This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/326131343a623430303a3a2f34382d3438203d3e20323133323739.roa File: 326131343a623430303a3a2f34382d3438203d3e20323133323739.roa (raw, json) Hash identifier: Nc5etJGF6V1MhXz6BJTwE4uruzNAtPHTBPUBd5SZlN4= Subject key identifier: 0B:EB:AD:37:FF:C2:74:6F:70:C8:D0:E8:AF:3A:89:C3:FF:5E:80:6F Certificate issuer: /CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Certificate serial: 50C23D525421A926363F8E67454B1E96092F8940 Authority key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/326131343a623430303a3a2f34382d3438203d3e20323133323739.roa Signing time: Wed 17 Dec 2025 16:09:04 +0000 ROA not before: Wed 17 Dec 2025 16:04:04 +0000 ROA not after: Wed 16 Dec 2026 16:09:04 +0000 asID: 213279 IP address blocks: 2a14:b400::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 21:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c2:3d:52:54:21:a9:26:36:3f:8e:67:45:4b:1e:96:09:2f:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Validity Not Before: Dec 17 16:04:04 2025 GMT Not After : Dec 16 16:09:04 2026 GMT Subject: CN=0BEBAD37FFC2746F70C8D0E8AF3A89C3FF5E806F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b5:fa:33:c8:8a:bd:f8:8c:90:56:a0:49:26: dd:bf:ec:5e:89:9e:43:5a:12:ab:1a:85:51:08:79: 32:cf:f6:72:3e:bd:76:ab:94:20:23:3b:7c:48:f3: 36:fd:d3:ad:c0:ea:8b:e0:8a:c5:b6:90:fb:c7:4f: a9:12:af:ee:40:cf:31:5e:24:2d:24:02:59:43:c5: 73:f0:66:ae:ac:ce:f8:52:27:a8:d2:15:0a:d9:7e: 19:62:5e:d6:3a:d7:20:62:d4:6a:48:29:42:bf:e2: a7:01:fa:0e:23:fc:03:de:81:bf:58:a0:bc:8b:b2: d7:18:0d:ab:07:a9:a3:12:df:26:a9:c1:fd:31:12: 3c:55:ae:17:41:13:d8:b8:7e:b9:bd:7d:62:ee:81: c5:27:ac:c7:60:5a:d2:b2:3e:44:41:e3:a7:31:2e: 4a:5a:df:c2:34:b0:53:3f:23:32:06:4d:47:19:2b: 0d:1b:6b:35:3c:06:77:51:d3:79:80:1f:ff:d9:2e: 19:19:35:78:6e:45:87:40:69:fa:08:c8:3a:fd:a6: f1:2c:d4:5d:ac:54:7c:9c:50:92:2d:3c:08:ae:d5: 22:fd:9e:1e:c4:b7:4d:cf:26:19:65:2f:74:40:85: 7f:16:21:e5:d9:d4:84:f7:ca:81:2e:00:03:93:d9: f8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EB:AD:37:FF:C2:74:6F:70:C8:D0:E8:AF:3A:89:C3:FF:5E:80:6F X509v3 Authority Key Identifier: keyid:2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/326131343a623430303a3a2f34382d3438203d3e20323133323739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:b400::/48 Signature Algorithm: sha256WithRSAEncryption 50:98:4f:99:c0:b1:8f:a1:34:f6:fa:a4:b5:a3:2f:41:83:33: a1:3c:a0:b3:b8:08:42:c7:aa:68:5d:a4:66:ac:45:20:e5:1b: 24:e0:4c:2f:55:3b:a2:e2:48:12:0e:26:a9:b4:fc:a6:20:c3: