This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035613a3a2f34382d3438203d3e2038303735.roa File: 326130653a386630323a663035613a3a2f34382d3438203d3e2038303735.roa (raw, json) Hash identifier: Ez2E/uch+T/3BpzRGTphtaZkGlomTkJSw4AzP0qioys= Subject key identifier: 75:BF:81:8B:14:89:3E:AF:98:EB:A5:1F:55:AA:33:EA:C7:A2:A0:6A Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 0590BC881EF5D1C1AEFCC26C3A60E4045DEC076D Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035613a3a2f34382d3438203d3e2038303735.roa Signing time: Thu 11 Dec 2025 01:29:01 +0000 ROA not before: Thu 11 Dec 2025 01:24:01 +0000 ROA not after: Thu 10 Dec 2026 01:29:01 +0000 asID: 8075 IP address blocks: 2a0e:8f02:f05a::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:90:bc:88:1e:f5:d1:c1:ae:fc:c2:6c:3a:60:e4:04:5d:ec:07:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:24:01 2025 GMT Not After : Dec 10 01:29:01 2026 GMT Subject: CN=75BF818B14893EAF98EBA51F55AA33EAC7A2A06A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:23:9a:d5:a4:78:08:f0:13:16:af:fd:1a:6f: 4e:39:3f:34:b1:69:b8:9e:db:b4:30:4c:32:d2:68: 45:51:0b:5d:ea:40:79:d5:c4:c7:c2:50:37:c7:bc: 47:dc:b0:66:c1:37:27:96:78:bc:0a:92:6e:95:b7: e5:04:eb:57:24:4a:5e:58:8d:a8:dd:23:b9:f8:56: 85:c1:60:85:27:31:9d:a2:d0:52:d9:25:48:95:13: 2a:ae:ce:69:c6:84:d1:74:74:6e:53:a0:bc:f9:29: 8c:fe:6c:75:d1:e9:0e:13:9a:e5:3f:22:27:fe:5d: d0:af:3a:c9:ad:78:65:9b:ec:f5:13:ae:88:9c:e6: ae:71:8d:ab:d5:82:14:fc:f3:1b:6d:fd:04:e4:4d: 3b:1b:7a:d6:4f:cb:41:62:08:16:04:3b:37:ff:93: fa:b8:eb:a9:00:cd:09:12:c4:bc:99:e2:77:5e:0b: c0:58:39:c5:4f:8a:6e:ba:4a:13:03:63:f8:4d:d7: 54:89:b2:ec:45:49:f8:71:a3:b1:2d:fa:48:24:95: 21:b5:03:5a:59:0b:5d:ae:8b:28:5d:fd:c9:e2:b2: f0:72:b6:74:ba:b9:69:d9:53:6b:23:02:f5:00:c8: 6e:90:d9:c0:f8:04:e8:50:54:7d:22:46:10:6b:f2: 75:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BF:81:8B:14:89:3E:AF:98:EB:A5:1F:55:AA:33:EA:C7:A2:A0:6A X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035613a3a2f34382d3438203d3e2038303735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f05a::/48 Signature Algorithm: sha256WithRSAEncryption 2c:a4:6e:72:d2:f3:1d:18:96:1b:fd:92:fc:21:64:18:a3:57: 7a:bb:34:11:59:e2:ea:0b:91:4f:14:db:a6:ca:09:34:a6:10: 1d:53:f7:af:64:85:60:58:32:8d:55:1c:8c:72:ba:9a:a3:18: d3:f7:df:b6:21:f6:57:0f:df:b1:68:11:8c:38:04:e7:74:59: 98:0b:f7:b3:3f:e1:da:e4:e8:81:ae:58:3b:da:3c:8e:8f:d8: d5:ff:46:39:48:68:d8:33:2a:24:cd:ee:c7:63:fa:99:d4:92: 2c:86:60:b5:ac:f8:bc:3a:f7:3e:45:0e:ab:d0:2b:36:32:02: e9:aa:78:91:cb:bb:c7:f9:51:c7:5f:60:20:2f:d8:49:4d:58: 50:3b:0e:13:e3:c3:d1:02:ba:5f:80:00:bc:20:50:62:8f:ca: f4:55:05:1b:f9:82:2f:4b:f1:c3:24:be:ec:61:83:3b:58:14: 6b:05:5b:bb:2b:7e:80:b0:34:8a:bd:1c:81:d7:09:23:53:4f: e8:6a:dc:39:50:a4:5b:f5:4f:e2:dc:37:82:bb:5e:21:b4:1b: 1b:dd:1f:b1:b0:e5:06:a1:ec:72:7d:5d:12:60:c8:b7:6c:79: 6a:ac:a8:99:42:cb:bf:6f:65:b7:aa:cc:52:3a:4e:70:31:cb: 4c:8a:c7:3d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBZC8iB710cGu/MJsOmDkBF3sB20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTI0MDFaFw0yNjEyMTAwMTI5MDFaMDMxMTAvBgNV BAMTKDc1QkY4MThCMTQ4OTNFQUY5OEVCQTUxRjU1QUEzM0VBQzdBMkEwNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2I5rVpHgI8BMWr/0ab045PzSx abie27QwTDLSaEVRC13qQHnVxMfCUDfHvEfcsGbBNyeWeLwKkm6Vt+UE61ckSl5Y jajdI7n4VoXBYIUnMZ2i0FLZJUiVEyquzmnGhNF0dG5ToLz5KYz+bHXR6Q4TmuU/ Iif+XdCvOsmteGWb7PUTroic5q5xjavVghT88xtt/QTkTTsbetZPy0FiCBYEOzf/ k/q466kAzQkSxLyZ4ndeC8BYOcVPim66ShMDY/hN11SJsuxFSfhxo7Et+kgklSG1 A1pZC12uiyhd/cnisvBytnS6uWnZU2sjAvUAyG6Q2cD4BOhQVH0iRhBr8nVdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUdb+BixSJPq+Y66UfVaoz6seioGowHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIGzBggrBgEFBQcBCwSBpjCBozCBoAYIKwYBBQUHMAuGgZNyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM1NjEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzODMwMzczNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC AAIwCQMHACoOjwLwWjANBgkqhkiG9w0BAQsFAAOCAQEALKRuctLzHRiWG/2S/CFk GKNXers0EVni6guRTxTbpsoJNKYQHVP3r2SFYFgyjVUcjHK6mqMY0/fftiH2Vw/f sWgRjDgE53RZmAv3sz/h2uToga5YO9o8jo/Y1f9GOUho2DMqJM3ux2P6mdSSLIZg taz4vDr3PkUOq9ArNjIC6ap4kcu7x/lRx19gIC/YSU1YUDsOE+PD0QK6X4AAvCBQ Yo/K9FUFG/mCL0vxwyS+7GGDO1gUawVbuyt+gLA0ir0cgdcJI1NP6GrcOVCkW/VP 4tw3grteIbQbG90fsbDlBqHscn1dEmDIt2x5aqyomULLv29lt6rMUjpOcDHLTIrH PQ== -----END CERTIFICATE-----Generated at Fri Dec 12 14:31:20 2025 by rpki-client