This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: dhPIT0Huo/8bMcCCD9CENzV8Oc7GRGv2lkOyyJSz4lY= Subject key identifier: 80:99:63:09:BE:7F:4A:A8:6B:56:5B:8B:BC:C3:32:95:6B:02:5E:62 Certificate issuer: /CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Certificate serial: 2D55AF1294AB61B3807D9ACFE85D52224C148D70 Authority key identifier: B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 19 Dec 2025 14:52:04 +0000 ROA not before: Fri 19 Dec 2025 14:47:04 +0000 ROA not after: Fri 18 Dec 2026 14:52:04 +0000 asID: 214344 IP address blocks: 2a14:7581:9988::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:55:af:12:94:ab:61:b3:80:7d:9a:cf:e8:5d:52:22:4c:14:8d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Validity Not Before: Dec 19 14:47:04 2025 GMT Not After : Dec 18 14:52:04 2026 GMT Subject: CN=80996309BE7F4AA86B565B8BBCC332956B025E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:27:23:a6:21:1c:67:81:4e:4a:86:21:d1:f3: 0c:d1:83:60:17:e6:98:f6:77:aa:54:2d:8a:bb:02: 4d:31:62:58:2a:b2:89:59:a1:a8:04:04:a5:f2:ef: 64:30:e9:1b:a4:70:6b:3d:b8:d9:69:f2:d4:73:f6: 8b:08:2b:8e:cb:e9:50:b7:c6:95:68:e0:5a:d4:15: 67:91:75:f0:79:4a:35:6a:06:71:29:cc:72:46:00: 64:52:84:a6:6c:be:a7:22:5b:73:57:fd:03:6e:fa: 94:2a:c6:14:52:ca:5e:6b:44:88:2e:f8:e3:7c:91: 20:f2:82:25:96:21:5b:50:60:85:ff:86:8c:ce:a3: 55:06:12:04:d8:34:f5:bb:ba:05:90:45:e7:5c:7c: 27:7c:7f:8a:e8:63:35:a3:a2:ab:5b:91:20:93:2d: 65:be:6c:6c:25:73:3b:b3:55:10:e9:2c:8c:0d:c6: 26:e8:60:37:8e:8c:58:68:77:34:5c:8f:9a:1e:ce: 79:f1:f8:5a:96:17:c6:ee:dd:a9:0d:bf:eb:f6:93: b8:b4:1c:9c:7a:c8:f6:a6:cb:88:de:ba:b9:5b:38: 3a:c4:29:c6:fb:99:05:e0:b9:33:5a:23:48:37:4e: 93:17:c6:d7:b5:ed:43:2a:02:9b:11:72:3e:35:19: ac:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:99:63:09:BE:7F:4A:A8:6B:56:5B:8B:BC:C3:32:95:6B:02:5E:62 X509v3 Authority Key Identifier: keyid:B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9988::/48 Signature Algorithm: sha256WithRSAEncryption 4c:1c:96:63:3b:05:4b:ea:fc:bf:bf:ec:b4:88:41:ce:83:88: f6:fa:a8:2d:3e:c4:f5:2e:b5:0e:82:0b:44:cd:c7:b7:fd:f1: 6f:46:1e:04:33:34:99:95:36:9a:8c:b2:d5:63:98:87:e3:e7: 30:95:bc:a5:48:7a:5d:5a:1d:ec:64:71:94:f2:8e:30:1f:d8: 88:eb:b6:7a:e7:26:ce:40:09:03:5a:9d:16:84:b8:fd:b2:e7: a9:e3:9e:54:97:aa:13:46:4a:f6:25:56:cf:17:7a:73:da:b9: 72:c7:85:d0:c6:9a:de:a8:c4:f0:60:ab:3d:08:be:d4:04:25: e1:5f:29:54:fe:00:ed:c1:6a:88:e7:e8:e4:43:a7:9e:a6:c7: ff:d6:7a:82:c3:8c:d0:98:3b:a3:d1:ab:5b:35:aa:69:b6:06: ca:62:67:d4:30:49:78:c5:66:f9:df:ae:32:a4:76:9c:15:66: d4:35:ff:77:d4:ce:ec:8e:7f:f1:c8:76:99:92:9a:0e:39:88: f6:a8:24:14:f6:d7:50:97:98:6a:75:34:8f:c3:06:04:62:ae: 57:68:49:e0:ae:1b:5e:82:c5:1c:dc:68:8a:a0:55:43:5b:0b: 9f:48:12:54:da:c3:36:c7:ff:f6:51:3d:46:68:a7:f9:1a:70: 6e:21:36:ce -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIULVWvEpSrYbOAfZrP6F1SIkwUjXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVB RjZBNkJDMjAeFw0yNTEyMTkxNDQ3MDRaFw0yNjEyMTgxNDUyMDRaMDMxMTAvBgNV BAMTKDgwOTk2MzA5QkU3RjRBQTg2QjU2NUI4QkJDQzMzMjk1NkIwMjVFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYJyOmIRxngU5KhiHR8wzRg2AX 5pj2d6pULYq7Ak0xYlgqsolZoagEBKXy72Qw6RukcGs9uNlp8tRz9osIK47L6VC3 xpVo4FrUFWeRdfB5SjVqBnEpzHJGAGRShKZsvqciW3NX/QNu+pQqxhRSyl5rRIgu +ON8kSDygiWWIVtQYIX/hozOo1UGEgTYNPW7ugWQRedcfCd8f4roYzWjoqtbkSCT LWW+bGwlczuzVRDpLIwNxiboYDeOjFhodzRcj5oeznnx+FqWF8bu3akNv+v2k7i0 HJx6yPamy4jeurlbODrEKcb7mQXguTNaI0g3TpMXxte17UMqApsRcj41GawRAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUgJljCb5/SqhrVluLvMMylWsCXmIwHwYDVR0j BBgwFoAUtSMAxa5ieLYI4jHkMcPdDq9qa8IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzMvQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVBRjZBNkJDMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CNTIzMDBDNUFFNjI3OEI2MDhFMjMxRTQz MUMzREQwRUFGNkE2QkMyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvMy8zMjYxMzEz NDNhMzczNTM4MzEzYTM5MzkzODM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gZmIMA0GCSqGSIb3DQEBCwUAA4IBAQBM HJZjOwVL6vy/v+y0iEHOg4j2+qgtPsT1LrUOggtEzce3/fFvRh4EMzSZlTaajLLV Y5iH4+cwlbylSHpdWh3sZHGU8o4wH9iI67Z65ybOQAkDWp0WhLj9suep455Ul6oT Rkr2JVbPF3pz2rlyx4XQxpreqMTwYKs9CL7UBCXhXylU/gDtwWqI5+jkQ6eepsf/ 1nqCw4zQmDuj0atbNapptgbKYmfUMEl4xWb5364ypHacFWbUNf931M7sjn/xyHaZ kpoOOYj2qCQU9tdQl5hqdTSPwwYEYq5XaEngrhtegsUc3GiKoFVDWwufSBJU2sM2 x//2UT1GaKf5GnBuITbO -----END CERTIFICATE-----Generated at Sun Dec 21 08:01:59 2025 by rpki-client