This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036383a3a2f34382d3438203d3e20323135343438.roa File: 326130653a386630323a663036383a3a2f34382d3438203d3e20323135343438.roa (raw, json) Hash identifier: Mfp6t9SWbcw6G6m+NFCbQ7qowC8qmb6ogbuMibiyg24= Subject key identifier: 69:4E:A3:7C:E4:BB:5E:19:84:72:57:63:46:F1:46:EF:69:27:3B:3F Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 411E8D7680A79F92531B76A1BDDA6549119406FA Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036383a3a2f34382d3438203d3e20323135343438.roa Signing time: Thu 11 Dec 2025 01:28:20 +0000 ROA not before: Thu 11 Dec 2025 01:23:20 +0000 ROA not after: Thu 10 Dec 2026 01:28:20 +0000 asID: 215448 IP address blocks: 2a0e:8f02:f068::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:1e:8d:76:80:a7:9f:92:53:1b:76:a1:bd:da:65:49:11:94:06:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:23:20 2025 GMT Not After : Dec 10 01:28:20 2026 GMT Subject: CN=694EA37CE4BB5E198472576346F146EF69273B3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:32:45:76:a5:d5:de:b2:eb:d6:a1:2f:13:a1: f2:ec:26:70:91:29:f8:f2:a1:d2:0a:66:3a:78:b9: 05:6f:a4:de:4a:59:34:51:83:a0:ab:e4:dc:ec:10: 01:ce:4a:62:91:af:87:8b:2d:45:ac:e0:70:f1:0c: 08:70:1e:e0:cd:b8:c4:d7:2b:80:49:ba:41:e4:6a: e0:0c:12:e9:0e:db:54:cd:37:18:6e:6f:44:64:69: 8f:58:4f:8b:f9:6a:4c:3e:ca:a7:28:27:c5:5d:b4: 6f:3a:77:8b:8e:6f:13:10:36:a8:17:6d:53:90:76: 89:5f:52:b1:a8:f5:80:a4:82:7a:55:c6:0d:fc:30: ff:f5:1a:64:e2:a2:43:ff:13:72:bd:22:08:31:ab: 28:a6:d4:99:01:27:e4:7b:d4:b0:24:9a:e0:b4:d5: d1:cb:9d:e4:56:1f:53:11:e3:08:2f:68:ca:f8:a9: f9:0b:c8:8c:3a:2f:ee:8f:33:33:4b:87:00:c1:e3: 56:d5:62:ee:f2:a9:24:7d:5d:2b:00:9b:64:b4:f7: d3:1f:8a:c7:4b:b8:03:ab:1c:e8:08:45:34:0a:0f: a9:70:37:04:df:1e:7f:9c:27:27:8b:49:23:4d:45: 19:b0:08:5b:b7:47:ed:18:55:f3:ce:19:4d:1d:d9: 73:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4E:A3:7C:E4:BB:5E:19:84:72:57:63:46:F1:46:EF:69:27:3B:3F X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036383a3a2f34382d3438203d3e20323135343438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f068::/48 Signature Algorithm: sha256WithRSAEncryption 4f:25:23:dd:13:6c:70:a6:79:e2:b7:61:60:b3:40:6e:cf:07: 69:62:d8:bc:8c:e8:a2:c6:8c:d2:4d:97:b9:89:9a:ee:30:ff: b7:2d:26:b9:56:13:2e:f3:3e:5b:88:5c:d6:91:f7:27:e7:d3: 17:24:fd:1b:69:c7:a8:b8:5a:a6:81:e9:97:c3:ac:07:1e:b0: c0:ae:9e:51:a8:e4:e7:72:e1:14:28:85:ea:66:3d:6d:a7:7c: 3f:4b:a7:02:88:67:e3:3d:9e:82:f8:0e:6d:db:41:97:b4:50: 6e:a5:3a:8b:92:4b:89:a0:90:75:11:b1:20:cc:76:39:01:8d: 46:29:47:53:29:88:71:9b:8b:86:64:5b:69:0e:dd:ae:5b:85: 0e:73:89:b8:85:fa:55:b7:38:a0:f7:f7:55:66:82:4f:b5:c4: 0d:7d:de:e8:58:94:1c:37:91:b0:45:a7:dd:4a:bb:6b:cd:6a: ca:f7:f7:a3:d6:d4:0a:bb:79:3f:5d:1e:ec:5b:62:2f:26:ba: ac:0e:c1:c0:b0:18:9a:ba:29:9f:3d:fc:79:88:dc:d8:62:5d: dc:e2:52:ea:06:f6:1f:7a:15:9f:02:75:58:56:95:ba:9b:8b: 41:7c:0c:d5:4f:41:a9:3d:6d:e5:d8:c8:b0:60:09:64:5e:c6: a6:fe:54:c4 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUQR6NdoCnn5JTG3ahvdplSRGUBvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIzMjBaFw0yNjEyMTAwMTI4MjBaMDMxMTAvBgNV BAMTKDY5NEVBMzdDRTRCQjVFMTk4NDcyNTc2MzQ2RjE0NkVGNjkyNzNCM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSMkV2pdXesuvWoS8TofLsJnCR KfjyodIKZjp4uQVvpN5KWTRRg6Cr5NzsEAHOSmKRr4eLLUWs4HDxDAhwHuDNuMTX K4BJukHkauAMEukO21TNNxhub0RkaY9YT4v5akw+yqcoJ8VdtG86d4uObxMQNqgX bVOQdolfUrGo9YCkgnpVxg38MP/1GmTiokP/E3K9Iggxqyim1JkBJ+R71LAkmuC0 1dHLneRWH1MR4wgvaMr4qfkLyIw6L+6PMzNLhwDB41bVYu7yqSR9XSsAm2S099Mf isdLuAOrHOgIRTQKD6lwNwTfHn+cJyeLSSNNRRmwCFu3R+0YVfPOGU0d2XNHAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUaU6jfOS7XhmEcldjRvFG72knOz8wHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM2MzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzNDM0Mzgu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8GgwDQYJKoZIhvcNAQELBQADggEBAE8lI90TbHCmeeK3 YWCzQG7PB2li2LyM6KLGjNJNl7mJmu4w/7ctJrlWEy7zPluIXNaR9yfn0xck/Rtp x6i4WqaB6ZfDrAcesMCunlGo5Ody4RQohepmPW2nfD9LpwKIZ+M9noL4Dm3bQZe0 UG6lOouSS4mgkHURsSDMdjkBjUYpR1MpiHGbi4ZkW2kO3a5bhQ5zibiF+lW3OKD3 91Vmgk+1xA193uhYlBw3kbBFp91Ku2vNasr396PW1Aq7eT9dHuxbYi8muqwOwcCw GJq6KZ89/HmI3NhiXdziUuoG9h96FZ8CdVhWlbqbi0F8DNVPQak9beXYyLBgCWRe xqb+VMQ= -----END CERTIFICATE-----Generated at Fri Dec 12 14:32:00 2025 by rpki-client