This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630303a663130303a3a2f34302d3438203d3e2030.roa File: 326130653a386630303a663130303a3a2f34302d3438203d3e2030.roa (raw, json) Hash identifier: npNTQtZAeNMzkiKuxiEzjqRn2+tH2p4lY3KaTe/OZc8= Subject key identifier: EE:8A:E0:ED:C7:BE:04:6B:56:BF:37:23:A9:2E:A3:C6:55:3F:5E:67 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 14FC9815AFFA9C58FBB71796A6E857A9652B5D81 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630303a663130303a3a2f34302d3438203d3e2030.roa Signing time: Tue 30 Dec 2025 19:52:23 +0000 ROA not before: Tue 30 Dec 2025 19:47:23 +0000 ROA not after: Tue 29 Dec 2026 19:52:23 +0000 asID: 0 IP address blocks: 2a0e:8f00:f100::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:fc:98:15:af:fa:9c:58:fb:b7:17:96:a6:e8:57:a9:65:2b:5d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 30 19:47:23 2025 GMT Not After : Dec 29 19:52:23 2026 GMT Subject: CN=EE8AE0EDC7BE046B56BF3723A92EA3C6553F5E67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:27:2e:5d:b4:02:8c:8b:7c:ca:60:e1:b2:3b: c8:46:d5:b5:e2:2d:b6:de:9c:9f:da:20:32:09:9b: b9:df:16:48:25:aa:45:de:b1:c8:1e:f9:2e:9e:c3: 95:9a:9a:e1:04:0b:ae:05:02:25:e4:dc:cf:af:3a: b8:50:c3:52:ef:bb:cb:31:bb:10:90:48:88:5a:10: 03:f6:c4:75:b0:e0:3e:d0:35:79:bf:db:76:c9:ac: 4b:f8:7f:4c:c0:24:ab:f5:4d:6c:84:0f:06:9d:4a: c3:67:b1:8a:82:86:a2:8a:04:d5:64:86:3b:e1:d0: c3:ab:63:28:21:d1:43:21:be:42:af:3d:c4:ad:96: 40:3a:d6:4e:21:0a:00:c0:67:1b:9e:e6:e9:74:f7: c2:6e:78:96:69:b1:cc:e3:a7:4f:89:33:04:7f:fa: d0:cf:72:62:02:82:2f:8d:30:24:d4:4a:da:6f:b2: 01:c6:a5:20:fc:6c:28:27:68:8c:1e:f1:ab:ad:35: 8b:10:1d:77:6f:8f:14:e0:38:e8:26:86:31:e0:a7: d1:0d:05:88:2c:d0:a7:78:13:c3:81:4f:5f:6c:74: 57:06:ff:ef:61:58:71:88:f1:59:7d:20:b8:51:91: 43:b6:cd:66:88:6a:53:09:0a:6b:d4:84:98:e5:4e: 42:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8A:E0:ED:C7:BE:04:6B:56:BF:37:23:A9:2E:A3:C6:55:3F:5E:67 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630303a663130303a3a2f34302d3438203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f00:f100::/40 Signature Algorithm: sha256WithRSAEncryption 9e:13:0a:20:64:82:72:10:bb:45:17:82:cb:9d:16:e6:d9:68: ca:f5:14:0f:54:34:e5:d7:66:ea:6c:00:23:6d:b7:8b:b3:fd: 88:f8:2a:0f:87:6d:cd:bf:5c:65:40:9e:60:35:76:69:64:51: 2d:24:16:ac:5b:1d:54:50:50:70:9b:5a:9c:b6:89:8b:00:a0: bf:df:66:75:2f:3d:e2:3d:e3:23:5b:de:ba:84:8b:c6:f6:12: 66:9c:98:3e:41:e0:a6:45:0a:66:f8:33:77:8a:55:c2:8b:2a: 33:b9:92:b8:58:3c:e8:2d:01:0e:85:55:14:64:e4:f9:1e:49: 8a:d8:a7:66:36:99:bc:68:b6:6f:ae:fb:54:01:9a:54:7c:52: 2f:ac:56:9d:6d:e6:26:09:22:4b:6b:68:7d:da:0f:16:59:46: 73:ec:28:3c:f8:e2:3a:59:4e:8f:79:be:e6:80:37:ad:68:2e: 6d:45:0b:a3:34:23:eb:31:81:70:82:1c:d6:ec:21:6c:df:3b: 7d:be:54:73:a6:0d:3b:1a:57:81:81:36:a7:8f:d2:d6:22:d5: 72:12:47:8d:ef:2e:3d:9e:b5:88:86:ef:44:f9:ed:51:f6:6c: 03:bd:83:95:9b:fa:9e:02:11:34:33:ca:e7:bd:31:cd:99:5e: fb:50:df:32 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUFPyYFa/6nFj7txeWpuhXqWUrXYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMzAxOTQ3MjNaFw0yNjEyMjkxOTUyMjNaMDMxMTAvBgNV BAMTKEVFOEFFMEVEQzdCRTA0NkI1NkJGMzcyM0E5MkVBM0M2NTUzRjVFNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrJy5dtAKMi3zKYOGyO8hG1bXi LbbenJ/aIDIJm7nfFkglqkXescge+S6ew5WamuEEC64FAiXk3M+vOrhQw1Lvu8sx uxCQSIhaEAP2xHWw4D7QNXm/23bJrEv4f0zAJKv1TWyEDwadSsNnsYqChqKKBNVk hjvh0MOrYygh0UMhvkKvPcStlkA61k4hCgDAZxue5ul098JueJZpsczjp0+JMwR/ +tDPcmICgi+NMCTUStpvsgHGpSD8bCgnaIwe8autNYsQHXdvjxTgOOgmhjHgp9EN BYgs0Kd4E8OBT19sdFcG/+9hWHGI8Vl9ILhRkUO2zWaIalMJCmvUhJjlTkI3AgMB AAGjggJAMIICPDAdBgNVHQ4EFgQU7org7ce+BGtWvzcjqS6jxlU/XmcwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUHMAuGgY1yc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MDNhNjYzMTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMC5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG ACoOjwDxMA0GCSqGSIb3DQEBCwUAA4IBAQCeEwogZIJyELtFF4LLnRbm2WjK9RQP VDTl12bqbAAjbbeLs/2I+CoPh23Nv1xlQJ5gNXZpZFEtJBasWx1UUFBwm1qctomL AKC/32Z1Lz3iPeMjW966hIvG9hJmnJg+QeCmRQpm+DN3ilXCiyozuZK4WDzoLQEO hVUUZOT5HkmK2KdmNpm8aLZvrvtUAZpUfFIvrFadbeYmCSJLa2h92g8WWUZz7Cg8 +OI6WU6Peb7mgDetaC5tRQujNCPrMYFwghzW7CFs3zt9vlRzpg07GleBgTanj9LW ItVyEkeN7y49nrWIhu9E+e1R9mwDvYOVm/qeAhE0M8rnvTHNmV77UN8y -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:42 2026 by rpki-client