This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323036303a3a2f34342d3438203d3e20323037393037.roa File: 326130653a386630323a323036303a3a2f34342d3438203d3e20323037393037.roa (raw, json) Hash identifier: s9m/DVKJWK38M+MuT8fPIdoPQ6Gyphj3RbrRyxCbFhQ= Subject key identifier: 84:E0:7D:B9:27:00:49:3D:E8:17:6E:60:06:62:6D:BF:5C:14:FE:2D Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 481F3F1DAD30510EEC0BB3A238BB4E9DEAA8A0E3 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323036303a3a2f34342d3438203d3e20323037393037.roa Signing time: Thu 11 Dec 2025 01:46:12 +0000 ROA not before: Thu 11 Dec 2025 01:41:12 +0000 ROA not after: Thu 10 Dec 2026 01:46:12 +0000 asID: 207907 IP address blocks: 2a0e:8f02:2060::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:1f:3f:1d:ad:30:51:0e:ec:0b:b3:a2:38:bb:4e:9d:ea:a8:a0:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:41:12 2025 GMT Not After : Dec 10 01:46:12 2026 GMT Subject: CN=84E07DB92700493DE8176E6006626DBF5C14FE2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6c:44:3a:ad:5c:b1:e3:73:0b:7a:35:64:65: 3b:95:ba:1a:a1:ce:e6:87:a9:ea:23:37:e8:95:9b: c1:5b:6f:79:e9:91:51:a0:0a:e3:83:5b:8f:26:67: b2:ed:64:87:a3:7d:e2:34:7f:b1:46:37:7b:65:97: 10:45:40:57:b1:dc:97:41:dc:6c:2a:da:d2:b0:d4: ee:2a:fb:0c:51:44:91:07:fb:79:18:0d:1a:8f:75: 26:c9:62:6d:64:10:1c:6a:b8:32:0e:10:b9:71:5b: d2:25:2c:77:63:a9:57:bc:73:6e:01:06:b8:57:d0: 15:d5:75:e4:b3:b8:68:29:29:44:a2:2b:8d:bc:dd: c4:2d:90:65:68:a3:fa:3d:57:59:c0:f0:df:47:d7: 30:2c:4a:66:48:26:a7:1d:b5:16:7a:3e:65:ae:24: 71:f0:d3:53:c0:55:f1:f7:c6:bb:5b:69:f1:da:b7: 9f:38:c8:18:28:0a:1c:92:0f:e1:f6:ae:71:c4:a5: ab:e1:d8:ea:9f:48:6d:8d:5d:33:be:21:57:bc:bf: e0:4b:22:bc:63:62:06:c3:97:5b:87:a6:bb:9a:a8: 7f:99:dd:bd:8e:c0:bc:3f:99:a6:31:90:b9:47:59: b3:19:32:17:ee:65:8d:d8:6b:52:90:b7:1a:b4:92: 3d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E0:7D:B9:27:00:49:3D:E8:17:6E:60:06:62:6D:BF:5C:14:FE:2D X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323036303a3a2f34342d3438203d3e20323037393037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:2060::/44 Signature Algorithm: sha256WithRSAEncryption 84:89:e3:fd:9a:b8:4e:83:d0:f9:a0:00:26:78:23:42:0a:18: c2:5b:af:c7:71:12:31:3e:c6:ad:44:20:46:73:f0:63:21:7b: f0:d8:d6:c5:b1:95:a6:7d:62:57:c6:0d:74:b9:01:c8:67:08: 95:89:4b:ed:46:de:1d:89:68:c2:c4:74:5e:44:35:80:64:75: e9:42:4d:2a:b9:8e:c0:11:1e:46:1a:b9:10:88:28:f5:3c:44: 6e:00:69:77:45:e5:9d:64:04:10:63:21:25:d0:65:a0:47:71: 8a:70:da:ae:ca:6c:6e:3b:86:9f:46:d2:b5:f9:73:07:96:9e: 88:6d:d2:4c:6e:bd:38:85:af:00:8b:8a:f4:c9:45:09:dd:e8: 49:3d:a7:92:ca:d4:88:97:ac:58:30:29:9a:12:1a:3c:fc:6c: c9:11:38:90:85:24:60:9a:d4:7f:49:8f:6c:42:06:68:bb:e5: 72:5f:79:ca:8c:28:cb:eb:51:34:b2:ad:f0:f7:66:4e:65:49: 44:eb:57:11:3d:94:64:be:63:56:08:6b:fc:9e:b8:73:47:8c: b0:eb:82:d6:ff:b8:60:c9:12:2a:75:c4:61:69:99:24:f3:57: 1b:7d:b6:b9:3e:40:9e:fe:41:f2:3a:67:50:8a:8e:ef:b7:ea: 08:41:69:74 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUSB8/Ha0wUQ7sC7OiOLtOneqooOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTQxMTJaFw0yNjEyMTAwMTQ2MTJaMDMxMTAvBgNV BAMTKDg0RTA3REI5MjcwMDQ5M0RFODE3NkU2MDA2NjI2REJGNUMxNEZFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBbEQ6rVyx43MLejVkZTuVuhqh zuaHqeojN+iVm8Fbb3npkVGgCuODW48mZ7LtZIejfeI0f7FGN3tllxBFQFex3JdB 3Gwq2tKw1O4q+wxRRJEH+3kYDRqPdSbJYm1kEBxquDIOELlxW9IlLHdjqVe8c24B BrhX0BXVdeSzuGgpKUSiK4283cQtkGVoo/o9V1nA8N9H1zAsSmZIJqcdtRZ6PmWu JHHw01PAVfH3xrtbafHat584yBgoChySD+H2rnHEpavh2OqfSG2NXTO+IVe8v+BL IrxjYgbDl1uHpruaqH+Z3b2OwLw/maYxkLlHWbMZMhfuZY3Ya1KQtxq0kj09AgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUhOB9uScAST3oF25gBmJtv1wU/i0wHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhMzIzMDM2MzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjMwMzczOTMwMzcu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwQqDo8CIGAwDQYJKoZIhvcNAQELBQADggEBAISJ4/2auE6D0Pmg ACZ4I0IKGMJbr8dxEjE+xq1EIEZz8GMhe/DY1sWxlaZ9YlfGDXS5AchnCJWJS+1G 3h2JaMLEdF5ENYBkdelCTSq5jsARHkYauRCIKPU8RG4AaXdF5Z1kBBBjISXQZaBH cYpw2q7KbG47hp9G0rX5cweWnoht0kxuvTiFrwCLivTJRQnd6Ek9p5LK1IiXrFgw KZoSGjz8bMkROJCFJGCa1H9Jj2xCBmi75XJfecqMKMvrUTSyrfD3Zk5lSUTrVxE9 lGS+Y1YIa/yeuHNHjLDrgtb/uGDJEip1xGFpmSTzVxt9trk+QJ7+QfI6Z1CKju+3 6ghBaXQ= -----END CERTIFICATE-----Generated at Fri Dec 12 14:33:31 2025 by rpki-client