This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663031343a3a2f34382d3438203d3e2030.roa File: 326130653a386630323a663031343a3a2f34382d3438203d3e2030.roa (raw, json) Hash identifier: obP9cOFgkCC9L90//Sq40HdlSGiRlC5BZcMbttXxCEE= Subject key identifier: D1:8F:DE:5F:31:B3:D9:8D:58:24:8B:32:DE:13:F1:C6:44:3E:F4:52 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 443F9CD6988A82FA6B6636F934043A1886380B85 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663031343a3a2f34382d3438203d3e2030.roa Signing time: Tue 30 Dec 2025 19:56:22 +0000 ROA not before: Tue 30 Dec 2025 19:51:22 +0000 ROA not after: Tue 29 Dec 2026 19:56:22 +0000 asID: 0 IP address blocks: 2a0e:8f02:f014::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:3f:9c:d6:98:8a:82:fa:6b:66:36:f9:34:04:3a:18:86:38:0b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 30 19:51:22 2025 GMT Not After : Dec 29 19:56:22 2026 GMT Subject: CN=D18FDE5F31B3D98D58248B32DE13F1C6443EF452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c3:75:a0:27:b1:6a:45:8b:bf:52:1b:c2:b9: 8a:65:c4:7b:93:25:6d:be:98:e3:c7:df:d0:92:05: 86:e2:4c:75:7a:8b:e8:1c:7c:c4:bb:b7:e1:80:08: ba:64:c2:6a:12:7d:c0:48:4c:0c:85:00:d6:97:7b: 2f:c9:8c:85:16:ba:37:27:be:db:97:66:34:97:59: 17:39:66:a7:1f:ac:77:31:e5:73:92:fa:c0:3d:d6: 6b:de:75:03:90:df:44:02:c9:04:4a:31:9c:f0:de: 51:a2:f1:58:97:16:83:27:f7:4a:a4:3a:f5:76:18: 7c:91:bc:ea:ca:0f:4b:bb:08:9a:19:95:49:f3:aa: 70:ce:50:9c:ac:9c:4a:81:05:8d:6f:44:45:1d:6e: 72:2a:3f:61:47:3c:56:36:1b:49:89:48:0e:d3:6e: a7:76:bd:54:b7:80:ba:3e:b5:30:cc:51:98:c0:f3: 13:4d:32:23:49:d7:6b:26:19:1b:34:d5:d6:d5:6d: 7d:50:e9:d8:87:06:61:0a:4a:4f:42:f9:39:87:41: 86:92:17:d8:cc:3b:4d:22:b5:cc:dc:3f:60:86:67: 03:2d:30:68:05:00:32:e6:43:59:73:22:f6:f6:03: e8:65:4e:db:a5:40:e4:cb:12:85:ec:8b:03:ae:10: 01:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8F:DE:5F:31:B3:D9:8D:58:24:8B:32:DE:13:F1:C6:44:3E:F4:52 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663031343a3a2f34382d3438203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f014::/48 Signature Algorithm: sha256WithRSAEncryption a8:42:92:a5:d1:c7:69:30:76:a7:ff:db:52:60:57:2f:83:28: e9:0d:72:c8:25:1d:fa:62:f0:88:e9:5a:3b:1f:06:15:ee:8f: 4a:c1:dc:9a:61:be:c9:a1:ae:5e:2c:54:29:66:9f:7f:1a:c9: 19:b2:f7:64:6b:41:c7:b5:43:d7:43:4c:af:95:86:ba:af:e0: 88:1d:29:0b:20:7d:2e:e6:12:f8:4e:d1:51:c5:f3:fb:63:27: 46:27:ac:b7:ea:23:1e:56:f8:4d:3c:6d:45:d9:4d:2b:16:cd: 7e:91:1f:17:b7:26:85:e6:d0:93:33:56:41:43:b2:4d:79:42: 43:b7:2f:26:84:5e:be:ef:70:b5:27:44:6e:32:3c:09:ae:ae: 56:f4:37:0b:00:8b:af:a2:16:93:5b:c7:3b:3a:bb:d9:d3:8f: 93:b2:db:4e:23:3c:5b:a8:73:a5:28:13:6e:eb:22:f9:55:9c: 37:e5:49:73:cc:a0:b4:ee:3d:62:2a:80:14:10:27:7b:8c:8f: c9:52:e1:e0:14:fc:4c:7a:cf:ed:55:b2:db:4e:cc:c2:50:30: 89:0e:c5:77:f2:15:ba:cb:87:75:e0:7a:28:5b:e2:b4:29:1c: 59:9d:55:eb:45:69:74:1e:06:33:d9:8a:da:30:a2:d4:bd:fd: a2:3b:f8:d7 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIURD+c1piKgvprZjb5NAQ6GIY4C4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMzAxOTUxMjJaFw0yNjEyMjkxOTU2MjJaMDMxMTAvBgNV BAMTKEQxOEZERTVGMzFCM0Q5OEQ1ODI0OEIzMkRFMTNGMUM2NDQzRUY0NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgw3WgJ7FqRYu/UhvCuYplxHuT JW2+mOPH39CSBYbiTHV6i+gcfMS7t+GACLpkwmoSfcBITAyFANaXey/JjIUWujcn vtuXZjSXWRc5ZqcfrHcx5XOS+sA91mvedQOQ30QCyQRKMZzw3lGi8ViXFoMn90qk OvV2GHyRvOrKD0u7CJoZlUnzqnDOUJysnEqBBY1vREUdbnIqP2FHPFY2G0mJSA7T bqd2vVS3gLo+tTDMUZjA8xNNMiNJ12smGRs01dbVbX1Q6diHBmEKSk9C+TmHQYaS F9jMO00itczcP2CGZwMtMGgFADLmQ1lzIvb2A+hlTtulQOTLEoXsiwOuEAE1AgMB AAGjggJBMIICPTAdBgNVHQ4EFgQU0Y/eXzGz2Y1YJIsy3hPxxkQ+9FIwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUHMAuGgY1yc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDMxMzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMC5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH ACoOjwLwFDANBgkqhkiG9w0BAQsFAAOCAQEAqEKSpdHHaTB2p//bUmBXL4Mo6Q1y yCUd+mLwiOlaOx8GFe6PSsHcmmG+yaGuXixUKWaffxrJGbL3ZGtBx7VD10NMr5WG uq/giB0pCyB9LuYS+E7RUcXz+2MnRiest+ojHlb4TTxtRdlNKxbNfpEfF7cmhebQ kzNWQUOyTXlCQ7cvJoRevu9wtSdEbjI8Ca6uVvQ3CwCLr6IWk1vHOzq72dOPk7Lb TiM8W6hzpSgTbusi+VWcN+VJc8ygtO49YiqAFBAne4yPyVLh4BT8THrP7VWy207M wlAwiQ7Fd/IVusuHdeB6KFvitCkcWZ1V60VpdB4GM9mK2jCi1L39ojv41w== -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:08 2026 by rpki-client