This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: Oe9b7D8DtLCyHfTEelgxQzMm3GoJ4G9/0gwwATaJfro= Subject key identifier: 4F:8C:82:5D:40:E9:2A:D4:DD:59:3A:7E:9A:7A:2E:B3:05:54:17:E6 Certificate issuer: /CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Certificate serial: 7FE577400564E768521402A8CC2C115DC3334503 Authority key identifier: B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 19 Dec 2025 14:52:29 +0000 ROA not before: Fri 19 Dec 2025 14:47:29 +0000 ROA not after: Fri 18 Dec 2026 14:52:29 +0000 asID: 214344 IP address blocks: 2a14:7581:99f2::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e5:77:40:05:64:e7:68:52:14:02:a8:cc:2c:11:5d:c3:33:45:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Validity Not Before: Dec 19 14:47:29 2025 GMT Not After : Dec 18 14:52:29 2026 GMT Subject: CN=4F8C825D40E92AD4DD593A7E9A7A2EB3055417E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b1:8e:f4:6d:fd:4e:8d:6a:8d:f0:d4:69:01: 62:c5:ec:6c:9c:b7:44:61:2b:8e:f7:42:8c:4e:d3: 41:46:aa:63:c4:a5:9b:8a:3e:d6:ce:a0:ab:6f:20: a0:5b:c9:1a:aa:bf:11:c3:e1:f7:39:22:28:52:1b: 8b:8c:98:88:0d:5a:91:02:5c:0e:d6:84:11:2d:8a: 82:2d:e3:74:24:d0:81:63:3f:ea:a6:5e:f4:bc:da: 77:d4:9e:e0:a4:71:15:94:a2:f7:32:eb:98:83:02: ad:6a:1a:0d:71:23:20:0f:4d:58:a9:1d:82:72:a1: ad:7f:e8:17:6b:4d:80:d1:88:f1:82:01:f4:38:13: 49:a6:29:fc:64:fb:34:8c:7d:71:1a:b7:77:87:40: 0b:da:d9:8c:23:6c:f0:9d:5b:4f:4e:ff:f0:0f:b4: 00:70:a8:af:35:65:74:52:67:18:79:70:74:6d:ff: 64:05:49:d1:a1:a7:68:41:f2:74:9f:3a:f7:f5:5b: b5:b0:f4:a8:d4:f4:0f:17:bd:ea:2c:ad:13:0d:ae: 80:1d:a3:b0:4a:f9:df:48:ce:55:03:e1:87:3a:0f: 1d:51:de:9b:39:33:70:f6:f9:e1:3a:de:ba:b0:02: e0:0c:4b:55:90:e1:f6:62:44:66:88:ce:14:06:2b: a0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8C:82:5D:40:E9:2A:D4:DD:59:3A:7E:9A:7A:2E:B3:05:54:17:E6 X509v3 Authority Key Identifier: keyid:B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:99f2::/48 Signature Algorithm: sha256WithRSAEncryption 5c:fe:53:86:6e:fd:e8:d3:c9:94:73:d6:9d:d3:75:b5:60:f8: 31:11:dc:d3:fb:79:48:ef:81:3f:6b:0d:98:bd:91:9c:8d:24: ca:15:a2:b4:cf:45:1d:44:4e:4f:75:9c:0c:0e:72:10:58:bc: 17:13:c9:0a:52:3f:2c:e3:33:63:51:f6:2d:78:0b:ab:f8:ff: 5a:64:16:96:61:6f:37:3c:55:d7:bf:95:a7:de:80:a0:fd:19: dc:67:b7:0d:ce:4e:19:cb:36:9b:0b:bd:d6:b3:bb:69:95:e9: d7:59:55:12:d6:6b:35:44:4e:d2:df:39:b0:6a:88:3f:13:f6: c9:f2:3f:42:0d:72:86:a7:0d:2a:a9:d0:f8:0b:a9:25:d8:5b: fa:85:77:3d:13:6f:5a:0d:51:53:5e:27:16:ee:c0:c2:0f:d9: f3:ab:b2:38:f8:05:92:fd:c5:81:ac:a3:14:3e:94:62:ff:f2: f7:2d:17:3e:84:54:e3:24:27:72:37:8b:8d:c5:90:fa:71:75: 8d:64:bd:a8:81:34:89:9f:29:c7:e5:a1:04:c5:ce:c1:45:13: 69:18:2f:5d:e7:48:33:f1:28:3d:48:5c:58:d3:27:bb:03:53: 4c:55:5e:35:ef:ec:a8:79:42:52:f3:1c:23:dd:f3:e0:6f:42: 47:5f:16:fb -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUf+V3QAVk52hSFAKozCwRXcMzRQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVB RjZBNkJDMjAeFw0yNTEyMTkxNDQ3MjlaFw0yNjEyMTgxNDUyMjlaMDMxMTAvBgNV BAMTKDRGOEM4MjVENDBFOTJBRDRERDU5M0E3RTlBN0EyRUIzMDU1NDE3RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDesY70bf1OjWqN8NRpAWLF7Gyc t0RhK473QoxO00FGqmPEpZuKPtbOoKtvIKBbyRqqvxHD4fc5IihSG4uMmIgNWpEC XA7WhBEtioIt43Qk0IFjP+qmXvS82nfUnuCkcRWUovcy65iDAq1qGg1xIyAPTVip HYJyoa1/6BdrTYDRiPGCAfQ4E0mmKfxk+zSMfXEat3eHQAva2YwjbPCdW09O//AP tABwqK81ZXRSZxh5cHRt/2QFSdGhp2hB8nSfOvf1W7Ww9KjU9A8XveosrRMNroAd o7BK+d9IzlUD4Yc6Dx1R3ps5M3D2+eE63rqwAuAMS1WQ4fZiRGaIzhQGK6AVAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUT4yCXUDpKtTdWTp+mnouswVUF+YwHwYDVR0j BBgwFoAUtSMAxa5ieLYI4jHkMcPdDq9qa8IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzMvQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVBRjZBNkJDMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CNTIzMDBDNUFFNjI3OEI2MDhFMjMxRTQz MUMzREQwRUFGNkE2QkMyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvMy8zMjYxMzEz NDNhMzczNTM4MzEzYTM5Mzk2NjMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gZnyMA0GCSqGSIb3DQEBCwUAA4IBAQBc /lOGbv3o08mUc9ad03W1YPgxEdzT+3lI74E/aw2YvZGcjSTKFaK0z0UdRE5PdZwM DnIQWLwXE8kKUj8s4zNjUfYteAur+P9aZBaWYW83PFXXv5Wn3oCg/RncZ7cNzk4Z yzabC73Ws7tplenXWVUS1ms1RE7S3zmwaog/E/bJ8j9CDXKGpw0qqdD4C6kl2Fv6 hXc9E29aDVFTXicW7sDCD9nzq7I4+AWS/cWBrKMUPpRi//L3LRc+hFTjJCdyN4uN xZD6cXWNZL2ogTSJnynH5aEExc7BRRNpGC9d50gz8Sg9SFxY0ye7A1NMVV417+yo eUJS8xwj3fPgb0JHXxb7 -----END CERTIFICATE-----Generated at Sun Dec 21 08:02:00 2025 by rpki-client