This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035373a3a2f34382d3438203d3e2030.roa File: 326130653a386630323a663035373a3a2f34382d3438203d3e2030.roa (raw, json) Hash identifier: njfdmc7bB2u1Z0gjqHMQhp7pzO9UZSS/mQH/5jJ2TLI= Subject key identifier: 9C:B8:AD:4E:0E:80:BE:B7:77:D4:62:60:F7:47:A8:7C:06:D6:99:02 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 103DEB53EAB804603260793F5915C48AD19184EB Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035373a3a2f34382d3438203d3e2030.roa Signing time: Tue 30 Dec 2025 19:40:49 +0000 ROA not before: Tue 30 Dec 2025 19:35:49 +0000 ROA not after: Tue 29 Dec 2026 19:40:49 +0000 asID: 0 IP address blocks: 2a0e:8f02:f057::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:3d:eb:53:ea:b8:04:60:32:60:79:3f:59:15:c4:8a:d1:91:84:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 30 19:35:49 2025 GMT Not After : Dec 29 19:40:49 2026 GMT Subject: CN=9CB8AD4E0E80BEB777D46260F747A87C06D69902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ab:1d:24:5c:ae:66:fb:69:a8:f4:ce:5c:7c: dc:b7:f2:39:cc:fd:07:27:d1:f8:0b:08:c8:b2:78: f8:ab:e5:08:98:28:8c:76:2c:b0:82:ce:9c:50:72: 35:cf:41:bd:d0:4c:e9:8f:f6:3e:f8:0d:2e:13:b0: d6:f8:d1:8a:5d:de:33:19:21:39:4f:28:3a:9a:87: e2:8c:4c:5a:c7:2e:75:39:47:f8:99:77:7b:84:64: af:fb:7c:9d:ab:2e:55:27:63:e8:a0:c9:d0:46:89: 7c:1c:c3:bd:4a:f6:7c:c7:dc:0c:fc:f9:ff:94:43: 33:4a:8a:ee:5d:c1:45:03:0c:80:22:d3:5c:ac:a0: b7:05:06:fb:eb:32:06:02:f4:22:b8:48:35:a7:11: 74:d1:9b:53:cd:ac:9a:05:4e:f0:22:b5:f6:7a:98: 52:b3:fe:58:af:1f:7e:09:a1:ee:69:b6:2f:6e:84: 23:0d:4a:ec:11:01:eb:37:ba:cb:d7:32:21:91:12: 1b:d2:f3:63:47:2f:6f:66:ae:b8:0f:9b:95:53:f2: 94:eb:ec:10:8e:f5:61:76:4f:8b:22:03:4c:4d:aa: c0:dd:02:60:f5:20:02:48:9f:0b:64:16:ec:57:36: 8c:7b:d4:17:15:d2:b3:4b:35:6a:bb:6e:12:34:db: 32:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B8:AD:4E:0E:80:BE:B7:77:D4:62:60:F7:47:A8:7C:06:D6:99:02 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035373a3a2f34382d3438203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f057::/48 Signature Algorithm: sha256WithRSAEncryption 4d:ec:1e:95:56:0f:67:3b:25:43:35:ac:49:94:2e:fc:86:df: 04:03:30:02:0d:8e:2a:ff:bf:0c:09:24:b4:70:8c:55:a0:89: 24:91:28:cf:80:65:5b:4d:9a:fd:ee:5f:1c:80:90:eb:5d:d5: aa:ea:67:1f:94:26:d8:4a:15:c6:50:8f:ab:38:9b:88:4a:bb: 3d:0d:33:b2:76:d6:a1:51:1a:71:2e:be:f6:08:83:4f:76:30: d4:db:4e:d3:e4:3d:a5:ab:f1:3f:2d:73:8d:f6:69:c4:e2:2d: ac:89:dc:6d:91:18:b2:8f:22:c8:3d:74:e5:07:00:37:28:2e: 8a:14:c7:a8:2c:8a:06:44:44:d3:f8:f8:49:eb:d4:9d:d4:19: 17:4c:05:cd:d4:00:b9:85:2a:c8:30:98:e2:ab:71:fe:3e:b8: ad:d2:fd:6c:95:92:18:39:e7:b4:25:98:eb:08:63:d6:63:8f: 65:32:35:b0:87:06:a1:54:58:a1:44:f7:30:cd:6b:e0:cc:ac: 6f:4b:be:f5:a6:22:f2:93:30:64:a7:03:b4:39:b5:ba:12:db: 38:af:cb:04:ce:99:3d:7b:87:ec:63:2d:07:8d:73:12:1d:65: fd:8f:d1:df:ce:e5:4e:14:dc:19:42:0d:73:89:79:65:16:73: cb:1b:3d:f5 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUED3rU+q4BGAyYHk/WRXEitGRhOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMzAxOTM1NDlaFw0yNjEyMjkxOTQwNDlaMDMxMTAvBgNV BAMTKDlDQjhBRDRFMEU4MEJFQjc3N0Q0NjI2MEY3NDdBODdDMDZENjk5MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnqx0kXK5m+2mo9M5cfNy38jnM /Qcn0fgLCMiyePir5QiYKIx2LLCCzpxQcjXPQb3QTOmP9j74DS4TsNb40Ypd3jMZ ITlPKDqah+KMTFrHLnU5R/iZd3uEZK/7fJ2rLlUnY+igydBGiXwcw71K9nzH3Az8 +f+UQzNKiu5dwUUDDIAi01ysoLcFBvvrMgYC9CK4SDWnEXTRm1PNrJoFTvAitfZ6 mFKz/livH34Joe5pti9uhCMNSuwRAes3usvXMiGREhvS82NHL29mrrgPm5VT8pTr 7BCO9WF2T4siA0xNqsDdAmD1IAJInwtkFuxXNox71BcV0rNLNWq7bhI02zJJAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUnLitTg6Avrd31GJg90eofAbWmQIwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUHMAuGgY1yc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM1MzczYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMC5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH ACoOjwLwVzANBgkqhkiG9w0BAQsFAAOCAQEATewelVYPZzslQzWsSZQu/IbfBAMw Ag2OKv+/DAkktHCMVaCJJJEoz4BlW02a/e5fHICQ613VqupnH5Qm2EoVxlCPqzib iEq7PQ0zsnbWoVEacS6+9giDT3Yw1NtO0+Q9pavxPy1zjfZpxOItrIncbZEYso8i yD105QcANyguihTHqCyKBkRE0/j4SevUndQZF0wFzdQAuYUqyDCY4qtx/j64rdL9 bJWSGDnntCWY6whj1mOPZTI1sIcGoVRYoUT3MM1r4Mysb0u+9aYi8pMwZKcDtDm1 uhLbOK/LBM6ZPXuH7GMtB41zEh1l/Y/R387lThTcGUINc4l5ZRZzyxs99Q== -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:12 2026 by rpki-client