This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035653a3a2f34382d3438203d3e20323132363931.roa File: 326130653a386630323a663035653a3a2f34382d3438203d3e20323132363931.roa (raw, json) Hash identifier: A7r1cVoo4oUOkYbEw9uDA1NktsxqPxWOdIqWNkrlFuE= Subject key identifier: FE:AB:7C:16:C6:16:31:7B:D5:81:5B:CC:9C:B2:2C:5C:B9:AF:AC:67 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 50BEEC3F3448F7529766F9DBF1F0E803A2C8F7CA Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035653a3a2f34382d3438203d3e20323132363931.roa Signing time: Thu 11 Dec 2025 01:28:44 +0000 ROA not before: Thu 11 Dec 2025 01:23:44 +0000 ROA not after: Thu 10 Dec 2026 01:28:44 +0000 asID: 212691 IP address blocks: 2a0e:8f02:f05e::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:be:ec:3f:34:48:f7:52:97:66:f9:db:f1:f0:e8:03:a2:c8:f7:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:23:44 2025 GMT Not After : Dec 10 01:28:44 2026 GMT Subject: CN=FEAB7C16C616317BD5815BCC9CB22C5CB9AFAC67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f2:85:0c:55:79:26:3e:17:ff:a0:2b:83:75: 6f:89:42:f9:ba:42:62:55:09:27:1a:c0:49:4e:9b: ea:a6:78:4b:c1:fb:5b:25:f4:17:a8:04:aa:7a:2f: ec:9e:0c:96:4c:ca:aa:91:3a:77:17:8f:0d:b1:97: b7:dd:d9:fe:11:c2:fc:7e:76:7f:e8:c5:38:b5:24: ae:9a:0d:2a:df:97:ff:ad:a2:48:de:38:9e:c9:41: c0:d7:7c:b4:3c:e2:95:9e:7b:40:66:b2:f6:af:1f: af:1b:61:a5:36:1b:45:35:31:9f:30:11:d6:82:93: 23:1f:ae:e5:67:e4:4b:40:a2:3c:d8:dc:36:f8:34: c1:81:c4:b8:c9:f2:50:38:f0:04:fc:bb:78:21:17: a3:d8:bd:95:54:7d:f0:5e:8a:fa:97:14:7c:02:f0: 72:35:97:46:d5:47:5e:52:71:71:4d:09:96:19:9c: 3a:98:47:1d:0d:0d:74:ee:a0:47:f5:1f:c0:d3:60: ed:97:55:1d:4c:aa:4a:0c:0e:6b:ee:c8:0d:4a:ad: 77:66:1f:0d:65:70:82:8a:a8:ca:dc:2f:80:03:53: cf:bb:cd:25:5d:93:30:76:44:7c:99:f4:9e:30:e5: 01:4f:a4:98:06:29:ca:df:a3:a2:8f:0f:d1:0f:70: 8b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AB:7C:16:C6:16:31:7B:D5:81:5B:CC:9C:B2:2C:5C:B9:AF:AC:67 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035653a3a2f34382d3438203d3e20323132363931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f05e::/48 Signature Algorithm: sha256WithRSAEncryption b4:fe:7a:cb:ef:ed:d3:1b:8f:35:ec:1f:2d:20:6c:d7:69:db: b0:22:f5:2c:f6:b2:16:f0:7d:14:14:e5:e1:75:c3:cf:e0:f4: 4f:0b:5c:70:11:7c:38:32:82:22:b2:32:65:0c:a2:28:9a:f5: 85:b1:89:01:cc:86:90:c7:34:3b:3f:57:87:16:6d:4c:6e:71: 8b:9c:fc:29:02:ba:e8:2d:89:19:d4:37:9b:e1:62:ea:19:cb: 41:fc:d6:7c:66:c0:3e:bb:3e:06:05:6c:da:d3:0d:f3:f8:2a: e9:6e:a3:d2:02:ba:7c:ed:99:7e:ba:74:72:21:0b:3f:74:07: 18:14:b6:3d:9b:f1:8b:b5:69:89:fe:c6:b5:8e:a2:32:4d:90: b9:e3:08:65:fe:d0:a9:27:b0:32:f2:72:f7:25:f6:36:9c:f8: ee:ba:db:f9:8d:c6:8d:1b:a0:6c:ee:bc:fb:45:be:5f:87:c6: 7d:ef:ed:af:26:6e:91:47:1b:94:9d:73:a1:34:aa:90:83:aa: 47:39:8d:56:ae:ec:a6:55:d6:c5:54:29:2e:c4:56:61:72:6c: 60:43:64:87:26:43:d8:8b:9b:1e:d7:e5:f0:99:06:9c:f0:d4: 49:01:b1:5e:31:f9:6f:1b:3d:7a:b4:14:34:4b:9d:a2:9c:c4: ca:22:41:b0 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUUL7sPzRI91KXZvnb8fDoA6LI98owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIzNDRaFw0yNjEyMTAwMTI4NDRaMDMxMTAvBgNV BAMTKEZFQUI3QzE2QzYxNjMxN0JENTgxNUJDQzlDQjIyQzVDQjlBRkFDNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX8oUMVXkmPhf/oCuDdW+JQvm6 QmJVCScawElOm+qmeEvB+1sl9BeoBKp6L+yeDJZMyqqROncXjw2xl7fd2f4Rwvx+ dn/oxTi1JK6aDSrfl/+tokjeOJ7JQcDXfLQ84pWee0BmsvavH68bYaU2G0U1MZ8w EdaCkyMfruVn5EtAojzY3Db4NMGBxLjJ8lA48AT8u3ghF6PYvZVUffBeivqXFHwC 8HI1l0bVR15ScXFNCZYZnDqYRx0NDXTuoEf1H8DTYO2XVR1MqkoMDmvuyA1KrXdm Hw1lcIKKqMrcL4ADU8+7zSVdkzB2RHyZ9J4w5QFPpJgGKcrfo6KPD9EPcIsFAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQU/qt8FsYWMXvVgVvMnLIsXLmvrGcwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM1NjUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzIzNjM5MzEu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8F4wDQYJKoZIhvcNAQELBQADggEBALT+esvv7dMbjzXs Hy0gbNdp27Ai9Sz2shbwfRQU5eF1w8/g9E8LXHARfDgygiKyMmUMoiia9YWxiQHM hpDHNDs/V4cWbUxucYuc/CkCuugtiRnUN5vhYuoZy0H81nxmwD67PgYFbNrTDfP4 Kuluo9ICunztmX66dHIhCz90BxgUtj2b8Yu1aYn+xrWOojJNkLnjCGX+0KknsDLy cvcl9jac+O662/mNxo0boGzuvPtFvl+Hxn3v7a8mbpFHG5Sdc6E0qpCDqkc5jVau 7KZV1sVUKS7EVmFybGBDZIcmQ9iLmx7X5fCZBpzw1EkBsV4x+W8bPXq0FDRLnaKc xMoiQbA= -----END CERTIFICATE-----Generated at Fri Dec 12 14:31:22 2025 by rpki-client