This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036363a3a2f34382d3438203d3e20323135353035.roa File: 326130653a386630323a663036363a3a2f34382d3438203d3e20323135353035.roa (raw, json) Hash identifier: LPBTP/jDpzvg0Z9UZyRA+1t+dlm4veuYAcNSFYan70E= Subject key identifier: 1F:8B:02:C4:19:95:4C:CA:DE:F1:A0:0A:10:73:48:16:49:F0:C3:15 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 6104D1ECAAFDBFDC0224EACBE9AAC424748F7DE3 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036363a3a2f34382d3438203d3e20323135353035.roa Signing time: Thu 11 Dec 2025 01:28:31 +0000 ROA not before: Thu 11 Dec 2025 01:23:31 +0000 ROA not after: Thu 10 Dec 2026 01:28:31 +0000 asID: 215505 IP address blocks: 2a0e:8f02:f066::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:04:d1:ec:aa:fd:bf:dc:02:24:ea:cb:e9:aa:c4:24:74:8f:7d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:23:31 2025 GMT Not After : Dec 10 01:28:31 2026 GMT Subject: CN=1F8B02C419954CCADEF1A00A1073481649F0C315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bd:e8:03:30:ac:27:76:4d:bf:c5:55:6c:42: cf:4b:3c:7e:a4:4b:90:90:26:5d:67:e1:5c:12:c2: ff:b6:17:96:58:a7:a7:1a:c3:ef:c1:7c:d2:13:14: 2b:ed:94:13:1f:63:dc:f6:83:95:a6:91:7d:38:4f: bd:3b:44:4b:4b:28:9f:33:43:68:ba:a8:0d:fe:f6: 4e:26:90:fb:1e:c7:be:e1:a5:e2:c6:ff:f4:ca:8b: df:d7:24:f8:0c:72:0b:d6:e5:1e:a9:2e:7b:33:1a: 9c:9a:66:75:d8:3d:b3:48:11:e8:93:a7:41:0d:d0: 46:fc:ba:82:93:a0:a6:fe:b6:f6:99:d0:a5:0c:f6: 3b:7e:2a:f3:d0:7d:d5:47:f5:83:2d:f7:a8:a0:4a: 16:e9:ac:7b:81:5b:c9:9d:89:3c:41:9f:eb:56:c9: 61:32:5a:77:0d:13:1f:1b:6c:7e:e4:c6:0e:61:f3: 98:62:c3:df:ca:fc:e8:52:7d:a3:80:8b:4d:86:99: ac:57:1a:8a:54:62:ae:9c:e7:10:14:5f:58:1b:7c: 72:6e:16:82:e3:df:84:aa:3f:9b:c2:6d:f8:80:c9: 6f:41:92:b9:12:df:35:4e:17:75:36:81:6f:c3:dc: 6e:21:e6:c3:f4:3e:ba:42:eb:12:e6:73:79:9e:45: b2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8B:02:C4:19:95:4C:CA:DE:F1:A0:0A:10:73:48:16:49:F0:C3:15 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036363a3a2f34382d3438203d3e20323135353035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f066::/48 Signature Algorithm: sha256WithRSAEncryption a7:45:c8:11:88:0a:9b:5b:9d:9b:9f:59:91:c5:87:2e:0f:d9: 6a:59:a9:cd:76:0d:87:9c:bd:cc:40:c3:ec:6d:40:cc:78:f5: 49:3a:cc:49:bb:2f:60:31:53:d6:ad:8b:2b:1b:06:dd:d2:5a: 18:ea:89:35:31:bd:ec:d7:bc:a1:7f:20:53:68:00:1c:e0:ff: 97:6f:7d:e4:e0:e4:56:86:ca:c3:d4:74:3b:dd:13:ba:f1:bf: 1e:4d:50:fb:7c:c9:bc:1d:1b:f1:aa:57:a9:83:59:f3:74:dd: 27:57:ad:60:9d:87:b7:79:f2:4d:e5:67:23:d4:5e:ed:05:a2: 01:f9:26:ba:19:d2:76:c9:c0:17:a9:26:2b:97:85:36:67:8f: 11:4e:ef:44:9e:48:2c:ef:98:bd:1e:92:80:d2:da:8d:59:3b: af:4a:1e:9e:67:8e:66:37:6b:6c:ba:dc:21:97:12:4e:35:a9: 7c:9c:80:3e:b9:07:a4:72:0c:10:e5:bd:94:fb:c8:24:35:ad: 76:71:6d:48:1b:e9:85:ce:68:80:a3:89:6a:53:ea:8b:1b:a7: 96:a2:c3:26:18:16:b4:cf:dc:d3:92:6b:e4:f7:63:4d:cd:8a: ca:7f:a0:aa:2f:70:d7:4e:0a:43:e0:ca:65:7d:7e:1c:24:7b: 82:88:4e:4e -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUYQTR7Kr9v9wCJOrL6arEJHSPfeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIzMzFaFw0yNjEyMTAwMTI4MzFaMDMxMTAvBgNV BAMTKDFGOEIwMkM0MTk5NTRDQ0FERUYxQTAwQTEwNzM0ODE2NDlGMEMzMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQvegDMKwndk2/xVVsQs9LPH6k S5CQJl1n4VwSwv+2F5ZYp6caw+/BfNITFCvtlBMfY9z2g5WmkX04T707REtLKJ8z Q2i6qA3+9k4mkPsex77hpeLG//TKi9/XJPgMcgvW5R6pLnszGpyaZnXYPbNIEeiT p0EN0Eb8uoKToKb+tvaZ0KUM9jt+KvPQfdVH9YMt96igShbprHuBW8mdiTxBn+tW yWEyWncNEx8bbH7kxg5h85hiw9/K/OhSfaOAi02GmaxXGopUYq6c5xAUX1gbfHJu FoLj34SqP5vCbfiAyW9BkrkS3zVOF3U2gW/D3G4h5sP0PrpC6xLmc3meRbKfAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUH4sCxBmVTMre8aAKEHNIFknwwxUwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM2MzYzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzNTMwMzUu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8GYwDQYJKoZIhvcNAQELBQADggEBAKdFyBGICptbnZuf WZHFhy4P2WpZqc12DYecvcxAw+xtQMx49Uk6zEm7L2AxU9atiysbBt3SWhjqiTUx vezXvKF/IFNoABzg/5dvfeTg5FaGysPUdDvdE7rxvx5NUPt8ybwdG/GqV6mDWfN0 3SdXrWCdh7d58k3lZyPUXu0FogH5JroZ0nbJwBepJiuXhTZnjxFO70SeSCzvmL0e koDS2o1ZO69KHp5njmY3a2y63CGXEk41qXycgD65B6RyDBDlvZT7yCQ1rXZxbUgb 6YXOaICjiWpT6osbp5aiwyYYFrTP3NOSa+T3Y03Nisp/oKovcNdOCkPgymV9fhwk e4KITk4= -----END CERTIFICATE-----Generated at Fri Dec 12 14:32:00 2025 by rpki-client