7a:a7:b0:70:fb:38:4b:ff:ab:99:46:57: 4d:a8:a1:27:f6:59:b1:41:2c:17:83:53:24:69:8c: 2f:58:38:b4:8b:a9:0f:47:24:e0:76:e8:b2:1d:94: a5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A3:D0:1A:B1:9C:94:DB:92:BA:33:02:3E:4D:BC:74:2C:1B:38:F0 X509v3 Authority Key Identifier: keyid:B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9904::/48 Signature Algorithm: sha256WithRSAEncryption 5d:32:86:79:4c:df:9c:10:00:3d:06:a9:7d:6f:b1:c1:a7:87: 66:b9:71:f4:d5:f1:8d:15:2d:bd:32:48:2b:b2:b8:9f:66:a8: 4b:d9:25:2a:46:3a:86:4f:ab:d8:1f:85:b8:cd:b7:f3:6c:e6: d3:95:f3:d4:74:ea:a5:ca:31:dd:71:84:a3:db:39:89:27:6f: 4b:ed:4c:9b:9d:9c:7c:74:fa:e4:65:bf:fc:cb:00:ef:fc:26: 20:73:e6:8e:1a:11:69:c2:58:ab:36:ed:60:e6:86:25:9e:c5: 94:8e:6b:14:f1:53:4b:f3:c3:e9:ad:b7:41:dc:da:3e:9f:c6: c1:9b:52:c1:69:64:9f:09:33:bd:24:85:d7:64:43:1e:7d:52: b4:1f:fe:c2:31:80:45:60:07:4d:95:b6:93:52:e6:65:3f:9a: 38:ed:3f:5b:7e:82:fd:d4:b6:89:9d:d2:9f:20:e6:51:43:e8: a4:d1:27:a3:c2:f9:84:f5:8e:ff:98:52:23:65:bd:a1:32:2a: 80:30:08:17:44:0c:a4:a5:bb:f4:de:1c:d0:0a:33:72:3a:a8: 13:1c:21:9f:9b:47:3a:6b:c3:9c:34:de:ac:d7:a5:e8:e6:32: 1d:ec:b9:74:43:cb:ad:a1:50:12:d6:ba:3c:fa:42:fa:f7:c5: 48:06:50:a7 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUTnSkqFHPGqzw8vmAsJkMhU4BwWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVB RjZBNkJDMjAeFw0yNTEyMTkxNDQ2MjdaFw0yNjEyMTgxNDUxMjdaMDMxMTAvBgNV BAMTKEI3QTNEMDFBQjE5Qzk0REI5MkJBMzMwMjNFNERCQzc0MkMxQjM4RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91+2rhczuJ7pi7LGz4ktb6bld LpLkomIdlI/OptdWUWBmgXdC0FifBiDd9zuetJyhhJWfftqXX82gURdcs0nhqaAz beiURGg+a4kymRjejNNCIq5tlI/mS1zDXJrWqSU4ISOtv4EC3PmpJPgA8hj0Efjk oaCDKfAam9VsD204Fu8NnILWu9dZ2i2+cWOiKfX9dYsXSHgIEPHyrNTLoLl9UveK A5iQm5VEkvdfaQJRoUhwNzSdx/RYeZQ+4/RFn5KsoVfguQUSxLnQGvkcN/f2WZsN hXqnsHD7OEv/q5lGV02ooSf2WbFBLBeDUyRpjC9YOLSLqQ9HJOB26LIdlKVVAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUt6PQGrGclNuSujMCPk28dCwbOPAwHwYDVR0j BBgwFoAUtSMAxa5ieLYI4jHkMcPdDq9qa8IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzMvQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVBRjZBNkJDMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CNTIzMDBDNUFFNjI3OEI2MDhFMjMxRTQz MUMzREQwRUFGNkE2QkMyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvMy8zMjYxMzEz NDNhMzczNTM4MzEzYTM5MzkzMDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gZkEMA0GCSqGSIb3DQEBCwUAA4IBAQBd MoZ5TN+cEAA9Bql9b7HBp4dmuXH01fGNFS29MkgrsrifZqhL2SUqRjqGT6vYH4W4 zbfzbObTlfPUdOqlyjHdcYSj2zmJJ29L7UybnZx8dPrkZb/8ywDv/CYgc+aOGhFp wlirNu1g5oYlnsWUjmsU8VNL88PprbdB3No+n8bBm1LBaWSfCTO9JIXXZEMefVK0 H/7CMYBFYAdNlbaTUuZlP5o47T9bfoL91LaJndKfIOZRQ+ik0SejwvmE9Y7/mFIj Zb2hMiqAMAgXRAykpbv03hzQCjNyOqgTHCGfm0c6a8OcNN6s16Xo5jId7Ll0Q8ut oVAS1ro8+kL698VIBlCn -----END CERTIFICATE-----Generated at Sun Dec 21 08:02:01 2025 by rpki-client