This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663033323a3a2f34382d3438203d3e2030.roa File: 326130653a386630323a663033323a3a2f34382d3438203d3e2030.roa (raw, json) Hash identifier: 0SNjGT3FE4qwY0N7Om+oXmskvlW5FVflR1RtYQQIklA= Subject key identifier: BE:72:86:5E:3A:59:F6:B0:68:FF:BB:5F:8A:53:D0:66:D5:1C:60:9E Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 38E6C9D066C5BB42B2AFBEC4C7D190264EA2891F Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663033323a3a2f34382d3438203d3e2030.roa Signing time: Tue 30 Dec 2025 19:45:20 +0000 ROA not before: Tue 30 Dec 2025 19:40:20 +0000 ROA not after: Tue 29 Dec 2026 19:45:20 +0000 asID: 0 IP address blocks: 2a0e:8f02:f032::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e6:c9:d0:66:c5:bb:42:b2:af:be:c4:c7:d1:90:26:4e:a2:89:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 30 19:40:20 2025 GMT Not After : Dec 29 19:45:20 2026 GMT Subject: CN=BE72865E3A59F6B068FFBB5F8A53D066D51C609E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9a:fe:6a:c9:0d:55:b2:13:fb:12:1b:ee:6d: af:a3:5d:d2:ea:13:0f:63:55:af:4d:f5:3c:dd:7e: 45:7e:28:ec:bb:15:72:b2:19:59:b0:3a:c7:fc:f5: ef:01:38:2b:ba:f8:29:6d:08:6c:5f:94:f8:91:8e: 07:b9:a5:2c:09:e7:08:1c:65:2a:2a:37:39:57:d5: 21:c1:5a:50:2d:29:1d:39:21:67:3d:bc:d0:34:f3: e4:a4:a5:8d:f7:4a:38:4e:3c:88:17:fa:73:26:6b: de:d9:b4:9a:ac:9e:9d:f9:1a:d0:17:bd:dc:b9:93: a2:a7:3c:7b:06:8c:9f:75:ac:82:ee:18:d2:52:75: 11:7d:d8:ac:3c:61:5c:65:8c:8b:f0:0c:b4:5c:bb: bd:c8:4a:31:87:7d:e6:ad:7b:9c:09:eb:88:67:58: fb:92:ff:84:d6:5f:95:ec:e3:6e:10:e6:71:3c:7c: 9c:34:ec:0d:62:3c:ea:f9:df:0a:f8:71:3b:69:4b: 9c:c7:7f:ab:f8:cf:19:29:3e:43:3e:40:c1:fd:a4: 18:1d:90:fa:6c:7e:77:8e:e6:f9:45:bb:52:20:a6: fd:92:9f:f7:34:69:d1:d5:b9:b2:19:56:da:09:56: 92:7f:a7:37:8e:a2:1b:cf:20:f2:b4:ed:b8:5f:78: b0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:72:86:5E:3A:59:F6:B0:68:FF:BB:5F:8A:53:D0:66:D5:1C:60:9E X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663033323a3a2f34382d3438203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f032::/48 Signature Algorithm: sha256WithRSAEncryption 37:01:13:e8:26:20:a8:66:9a:75:8d:9d:25:35:5d:c0:10:2e: 90:60:d4:6d:64:16:68:0f:02:ba:6a:3a:c0:5b:62:73:d6:56: cf:88:95:e7:e7:17:f5:7e:c3:bb:b0:51:74:e2:72:73:1b:64: 44:33:e4:cb:1a:5b:48:e4:60:89:f0:81:80:b6:2b:ca:46:e8: 70:ef:de:83:d0:bc:49:be:b5:27:31:d3:38:cb:17:1e:34:c5: 16:0f:1e:01:d6:53:24:db:66:ab:28:5c:65:04:1c:a7:23:d5: 91:4d:d7:0c:b3:e0:29:1c:4d:2e:f5:6b:03:f2:3a:67:61:0b: 3e:5d:2a:fa:20:bf:51:c8:8b:29:0c:fd:ef:fd:78:6f:92:53: 77:ce:c2:5c:09:92:c2:ce:8c:1c:f2:97:1a:69:61:87:cf:02: d6:ae:59:11:ed:df:ef:70:cc:be:30:dd:5c:68:09:b5:8e:1f: 31:fa:b2:ce:3e:6f:d3:70:4c:0d:aa:c9:7c:c4:39:4d:02:2b: 54:9f:33:fe:11:bd:e0:2a:fe:cb:77:06:40:9a:69:40:dd:0d: 84:1a:2d:9c:4a:2e:28:2a:fb:c3:5b:f4:bc:90:58:27:04:84: 4d:e6:b9:d4:07:5e:e5:16:20:15:7d:15:5f:d2:f7:1f:46:b7: 0b:92:01:ba -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUOObJ0GbFu0Kyr77Ex9GQJk6iiR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMzAxOTQwMjBaFw0yNjEyMjkxOTQ1MjBaMDMxMTAvBgNV BAMTKEJFNzI4NjVFM0E1OUY2QjA2OEZGQkI1RjhBNTNEMDY2RDUxQzYwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfmv5qyQ1VshP7Ehvuba+jXdLq Ew9jVa9N9TzdfkV+KOy7FXKyGVmwOsf89e8BOCu6+CltCGxflPiRjge5pSwJ5wgc ZSoqNzlX1SHBWlAtKR05IWc9vNA08+SkpY33SjhOPIgX+nMma97ZtJqsnp35GtAX vdy5k6KnPHsGjJ91rILuGNJSdRF92Kw8YVxljIvwDLRcu73ISjGHfeate5wJ64hn WPuS/4TWX5Xs424Q5nE8fJw07A1iPOr53wr4cTtpS5zHf6v4zxkpPkM+QMH9pBgd kPpsfneO5vlFu1Igpv2Sn/c0adHVubIZVtoJVpJ/pzeOohvPIPK07bhfeLANAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUvnKGXjpZ9rBo/7tfilPQZtUcYJ4wHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUHMAuGgY1yc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDMzMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMC5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH ACoOjwLwMjANBgkqhkiG9w0BAQsFAAOCAQEANwET6CYgqGaadY2dJTVdwBAukGDU bWQWaA8Cumo6wFtic9ZWz4iV5+cX9X7Du7BRdOJycxtkRDPkyxpbSORgifCBgLYr ykbocO/eg9C8Sb61JzHTOMsXHjTFFg8eAdZTJNtmqyhcZQQcpyPVkU3XDLPgKRxN LvVrA/I6Z2ELPl0q+iC/UciLKQz97/14b5JTd87CXAmSws6MHPKXGmlhh88C1q5Z Ee3f73DMvjDdXGgJtY4fMfqyzj5v03BMDarJfMQ5TQIrVJ8z/hG94Cr+y3cGQJpp QN0NhBotnEouKCr7w1v0vJBYJwSETea51Ade5RYgFX0VX9L3H0a3C5IBug== -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:10 2026 by rpki-client