This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa
File: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (raw, json)
Hash identifier: eBGi76bk+i5KfnHGqq9jtzpn0gh813x0+GlA90AUkZI=
Subject key identifier: 23:E6:BC:6D:CF:AB:35:05:96:AE:00:D1:07:08:36:C8:50:17:4C:21
Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc
Certificate serial: 6F7D366767319BD295D8137600C85891C766D03A
Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa
Signing time: Fri 19 Dec 2025 08:52:42 +0000
ROA not before: Fri 19 Dec 2025 08:47:42 +0000
ROA not after: Fri 18 Dec 2026 08:52:42 +0000
asID: 18607
IP address blocks: 2a14:14c1:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 12:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:7d:36:67:67:31:9b:d2:95:d8:13:76:00:c8:58:91:c7:66:d0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc
Validity
Not Before: Dec 19 08:47:42 2025 GMT
Not After : Dec 18 08:52:42 2026 GMT
Subject: CN=23E6BC6DCFAB350596AE00D1070836C850174C21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:9d:94:07:1f:87:bf:44:0e:bc:c1:87:4a:
5b:77:ab:3d:d4:90:0b:c2:55:43:cb:b3:2e:60:32:
48:f8:b6:64:49:0f:38:87:ae:a7:05:e2:c6:16:81:
3e:48:f6:4c:7c:8b:52:c8:5a:8e:06:3b:bd:b8:9c:
c8:7e:e2:ce:b0:0d:95:3d:68:58:54:b7:f5:b3:61:
7d:e5:c2:89:2a:ab:f0:8a:b3:a0:51:ed:a7:95:aa:
1f:f6:3c:00:57:37:92:8e:23:88:5b:12:72:e1:9d:
69:09:7d:3d:c9:8a:87:0e:54:dc:f0:ec:0f:91:47:
2a:2b:60:f5:68:3c:ea:10:69:d5:80:ab:56:ae:8e:
2e:70:cc:6a:d0:6c:41:e0:15:82:32:96:aa:69:ef:
37:33:71:e6:b8:72:10:81:93:63:bc:bf:14:c0:e4:
ef:9f:05:07:c6:ee:2c:e6:0e:b6:a9:25:2e:56:02:
49:be:88:13:97:8f:b3:ec:7c:60:39:a9:a9:91:d0:
5f:7f:a4:f2:04:9c:06:b5:a6:4d:72:c6:70:b3:73:
2b:7c:b7:9d:41:13:8b:e2:78:2e:de:20:57:13:cd:
f8:8a:e4:84:da:79:d1:53:ae:15:d7:22:83:c3:c9:
d8:93:f1:8c:e6:db:9f:fe:4a:66:06:6f:e8:c4:d8:
bf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E6:BC:6D:CF:AB:35:05:96:AE:00:D1:07:08:36:C8:50:17:4C:21
X509v3 Authority Key Identifier:
keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:14c1:200::/40
Signature Algorithm: sha256WithRSAEncryption
2b:0d:94:da:d1:8f:7b:38:36:25:11:3a:3d:87:5b:36:27:c8:
63:97:3e:e0:70:e7:c8:22:42:84:c6:62:50:6f:84:6b:90:a8:
43:dd:c2:f3:f2:70:cf:19:ad:8d:54:ad:fc:1b:b9:a8:95:4c:
db:45:cb:c7:39:ef:d1:5e:dd:55:6b:44:14:9c:8c:40:a9:2a:
77:7a:43:fa:31:4b:5c:34:d0:fa:c4:56:d6:68:b9:dd:31:2f:
73:87:b6:d2:1d:a1:1d:11:74:af:1d:59:cc:65:b4:62:75:5c:
f5:11:5d:07:79:e2:d3:ac:9c:5f:55:b0:d3:6b:4b:c9:8f:6c:
f5:93:8d:78:9e:5b:e7:72:24:81:8a:20:3e:39:44:df:13:58:
81:94:16:7f:5d:9d:94:4e:e5:9e:9c:1e:be:60:3f:73:97:12:
b3:b9:20:81:6d:a4:6e:de:9d:13:4a:dc:85:31:d1:4c:b5:a3:
e7:6d:a3:18:c1:49:a3:ef:3a:27:55:b7:7a:8e:ad:c7:7f:80:
a6:0f:e9:d3:fa:4a:11:bb:1a:26:10:7c:1a:04:1d:c4:3f:c5:
ca:e3:c6:6d:1b:29:75:3c:d3:f9:21:7c:81:8a:d8:40:70:09:
33:c2:78:41:15:de:c1:a6:a3:21:8f:e9:f9:e8:f3:00:b6:23:
85:41:9a:bb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:22:31 2025 by rpki-client