This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663030383a3a2f34382d3438203d3e2030.roa File: 326130653a386630323a663030383a3a2f34382d3438203d3e2030.roa (raw, json) Hash identifier: fJp6d/M39q8say69yK4LkNYhGNWz4AYomImaSPVBa54= Subject key identifier: CC:E6:07:24:77:D1:5E:B5:01:AF:C4:F5:DC:36:05:83:7A:D9:5A:FF Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 2FE847CD9D65CC977345C79B762E0DD05E4F51D8 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663030383a3a2f34382d3438203d3e2030.roa Signing time: Tue 30 Dec 2025 19:07:12 +0000 ROA not before: Tue 30 Dec 2025 19:02:12 +0000 ROA not after: Tue 29 Dec 2026 19:07:12 +0000 asID: 0 IP address blocks: 2a0e:8f02:f008::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e8:47:cd:9d:65:cc:97:73:45:c7:9b:76:2e:0d:d0:5e:4f:51:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 30 19:02:12 2025 GMT Not After : Dec 29 19:07:12 2026 GMT Subject: CN=CCE6072477D15EB501AFC4F5DC3605837AD95AFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:cf:27:ff:a6:3d:6b:2c:74:d8:b8:32:3b: fd:90:36:0a:07:60:84:c7:ec:17:39:98:90:10:51: de:4c:03:3a:4a:f4:4c:ab:06:b2:38:41:6c:04:bf: 5e:1e:36:e7:65:04:39:11:6b:6b:f8:d6:9f:bb:49: d3:18:cc:87:20:81:0b:1e:e7:69:cd:39:8e:c2:7e: 32:f3:d0:24:36:0b:b5:df:d8:ff:99:42:81:97:b0: 2a:32:6b:75:de:3a:36:82:ff:cc:a0:d1:21:b5:98: f0:b7:69:7e:76:5e:bd:18:c2:04:13:9a:c7:cd:49: 2b:b2:d5:1b:f3:6e:fa:b9:d7:37:3b:27:05:d3:9a: 00:c5:67:8f:b7:d6:b1:0e:5f:fe:ab:74:f4:9c:b6: 3d:ce:e3:34:b7:33:a9:1c:a4:12:18:d7:ac:b4:1e: 08:1d:8a:d1:3e:2c:99:ff:82:48:06:b2:03:9f:c3: 98:9e:c2:24:c3:8f:bd:e9:ed:61:6e:94:80:54:ac: 27:ff:91:13:e7:90:eb:7b:6c:36:92:f6:fc:87:a8: 33:41:5c:e4:06:e8:1e:9e:fd:1e:43:f4:69:19:41: f5:dc:25:fc:b9:e3:19:3b:a7:fa:bc:cf:d8:04:17: 34:62:91:43:9a:05:34:49:64:d5:d5:c7:3d:4c:05: a8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E6:07:24:77:D1:5E:B5:01:AF:C4:F5:DC:36:05:83:7A:D9:5A:FF X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663030383a3a2f34382d3438203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f008::/48 Signature Algorithm: sha256WithRSAEncryption 0a:0e:b5:ea:b6:a6:fd:bc:d9:15:c8:78:d0:05:55:f6:6c:4b: f4:6a:a9:5f:2e:61:84:a1:5c:9b:97:d4:ce:4f:85:26:aa:e6: f0:ce:d9:a5:ee:fd:e9:ba:5e:81:3c:02:e5:f3:84:0d:6e:86: 34:59:40:2a:c2:26:d7:76:e5:c0:8a:89:be:bd:af:71:47:2f: f7:6f:77:19:52:83:57:29:7a:f4:37:1c:bc:c9:13:97:2b:de: 87:1d:0b:e9:88:62:5a:ef:8e:49:18:da:97:97:30:95:f9:28: cb:56:cf:71:97:0e:f4:34:36:c7:7d:d8:c4:d7:f0:3c:7a:73: 6d:97:93:0d:34:df:f5:ad:89:d6:2b:07:ce:e1:9e:c5:80:c6: 5a:36:e3:0b:bb:2e:be:dc:c1:7e:00:9a:25:8c:9a:ea:04:cf: 84:e9:fb:c6:45:40:22:90:25:86:c0:f8:34:18:3c:ba:d7:58: 2d:3c:c7:02:93:bd:44:28:3a:ef:f8:1a:b2:36:0e:79:67:aa: 43:fc:c0:91:7c:f4:b4:5c:71:ed:1e:14:e5:e1:e3:14:33:2b: 4a:3c:2f:73:d2:58:4c:18:65:91:6f:20:db:33:21:a5:de:45: 9a:99:7c:66:fb:a9:4a:cd:95:38:e4:c9:32:c1:a3:81:58:35: 87:98:6a:8b -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUL+hHzZ1lzJdzRcebdi4N0F5PUdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMzAxOTAyMTJaFw0yNjEyMjkxOTA3MTJaMDMxMTAvBgNV BAMTKENDRTYwNzI0NzdEMTVFQjUwMUFGQzRGNURDMzYwNTgzN0FEOTVBRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1eM8n/6Y9ayx02LgyO/2QNgoH YITH7Bc5mJAQUd5MAzpK9EyrBrI4QWwEv14eNudlBDkRa2v41p+7SdMYzIcggQse 52nNOY7CfjLz0CQ2C7Xf2P+ZQoGXsCoya3XeOjaC/8yg0SG1mPC3aX52Xr0YwgQT msfNSSuy1Rvzbvq51zc7JwXTmgDFZ4+31rEOX/6rdPSctj3O4zS3M6kcpBIY16y0 HggditE+LJn/gkgGsgOfw5iewiTDj73p7WFulIBUrCf/kRPnkOt7bDaS9vyHqDNB XOQG6B6e/R5D9GkZQfXcJfy54xk7p/q8z9gEFzRikUOaBTRJZNXVxz1MBajVAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUzOYHJHfRXrUBr8T13DYFg3rZWv8wHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUHMAuGgY1yc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDMwMzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMC5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH ACoOjwLwCDANBgkqhkiG9w0BAQsFAAOCAQEACg616ram/bzZFch40AVV9mxL9Gqp Xy5hhKFcm5fUzk+FJqrm8M7Zpe796bpegTwC5fOEDW6GNFlAKsIm13blwIqJvr2v cUcv9293GVKDVyl69DccvMkTlyvehx0L6YhiWu+OSRjal5cwlfkoy1bPcZcO9DQ2 x33YxNfwPHpzbZeTDTTf9a2J1isHzuGexYDGWjbjC7suvtzBfgCaJYya6gTPhOn7 xkVAIpAlhsD4NBg8utdYLTzHApO9RCg67/gasjYOeWeqQ/zAkXz0tFxx7R4U5eHj FDMrSjwvc9JYTBhlkW8g2zMhpd5Fmpl8ZvupSs2VOOTJMsGjgVg1h5hqiw== -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:12 2026 by rpki-client