This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: oAguRb9pXNzPWjYX85q2YG/BjiE6PLmXVHXI0ai6PhQ= Subject key identifier: 27:40:93:BC:6D:3A:43:BF:D6:9A:48:1E:79:51:F5:CE:E8:69:0F:7A Certificate issuer: /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Certificate serial: 5028C0C4027DBE8F02C3B29E0F0E3B1BFFBBC514 Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa Signing time: Mon 17 Nov 2025 13:56:36 +0000 ROA not before: Mon 17 Nov 2025 13:51:36 +0000 ROA not after: Mon 16 Nov 2026 13:56:36 +0000 asID: 214344 IP address blocks: 2a14:7581:9988::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:28:c0:c4:02:7d:be:8f:02:c3:b2:9e:0f:0e:3b:1b:ff:bb:c5:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Validity Not Before: Nov 17 13:51:36 2025 GMT Not After : Nov 16 13:56:36 2026 GMT Subject: CN=274093BC6D3A43BFD69A481E7951F5CEE8690F7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bc:29:3b:d8:7f:56:59:bb:28:e6:99:07:0a: 0e:44:48:6e:27:ab:8d:2e:71:da:ec:c6:d0:a6:af: 56:77:ae:9d:4b:3b:76:4c:50:d5:de:c1:26:3c:b7: 77:75:53:e3:08:12:17:68:15:26:b9:a7:a5:b8:5b: 64:20:85:bf:11:f8:92:a4:df:ff:c3:57:72:7d:1b: bd:6a:77:43:49:e2:9f:e9:3f:31:be:95:e5:70:10: 9e:a1:d5:72:5d:b4:fd:b6:a2:0d:aa:02:d6:7f:9a: 27:7c:40:2e:40:b4:a5:30:ba:e5:ab:31:35:e0:45: c3:20:52:5e:df:ef:66:27:61:1c:ae:f0:a5:b7:86: b6:91:ba:f3:e8:b1:12:1e:f5:f5:d3:be:97:9c:85: 79:61:40:c2:28:7c:3b:4b:4e:35:ea:04:7b:14:c2: c9:52:49:11:85:ef:2a:3a:8a:17:0e:dc:d0:69:48: c4:3a:fa:77:f5:2b:28:eb:c5:72:f1:ad:c8:fc:ef: 4b:e9:ea:72:78:a6:99:99:f5:2a:82:72:67:bc:6b: 69:c9:97:69:82:29:d4:a6:14:7d:17:f8:ed:f3:ed: a5:9e:cf:e9:51:43:1e:02:3e:49:92:84:05:ef:f7: 36:0e:50:2e:0e:ea:2d:c5:f2:c4:42:02:f8:29:9f: bf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:40:93:BC:6D:3A:43:BF:D6:9A:48:1E:79:51:F5:CE:E8:69:0F:7A X509v3 Authority Key Identifier: keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9988::/48 Signature Algorithm: sha256WithRSAEncryption 9e:06:2c:69:81:23:e4:23:7e:aa:36:b0:56:e6:e2:06:3b:6d: dd:13:cc:25:77:6d:64:fb:11:bf:58:86:74:d8:50:ea:e6:c7: 5d:1c:5d:32:8d:69:86:8d:2f:b4:6d:82:f1:0a:69:14:0f:bd: 09:b5:f4:bc:8c:aa:12:48:3e:11:0d:f4:6e:fa:48:93:69:c1: d6:96:d0:8d:f9:92:b6:f5:4e:3f:d1:88:0f:59:bc:f7:2b:ea: 31:4c:0f:64:2e:a3:4b:a5:cb:84:7e:91:de:08:1f:0f:6b:7a: 4e:76:2a:4c:5c:53:e7:46:55:a6:ab:d2:fe:f7:d9:ab:18:29: 23:3b:be:16:f1:c2:75:a8:c3:22:99:47:2d:85:d4:02:ec:55: 52:0a:07:2b:d3:e6:39:88:26:49:44:4d:b9:99:0e:ed:40:ed: fc:ed:f4:2e:73:b7:a8:50:b6:9e:69:d5:20:71:43:d9:30:51: e4:0f:68:06:7a:79:59:e6:b8:0a:59:79:41:40:2a:1b:a5:68: 04:f0:49:f1:4b:76:27:60:b7:b0:52:a9:59:4b:0e:ee:42:c7: b2:95:ef:23:54:a8:51:14:82:79:d5:a2:3b:18:4e:22:4f:fd: 47:de:6a:b9:5a:e7:3a:df:e9:9a:54:05:4a:d7:5c:c2:13:24: 69:c0:06:f1 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUUCjAxAJ9vo8Cw7KeDw47G/+7xRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJB ODcyMzk0NTAeFw0yNTExMTcxMzUxMzZaFw0yNjExMTYxMzU2MzZaMDMxMTAvBgNV BAMTKDI3NDA5M0JDNkQzQTQzQkZENjlBNDgxRTc5NTFGNUNFRTg2OTBGN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCevCk72H9WWbso5pkHCg5ESG4n q40ucdrsxtCmr1Z3rp1LO3ZMUNXewSY8t3d1U+MIEhdoFSa5p6W4W2Qghb8R+JKk 3//DV3J9G71qd0NJ4p/pPzG+leVwEJ6h1XJdtP22og2qAtZ/mid8QC5AtKUwuuWr MTXgRcMgUl7f72YnYRyu8KW3hraRuvPosRIe9fXTvpechXlhQMIofDtLTjXqBHsU wslSSRGF7yo6ihcO3NBpSMQ6+nf1KyjrxXLxrcj870vp6nJ4ppmZ9SqCcme8a2nJ l2mCKdSmFH0X+O3z7aWez+lRQx4CPkmShAXv9zYOUC4O6i3F8sRCAvgpn783AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUJ0CTvG06Q7/WmkgeeVH1zuhpD3owHwYDVR0j BBgwFoAUh6TITUNm27FakJClWqLc66hyOUUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw MWRhLzEvODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJBODcyMzk0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84N0E0Qzg0RDQzNjZEQkIxNUE5MDkwQTU1 QUEyRENFQkE4NzIzOTQ1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hNWQ0YzAwYi1kMTA1LTQ5MDYtYjk4MS0xZDAzNDNlMzAxZGEvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTM5MzkzODM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gZmIMA0GCSqGSIb3DQEBCwUAA4IBAQCe BixpgSPkI36qNrBW5uIGO23dE8wld21k+xG/WIZ02FDq5sddHF0yjWmGjS+0bYLx CmkUD70JtfS8jKoSSD4RDfRu+kiTacHWltCN+ZK29U4/0YgPWbz3K+oxTA9kLqNL pcuEfpHeCB8Pa3pOdipMXFPnRlWmq9L+99mrGCkjO74W8cJ1qMMimUcthdQC7FVS Cgcr0+Y5iCZJRE25mQ7tQO387fQuc7eoULaeadUgcUPZMFHkD2gGenlZ5rgKWXlB QCobpWgE8EnxS3YnYLewUqlZSw7uQseyle8jVKhRFIJ51aI7GE4iT/1H3mq5Wuc6 3+maVAVK11zCEyRpwAbx -----END CERTIFICATE-----Generated at Sun Dec 7 00:10:31 2025 by rpki-client