This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: HcA7KRdnBWzY7hEKVhGFuUdyfwcYU7b6FuC/duUcRFU= Subject key identifier: EC:2E:B8:C2:28:42:A5:AE:1B:8A:BD:B4:FC:69:CF:69:1B:C6:A8:24 Certificate issuer: /CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Certificate serial: 2332C970B2F2AE35E9F1F309D9EAAA801770D353 Authority key identifier: B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 19 Dec 2025 14:53:11 +0000 ROA not before: Fri 19 Dec 2025 14:48:11 +0000 ROA not after: Fri 18 Dec 2026 14:53:11 +0000 asID: 214344 IP address blocks: 2a14:7581:99f5::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:32:c9:70:b2:f2:ae:35:e9:f1:f3:09:d9:ea:aa:80:17:70:d3:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2 Validity Not Before: Dec 19 14:48:11 2025 GMT Not After : Dec 18 14:53:11 2026 GMT Subject: CN=EC2EB8C22842A5AE1B8ABDB4FC69CF691BC6A824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:eb:63:3f:6b:fb:5c:f9:48:d9:f8:f7:de:93: 3b:31:fd:3d:7a:01:fb:14:14:e0:54:69:1b:db:73: ab:97:3a:b9:54:9e:db:f9:38:dc:f6:0c:ac:20:6d: ee:b7:f2:2f:83:8f:25:1b:8f:7a:ed:a4:3e:28:90: 3d:d5:59:d0:ec:dd:90:bc:70:66:6f:32:08:17:f7: 84:b3:aa:25:90:62:0f:42:4c:bd:77:39:f1:bf:0a: 52:98:0e:95:4e:c2:f3:e5:f5:1c:e4:77:e4:9e:cf: 0e:18:fc:4c:ea:d7:0b:a4:2f:79:7e:1f:83:25:b3: db:c1:77:69:a7:d6:3b:a6:db:c0:55:ac:64:d7:f7: f4:b9:48:6f:d8:07:a2:d1:28:81:3b:be:c7:15:b6: 04:a1:a0:a2:ac:b2:d7:84:39:22:15:b3:94:5e:9d: 64:8f:6d:46:02:cd:51:03:65:ba:27:db:7a:e5:c9: b8:60:bf:8c:ee:46:f5:35:21:5d:56:a2:82:b0:f0: b8:83:89:43:38:5d:0b:da:80:fc:80:ca:e7:39:95: c4:dc:19:78:cf:7d:2f:38:a0:75:83:bc:b0:74:ed: c0:19:8d:ed:7a:66:ac:aa:1a:db:70:b7:d1:06:8e: c7:76:8e:71:c8:75:92:0a:42:e1:43:74:6c:24:f6: f9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2E:B8:C2:28:42:A5:AE:1B:8A:BD:B4:FC:69:CF:69:1B:C6:A8:24 X509v3 Authority Key Identifier: keyid:B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:99f5::/48 Signature Algorithm: sha256WithRSAEncryption 5b:5a:1b:b3:f1:7a:b1:e7:85:15:aa:a7:c1:84:bb:59:d0:6e: 50:4e:61:b4:fc:3f:ce:a0:c6:e0:70:f5:b4:7a:5f:ed:44:a4: 36:91:fa:55:8d:ae:9a:55:bf:f9:f1:91:9c:78:bc:93:72:e2: 9d:56:83:d6:23:1c:f3:c1:17:91:61:f2:77:7b:ab:a6:b9:c4: 00:1d:34:51:9c:06:7c:81:a9:89:b2:1b:a0:6c:31:47:a9:1d: 05:0f:c1:a2:d8:4c:07:22:24:4f:9f:b5:39:9f:f2:c0:39:69: 01:88:dd:db:8e:f5:11:5a:7c:ae:e0:ff:87:1c:48:06:cb:0d: 8b:03:03:26:75:1d:69:4d:48:f9:d5:0d:ba:a1:e6:0b:3a:18: 84:fb:b1:6d:82:31:a0:cd:73:e7:1e:60:86:d8:26:25:7e:2a: 55:04:89:16:ca:d3:c1:7d:8d:ca:ee:90:01:1b:9c:c3:25:60: d6:b3:5f:0b:f9:41:7b:65:29:ae:cf:6c:ef:71:8f:80:53:38: 73:c9:a4:68:8e:43:73:7d:6c:9b:2b:1d:aa:07:51:9d:89:34: 93:a5:96:67:86:c1:2a:b1:73:dd:65:cd:6a:81:62:05:3a:d9: a9:f9:32:74:b6:c6:d7:34:c9:b4:30:4c:a3:fd:fb:7d:10:94: 96:60:b7:86 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUIzLJcLLyrjXp8fMJ2eqqgBdw01MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVB RjZBNkJDMjAeFw0yNTEyMTkxNDQ4MTFaFw0yNjEyMTgxNDUzMTFaMDMxMTAvBgNV BAMTKEVDMkVCOEMyMjg0MkE1QUUxQjhBQkRCNEZDNjlDRjY5MUJDNkE4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb62M/a/tc+UjZ+Pfekzsx/T16 AfsUFOBUaRvbc6uXOrlUntv5ONz2DKwgbe638i+DjyUbj3rtpD4okD3VWdDs3ZC8 cGZvMggX94SzqiWQYg9CTL13OfG/ClKYDpVOwvPl9Rzkd+Sezw4Y/Ezq1wukL3l+ H4Mls9vBd2mn1jum28BVrGTX9/S5SG/YB6LRKIE7vscVtgShoKKssteEOSIVs5Re nWSPbUYCzVEDZbon23rlybhgv4zuRvU1IV1WooKw8LiDiUM4XQvagPyAyuc5lcTc GXjPfS84oHWDvLB07cAZje16ZqyqGttwt9EGjsd2jnHIdZIKQuFDdGwk9vntAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU7C64wihCpa4bir20/GnPaRvGqCQwHwYDVR0j BBgwFoAUtSMAxa5ieLYI4jHkMcPdDq9qa8IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzMvQjUyMzAwQzVBRTYyNzhCNjA4RTIzMUU0MzFDM0REMEVBRjZBNkJDMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CNTIzMDBDNUFFNjI3OEI2MDhFMjMxRTQz MUMzREQwRUFGNkE2QkMyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvMy8zMjYxMzEz NDNhMzczNTM4MzEzYTM5Mzk2NjM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gZn1MA0GCSqGSIb3DQEBCwUAA4IBAQBb Whuz8Xqx54UVqqfBhLtZ0G5QTmG0/D/OoMbgcPW0el/tRKQ2kfpVja6aVb/58ZGc eLyTcuKdVoPWIxzzwReRYfJ3e6umucQAHTRRnAZ8gamJshugbDFHqR0FD8Gi2EwH IiRPn7U5n/LAOWkBiN3bjvURWnyu4P+HHEgGyw2LAwMmdR1pTUj51Q26oeYLOhiE +7FtgjGgzXPnHmCG2CYlfipVBIkWytPBfY3K7pABG5zDJWDWs18L+UF7ZSmuz2zv cY+AUzhzyaRojkNzfWybKx2qB1GdiTSTpZZnhsEqsXPdZc1qgWIFOtmp+TJ0tsbX NMm0MEyj/ft9EJSWYLeG -----END CERTIFICATE-----Generated at Sun Dec 21 08:02:00 2025 by rpki-client