This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035643a3a2f34382d3438203d3e20323038383039.roa File: 326130653a386630323a663035643a3a2f34382d3438203d3e20323038383039.roa (raw, json) Hash identifier: oWPgfClqLJmtjP9HFoFRJ3Kfk2UFVtgqMskCZsn9TQY= Subject key identifier: 8A:4F:A2:19:5C:52:B3:A1:8D:5D:F0:76:3A:B0:3A:4F:E0:DE:1C:53 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 6080BD61365E64C3770F4E80A7DE7C47253CD239 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035643a3a2f34382d3438203d3e20323038383039.roa Signing time: Thu 11 Dec 2025 01:28:50 +0000 ROA not before: Thu 11 Dec 2025 01:23:50 +0000 ROA not after: Thu 10 Dec 2026 01:28:50 +0000 asID: 208809 IP address blocks: 2a0e:8f02:f05d::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:80:bd:61:36:5e:64:c3:77:0f:4e:80:a7:de:7c:47:25:3c:d2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:23:50 2025 GMT Not After : Dec 10 01:28:50 2026 GMT Subject: CN=8A4FA2195C52B3A18D5DF0763AB03A4FE0DE1C53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c0:77:32:3a:a0:3d:3c:f4:c7:0d:10:f6:ae: df:12:ce:44:f1:b0:9a:ca:04:25:c4:db:62:b0:33: 5e:24:f8:f6:ee:27:1e:8c:8e:2f:67:5e:2f:ac:4f: be:5d:2f:dc:05:51:bf:5c:f4:fe:d1:0a:04:80:8c: 9d:d1:47:f6:db:1f:fa:65:79:3a:9d:ae:37:96:0e: f9:ff:3c:54:10:5b:53:0a:f8:60:60:63:4c:c6:e5: 7a:1c:ee:ca:1c:44:c3:a5:4e:37:7e:f9:4c:26:61: 11:79:2d:7c:8a:20:45:a4:92:ce:7e:5c:04:06:64: 7f:a0:43:a2:5a:b2:05:2a:80:84:23:19:2a:61:3a: 5f:ef:84:5f:6c:60:11:fe:a8:2f:33:ef:de:24:95: ea:07:0d:5c:3e:b9:f3:61:c1:b2:66:7a:04:61:7a: 7f:7a:1a:c8:20:27:3a:c0:d3:25:65:d2:66:0e:13: 4f:23:8a:33:0e:2a:22:42:6d:45:9f:0f:e4:a3:96: ba:6a:bd:bb:b5:e7:00:65:e8:c3:5f:91:a7:18:f8: 08:72:96:d3:f2:11:27:d5:83:a4:7a:43:97:a7:a9: a8:76:05:f8:55:45:08:bb:45:3a:7d:48:6d:bf:b3: 90:29:7b:6c:00:93:39:26:f3:5a:63:d0:e3:22:88: e6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4F:A2:19:5C:52:B3:A1:8D:5D:F0:76:3A:B0:3A:4F:E0:DE:1C:53 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035643a3a2f34382d3438203d3e20323038383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f05d::/48 Signature Algorithm: sha256WithRSAEncryption 16:1a:73:71:30:f9:74:b5:7f:c1:bc:d1:1b:86:f7:5b:12:e5: 17:a7:61:6e:04:4f:47:05:b8:07:6e:75:59:3c:24:fd:41:2e: c5:ff:3b:60:cb:8c:64:fb:01:f6:c7:26:6e:a1:6f:ad:b2:35: 45:f5:54:86:94:0a:54:c6:c8:fe:5e:c9:79:02:37:50:8e:74: 29:b8:4f:c2:ae:69:ea:72:42:78:b6:ec:5a:e6:0a:6d:2d:7e: f1:9a:f9:05:05:84:9d:44:25:87:cb:ca:15:5b:56:4b:68:45: 6c:7a:4d:1c:50:ac:8f:4d:a5:8f:c4:2b:41:84:88:c7:23:5e: 82:f7:f2:3f:9c:bd:8c:5e:17:3e:02:bc:d2:00:36:70:46:e7: 44:12:7e:9d:0c:0a:28:be:74:c6:f1:ea:06:13:86:83:9e:cf: ff:9b:ff:67:66:5a:c2:22:bc:ef:e8:c9:6a:d4:04:bd:b8:e7: 6e:a8:b3:fa:ee:7a:0d:b2:67:61:39:b0:40:ff:8d:99:b0:b0: bd:05:22:4b:24:a5:4a:a0:92:fb:6b:9a:64:2a:ed:0b:c7:5d: 4c:60:4e:3f:19:5e:a1:68:b3:b3:20:86:55:65:c3:51:99:dd: dd:13:7b:1d:7f:86:26:1c:14:19:fb:fa:e9:68:99:68:38:6b: 63:2f:4f:e4 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUYIC9YTZeZMN3D06Ap958RyU80jkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIzNTBaFw0yNjEyMTAwMTI4NTBaMDMxMTAvBgNV BAMTKDhBNEZBMjE5NUM1MkIzQTE4RDVERjA3NjNBQjAzQTRGRTBERTFDNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSwHcyOqA9PPTHDRD2rt8SzkTx sJrKBCXE22KwM14k+PbuJx6Mji9nXi+sT75dL9wFUb9c9P7RCgSAjJ3RR/bbH/pl eTqdrjeWDvn/PFQQW1MK+GBgY0zG5Xoc7socRMOlTjd++UwmYRF5LXyKIEWkks5+ XAQGZH+gQ6JasgUqgIQjGSphOl/vhF9sYBH+qC8z794kleoHDVw+ufNhwbJmegRh en96GsggJzrA0yVl0mYOE08jijMOKiJCbUWfD+Sjlrpqvbu15wBl6MNfkacY+Ahy ltPyESfVg6R6Q5enqah2BfhVRQi7RTp9SG2/s5Ape2wAkzkm81pj0OMiiObfAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUik+iGVxSs6GNXfB2OrA6T+DeHFMwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM1NjQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzgzODMwMzku cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8F0wDQYJKoZIhvcNAQELBQADggEBABYac3Ew+XS1f8G8 0RuG91sS5RenYW4ET0cFuAdudVk8JP1BLsX/O2DLjGT7AfbHJm6hb62yNUX1VIaU ClTGyP5eyXkCN1COdCm4T8KuaepyQni27FrmCm0tfvGa+QUFhJ1EJYfLyhVbVkto RWx6TRxQrI9NpY/EK0GEiMcjXoL38j+cvYxeFz4CvNIANnBG50QSfp0MCii+dMbx 6gYThoOez/+b/2dmWsIivO/oyWrUBL24526os/rueg2yZ2E5sED/jZmwsL0FIksk pUqgkvtrmmQq7QvHXUxgTj8ZXqFos7MghlVlw1GZ3d0Tex1/hiYcFBn7+ulomWg4 a2MvT+Q= -----END CERTIFICATE-----Generated at Fri Dec 12 14:31:59 2025 by rpki-client