This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036373a3a2f34382d3438203d3e20323135353037.roa File: 326130653a386630323a663036373a3a2f34382d3438203d3e20323135353037.roa (raw, json) Hash identifier: 4JWFiWnTyVJ0iIkC7hLvO9m92EGB13D+/DnKUVI33cM= Subject key identifier: 02:D8:D9:D0:44:DE:D1:2B:7D:C2:13:0D:80:57:FD:8C:BD:8A:00:64 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 79E1F8D61CCCE91E75E47E59EF7E7D567D449CF1 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036373a3a2f34382d3438203d3e20323135353037.roa Signing time: Thu 11 Dec 2025 01:28:26 +0000 ROA not before: Thu 11 Dec 2025 01:23:26 +0000 ROA not after: Thu 10 Dec 2026 01:28:26 +0000 asID: 215507 IP address blocks: 2a0e:8f02:f067::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e1:f8:d6:1c:cc:e9:1e:75:e4:7e:59:ef:7e:7d:56:7d:44:9c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:23:26 2025 GMT Not After : Dec 10 01:28:26 2026 GMT Subject: CN=02D8D9D044DED12B7DC2130D8057FD8CBD8A0064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9c:20:ab:d0:c0:0d:7a:e4:40:de:31:6a:7e: b9:87:47:0d:c9:90:fc:0e:ed:1a:1f:49:f1:ab:a2: 63:59:09:c3:d8:20:e1:c5:02:48:0a:88:94:00:af: b3:e3:98:fa:8e:6d:27:e7:dd:2f:be:68:e6:75:a5: 98:db:b7:8b:39:37:d3:67:aa:f1:8e:da:9e:f3:57: f2:53:fb:a7:fb:f4:28:2a:3d:bd:94:39:42:a4:59: 5c:be:51:64:73:c6:53:63:a5:4c:f3:e3:ac:2e:a3: 12:1f:b9:2f:de:0d:c6:fc:ff:51:db:9d:95:52:5f: 7b:d0:be:02:e6:97:45:f8:63:02:ee:38:7b:a4:20: ca:b0:58:e9:d6:03:d7:cf:7e:d7:e3:87:8d:2b:fe: 7a:4d:c6:26:92:a7:fc:ee:1f:b3:2e:5b:6f:d1:f5: 3b:2c:41:b2:0e:13:7d:a0:e3:28:ba:84:12:a7:89: 7c:07:ac:06:87:26:59:9a:7f:ac:81:54:4f:98:78: 9f:a5:d6:45:65:bc:74:69:98:c2:ee:26:41:37:d0: 6a:da:2e:28:f0:de:af:92:88:2c:f2:18:53:90:76: c1:95:76:c6:c4:e1:a4:be:43:1f:9c:2d:d6:3e:5f: 5c:45:9c:b3:20:88:41:68:90:47:c6:ea:0b:9b:48: ca:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D8:D9:D0:44:DE:D1:2B:7D:C2:13:0D:80:57:FD:8C:BD:8A:00:64 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036373a3a2f34382d3438203d3e20323135353037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f067::/48 Signature Algorithm: sha256WithRSAEncryption 6b:16:dd:bc:06:a6:21:4a:3a:3f:5c:1f:27:a9:f3:c5:91:5f: 44:9e:dc:80:e3:5b:05:79:ae:ce:ce:15:c6:f1:72:dc:de:13: 29:16:ad:29:52:91:ef:9d:07:66:e4:95:6a:a1:75:74:6a:6e: 1b:c4:87:17:52:bd:85:50:c1:24:94:91:fe:0b:cf:da:e4:c6: 22:a5:9a:77:cb:fa:d9:5d:c1:de:3d:02:43:5e:d7:4e:d1:00: f2:63:e3:a1:9a:a5:df:79:e1:a0:1c:8c:3d:48:bd:ae:e6:25: ee:ec:68:1a:a2:6b:a1:54:e4:05:07:0e:92:2a:2e:4c:ec:55: d9:6b:3b:30:f2:35:15:03:21:69:ae:1b:8d:84:0e:2b:e8:2e: ed:af:14:a3:ea:5a:e5:b6:87:fa:1f:56:4a:87:cc:29:90:50: 18:59:99:d0:8b:49:ae:dc:b4:59:81:e6:a4:b4:f5:bd:b3:5a: 22:bb:10:8d:f1:01:86:2d:19:9f:f6:6f:8b:50:60:f3:89:53: 21:a6:75:9a:bd:47:f0:21:8e:e6:3c:b1:87:61:7b:05:c1:9c: e0:82:82:91:e9:0a:90:f8:78:4a:0b:63:d1:9d:ed:fd:8b:02: a9:53:a9:39:31:7a:29:b5:39:89:d5:f2:4a:78:be:b8:f2:4e: 44:2d:4f:f1 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUeeH41hzM6R515H5Z7359Vn1EnPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIzMjZaFw0yNjEyMTAwMTI4MjZaMDMxMTAvBgNV BAMTKDAyRDhEOUQwNDRERUQxMkI3REMyMTMwRDgwNTdGRDhDQkQ4QTAwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmnCCr0MANeuRA3jFqfrmHRw3J kPwO7RofSfGromNZCcPYIOHFAkgKiJQAr7PjmPqObSfn3S++aOZ1pZjbt4s5N9Nn qvGO2p7zV/JT+6f79CgqPb2UOUKkWVy+UWRzxlNjpUzz46wuoxIfuS/eDcb8/1Hb nZVSX3vQvgLml0X4YwLuOHukIMqwWOnWA9fPftfjh40r/npNxiaSp/zuH7MuW2/R 9TssQbIOE32g4yi6hBKniXwHrAaHJlmaf6yBVE+YeJ+l1kVlvHRpmMLuJkE30Gra Lijw3q+SiCzyGFOQdsGVdsbE4aS+Qx+cLdY+X1xFnLMgiEFokEfG6gubSMqhAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUAtjZ0ETe0St9whMNgFf9jL2KAGQwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM2MzczYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzNTMwMzcu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8GcwDQYJKoZIhvcNAQELBQADggEBAGsW3bwGpiFKOj9c Hyep88WRX0Se3IDjWwV5rs7OFcbxctzeEykWrSlSke+dB2bklWqhdXRqbhvEhxdS vYVQwSSUkf4Lz9rkxiKlmnfL+tldwd49AkNe107RAPJj46Gapd954aAcjD1Iva7m Je7saBqia6FU5AUHDpIqLkzsVdlrOzDyNRUDIWmuG42EDivoLu2vFKPqWuW2h/of VkqHzCmQUBhZmdCLSa7ctFmB5qS09b2zWiK7EI3xAYYtGZ/2b4tQYPOJUyGmdZq9 R/AhjuY8sYdhewXBnOCCgpHpCpD4eEoLY9Gd7f2LAqlTqTkxeim1OYnV8kp4vrjy TkQtT/E= -----END CERTIFICATE-----Generated at Fri Dec 12 14:31:20 2025 by rpki-client