This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036393a3a2f34382d3438203d3e20323135333836.roa File: 326130653a386630323a663036393a3a2f34382d3438203d3e20323135333836.roa (raw, json) Hash identifier: HoFrJZwmz+IQSsFxf0/iTNMNWhCP1l1iSLX+7mYxswY= Subject key identifier: 0F:EA:90:CD:69:0A:05:EE:77:36:47:A5:4D:EB:C4:BB:29:D1:9F:F5 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 194DF4AE1B7141EE661207EDD30C96E7E771521C Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036393a3a2f34382d3438203d3e20323135333836.roa Signing time: Thu 11 Dec 2025 01:28:15 +0000 ROA not before: Thu 11 Dec 2025 01:23:15 +0000 ROA not after: Thu 10 Dec 2026 01:28:15 +0000 asID: 215386 IP address blocks: 2a0e:8f02:f069::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:4d:f4:ae:1b:71:41:ee:66:12:07:ed:d3:0c:96:e7:e7:71:52:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:23:15 2025 GMT Not After : Dec 10 01:28:15 2026 GMT Subject: CN=0FEA90CD690A05EE773647A54DEBC4BB29D19FF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:fa:dd:8e:39:16:17:9d:e0:e2:21:ad:d7:16: 1c:e3:50:02:fd:d1:c5:70:92:47:fe:54:92:a8:cc: ff:5d:00:b4:f5:9e:26:dc:c4:1e:08:ef:f3:59:6b: 32:84:a6:e2:ae:7c:d8:e1:06:67:3b:af:04:c5:30: 29:cd:cd:3d:a9:e6:6d:d4:90:d8:10:aa:8f:96:08: 09:ba:05:ec:1a:52:4f:1d:3c:e2:09:66:a0:62:12: a6:cf:6f:d1:3e:d1:53:21:a0:0d:0c:8b:53:a1:c0: 48:b8:d1:a8:bb:59:85:d7:da:16:14:f4:0f:40:41: 45:8a:45:39:c5:bc:38:8e:31:99:e0:67:63:57:51: 4c:0a:2e:dc:af:9d:c2:7c:89:4c:7c:a3:02:9c:2f: 51:ad:84:73:b7:31:bb:86:03:ac:16:2d:fd:2f:bc: 4f:36:93:bc:f8:e9:19:21:f9:13:78:c4:ce:0e:1c: 3e:6f:9b:bc:e6:6c:0a:54:72:f1:6e:1a:52:3d:89: 08:47:33:04:f4:79:57:5a:ba:57:e2:d7:9f:b5:97: 83:b7:dc:e2:af:7d:72:50:52:b4:f8:02:4f:e0:96: 36:2d:af:63:69:4c:b5:75:0c:c7:1d:3b:6a:40:9e: 09:f9:b9:fe:a1:45:4e:a8:fd:6c:b4:90:d7:75:a8: 84:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:EA:90:CD:69:0A:05:EE:77:36:47:A5:4D:EB:C4:BB:29:D1:9F:F5 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036393a3a2f34382d3438203d3e20323135333836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f069::/48 Signature Algorithm: sha256WithRSAEncryption 8e:b1:b6:ba:aa:95:8c:6a:3d:c8:92:de:36:99:e3:b1:49:d8: d6:9c:38:91:91:b0:86:74:e3:14:3a:e8:42:65:98:9e:9e:db: ee:06:b3:f5:e4:19:32:1d:f0:5a:68:5b:29:5d:a2:51:56:a2: 53:f7:49:ea:85:75:87:d8:8c:d9:21:b4:fb:5c:6e:0f:71:2c: a4:b9:cb:13:da:ef:23:83:a4:bb:da:10:8c:15:94:44:2c:7f: 9a:6e:aa:47:3a:ce:c3:21:d0:c4:9a:7d:e0:fc:ca:33:ca:92: 5c:65:c7:ef:93:a3:0d:74:b5:c6:d3:6e:2e:6c:56:cb:ac:b3: a4:3c:93:39:8e:f1:1e:4e:bb:ce:c2:1c:fb:26:91:3b:4c:a5: 8b:7f:75:2f:77:04:ca:9d:bd:4d:b0:02:92:0b:5d:76:91:36: 6a:f0:14:21:f8:fc:95:f5:bc:d3:e6:60:fc:25:7c:64:b9:08: 35:c5:f2:a5:c7:cb:bf:bf:ba:68:1f:f7:56:a0:ce:9a:64:be: d7:37:06:ed:af:51:6e:05:54:fd:20:d0:b1:06:c8:9c:c4:67: bf:31:46:81:c8:cc:82:f9:6d:28:fa:cf:d9:3f:23:35:d5:3d: 86:d5:bb:a2:76:97:3a:02:6f:81:4a:98:3e:36:f0:18:64:b2: 20:4a:74:ec -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUGU30rhtxQe5mEgft0wyW5+dxUhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIzMTVaFw0yNjEyMTAwMTI4MTVaMDMxMTAvBgNV BAMTKDBGRUE5MENENjkwQTA1RUU3NzM2NDdBNTRERUJDNEJCMjlEMTlGRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5+t2OORYXneDiIa3XFhzjUAL9 0cVwkkf+VJKozP9dALT1nibcxB4I7/NZazKEpuKufNjhBmc7rwTFMCnNzT2p5m3U kNgQqo+WCAm6BewaUk8dPOIJZqBiEqbPb9E+0VMhoA0Mi1OhwEi40ai7WYXX2hYU 9A9AQUWKRTnFvDiOMZngZ2NXUUwKLtyvncJ8iUx8owKcL1GthHO3MbuGA6wWLf0v vE82k7z46Rkh+RN4xM4OHD5vm7zmbApUcvFuGlI9iQhHMwT0eVdaulfi15+1l4O3 3OKvfXJQUrT4Ak/gljYtr2NpTLV1DMcdO2pAngn5uf6hRU6o/Wy0kNd1qIS3AgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUD+qQzWkKBe53NkelTevEuynRn/UwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM2MzkzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzMzM4MzYu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8GkwDQYJKoZIhvcNAQELBQADggEBAI6xtrqqlYxqPciS 3jaZ47FJ2NacOJGRsIZ04xQ66EJlmJ6e2+4Gs/XkGTId8FpoWyldolFWolP3SeqF dYfYjNkhtPtcbg9xLKS5yxPa7yODpLvaEIwVlEQsf5puqkc6zsMh0MSafeD8yjPK klxlx++Tow10tcbTbi5sVsuss6Q8kzmO8R5Ou87CHPsmkTtMpYt/dS93BMqdvU2w ApILXXaRNmrwFCH4/JX1vNPmYPwlfGS5CDXF8qXHy7+/umgf91agzppkvtc3Bu2v UW4FVP0g0LEGyJzEZ78xRoHIzIL5bSj6z9k/IzXVPYbVu6J2lzoCb4FKmD428Bhk siBKdOw= -----END CERTIFICATE-----Generated at Fri Dec 12 14:31:59 2025 by rpki-client