This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323164303a3a2f34342d3438203d3e20323033353238.roa File: 326130653a386630323a323164303a3a2f34342d3438203d3e20323033353238.roa (raw, json) Hash identifier: Q2U2De5ddvOq28evrpXRTzpKGADb814yX/Aer+Rx9No= Subject key identifier: 99:C9:ED:09:D6:9A:7A:7E:1A:41:14:4C:E0:C1:20:8B:29:E4:05:CB Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 228608F65668F5A33B25D3E78446AD39E432F6EB Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323164303a3a2f34342d3438203d3e20323033353238.roa Signing time: Thu 11 Dec 2025 01:43:41 +0000 ROA not before: Thu 11 Dec 2025 01:38:41 +0000 ROA not after: Thu 10 Dec 2026 01:43:41 +0000 asID: 203528 IP address blocks: 2a0e:8f02:21d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:86:08:f6:56:68:f5:a3:3b:25:d3:e7:84:46:ad:39:e4:32:f6:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:38:41 2025 GMT Not After : Dec 10 01:43:41 2026 GMT Subject: CN=99C9ED09D69A7A7E1A41144CE0C1208B29E405CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2a:17:e5:79:9f:81:6d:c6:f1:57:c9:ce:06: de:9d:d9:f2:43:3d:a1:9c:28:c1:4f:bd:b8:bb:95: 33:b0:1f:af:47:01:b3:f7:62:44:1b:0f:99:51:89: 38:56:3c:a1:75:98:34:ac:b8:3f:b6:5d:da:c1:ce: f8:4b:1d:2c:f0:4f:c8:23:31:b6:ee:f0:a0:44:21: 1a:55:bd:02:8f:29:4f:98:4b:e2:72:5b:ef:d4:9c: 13:0c:6b:2b:4a:8a:78:27:87:a8:44:20:ff:83:0b: cc:5f:b0:5f:e2:c1:ad:b9:f7:d7:05:9e:9c:6e:5c: b6:76:12:fc:77:f8:29:f6:5b:a6:de:ee:90:ce:0e: d4:83:80:ce:f0:71:90:f8:58:78:92:f8:ab:b5:dc: a5:c4:99:ee:45:59:d9:ba:08:df:36:63:d5:69:e1: ae:ca:f9:2f:9d:1a:cb:45:20:26:15:66:96:fc:7c: 6b:4f:73:73:3b:5f:2c:4c:9b:43:21:a8:44:0a:a6: cb:99:4d:a2:72:4c:2a:78:65:d7:c1:d4:91:ae:1d: 09:48:b1:74:14:05:88:d4:fb:8c:80:52:7d:e8:8d: c6:75:9c:c5:b8:49:26:cc:37:9d:08:d9:63:f6:4e: 2d:19:96:ed:d0:d8:8a:57:11:69:f0:ab:57:2f:66: 63:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C9:ED:09:D6:9A:7A:7E:1A:41:14:4C:E0:C1:20:8B:29:E4:05:CB X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323164303a3a2f34342d3438203d3e20323033353238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:21d0::/44 Signature Algorithm: sha256WithRSAEncryption 41:13:53:1a:39:92:ac:8f:20:bc:56:03:fb:ea:de:76:21:3a: a8:f4:45:a3:50:7b:10:05:ad:ed:7f:d3:81:61:d4:87:4f:91: dd:e8:63:c8:b3:a4:b6:8f:91:02:fe:39:32:a6:77:ff:98:b9: 13:65:0b:d6:53:d2:55:2b:47:12:78:04:90:7a:b8:9e:38:ce: 1f:e9:aa:67:2a:43:9d:f0:3c:30:2a:ec:e3:98:b4:55:3c:ba: d5:44:17:a2:cc:3b:78:cf:38:dc:82:6f:24:64:cf:1a:7e:c1: d8:16:5b:a5:91:a4:76:05:37:47:51:6b:6b:52:94:9c:de:d3: cc:7b:ed:50:af:dc:90:f3:48:e7:a8:6f:25:63:a7:5f:e5:68: 6c:4f:60:5b:55:27:86:7c:11:ba:38:c8:ac:c0:6e:e7:18:2f: b1:87:aa:0c:50:88:05:b2:89:73:a7:c1:d9:2f:ed:a4:61:96: 8c:b7:68:90:47:06:b7:b9:35:20:79:d8:04:af:9e:78:79:a8: 2c:f6:21:41:6a:6d:7a:50:87:17:75:02:9a:87:e9:24:14:f8: 56:6d:54:02:41:75:f5:bf:c5:f8:91:ec:28:f2:6f:4e:6d:71: 83:f5:12:fd:3b:5d:e5:b6:2d:91:30:3a:84:46:9a:4d:ad:18: 4a:8f:ae:fe -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUIoYI9lZo9aM7JdPnhEatOeQy9uswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTM4NDFaFw0yNjEyMTAwMTQzNDFaMDMxMTAvBgNV BAMTKDk5QzlFRDA5RDY5QTdBN0UxQTQxMTQ0Q0UwQzEyMDhCMjlFNDA1Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVKhfleZ+BbcbxV8nOBt6d2fJD PaGcKMFPvbi7lTOwH69HAbP3YkQbD5lRiThWPKF1mDSsuD+2XdrBzvhLHSzwT8gj Mbbu8KBEIRpVvQKPKU+YS+JyW+/UnBMMaytKingnh6hEIP+DC8xfsF/iwa2599cF npxuXLZ2Evx3+Cn2W6be7pDODtSDgM7wcZD4WHiS+Ku13KXEme5FWdm6CN82Y9Vp 4a7K+S+dGstFICYVZpb8fGtPc3M7XyxMm0MhqEQKpsuZTaJyTCp4ZdfB1JGuHQlI sXQUBYjU+4yAUn3ojcZ1nMW4SSbMN50I2WP2Ti0Zlu3Q2IpXEWnwq1cvZmMJAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUmcntCdaaen4aQRRM4MEgiynkBcswHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhMzIzMTY0MzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjMwMzMzNTMyMzgu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwQqDo8CIdAwDQYJKoZIhvcNAQELBQADggEBAEETUxo5kqyPILxW A/vq3nYhOqj0RaNQexAFre1/04Fh1IdPkd3oY8izpLaPkQL+OTKmd/+YuRNlC9ZT 0lUrRxJ4BJB6uJ44zh/pqmcqQ53wPDAq7OOYtFU8utVEF6LMO3jPONyCbyRkzxp+ wdgWW6WRpHYFN0dRa2tSlJze08x77VCv3JDzSOeobyVjp1/laGxPYFtVJ4Z8Ebo4 yKzAbucYL7GHqgxQiAWyiXOnwdkv7aRhloy3aJBHBre5NSB52ASvnnh5qCz2IUFq bXpQhxd1ApqH6SQU+FZtVAJBdfW/xfiR7Cjyb05tcYP1Ev07XeW2LZEwOoRGmk2t GEqPrv4= -----END CERTIFICATE-----Generated at Fri Dec 12 14:33:31 2025 by rpki-client