This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: WvJ+nlXPCuTRZnP7e6XF03QrjAocsMrvYbQ3ZQ/eNBY= Subject key identifier: 09:BB:4F:43:7B:56:31:67:BB:E6:F0:22:EC:E3:78:18:5C:6B:B5:0D Certificate issuer: /CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Certificate serial: 3CFAC227118E4CB58ADD9CA681E71CE12B3798F2 Authority key identifier: B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 19 Dec 2025 14:51:48 +0000 ROA not before: Fri 19 Dec 2025 14:46:48 +0000 ROA not after: Fri 18 Dec 2026 14:51:48 +0000 asID: 214344 IP address blocks: 2a14:7581:9905::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:fa:c2:27:11:8e:4c:b5:8a:dd:9c:a6:81:e7:1c:e1:2b:37:98:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Validity Not Before: Dec 19 14:46:48 2025 GMT Not After : Dec 18 14:51:48 2026 GMT Subject: CN=09BB4F437B563167BBE6F022ECE378185C6BB50D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d2:7e:3b:e1:3b:60:ec:f3:b9:de:f4:f5:a3: f1:ec:3a:fb:ba:e3:f5:a7:d9:e2:2b:4f:aa:b1:96: d7:20:ba:bd:ea:60:f3:b7:94:aa:f6:f7:4a:97:3a: 64:9c:78:6b:f1:5f:32:40:23:20:88:2d:fa:25:5c: ca:06:47:57:db:76:98:8c:d5:1b:d7:56:c9:ea:41: 76:25:d2:3a:5e:be:54:b7:46:8d:a7:47:5c:3b:d3: 4c:2f:fa:62:62:4b:e7:2e:fc:be:0b:bb:c2:86:ac: e0:ed:99:6f:46:17:5d:81:b3:e8:e9:69:8d:3a:d5: 03:c8:1e:8e:9a:0a:f1:55:0b:e1:6e:f8:05:36:9f: 0f:b7:05:17:5f:35:7d:ee:40:51:da:27:12:2c:72: 70:51:4d:66:ec:7f:48:13:f0:a8:43:c7:d8:74:db: c0:7c:bc:d0:69:aa:48:2d:fa:2d:bb:d7:e9:4d:e2: 76:12:9b:c9:8f:dd:05:7c:e1:a4:c3:a1:35:33:e3: 8c:a8:0b:52:0e:1c:94:41:c3:52:e9:8d:c8:7a:b3: 38:36:fb:78:31:34:10:42:9c:c9:20:68:2a:ba:20: 28:5e:b3:9c:3f:82:50:48:f3:0a:9d:ad:71:86:a7: 17:32:df:6e:66:f0:dc:0c:27:35:42:71:8d:e1:91: 9b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BB:4F:43:7B:56:31:67:BB:E6:F0:22:EC:E3:78:18:5C:6B:B5:0D X509v3 Authority Key Identifier: keyid:B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9905::/48 Signature Algorithm: sha256WithRSAEncryption 6a:08:eb:9e:e2:24:23:f3:86:36:e5:68:5c:fb:89:41:eb:da: f6:a6:35:81:ec:fd:6e:94:b8:b1:21:06:70:c4:07:3a:6f:78: 57:20:e9:e5:a4:5e:8f:81:5d:2c:09:cf:17:e1:e0:4f:94:4d: 85:e4:28:38:f2:58:06:8f:46:80:57:f7:53:99:6d:6f:09:73: 23:ec:06:52:e2:c4:0d:2b:32:10:83:54:36:58:e7:2a:77:d0: 24:57:93:60:e9:a3:2e:96:b2:b5:a0:65:fb:af:e7:28:f0:ac: 67:46:4c:75:49:e0:d6:52:c3:11:66:14:b4:99:ad:41:36:df: 27:80:20:2c:37:f3:e8:27:27:a3:03:20:b5:94:8e:59:68:d1: 6c:e5:25:ef:48:a6:57:41:27:b3:2b:45:31:3f:09:0f:77:30: 3a:28:0e:73:47:f7:8e:8f:34:98:e1:a3:b9:6b:8e:6e:3e:bf: 21:99:93:36:09:eb:8a:1c:8b:71:38:e9:6b:1c:96:50:a1:c7: 6d:4a:56:4f:44:7c:98:cd:0d:f1:1e:a8:fe:80:e9:2b:1c:f4: 72:d0:b8:22:aa:71:3c:ec:8f:1b:70:cf:93:02:85:39:c7:db: 4f:55:31:07:35:2d:7a:c4:8c:8b:4f:17:27:c6:bc:57:66:6a: 76:f4:19:a7 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUPPrCJxGOTLWK3Zymgecc4Ss3mPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVB RjZBNkJDMjAeFw0yNTEyMTkxNDQ2NDhaFw0yNjEyMTgxNDUxNDhaMDMxMTAvBgNV BAMTKDA5QkI0RjQzN0I1NjMxNjdCQkU2RjAyMkVDRTM3ODE4NUM2QkI1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0n474Ttg7PO53vT1o/HsOvu6 4/Wn2eIrT6qxltcgur3qYPO3lKr290qXOmSceGvxXzJAIyCILfolXMoGR1fbdpiM 1RvXVsnqQXYl0jpevlS3Ro2nR1w700wv+mJiS+cu/L4Lu8KGrODtmW9GF12Bs+jp aY061QPIHo6aCvFVC+Fu+AU2nw+3BRdfNX3uQFHaJxIscnBRTWbsf0gT8KhDx9h0 28B8vNBpqkgt+i271+lN4nYSm8mP3QV84aTDoTUz44yoC1IOHJRBw1Lpjch6szg2 +3gxNBBCnMkgaCq6IChes5w/glBI8wqdrXGGpxcy325m8NwMJzVCcY3hkZtvAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUCbtPQ3tWMWe75vAi7ON4GFxrtQ0wHwYDVR0j BBgwFoAUtSMAxa5ieLYI4jHkMcPdDq9qa8IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzMvQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVBRjZBNkJDMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CNTIzMDBDNUFFNjI3OEI2MDhFMjMxRTQz MUMzREQwRUFGNkE2QkMyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvMy8zMjYxMzEz NDNhMzczNTM4MzEzYTM5MzkzMDM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gZkFMA0GCSqGSIb3DQEBCwUAA4IBAQBq COue4iQj84Y25Whc+4lB69r2pjWB7P1ulLixIQZwxAc6b3hXIOnlpF6PgV0sCc8X 4eBPlE2F5Cg48lgGj0aAV/dTmW1vCXMj7AZS4sQNKzIQg1Q2WOcqd9AkV5Ng6aMu lrK1oGX7r+co8KxnRkx1SeDWUsMRZhS0ma1BNt8ngCAsN/PoJyejAyC1lI5ZaNFs 5SXvSKZXQSezK0UxPwkPdzA6KA5zR/eOjzSY4aO5a45uPr8hmZM2CeuKHItxOOlr HJZQocdtSlZPRHyYzQ3xHqj+gOkrHPRy0LgiqnE87I8bcM+TAoU5x9tPVTEHNS16 xIyLTxcnxrxXZmp29Bmn -----END CERTIFICATE-----Generated at Sun Dec 21 08:02:01 2025 by rpki-client