This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663031313a3a2f34382d3438203d3e2030.roa File: 326130653a386630323a663031313a3a2f34382d3438203d3e2030.roa (raw, json) Hash identifier: Hsn319vpjP1SAymVY2rMLikxgngH0+QVpoQw3/5SnTA= Subject key identifier: BC:F4:88:B3:7C:60:8E:91:B5:82:FE:DC:0C:16:5B:34:BE:58:13:DC Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 096DCD21E91DDD2AD23BE61F1D046090989FF7D5 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663031313a3a2f34382d3438203d3e2030.roa Signing time: Tue 30 Dec 2025 19:57:31 +0000 ROA not before: Tue 30 Dec 2025 19:52:31 +0000 ROA not after: Tue 29 Dec 2026 19:57:31 +0000 asID: 0 IP address blocks: 2a0e:8f02:f011::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:6d:cd:21:e9:1d:dd:2a:d2:3b:e6:1f:1d:04:60:90:98:9f:f7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 30 19:52:31 2025 GMT Not After : Dec 29 19:57:31 2026 GMT Subject: CN=BCF488B37C608E91B582FEDC0C165B34BE5813DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6a:51:36:48:6b:8b:4f:8b:80:2b:87:c6:f0: cf:6e:63:71:9e:bf:02:0c:2c:03:ab:16:40:7a:76: 75:38:be:29:fb:82:57:67:86:6e:7c:62:d2:11:1e: 84:f7:24:39:0e:5b:14:7a:12:5d:13:d7:10:be:d4: d5:fd:fb:ca:05:59:8c:bb:62:ff:e0:d1:86:01:1a: 92:9f:51:c7:41:1f:bb:4c:0b:54:fa:c6:e0:e5:11: d3:be:2b:3e:57:13:21:ec:04:4f:5b:76:71:17:3c: c7:00:a7:1d:8d:cc:c4:ab:6f:a4:89:f3:9d:78:0f: 2c:8a:37:4f:93:f5:46:0b:fa:0f:21:53:35:dd:10: 53:89:20:4b:80:8d:72:87:54:1d:20:12:ce:0d:1a: 7f:84:4d:f1:8b:c2:8d:34:7d:ed:ee:87:3c:33:60: 8d:74:d4:86:61:f8:d6:0c:70:db:3d:61:82:05:2a: 51:f5:fc:35:b0:b5:13:d3:41:12:bd:3f:bc:5c:30: 73:ab:78:0d:19:29:84:eb:7c:c3:21:da:48:83:eb: dd:23:41:18:4a:ca:4d:50:95:98:b4:e1:bb:b9:0c: 16:5a:02:fc:8a:a0:fe:f3:b6:dc:69:74:dc:1b:34: 43:ff:1a:40:5e:ea:b6:a9:72:a4:ed:41:0b:63:3a: 74:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F4:88:B3:7C:60:8E:91:B5:82:FE:DC:0C:16:5B:34:BE:58:13:DC X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663031313a3a2f34382d3438203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f011::/48 Signature Algorithm: sha256WithRSAEncryption 5e:40:e0:2d:a8:24:88:d5:6e:b7:99:e6:b8:3a:fd:66:d0:47: cb:d8:76:67:51:b2:f3:a1:6f:9b:f4:29:1c:04:0c:ab:84:65: 1d:4d:3a:8e:66:b3:03:ea:cd:47:bf:5d:10:17:e5:60:7a:92: 5e:63:d0:f8:bd:d1:30:99:58:7c:9b:08:f4:c8:c7:33:b9:4d: ab:48:1e:63:dd:3a:1e:16:58:71:4d:cb:32:7c:65:f0:0f:11: 4d:25:07:26:c7:29:3b:ea:6d:34:b3:62:3e:3c:4e:a5:52:5c: 62:e7:68:11:83:c5:60:85:3b:60:74:78:68:8f:85:89:7c:bb: 37:47:2c:ec:66:0d:f2:90:e7:90:21:3d:26:f7:39:d3:82:02: 07:1f:26:f1:ad:64:7d:66:42:35:22:a8:c3:b8:85:74:1b:ed: 0e:98:af:2e:9c:fa:de:b0:92:ea:b9:8a:c8:8f:76:57:85:55: ca:26:79:a2:1e:1a:f3:87:dc:64:c5:b2:8b:97:17:3c:22:90: 57:a7:6f:fe:5e:4e:c4:b5:8c:ef:ba:4e:b2:49:ed:d0:1f:83: af:0b:57:3e:39:45:39:84:d8:a3:04:88:bc:d7:c0:b8:ee:af: 7c:18:5d:35:b5:c0:e7:8d:6f:45:04:42:14:20:07:be:d2:04: 6d:8f:30:29 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUCW3NIekd3SrSO+YfHQRgkJif99UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMzAxOTUyMzFaFw0yNjEyMjkxOTU3MzFaMDMxMTAvBgNV BAMTKEJDRjQ4OEIzN0M2MDhFOTFCNTgyRkVEQzBDMTY1QjM0QkU1ODEzREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUalE2SGuLT4uAK4fG8M9uY3Ge vwIMLAOrFkB6dnU4vin7gldnhm58YtIRHoT3JDkOWxR6El0T1xC+1NX9+8oFWYy7 Yv/g0YYBGpKfUcdBH7tMC1T6xuDlEdO+Kz5XEyHsBE9bdnEXPMcApx2NzMSrb6SJ 8514DyyKN0+T9UYL+g8hUzXdEFOJIEuAjXKHVB0gEs4NGn+ETfGLwo00fe3uhzwz YI101IZh+NYMcNs9YYIFKlH1/DWwtRPTQRK9P7xcMHOreA0ZKYTrfMMh2kiD690j QRhKyk1QlZi04bu5DBZaAvyKoP7zttxpdNwbNEP/GkBe6rapcqTtQQtjOnRrAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUvPSIs3xgjpG1gv7cDBZbNL5YE9wwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUHMAuGgY1yc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDMxMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMC5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH ACoOjwLwETANBgkqhkiG9w0BAQsFAAOCAQEAXkDgLagkiNVut5nmuDr9ZtBHy9h2 Z1Gy86Fvm/QpHAQMq4RlHU06jmazA+rNR79dEBflYHqSXmPQ+L3RMJlYfJsI9MjH M7lNq0geY906HhZYcU3LMnxl8A8RTSUHJscpO+ptNLNiPjxOpVJcYudoEYPFYIU7 YHR4aI+FiXy7N0cs7GYN8pDnkCE9Jvc504ICBx8m8a1kfWZCNSKow7iFdBvtDpiv Lpz63rCS6rmKyI92V4VVyiZ5oh4a84fcZMWyi5cXPCKQV6dv/l5OxLWM77pOsknt 0B+DrwtXPjlFOYTYowSIvNfAuO6vfBhdNbXA541vRQRCFCAHvtIEbY8wKQ== -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:07 2026 by rpki-client