This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035633a3a2f34382d3438203d3e20313938353538.roa File: 326130653a386630323a663035633a3a2f34382d3438203d3e20313938353538.roa (raw, json) Hash identifier: mSxQlVqmsn8G4xV+Q3GxtjMMXD9Isz6WBWTTgtI5cY8= Subject key identifier: 03:58:5E:2E:C8:23:84:4B:1D:75:75:2E:16:CD:B8:F7:11:0C:D6:72 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 2A7FB36C377817F43F5A24CDCEEE120B897BB447 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035633a3a2f34382d3438203d3e20313938353538.roa Signing time: Thu 11 Dec 2025 01:28:56 +0000 ROA not before: Thu 11 Dec 2025 01:23:56 +0000 ROA not after: Thu 10 Dec 2026 01:28:56 +0000 asID: 198558 IP address blocks: 2a0e:8f02:f05c::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:7f:b3:6c:37:78:17:f4:3f:5a:24:cd:ce:ee:12:0b:89:7b:b4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:23:56 2025 GMT Not After : Dec 10 01:28:56 2026 GMT Subject: CN=03585E2EC823844B1D75752E16CDB8F7110CD672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:11:c3:d7:ec:f5:a7:82:0e:f5:d0:ec:c6:b2: a4:a2:a6:a8:88:3d:62:dd:09:e9:ce:a3:66:48:02: b3:4e:1a:ff:95:8a:7e:43:ec:70:fe:fb:7c:8d:55: 50:9c:c0:99:f3:7f:fb:1c:fb:56:4f:75:8a:67:38: fc:09:70:45:7d:6e:d4:16:d9:8f:cf:8b:5b:36:31: 66:7e:66:40:87:40:42:90:55:38:ef:6a:a8:ed:d4: 89:7c:14:98:36:cf:ca:1b:ce:04:4e:9b:1b:cb:8f: 8f:fb:d6:6f:6c:d5:0f:df:13:7f:a2:6f:df:07:51: 65:33:75:76:d1:1c:33:73:42:b4:80:10:94:1f:9a: ae:46:8d:75:29:4f:7e:a8:cd:a5:97:f3:b9:ed:c2: 57:90:c8:67:be:6b:89:99:09:54:77:0f:27:7c:ec: 2a:72:3e:92:c9:35:f9:cb:2c:89:10:79:1f:0c:32: 48:9f:0f:fe:01:86:4b:71:7c:18:e2:f1:06:ff:f6: bf:04:a0:fa:31:b0:b9:96:eb:54:c8:24:c0:d2:38: e0:00:04:76:85:dc:7c:71:23:c4:be:57:c9:0e:40: 00:66:2d:c8:95:a6:06:28:f2:22:bc:c9:61:1f:4b: 81:19:46:f0:97:13:13:dd:a5:54:e2:4b:3b:24:10: df:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:58:5E:2E:C8:23:84:4B:1D:75:75:2E:16:CD:B8:F7:11:0C:D6:72 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035633a3a2f34382d3438203d3e20313938353538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f05c::/48 Signature Algorithm: sha256WithRSAEncryption 1d:9d:3a:62:80:5a:f8:77:5d:f3:fd:71:bf:ad:86:b2:c5:35: f0:b0:28:26:af:49:d1:50:49:a8:f1:6d:ee:cc:b6:ce:de:82: 19:9d:33:57:e6:ed:0d:81:e2:3f:ef:d0:50:4a:81:17:14:0c: 3c:34:a1:02:94:a3:0d:a3:b2:f8:2a:5a:c5:37:de:71:e4:72: 1b:fa:e4:17:8b:1d:b2:07:79:35:26:32:49:ee:08:33:37:f5: 43:f1:9c:c4:74:0f:14:d6:d7:5f:ba:68:85:28:f9:f1:d0:b1: 1c:60:a0:77:b7:a7:c4:ea:3e:5b:4b:d9:43:ac:8c:3e:5e:16: b9:79:e9:73:77:fe:d3:f1:37:b8:ec:c7:23:b3:02:e5:21:a9: b7:3e:f6:ec:35:17:33:84:d0:7a:b5:b7:25:83:dc:40:b6:79: 0b:34:59:7a:2e:45:7a:19:c6:28:eb:87:01:79:7e:34:2f:32: 1d:5d:bb:12:01:6c:d2:d8:20:15:5d:a5:38:c3:22:b8:f2:bd: 5d:44:95:68:24:11:15:c9:1d:5d:a8:ed:ba:41:3d:8e:da:84: 4e:28:b9:38:7e:1f:d0:c4:9a:52:b4:24:b2:eb:5e:74:9f:7a: 0e:18:81:05:65:f9:71:e2:62:2d:c5:93:9b:dc:60:1c:0c:b8: 9c:49:ea:47 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUKn+zbDd4F/Q/WiTNzu4SC4l7tEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIzNTZaFw0yNjEyMTAwMTI4NTZaMDMxMTAvBgNV BAMTKDAzNTg1RTJFQzgyMzg0NEIxRDc1NzUyRTE2Q0RCOEY3MTEwQ0Q2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfEcPX7PWngg710OzGsqSipqiI PWLdCenOo2ZIArNOGv+Vin5D7HD++3yNVVCcwJnzf/sc+1ZPdYpnOPwJcEV9btQW 2Y/Pi1s2MWZ+ZkCHQEKQVTjvaqjt1Il8FJg2z8obzgROmxvLj4/71m9s1Q/fE3+i b98HUWUzdXbRHDNzQrSAEJQfmq5GjXUpT36ozaWX87ntwleQyGe+a4mZCVR3Dyd8 7CpyPpLJNfnLLIkQeR8MMkifD/4BhktxfBji8Qb/9r8EoPoxsLmW61TIJMDSOOAA BHaF3HxxI8S+V8kOQABmLciVpgYo8iK8yWEfS4EZRvCXExPdpVTiSzskEN9tAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUA1heLsgjhEsddXUuFs249xEM1nIwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM1NjMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM5MzgzNTM1Mzgu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8FwwDQYJKoZIhvcNAQELBQADggEBAB2dOmKAWvh3XfP9 cb+thrLFNfCwKCavSdFQSajxbe7Mts7eghmdM1fm7Q2B4j/v0FBKgRcUDDw0oQKU ow2jsvgqWsU33nHkchv65BeLHbIHeTUmMknuCDM39UPxnMR0DxTW11+6aIUo+fHQ sRxgoHe3p8TqPltL2UOsjD5eFrl56XN3/tPxN7jsxyOzAuUhqbc+9uw1FzOE0Hq1 tyWD3EC2eQs0WXouRXoZxijrhwF5fjQvMh1duxIBbNLYIBVdpTjDIrjyvV1ElWgk ERXJHV2o7bpBPY7ahE4ouTh+H9DEmlK0JLLrXnSfeg4YgQVl+XHiYi3Fk5vcYBwM uJxJ6kc= -----END CERTIFICATE-----Generated at Fri Dec 12 14:31:59 2025 by rpki-client