This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036633a3a2f34382d3438203d3e20323135303036.roa File: 326130653a386630323a663036633a3a2f34382d3438203d3e20323135303036.roa (raw, json) Hash identifier: GIH0i9HY7MCsLMCthgM6Avjlr22qSSMsmbUWHqbY5A8= Subject key identifier: EB:7D:61:02:E4:CF:A0:89:3E:17:7D:D7:91:FE:9C:82:D0:3B:13:DD Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 09AAB4729E36ACC9755F82136D922E10ECEA7C29 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036633a3a2f34382d3438203d3e20323135303036.roa Signing time: Thu 11 Dec 2025 01:27:53 +0000 ROA not before: Thu 11 Dec 2025 01:22:53 +0000 ROA not after: Thu 10 Dec 2026 01:27:53 +0000 asID: 215006 IP address blocks: 2a0e:8f02:f06c::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:aa:b4:72:9e:36:ac:c9:75:5f:82:13:6d:92:2e:10:ec:ea:7c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:22:53 2025 GMT Not After : Dec 10 01:27:53 2026 GMT Subject: CN=EB7D6102E4CFA0893E177DD791FE9C82D03B13DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:fe:c6:6c:3e:2c:4a:30:a1:1e:04:97:53: ad:cc:42:62:23:90:46:6d:36:e9:93:0f:3f:27:06: ea:25:74:bd:46:fd:7c:e9:3b:7c:fa:2d:1d:0d:c2: cd:b1:3d:69:11:a9:3e:2d:b5:f5:59:1b:d7:85:70: 88:61:4f:6e:0f:64:1d:ee:13:16:57:36:50:8f:ad: 87:2e:cc:c6:6c:de:cb:42:18:ea:9c:0b:1f:1f:e4: a0:a2:17:9a:f9:cc:1a:c5:df:e5:1f:60:65:86:f9: 9c:87:86:c5:38:ff:05:72:f0:5b:fc:62:1f:05:94: 1c:5f:5c:ba:4d:57:d1:9e:a1:4d:46:ce:2d:14:34: 4b:11:87:b0:63:99:d5:1d:1c:3f:e9:ba:68:1b:49: 6a:77:e3:ad:5b:81:12:46:58:7e:da:e1:c8:16:9d: 43:e4:12:09:f7:eb:7f:dd:fb:2f:bc:19:48:32:fe: 1d:3a:2a:04:16:8e:2e:36:7b:6f:34:5c:56:95:93: be:ad:4c:43:45:f7:2b:94:5a:8e:6a:89:2b:9f:1b: 5d:f8:3e:e1:0e:5d:1a:dc:3c:63:77:cd:cc:66:08: b5:57:a3:e8:b8:4f:33:ac:11:3e:35:4e:0b:4d:ff: 20:e7:43:86:3f:8a:03:2c:81:90:2b:69:59:cb:0e: 38:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7D:61:02:E4:CF:A0:89:3E:17:7D:D7:91:FE:9C:82:D0:3B:13:DD X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036633a3a2f34382d3438203d3e20323135303036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f06c::/48 Signature Algorithm: sha256WithRSAEncryption 42:12:84:72:c2:ea:3f:40:3a:a7:20:bd:ef:b2:2a:1d:9e:b6: b4:07:56:c6:3f:2f:7d:4b:a0:54:9f:45:7b:7b:59:8c:12:dc: 0f:55:51:5d:e2:a9:0f:64:f5:ff:24:d8:d0:58:32:4d:76:e9: ce:34:74:09:34:db:f2:d8:80:17:ea:6e:e4:5e:06:41:b8:1b: 5a:72:a1:eb:6d:1d:dd:a3:4e:20:20:c8:1f:26:67:04:75:ee: c6:f5:19:16:59:80:0c:61:f1:a5:88:59:d2:00:37:32:d9:5b: ae:f7:b7:c1:70:0f:32:6c:c0:52:42:84:00:7e:06:7e:5c:98: 2a:02:63:6d:8e:c3:e8:37:83:78:f1:8a:7a:cd:49:4f:ca:4f: 05:36:76:ed:87:2d:b2:9a:6a:44:2f:9c:74:97:ef:af:d9:3a: ed:78:ba:bb:1b:52:09:b7:6b:32:c2:b6:f7:c3:5e:4e:b3:12: 46:5f:0c:1f:c2:a6:ae:a6:be:41:40:4e:cf:6a:79:6f:5a:4b: 9e:c5:1d:95:58:fd:56:99:03:fa:69:d3:dd:23:75:16:6e:2d: fd:14:8e:79:fc:83:f7:23:64:12:ad:3c:b2:f8:03:e1:9e:44: 4f:e1:4e:40:02:ba:fd:a5:7d:b8:dd:2b:44:06:12:24:f2:7e: 23:e1:b3:96 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUCaq0cp42rMl1X4ITbZIuEOzqfCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIyNTNaFw0yNjEyMTAwMTI3NTNaMDMxMTAvBgNV BAMTKEVCN0Q2MTAyRTRDRkEwODkzRTE3N0RENzkxRkU5QzgyRDAzQjEzREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC30v7GbD4sSjChHgSXU63MQmIj kEZtNumTDz8nBuoldL1G/XzpO3z6LR0Nws2xPWkRqT4ttfVZG9eFcIhhT24PZB3u ExZXNlCPrYcuzMZs3stCGOqcCx8f5KCiF5r5zBrF3+UfYGWG+ZyHhsU4/wVy8Fv8 Yh8FlBxfXLpNV9GeoU1Gzi0UNEsRh7BjmdUdHD/pumgbSWp3461bgRJGWH7a4cgW nUPkEgn363/d+y+8GUgy/h06KgQWji42e280XFaVk76tTENF9yuUWo5qiSufG134 PuEOXRrcPGN3zcxmCLVXo+i4TzOsET41TgtN/yDnQ4Y/igMsgZAraVnLDjijAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQU631hAuTPoIk+F33Xkf6cgtA7E90wHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM2NjMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzMDMwMzYu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8GwwDQYJKoZIhvcNAQELBQADggEBAEIShHLC6j9AOqcg ve+yKh2etrQHVsY/L31LoFSfRXt7WYwS3A9VUV3iqQ9k9f8k2NBYMk126c40dAk0 2/LYgBfqbuReBkG4G1pyoettHd2jTiAgyB8mZwR17sb1GRZZgAxh8aWIWdIANzLZ W673t8FwDzJswFJChAB+Bn5cmCoCY22Ow+g3g3jxinrNSU/KTwU2du2HLbKaakQv nHSX76/ZOu14ursbUgm3azLCtvfDXk6zEkZfDB/Cpq6mvkFATs9qeW9aS57FHZVY /VaZA/pp090jdRZuLf0Ujnn8g/cjZBKtPLL4A+GeRE/hTkACuv2lfbjdK0QGEiTy fiPhs5Y= -----END CERTIFICATE-----Generated at Fri Dec 12 14:31:22 2025 by rpki-client