This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393230303a3a2f34302d3438203d3e20313430393135.roa File: 326131343a373538303a393230303a3a2f34302d3438203d3e20313430393135.roa (raw, json) Hash identifier: Z9K1kvrdNseHTC45RV7/10vHpS+ekGiduokJdT166AY= Subject key identifier: 55:FB:9C:9E:E5:6E:D9:A1:F0:7B:49:1B:90:FA:2B:0C:38:73:AA:B1 Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 54DA9B9395E9CE854029F744AFFDBA2430D97EEB Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393230303a3a2f34302d3438203d3e20313430393135.roa Signing time: Fri 19 Sep 2025 14:23:02 +0000 ROA not before: Fri 19 Sep 2025 14:18:02 +0000 ROA not after: Fri 18 Sep 2026 14:23:02 +0000 asID: 140915 IP address blocks: 2a14:7580:9200::/40 maxlen: 48 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 54:da:9b:93:95:e9:ce:85:40:29:f7:44:af:fd:ba:24:30:d9:7e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Sep 19 14:18:02 2025 GMT Not After : Sep 18 14:23:02 2026 GMT Subject: CN=55FB9C9EE56ED9A1F07B491B90FA2B0C3873AAB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6f:53:d4:ef:0c:55:a3:36:a9:52:4b:1b:7d: db:19:a2:64:b9:bd:5e:6d:b1:97:dc:74:9b:87:cd: c3:ff:b3:8e:a7:91:7e:d6:2f:1a:25:1b:0e:f4:19: 7d:4f:00:d2:07:98:ce:3e:a3:71:79:49:5a:6a:83: 5d:08:78:84:34:8d:7a:98:1a:53:1f:d6:5b:4e:58: 9f:8e:03:4c:30:93:55:74:a9:9f:28:c7:8a:a1:4d: 33:79:ea:4d:3d:50:c8:76:f1:3c:6a:8d:d9:39:5a: 13:ab:38:6c:8e:f0:d6:ef:6d:2f:cd:cb:09:7d:47: cf:90:68:76:67:83:bd:86:99:24:90:0a:fe:71:5b: ad:0a:da:33:7b:da:53:39:cd:ea:b4:3e:9b:50:b7: 83:22:13:f0:ae:18:83:fd:a7:35:16:ab:93:f7:91: 6e:8e:15:d4:36:3d:47:d8:1f:c7:07:38:0e:32:8f: 07:a7:3e:5a:82:f5:f6:62:99:27:cf:40:6b:92:09: 21:f4:e6:10:5a:ff:24:89:6d:bd:ad:00:ff:50:53: ff:f2:44:a4:0f:64:c6:a4:4d:0c:1e:aa:d9:bc:40: ab:70:c2:bd:34:68:4a:8f:51:9c:34:82:85:81:d0: 77:fb:fc:78:55:40:14:dc:15:61:58:7b:be:23:ae: a1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FB:9C:9E:E5:6E:D9:A1:F0:7B:49:1B:90:FA:2B:0C:38:73:AA:B1 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393230303a3a2f34302d3438203d3e20313430393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:9200::/40 Signature Algorithm: sha256WithRSAEncryption c6:f3:54:f2:aa:1b:ce:33:db:1a:15:3a:1a:a7:1e:1e:dc:17: 40:56:f4:81:26:e9:75:5c:ff:47:27:d0:7f:b2:25:f1:98:2e: 97:29:bd:22:9f:aa:55:b7:c8:a7:03:e6:eb:f2:28:60:4a:25: 96:83:25:0c:89:2d:1b:fb:8e:a9:bd:67:74:1b:08:d6:5f:40: 11:64:95:2b:5e:b3:77:fe:a1:2e:19:67:51:09:6f:9e:fe:f4: 19:5f:9e:73:2c:f8:f7:1c:f0:2c:cb:04:10:3d:0e:4b:4d:67: 8c:37:e5:23:2a:6d:5f:5d:6f:13:b6:05:e7:c7:f3:fe:22:c3: 2e:d8:1a:87:9f:eb:fd:37:0f:19:6b:9d:eb:45:0a:04:a6:ab: 38:a3:2e:8d:4a:2d:0e:3d:24:72:58:8d:d4:3c:c4:e0:03:ba: b9:71:11:37:89:07:75:03:20:68:76:86:1f:f9:8d:69:48:f2: 55:aa:0f:e6:31:d3:1d:43:73:24:e2:3e:93:1a:9d:01:48:97: 98:bb:79:4b:28:dd:ec:f5:a7:5a:74:67:ae:01:ba:47:a7:95: c8:60:80:dd:29:45:1f:9b:7f:ce:9a:64:bd:49:46:26:ab:96: 42:7d:41:75:ed:02:3a:32:09:a9:54:6b:78:d3:fd:74:35:f2: 51:c1:61:8f -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUVNqbk5XpzoVAKfdEr/26JDDZfuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNTA5MTkxNDE4MDJaFw0yNjA5MTgxNDIzMDJaMDMxMTAvBgNV BAMTKDU1RkI5QzlFRTU2RUQ5QTFGMDdCNDkxQjkwRkEyQjBDMzg3M0FBQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDb1PU7wxVozapUksbfdsZomS5 vV5tsZfcdJuHzcP/s46nkX7WLxolGw70GX1PANIHmM4+o3F5SVpqg10IeIQ0jXqY GlMf1ltOWJ+OA0wwk1V0qZ8ox4qhTTN56k09UMh28Txqjdk5WhOrOGyO8NbvbS/N ywl9R8+QaHZng72GmSSQCv5xW60K2jN72lM5zeq0PptQt4MiE/CuGIP9pzUWq5P3 kW6OFdQ2PUfYH8cHOA4yjwenPlqC9fZimSfPQGuSCSH05hBa/ySJbb2tAP9QU//y RKQPZMakTQweqtm8QKtwwr00aEqPUZw0goWB0Hf7/HhVQBTcFWFYe74jrqFXAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUVfucnuVu2aHwe0kbkPorDDhzqrEwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTM5MzIzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzEz NDMwMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gJIwDQYJKoZIhvcNAQELBQADggEBAMbz VPKqG84z2xoVOhqnHh7cF0BW9IEm6XVc/0cn0H+yJfGYLpcpvSKfqlW3yKcD5uvy KGBKJZaDJQyJLRv7jqm9Z3QbCNZfQBFklStes3f+oS4ZZ1EJb57+9BlfnnMs+Pcc 8CzLBBA9DktNZ4w35SMqbV9dbxO2BefH8/4iwy7YGoef6/03DxlrnetFCgSmqzij Lo1KLQ49JHJYjdQ8xOADurlxETeJB3UDIGh2hh/5jWlI8lWqD+Yx0x1DcyTiPpMa nQFIl5i7eUso3ez1p1p0Z64BukenlchggN0pRR+bf86aZL1JRiarlkJ9QXXtAjoy CalUa3jT/XQ18lHBYY8= -----END CERTIFICATE-----Generated at Wed Dec 17 21:02:05 2025 by rpki-client