This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: uczfpozVS217kWRATgpEenuL/t1nbJiCmQMwvAEpV8o= Subject key identifier: 9B:A6:8E:91:57:77:6B:82:50:03:B2:94:03:A0:7B:BB:69:45:D0:E9 Certificate issuer: /CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Certificate serial: 33C4301A28B3A18B7B66D1B84C9703F6F223B70C Authority key identifier: B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 19 Dec 2025 14:52:17 +0000 ROA not before: Fri 19 Dec 2025 14:47:17 +0000 ROA not after: Fri 18 Dec 2026 14:52:17 +0000 asID: 214344 IP address blocks: 2a14:7581:99f1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c4:30:1a:28:b3:a1:8b:7b:66:d1:b8:4c:97:03:f6:f2:23:b7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Validity Not Before: Dec 19 14:47:17 2025 GMT Not After : Dec 18 14:52:17 2026 GMT Subject: CN=9BA68E9157776B825003B29403A07BBB6945D0E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6a:0d:a2:2f:e8:d2:4a:d4:2f:7d:69:e8:94: 2a:d0:fc:ef:90:69:b4:65:3c:49:95:b0:37:e0:00: f9:52:1a:30:02:f7:df:96:a2:e2:c8:28:09:c6:c4: 64:28:18:ee:ed:ad:3a:6c:92:5b:69:32:18:3f:28: d7:0b:6d:42:8f:21:f2:27:1e:b3:45:52:84:ff:d0: 31:8f:bb:c4:63:c3:7f:53:b4:d9:90:e4:68:63:cf: 84:b7:e4:7a:27:f4:3e:de:56:5e:de:b0:7a:e7:89: 0b:67:fd:60:83:91:e7:b6:0f:32:5b:98:d2:03:3d: 82:64:65:0d:74:1f:07:67:81:6c:6b:ea:ab:71:90: 7c:f5:ab:e0:b0:39:2d:1f:e6:9d:a5:72:b8:2d:c5: 84:97:39:2c:9d:09:bc:97:88:b9:f3:61:9d:04:56: e6:78:66:f4:7d:6c:ca:ac:a6:4d:8a:da:f3:c9:53: 93:48:22:1a:6f:38:2a:bd:97:e3:0a:99:6c:8d:33: d9:f1:6d:e5:ec:e8:bf:6c:2e:97:07:6e:66:b5:3b: de:dc:a8:23:96:03:60:e9:3b:1b:fd:1c:4d:41:9c: e2:76:a2:7e:4a:df:70:9e:45:34:b7:4c:29:85:4b: 35:13:4e:5f:b6:49:1f:15:a4:ac:96:80:0d:48:15: a2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A6:8E:91:57:77:6B:82:50:03:B2:94:03:A0:7B:BB:69:45:D0:E9 X509v3 Authority Key Identifier: keyid:B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:99f1::/48 Signature Algorithm: sha256WithRSAEncryption 67:7c:43:85:6b:98:98:75:13:d2:f2:46:50:a1:b7:9d:c1:d8: 99:ee:07:cb:9b:31:f6:49:e0:87:83:2e:30:87:bb:7c:62:26: d9:56:73:3b:a8:43:6f:af:62:91:61:14:90:3e:12:4e:f7:84: b3:f5:d8:23:09:da:50:08:ed:71:0f:07:22:45:e3:69:46:0b: 42:a2:02:fe:45:93:69:6e:10:ad:20:56:84:9d:0b:38:f7:1b: 5b:74:62:52:14:d3:d9:10:8f:f7:43:cd:8f:90:31:5b:2b:27: 09:bb:1d:bb:5e:e2:d5:87:7d:fa:2c:cb:87:89:d9:5d:f8:db: 19:48:2f:a3:a6:45:0a:ee:dc:0d:8a:61:32:d0:c8:8c:32:c2: cc:12:ed:99:61:81:4f:7c:78:bc:34:91:34:49:dd:6e:49:14: b6:44:1d:bd:b9:3d:ca:be:15:73:27:f8:44:ff:81:9b:44:fd: 3a:94:97:54:fc:22:02:65:3b:ee:f2:29:02:54:24:f9:99:80: 97:14:8b:f7:e2:b3:58:6f:26:88:1c:e7:2a:1c:6c:45:5f:0b: 0c:0d:44:f6:75:34:20:6d:91:4e:b5:ca:54:fb:74:66:e2:63: 14:91:b7:ad:42:d0:02:9b:f7:44:6c:98:ed:5f:98:95:99:95: 68:83:a1:47 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUM8QwGiizoYt7ZtG4TJcD9vIjtwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVB RjZBNkJDMjAeFw0yNTEyMTkxNDQ3MTdaFw0yNjEyMTgxNDUyMTdaMDMxMTAvBgNV BAMTKDlCQTY4RTkxNTc3NzZCODI1MDAzQjI5NDAzQTA3QkJCNjk0NUQwRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUag2iL+jSStQvfWnolCrQ/O+Q abRlPEmVsDfgAPlSGjAC99+WouLIKAnGxGQoGO7trTpskltpMhg/KNcLbUKPIfIn HrNFUoT/0DGPu8Rjw39TtNmQ5Ghjz4S35Hon9D7eVl7esHrniQtn/WCDkee2DzJb mNIDPYJkZQ10HwdngWxr6qtxkHz1q+CwOS0f5p2lcrgtxYSXOSydCbyXiLnzYZ0E VuZ4ZvR9bMqspk2K2vPJU5NIIhpvOCq9l+MKmWyNM9nxbeXs6L9sLpcHbma1O97c qCOWA2DpOxv9HE1BnOJ2on5K33CeRTS3TCmFSzUTTl+2SR8VpKyWgA1IFaJfAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUm6aOkVd3a4JQA7KUA6B7u2lF0OkwHwYDVR0j BBgwFoAUtSMAxa5ieLYI4jHkMcPdDq9qa8IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzMvQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVBRjZBNkJDMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CNTIzMDBDNUFFNjI3OEI2MDhFMjMxRTQz MUMzREQwRUFGNkE2QkMyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvMy8zMjYxMzEz NDNhMzczNTM4MzEzYTM5Mzk2NjMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gZnxMA0GCSqGSIb3DQEBCwUAA4IBAQBn fEOFa5iYdRPS8kZQobedwdiZ7gfLmzH2SeCHgy4wh7t8YibZVnM7qENvr2KRYRSQ PhJO94Sz9dgjCdpQCO1xDwciReNpRgtCogL+RZNpbhCtIFaEnQs49xtbdGJSFNPZ EI/3Q82PkDFbKycJux27XuLVh336LMuHidld+NsZSC+jpkUK7twNimEy0MiMMsLM Eu2ZYYFPfHi8NJE0Sd1uSRS2RB29uT3KvhVzJ/hE/4GbRP06lJdU/CICZTvu8ikC VCT5mYCXFIv34rNYbyaIHOcqHGxFXwsMDUT2dTQgbZFOtcpU+3Rm4mMUkbetQtAC m/dEbJjtX5iVmZVog6FH -----END CERTIFICATE-----Generated at Sun Dec 21 08:02:00 2025 by rpki-client