This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a646561643a3a2f34382d3438203d3e203331383938.roa File: 326130623a346530343a646561643a3a2f34382d3438203d3e203331383938.roa (raw, json) Hash identifier: V5g1oVVpactG3mKu8PF61hy91x6gtyEU1mTZQLj69yk= Subject key identifier: 52:25:0C:A1:AA:9F:DE:B1:E6:51:82:B7:1C:4B:22:87:12:C6:E0:D1 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 7EBBFDEAB8611E7DEEB1C023F27DE54B4B321E98 Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a646561643a3a2f34382d3438203d3e203331383938.roa Signing time: Sat 20 Dec 2025 06:20:22 +0000 ROA not before: Sat 20 Dec 2025 06:15:22 +0000 ROA not after: Sat 19 Dec 2026 06:20:22 +0000 asID: 31898 IP address blocks: 2a0b:4e04:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:bb:fd:ea:b8:61:1e:7d:ee:b1:c0:23:f2:7d:e5:4b:4b:32:1e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Dec 20 06:15:22 2025 GMT Not After : Dec 19 06:20:22 2026 GMT Subject: CN=52250CA1AA9FDEB1E65182B71C4B228712C6E0D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5f:73:2f:57:30:67:83:03:5b:f6:bb:9c:1e: 48:99:89:86:4a:d2:fe:10:4f:5f:ab:6d:03:d8:c8: 31:e2:77:d8:22:09:1e:f0:40:2e:35:8b:06:12:93: 29:b6:bb:df:87:ab:71:72:4e:48:b9:c3:d4:90:83: f6:55:0c:fe:bc:fb:80:ac:c3:45:bd:75:90:ba:b0: fc:ae:3d:32:7d:97:32:8f:8a:6d:d2:6c:02:ff:d0: 0a:d6:b3:38:ee:a1:df:9d:ac:95:27:31:df:9c:e6: 76:3b:0c:a2:8d:10:38:34:cf:08:d3:61:25:1c:89: 81:49:d7:c4:03:a7:07:93:a1:72:0f:4d:cd:20:2a: 86:e5:ff:9f:82:d7:31:22:b7:8e:8b:5f:c5:aa:21: 26:47:2d:79:37:7d:fb:e0:8c:15:51:ad:a5:34:4c: 11:b8:20:6a:d6:a6:9a:31:af:d8:0c:79:5d:ba:3c: 14:9c:63:91:8e:fd:af:a8:d5:19:ff:f4:2f:eb:38: 95:36:17:87:c0:b4:54:61:ba:c9:24:23:9c:27:d6: 98:f1:5e:56:38:9a:49:a0:18:e8:40:63:36:1b:9f: ce:fb:4a:e3:76:66:72:85:73:dc:d9:f2:f3:13:18: 35:45:31:47:c9:0f:55:7d:d8:09:fb:79:7b:00:f5: 95:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:25:0C:A1:AA:9F:DE:B1:E6:51:82:B7:1C:4B:22:87:12:C6:E0:D1 X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a646561643a3a2f34382d3438203d3e203331383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e04:dead::/48 Signature Algorithm: sha256WithRSAEncryption 21:a2:c4:97:d7:c8:04:98:77:3b:f3:27:11:d5:b2:1e:73:fd: 96:08:a5:ec:00:d6:da:9f:25:14:27:85:bd:3e:c8:e8:9f:47: 3f:60:18:06:c3:7d:a6:fa:27:08:c2:b7:7e:7e:cb:29:4c:0d: a3:6b:a8:33:f6:12:3b:20:e5:8f:f6:c4:84:56:d8:f5:d9:49: 13:a2:61:da:e5:0a:f7:b5:df:c1:c9:ec:80:e7:f2:a4:6a:e8: e4:9f:79:dc:45:bf:ee:5e:f5:d3:32:3e:c7:0d:85:ca:6d:3f: 22:b8:06:52:42:6b:4b:76:eb:c7:88:16:26:a2:23:bf:52:27: 94:06:ce:d9:da:13:ae:67:57:e8:71:6f:83:0a:03:71:f6:15: 94:69:a5:be:a3:2f:af:ef:5f:54:2b:f9:41:de:ed:45:f9:f5: ba:1f:74:8f:38:37:25:e9:97:e6:66:58:95:04:d6:ec:64:99: cb:ea:8e:db:1b:4d:cf:54:c4:18:83:84:c4:9b:28:90:71:14: d6:83:72:b2:a1:3c:43:6e:a4:d4:1f:bc:63:80:51:55:fd:3b: ef:d9:65:0c:f6:a0:44:b3:8f:76:9f:a6:0a:88:e6:11:b0:85: be:43:eb:62:52:c0:15:20:db:d8:58:f0:be:21:c6:a9:08:7a: 44:66:e4:c8 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIUfrv96rhhHn3uscAj8n3lS0syHpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNTEyMjAwNjE1MjJaFw0yNjEyMTkwNjIwMjJaMDMxMTAvBgNV BAMTKDUyMjUwQ0ExQUE5RkRFQjFFNjUxODJCNzFDNEIyMjg3MTJDNkUwRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEX3MvVzBngwNb9rucHkiZiYZK 0v4QT1+rbQPYyDHid9giCR7wQC41iwYSkym2u9+Hq3FyTki5w9SQg/ZVDP68+4Cs w0W9dZC6sPyuPTJ9lzKPim3SbAL/0ArWszjuod+drJUnMd+c5nY7DKKNEDg0zwjT YSUciYFJ18QDpweToXIPTc0gKobl/5+C1zEit46LX8WqISZHLXk3ffvgjBVRraU0 TBG4IGrWppoxr9gMeV26PBScY5GO/a+o1Rn/9C/rOJU2F4fAtFRhuskkI5wn1pjx XlY4mkmgGOhAYzYbn877SuN2ZnKFc9zZ8vMTGDVFMUfJD1V92An7eXsA9ZXVAgMB AAGjggJIMIICRDAdBgNVHQ4EFgQUUiUMoaqf3rHmUYK3HEsihxLG4NEwHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEt OGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvMzI2MTMwNjIzYTM0NjUzMDM0 M2E2NDY1NjE2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMzMzEzODM5Mzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAqC04E3q0wDQYJKoZIhvcNAQELBQADggEBACGixJfXyASYdzvzJxHV sh5z/ZYIpewA1tqfJRQnhb0+yOifRz9gGAbDfab6JwjCt35+yylMDaNrqDP2Ejsg 5Y/2xIRW2PXZSROiYdrlCve138HJ7IDn8qRq6OSfedxFv+5e9dMyPscNhcptPyK4 BlJCa0t268eIFiaiI79SJ5QGztnaE65nV+hxb4MKA3H2FZRppb6jL6/vX1Qr+UHe 7UX59bofdI84NyXpl+ZmWJUE1uxkmcvqjtsbTc9UxBiDhMSbKJBxFNaDcrKhPENu pNQfvGOAUVX9O+/ZZQz2oESzj3afpgqI5hGwhb5D62JSwBUg29hY8L4hxqkIekRm 5Mg= -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:37 2025 by rpki-client