This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: spTh8DstCVqtG/UUp5lMqUt7m9/HXGTEzcFQEa7vRbE= Subject key identifier: 08:25:55:26:62:D5:65:44:9A:01:D3:44:0C:FA:08:63:EC:F7:9B:2B Certificate issuer: /CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Certificate serial: 3DAD222B8DB68982AF115DD897D03A6C02C9BEB4 Authority key identifier: B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 19 Dec 2025 14:52:59 +0000 ROA not before: Fri 19 Dec 2025 14:47:59 +0000 ROA not after: Fri 18 Dec 2026 14:52:59 +0000 asID: 214344 IP address blocks: 2a14:7581:99f4::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ad:22:2b:8d:b6:89:82:af:11:5d:d8:97:d0:3a:6c:02:c9:be:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Validity Not Before: Dec 19 14:47:59 2025 GMT Not After : Dec 18 14:52:59 2026 GMT Subject: CN=0825552662D565449A01D3440CFA0863ECF79B2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fb:36:d5:c9:b3:8a:12:d7:27:19:ff:1b:38: b8:e8:b1:9b:1f:6b:cd:e2:22:ca:ec:1a:54:c1:b5: f2:5d:4f:f8:f9:fe:50:f0:17:7f:b5:33:14:eb:03: 21:31:4e:0a:6f:c9:89:45:08:d0:1a:c8:9e:2a:68: 2a:70:80:e5:d4:44:f6:6a:af:ed:7c:48:9c:24:3e: 45:2c:22:33:c6:04:1b:63:18:99:db:53:0a:a3:e4: b1:01:e1:52:1a:aa:2b:03:b0:bd:d9:c9:30:ca:7e: c8:1b:8f:d6:b5:64:e7:68:98:a2:73:cf:5a:f3:f1: 8e:df:44:f6:fd:b4:a2:86:c4:f6:bf:14:a4:f9:21: e2:4a:96:77:52:89:76:da:7e:c6:2d:ce:24:8f:cc: 29:e1:1b:2c:ca:d1:6f:70:86:89:b5:92:30:bf:45: 2f:da:fb:ec:61:80:19:83:1c:82:81:c2:96:54:cf: bc:0d:56:86:bb:8b:69:6e:9e:61:aa:ce:a8:9d:22: f9:b0:d5:de:78:6b:1d:78:aa:28:95:aa:d2:44:99: 72:64:2f:0a:bb:72:81:41:5b:dc:e2:59:46:9c:39: 2c:8b:24:35:13:08:e7:2d:78:44:e7:63:9c:07:a4: e8:d2:f5:2b:51:14:ab:5f:88:e8:4e:d9:af:5a:9a: 38:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:25:55:26:62:D5:65:44:9A:01:D3:44:0C:FA:08:63:EC:F7:9B:2B X509v3 Authority Key Identifier: keyid:B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:99f4::/48 Signature Algorithm: sha256WithRSAEncryption 92:16:a0:d6:07:1f:d2:4e:e3:fc:16:e5:3d:11:9a:6e:63:3b: fb:fb:90:7e:8c:72:36:ec:c8:e8:e0:96:78:44:98:4e:98:47: 08:a2:22:f2:53:c2:30:90:30:69:cd:c8:64:67:89:22:26:5a: ae:73:96:69:56:85:a3:45:13:21:63:95:b3:58:e5:18:38:91: aa:fa:26:a5:bf:c7:c3:84:4a:6d:35:a9:93:3f:57:40:bd:6e: da:98:2a:19:fc:e5:ad:ed:10:da:22:47:fa:30:70:9d:ff:94: 1b:03:68:32:68:2e:f9:61:90:42:18:39:53:2e:c7:be:29:54: 57:ac:ac:87:5d:99:b8:9d:e2:aa:f9:ca:f0:83:f8:b6:a0:56: 76:bb:c5:e7:c9:2b:69:49:6d:7e:cb:9e:04:61:da:8d:06:eb: 79:f7:a1:56:ba:53:49:cc:be:4c:cd:be:a5:9f:af:4a:a7:d3: 4d:dc:7e:ab:5a:a4:1f:88:6b:0a:fe:dd:4b:83:11:49:7c:42: 75:08:ef:bc:cf:71:f7:00:95:79:59:d9:74:df:3f:80:4e:aa: b5:0d:b7:a4:61:bd:d8:87:38:49:f0:9b:cf:f9:8a:d9:82:b3: e7:a5:43:15:ba:b7:b7:ca:53:d0:22:31:20:08:75:ba:85:da: 22:f1:1b:ca -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUPa0iK422iYKvEV3Yl9A6bALJvrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVB RjZBNkJDMjAeFw0yNTEyMTkxNDQ3NTlaFw0yNjEyMTgxNDUyNTlaMDMxMTAvBgNV BAMTKDA4MjU1NTI2NjJENTY1NDQ5QTAxRDM0NDBDRkEwODYzRUNGNzlCMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk+zbVybOKEtcnGf8bOLjosZsf a83iIsrsGlTBtfJdT/j5/lDwF3+1MxTrAyExTgpvyYlFCNAayJ4qaCpwgOXURPZq r+18SJwkPkUsIjPGBBtjGJnbUwqj5LEB4VIaqisDsL3ZyTDKfsgbj9a1ZOdomKJz z1rz8Y7fRPb9tKKGxPa/FKT5IeJKlndSiXbafsYtziSPzCnhGyzK0W9whom1kjC/ RS/a++xhgBmDHIKBwpZUz7wNVoa7i2lunmGqzqidIvmw1d54ax14qiiVqtJEmXJk Lwq7coFBW9ziWUacOSyLJDUTCOcteETnY5wHpOjS9StRFKtfiOhO2a9amjhBAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUCCVVJmLVZUSaAdNEDPoIY+z3myswHwYDVR0j BBgwFoAUtSMAxa5ieLYI4jHkMcPdDq9qa8IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzMvQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVBRjZBNkJDMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CNTIzMDBDNUFFNjI3OEI2MDhFMjMxRTQz MUMzREQwRUFGNkE2QkMyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvMy8zMjYxMzEz NDNhMzczNTM4MzEzYTM5Mzk2NjM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gZn0MA0GCSqGSIb3DQEBCwUAA4IBAQCS FqDWBx/STuP8FuU9EZpuYzv7+5B+jHI27Mjo4JZ4RJhOmEcIoiLyU8IwkDBpzchk Z4kiJlquc5ZpVoWjRRMhY5WzWOUYOJGq+ialv8fDhEptNamTP1dAvW7amCoZ/OWt 7RDaIkf6MHCd/5QbA2gyaC75YZBCGDlTLse+KVRXrKyHXZm4neKq+crwg/i2oFZ2 u8XnyStpSW1+y54EYdqNBut596FWulNJzL5Mzb6ln69Kp9NN3H6rWqQfiGsK/t1L gxFJfEJ1CO+8z3H3AJV5Wdl03z+ATqq1DbekYb3YhzhJ8JvP+YrZgrPnpUMVure3 ylPQIjEgCHW6hdoi8RvK -----END CERTIFICATE-----Generated at Sun Dec 21 08:01:59 2025 by rpki-client