This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035393a3a2f34382d3438203d3e20323035323335.roa File: 326130653a386630323a663035393a3a2f34382d3438203d3e20323035323335.roa (raw, json) Hash identifier: CWcQNSIGpripy8s4Nf/cYhkLzX7w0WzWCHT/Vic1htY= Subject key identifier: 34:45:0C:72:55:99:90:38:58:A5:0B:4F:39:3B:6A:7A:EB:EA:5A:E3 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 06F8FA3CD4B1F0EF998C0AEAC2B82A8E8BD38E4E Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035393a3a2f34382d3438203d3e20323035323335.roa Signing time: Thu 11 Dec 2025 01:29:07 +0000 ROA not before: Thu 11 Dec 2025 01:24:07 +0000 ROA not after: Thu 10 Dec 2026 01:29:07 +0000 asID: 205235 IP address blocks: 2a0e:8f02:f059::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f8:fa:3c:d4:b1:f0:ef:99:8c:0a:ea:c2:b8:2a:8e:8b:d3:8e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:24:07 2025 GMT Not After : Dec 10 01:29:07 2026 GMT Subject: CN=34450C725599903858A50B4F393B6A7AEBEA5AE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5a:9c:45:4c:ca:cb:af:3d:d1:66:54:42:ef: 7b:81:34:5b:1a:9e:1d:9e:30:fd:cc:6c:8c:49:e0: 69:d6:8e:3b:66:c8:02:3c:15:4f:95:8b:9e:31:5f: 5a:6a:0c:e3:9e:a4:a1:bc:13:64:9d:4f:58:cf:7c: f6:6e:3d:85:d8:b5:35:83:4c:16:34:61:47:e9:d9: 26:12:ff:6e:f5:96:f5:e5:9c:ee:23:09:46:48:53: af:43:c3:12:b6:3b:f4:ae:4f:b2:f7:4c:32:58:3f: 69:a0:89:61:ef:cb:7f:b7:10:7f:ed:9b:25:59:49: b5:93:5f:5b:aa:46:86:fe:2d:50:dc:fc:35:9c:3f: 94:21:0d:8b:5a:7e:8f:b1:10:40:26:df:01:33:92: e0:0a:59:eb:e8:04:14:64:49:11:f6:87:27:03:0b: 41:88:d8:ad:f8:52:57:34:9c:61:e5:6e:1d:d4:81: ad:92:63:1d:6b:86:01:6b:e4:ab:40:48:76:82:f6: e4:0f:9e:b4:91:4e:56:0d:03:27:50:db:35:e3:31: ea:f8:2c:f5:a3:51:73:25:d0:4f:dc:72:e2:31:0f: f5:3e:1d:15:f1:a3:14:9c:68:08:aa:c8:97:d2:42: b1:46:cd:a4:af:2a:b8:d9:83:1d:7d:58:03:f3:14: 2e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:45:0C:72:55:99:90:38:58:A5:0B:4F:39:3B:6A:7A:EB:EA:5A:E3 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035393a3a2f34382d3438203d3e20323035323335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f059::/48 Signature Algorithm: sha256WithRSAEncryption 1f:f2:4a:67:61:63:0f:6c:9f:eb:1c:eb:a9:7b:36:db:a6:30: 2d:86:36:17:ee:8a:96:56:4b:63:a7:fa:37:7b:e3:11:20:9b: b8:49:cd:20:d5:f9:d3:88:c5:2b:69:50:32:6f:c2:1f:91:96: 09:97:39:03:49:3f:4c:f9:5e:4b:e4:f4:e1:6e:ba:ac:8d:31: 48:1d:57:13:35:87:4b:ca:ff:97:11:b4:dd:c0:42:f1:7d:32: 85:4e:b5:a2:37:52:c4:1d:68:ac:a1:ad:2b:bc:c5:1d:2d:4c: 90:2c:45:2a:db:57:8a:57:22:ce:ee:c3:b8:47:0f:86:6d:6b: a4:42:b0:b2:51:18:83:ca:9e:a8:47:05:47:16:62:db:9c:f4: 60:99:4c:ec:8c:d2:08:ee:a3:b1:48:2c:8c:4d:c6:7f:70:94: 7d:8e:22:bb:57:c8:cb:35:b4:3d:26:70:da:90:a0:b2:84:3a: bb:1f:49:9b:16:78:fb:21:8c:b6:e1:05:ae:42:89:b1:f3:ba: 3b:2f:47:99:65:bc:94:26:4e:4c:f0:20:b8:07:46:6b:60:4d: ed:54:87:ba:c4:0c:28:10:9b:fa:8f:6e:77:70:ee:15:11:b4: 62:4f:0f:fa:5f:12:04:1e:97:9d:64:aa:61:2d:50:e4:98:e9: bf:74:fe:32 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUBvj6PNSx8O+ZjArqwrgqjovTjk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTI0MDdaFw0yNjEyMTAwMTI5MDdaMDMxMTAvBgNV BAMTKDM0NDUwQzcyNTU5OTkwMzg1OEE1MEI0RjM5M0I2QTdBRUJFQTVBRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGWpxFTMrLrz3RZlRC73uBNFsa nh2eMP3MbIxJ4GnWjjtmyAI8FU+Vi54xX1pqDOOepKG8E2SdT1jPfPZuPYXYtTWD TBY0YUfp2SYS/271lvXlnO4jCUZIU69DwxK2O/SuT7L3TDJYP2mgiWHvy3+3EH/t myVZSbWTX1uqRob+LVDc/DWcP5QhDYtafo+xEEAm3wEzkuAKWevoBBRkSRH2hycD C0GI2K34Ulc0nGHlbh3Uga2SYx1rhgFr5KtASHaC9uQPnrSRTlYNAydQ2zXjMer4 LPWjUXMl0E/ccuIxD/U+HRXxoxScaAiqyJfSQrFGzaSvKrjZgx19WAPzFC7dAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUNEUMclWZkDhYpQtPOTtqeuvqWuMwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM1MzkzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzUzMjMzMzUu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8FkwDQYJKoZIhvcNAQELBQADggEBAB/ySmdhYw9sn+sc 66l7NtumMC2GNhfuipZWS2On+jd74xEgm7hJzSDV+dOIxStpUDJvwh+RlgmXOQNJ P0z5Xkvk9OFuuqyNMUgdVxM1h0vK/5cRtN3AQvF9MoVOtaI3UsQdaKyhrSu8xR0t TJAsRSrbV4pXIs7uw7hHD4Zta6RCsLJRGIPKnqhHBUcWYtuc9GCZTOyM0gjuo7FI LIxNxn9wlH2OIrtXyMs1tD0mcNqQoLKEOrsfSZsWePshjLbhBa5CibHzujsvR5ll vJQmTkzwILgHRmtgTe1Uh7rEDCgQm/qPbndw7hURtGJPD/pfEgQel51kqmEtUOSY 6b90/jI= -----END CERTIFICATE-----Generated at Fri Dec 12 14:31:59 2025 by rpki-client