This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036323a3a2f34382d3438203d3e20323135383239.roa File: 326130653a386630323a663036323a3a2f34382d3438203d3e20323135383239.roa (raw, json) Hash identifier: NoOro0tKfXqTsz7U86VS0JkPQpQfjzDiMY8ZybILVwA= Subject key identifier: 0C:68:9C:C6:AB:BC:DA:93:A9:98:A9:4F:20:21:EF:BC:ED:D8:1C:8F Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 3969EA477A009017373F821AB3DC7C8F50746F59 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036323a3a2f34382d3438203d3e20323135383239.roa Signing time: Thu 11 Dec 2025 01:28:39 +0000 ROA not before: Thu 11 Dec 2025 01:23:39 +0000 ROA not after: Thu 10 Dec 2026 01:28:39 +0000 asID: 215829 IP address blocks: 2a0e:8f02:f062::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:69:ea:47:7a:00:90:17:37:3f:82:1a:b3:dc:7c:8f:50:74:6f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:23:39 2025 GMT Not After : Dec 10 01:28:39 2026 GMT Subject: CN=0C689CC6ABBCDA93A998A94F2021EFBCEDD81C8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:18:b9:6f:ad:2d:45:79:da:3c:10:4f:b0:a2: 87:85:9e:a4:f9:d2:ca:1f:c0:a5:16:88:b0:48:cc: e0:40:6f:64:f9:ad:05:40:4a:93:1a:e0:40:18:77: 71:75:71:dc:27:1c:3a:4d:52:85:d0:3d:a2:55:b2: 4c:a4:7d:c1:c2:c0:e7:99:de:72:c4:38:f8:c5:c5: 9a:90:1d:5f:d5:8e:c8:f5:cb:75:ad:20:ab:d7:0a: d4:07:a8:94:2b:94:3f:2e:ac:30:a0:74:26:fb:bc: 04:b0:b1:8c:af:76:25:dc:18:b2:e1:cb:87:18:d6: 1d:bd:bd:23:0b:c2:f9:16:fa:a1:5a:9d:94:f9:73: ef:c7:f4:e0:bf:a5:2c:33:70:38:9e:f6:e0:b2:d6: 8b:ab:2f:56:e3:6d:44:87:b1:de:fa:14:05:c0:99: 56:1c:b0:fb:a7:fa:d6:66:4f:5f:00:35:78:a7:5e: 0f:01:69:32:bb:73:0d:4e:8f:1e:e4:a6:2b:e8:f4: 01:21:55:56:db:fc:f1:a6:fc:db:82:3f:26:58:ba: d7:94:08:a9:d1:ba:66:99:88:38:15:91:33:60:55: cb:61:e3:b5:ec:4d:ab:19:ec:32:7b:60:1f:4c:8d: 80:1c:26:e6:9b:35:27:6a:83:25:e1:02:a8:90:57: ce:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:68:9C:C6:AB:BC:DA:93:A9:98:A9:4F:20:21:EF:BC:ED:D8:1C:8F X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036323a3a2f34382d3438203d3e20323135383239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f062::/48 Signature Algorithm: sha256WithRSAEncryption b5:07:47:9f:62:28:b2:6c:b6:2c:68:8b:8d:61:56:d0:37:bc: 88:5e:47:92:97:63:38:17:f1:b7:6d:2d:3c:00:f1:fb:72:83: ce:36:d4:b2:5e:eb:c6:42:f7:be:87:5f:b4:e8:50:03:74:b5: 9d:1f:66:0c:5e:18:a5:68:09:89:f9:7e:72:2c:fa:eb:1e:98: e0:a2:5d:5d:27:f4:9b:50:70:bc:bd:3b:c3:ab:63:2e:4f:99: 00:38:b9:bb:14:d9:69:33:fc:f6:e4:19:66:d9:29:d4:17:1b: a1:88:55:a2:97:08:41:1d:6a:0e:f5:d9:49:0b:2e:ae:91:f8: 3b:af:3e:92:90:24:2b:1c:d2:49:4f:95:06:82:bf:3d:f8:4a: 65:69:98:ff:03:6e:c0:23:ba:71:f1:a2:ba:bd:ec:d4:4f:89: d1:f6:35:6c:f1:47:d4:dc:54:f8:7b:b2:d2:79:bd:7b:a2:06: a4:10:fb:05:a3:2e:15:25:b5:0d:d4:c6:8d:8a:c0:f2:e7:dd: 77:78:0c:fe:39:67:5f:5f:6a:c3:bd:70:cf:af:e0:5c:79:9c: 41:02:d8:bd:c1:ee:cc:af:cf:86:0b:80:c9:38:59:b5:da:2c: 11:3f:4c:ba:c4:1c:fe:67:61:0a:89:ba:6b:b4:da:52:6a:88: 56:5a:2e:4b -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUOWnqR3oAkBc3P4Ias9x8j1B0b1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIzMzlaFw0yNjEyMTAwMTI4MzlaMDMxMTAvBgNV BAMTKDBDNjg5Q0M2QUJCQ0RBOTNBOTk4QTk0RjIwMjFFRkJDRUREODFDOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9GLlvrS1Fedo8EE+wooeFnqT5 0sofwKUWiLBIzOBAb2T5rQVASpMa4EAYd3F1cdwnHDpNUoXQPaJVskykfcHCwOeZ 3nLEOPjFxZqQHV/Vjsj1y3WtIKvXCtQHqJQrlD8urDCgdCb7vASwsYyvdiXcGLLh y4cY1h29vSMLwvkW+qFanZT5c+/H9OC/pSwzcDie9uCy1ourL1bjbUSHsd76FAXA mVYcsPun+tZmT18ANXinXg8BaTK7cw1Ojx7kpivo9AEhVVbb/PGm/NuCPyZYuteU CKnRumaZiDgVkTNgVcth47XsTasZ7DJ7YB9MjYAcJuabNSdqgyXhAqiQV877AgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUDGicxqu82pOpmKlPICHvvO3YHI8wHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM2MzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzODMyMzku cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8GIwDQYJKoZIhvcNAQELBQADggEBALUHR59iKLJstixo i41hVtA3vIheR5KXYzgX8bdtLTwA8ftyg8421LJe68ZC976HX7ToUAN0tZ0fZgxe GKVoCYn5fnIs+usemOCiXV0n9JtQcLy9O8OrYy5PmQA4ubsU2Wkz/PbkGWbZKdQX G6GIVaKXCEEdag712UkLLq6R+DuvPpKQJCsc0klPlQaCvz34SmVpmP8DbsAjunHx orq97NRPidH2NWzxR9TcVPh7stJ5vXuiBqQQ+wWjLhUltQ3Uxo2KwPLn3Xd4DP45 Z19fasO9cM+v4Fx5nEEC2L3B7syvz4YLgMk4WbXaLBE/TLrEHP5nYQqJumu02lJq iFZaLks= -----END CERTIFICATE-----Generated at Fri Dec 12 14:31:59 2025 by rpki-client