da:9d:a2:f9:cb:67:e8:a7:2a:12:90:ed:74:5f:9c:15:83:1f: ab:7a:67:f8:bb:10:c2:bb:bd:d8:20:ee:3e:44:7e:d7:1a:5a: 3b:9e:49:36:1c:12:ce:e9:47:81:d8:eb:61:14:40:80:c1:f8: 16:30:f4:6a:2c:0f:cc:48:0a:89:86:67:5a:12:13:4d:aa:55: aa:20:be:fc:64:54:87:4d:f0:ca:fb:5d:85:eb:d6:b7:37:25: 7b:f5:ee:85:d5:86:21:be:3b:71:c0:58:7b:78:c1:95:19:eb: 17:a8:f9:7a:7b:d4:8a:8e:3a:fe:00:40:48:33:87:e7:ab:43: 19:cf:42:9a:c9:db:68:0d:a4:32:53:6a:29:e5:19:5c:e6:55: 3d:1e:85:51:fd:d4:a0:95:61:55:b5:4c:4f:14:93:7b:fe:63: 1a:3c:32:99:c1:33:2a:77:58:14:76:55:88:61:56:a6:49:5e: 08:75:6b:9e:4c:3f:9d:af:c2:08:c1:ae:8c:e1:c5:c6:f1:15: 9c:e6:f3:08 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUUMI9UlQhqSY2P45nRUselgkviUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmMxMmYwYTA4MGYwMjFmMmJhMjViYzBjNmVhN2UwNmI2 N2FhZDA1ZTAeFw0yNTEyMTcxNjA0MDRaFw0yNjEyMTYxNjA5MDRaMDMxMTAvBgNV BAMTKDBCRUJBRDM3RkZDMjc0NkY3MEM4RDBFOEFGM0E4OUMzRkY1RTgwNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0tfozyIq9+IyQVqBJJt2/7F6J nkNaEqsahVEIeTLP9nI+vXarlCAjO3xI8zb9063A6ovgisW2kPvHT6kSr+5AzzFe JC0kAllDxXPwZq6szvhSJ6jSFQrZfhliXtY61yBi1GpIKUK/4qcB+g4j/APegb9Y oLyLstcYDasHqaMS3yapwf0xEjxVrhdBE9i4frm9fWLugcUnrMdgWtKyPkRB46cx Lkpa38I0sFM/IzIGTUcZKw0bazU8BndR03mAH//ZLhkZNXhuRYdAafoIyDr9pvEs 1F2sVHycUJItPAiu1SL9nh7Et03PJhllL3RAhX8WIeXZ1IT3yoEuAAOT2filAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUC+utN//CdG9wyNDorzqJw/9egG8wHwYDVR0j BBgwFoAULBLwoIDwIfK6JbwMbqfga2eq0F4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODA3MDYxNWYtZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJi NjRlLzAvMkMxMkYwQTA4MEYwMjFGMkJBMjVCQzBDNkVBN0UwNkI2N0FBRDA1RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xCTHdvSUR3SWZLNkpid01icWZnYTJl cTBGNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODA3MDYxNWYt ZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJiNjRlLzAvMzI2MTMxMzQzYTYyMzQzMDMw M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTMzMzIzNzM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA KhS0AAAAMA0GCSqGSIb3DQEBCwUAA4IBAQBQmE+ZwLGPoTT2+qS1oy9BgzOhPKCz uAhCx6poXaRmrEUg5Rsk4EwvVTui4kgSDiaptPymIMPanaL5y2fopyoSkO10X5wV gx+remf4uxDCu73YIO4+RH7XGlo7nkk2HBLO6UeB2OthFECAwfgWMPRqLA/MSAqJ hmdaEhNNqlWqIL78ZFSHTfDK+12F69a3NyV79e6F1YYhvjtxwFh7eMGVGesXqPl6 e9SKjjr+AEBIM4fnq0MZz0KaydtoDaQyU2op5Rlc5lU9HoVR/dSglWFVtUxPFJN7 /mMaPDKZwTMqd1gUdlWIYVamSV4IdWueTD+dr8IIwa6M4cXG8RWc5vMI -----END CERTIFICATE-----Generated at Sat Dec 20 05:09:27 2025 by rpki-client