This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: J6emFQdlETu7H0STfMe+srRexcrGlCk0y+BgTI9eJls= Subject key identifier: 35:AF:69:9D:B1:1B:DC:A8:DD:0A:2A:CE:DD:05:F5:41:79:B2:4F:9F Certificate issuer: /CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Certificate serial: 7650E953BC7B8EB59D84614BCE2AFD809CCF3DF8 Authority key identifier: B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 19 Dec 2025 14:52:46 +0000 ROA not before: Fri 19 Dec 2025 14:47:46 +0000 ROA not after: Fri 18 Dec 2026 14:52:46 +0000 asID: 214344 IP address blocks: 2a14:7581:99f3::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:50:e9:53:bc:7b:8e:b5:9d:84:61:4b:ce:2a:fd:80:9c:cf:3d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Validity Not Before: Dec 19 14:47:46 2025 GMT Not After : Dec 18 14:52:46 2026 GMT Subject: CN=35AF699DB11BDCA8DD0A2ACEDD05F54179B24F9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7d:b7:5f:43:2b:79:2e:5c:f4:23:0c:c3:f5: 73:1d:0d:ed:96:bb:c8:9e:8d:db:29:d1:bb:38:3a: 0f:45:d0:43:e5:16:3e:01:f7:91:2f:b7:ca:ef:5f: 92:96:b2:bb:c8:1a:bb:a1:43:b5:a4:f1:9e:b6:c9: 20:26:06:d2:2e:f6:39:6b:47:3a:bc:7c:a4:51:90: aa:51:12:a5:89:f0:79:87:ea:51:7d:d5:c9:37:d0: 1f:d9:93:be:42:dd:73:1f:5f:82:2e:90:19:f7:67: af:22:82:54:a1:22:72:77:91:f6:2e:e6:0a:9c:4d: ba:26:ff:3a:55:65:22:9f:de:8c:23:55:dd:87:58: 8f:66:c7:05:24:21:3b:f6:ff:bb:03:61:15:e6:75: 0c:0c:6a:f9:30:f6:60:60:b8:10:16:fa:e9:fd:a3: 84:31:eb:60:c8:9e:cb:ed:ca:14:13:d0:6d:df:28: 86:a4:94:77:fe:d4:32:64:ce:66:da:b8:76:a1:65: 45:f3:22:4a:e7:27:0e:bb:5c:9e:c7:71:ea:f1:56: 8f:39:71:83:2a:bb:5c:3b:fd:a8:8b:9d:79:48:7e: 37:9c:73:00:43:48:62:40:bf:6d:12:f6:b8:aa:c1: 8a:b4:ff:31:95:87:d4:2d:f0:88:61:3e:73:19:dc: 81:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AF:69:9D:B1:1B:DC:A8:DD:0A:2A:CE:DD:05:F5:41:79:B2:4F:9F X509v3 Authority Key Identifier: keyid:B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:99f3::/48 Signature Algorithm: sha256WithRSAEncryption 98:06:ea:ca:6a:68:29:6b:64:00:bf:1a:13:5e:b4:8b:e5:95: 2e:f7:7f:68:cf:18:e5:08:cc:12:52:fa:17:5f:b2:aa:9a:fd: 4d:20:40:8d:09:05:d9:bc:97:72:5f:4e:29:ac:ec:9b:8e:11: 2c:96:58:90:4a:23:5f:e8:c2:9d:12:c6:91:65:68:96:87:8e: b8:ae:b2:5d:f4:d5:cb:98:b0:97:4c:9a:b6:93:ea:05:5f:c3: a8:81:16:69:10:d8:8f:af:37:0f:47:39:c6:a6:82:67:b0:32: 47:f8:49:b3:06:5c:b1:f2:62:37:2d:14:d6:8f:5f:60:23:9e: ae:16:ed:96:ec:8d:42:9c:a7:42:e7:57:36:b0:21:be:9f:3a: b1:51:98:86:0a:78:5f:46:0d:76:53:b6:d0:e0:82:be:32:dc: 0e:0b:a8:4f:ca:56:93:d8:d7:d9:d3:32:d7:b7:d5:60:38:6a: 7c:ba:a5:8a:bc:9b:42:10:5d:93:3c:0a:90:a7:d4:16:a7:7d: ac:b5:b4:bb:4a:a4:69:5f:04:04:e2:e5:f1:ed:50:c6:6b:14: 98:6c:f8:d6:a3:b7:43:45:e7:c5:87:69:31:3b:c8:98:17:7c: ac:22:2d:9e:8d:06:04:2f:ea:6b:1d:37:45:6a:45:ed:52:6f: 28:5b:1d:6c -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUdlDpU7x7jrWdhGFLzir9gJzPPfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVB RjZBNkJDMjAeFw0yNTEyMTkxNDQ3NDZaFw0yNjEyMTgxNDUyNDZaMDMxMTAvBgNV BAMTKDM1QUY2OTlEQjExQkRDQThERDBBMkFDRUREMDVGNTQxNzlCMjRGOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdfbdfQyt5Llz0IwzD9XMdDe2W u8iejdsp0bs4Og9F0EPlFj4B95Evt8rvX5KWsrvIGruhQ7Wk8Z62ySAmBtIu9jlr Rzq8fKRRkKpREqWJ8HmH6lF91ck30B/Zk75C3XMfX4IukBn3Z68iglShInJ3kfYu 5gqcTbom/zpVZSKf3owjVd2HWI9mxwUkITv2/7sDYRXmdQwMavkw9mBguBAW+un9 o4Qx62DInsvtyhQT0G3fKIaklHf+1DJkzmbauHahZUXzIkrnJw67XJ7HcerxVo85 cYMqu1w7/aiLnXlIfjeccwBDSGJAv20S9riqwYq0/zGVh9Qt8IhhPnMZ3IFFAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUNa9pnbEb3KjdCirO3QX1QXmyT58wHwYDVR0j BBgwFoAUtSMAxa5ieLYI4jHkMcPdDq9qa8IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzMvQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVBRjZBNkJDMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CNTIzMDBDNUFFNjI3OEI2MDhFMjMxRTQz MUMzREQwRUFGNkE2QkMyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvMy8zMjYxMzEz NDNhMzczNTM4MzEzYTM5Mzk2NjMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gZnzMA0GCSqGSIb3DQEBCwUAA4IBAQCY BurKamgpa2QAvxoTXrSL5ZUu939ozxjlCMwSUvoXX7Kqmv1NIECNCQXZvJdyX04p rOybjhEslliQSiNf6MKdEsaRZWiWh464rrJd9NXLmLCXTJq2k+oFX8OogRZpENiP rzcPRznGpoJnsDJH+EmzBlyx8mI3LRTWj19gI56uFu2W7I1CnKdC51c2sCG+nzqx UZiGCnhfRg12U7bQ4IK+MtwOC6hPylaT2NfZ0zLXt9VgOGp8uqWKvJtCEF2TPAqQ p9QWp32stbS7SqRpXwQE4uXx7VDGaxSYbPjWo7dDRefFh2kxO8iYF3ysIi2ejQYE L+prHTdFakXtUm8oWx1s -----END CERTIFICATE-----Generated at Sun Dec 21 08:02:00 2025 by rpki-client