This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036643a3a2f34382d3438203d3e20323134393939.roa File: 326130653a386630323a663036643a3a2f34382d3438203d3e20323134393939.roa (raw, json) Hash identifier: KNOQBupp9OxO/AHfd8hpigcVBg21D5+oWQx9k8gqPa8= Subject key identifier: 51:25:23:60:32:98:16:C3:44:1F:9F:86:42:29:9A:5B:9A:FF:11:2F Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 48AFE5403710FD32821B2D7821245D389A71A731 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036643a3a2f34382d3438203d3e20323134393939.roa Signing time: Thu 11 Dec 2025 01:27:46 +0000 ROA not before: Thu 11 Dec 2025 01:22:46 +0000 ROA not after: Thu 10 Dec 2026 01:27:46 +0000 asID: 214999 IP address blocks: 2a0e:8f02:f06d::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:af:e5:40:37:10:fd:32:82:1b:2d:78:21:24:5d:38:9a:71:a7:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:22:46 2025 GMT Not After : Dec 10 01:27:46 2026 GMT Subject: CN=51252360329816C3441F9F8642299A5B9AFF112F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f0:aa:72:e5:f5:37:82:fc:ad:a9:7d:e0:37: bc:6f:5d:b8:c2:f7:70:ce:67:0f:e1:0c:32:bc:5c: 44:4a:67:97:a3:64:76:45:ba:82:81:c4:4c:60:00: da:f7:2b:e7:e6:00:88:c4:85:d1:1c:09:a1:78:75: 0b:a8:14:4d:b5:77:61:9a:87:5c:e1:13:53:28:9f: fe:35:e4:73:88:4d:53:0d:9a:4d:dd:c6:e2:f3:42: 5d:ea:aa:7f:c9:7d:d8:ec:6c:6e:b2:87:54:6c:01: d0:50:79:eb:9a:40:8d:df:5f:d6:6a:41:fa:36:9d: 39:b7:cc:28:6d:ef:23:d6:a6:9d:c6:4f:bf:5a:f8: 75:90:30:45:89:33:35:25:ef:1e:cb:fd:72:21:3e: 9f:4b:1b:9a:c9:53:1e:49:2e:70:29:9b:80:c9:2a: 67:72:70:62:16:b2:2b:4c:f2:1b:3d:91:db:da:9c: 9b:25:03:ed:9f:38:d9:54:05:23:d7:5b:30:f0:cf: 7a:13:34:d1:8a:b9:de:d7:8d:e7:59:0a:5e:7e:13: d7:2b:44:ba:b0:be:59:50:6b:b6:bd:2b:48:7f:0f: d1:28:37:de:77:e2:c7:3f:f8:32:20:96:d1:44:91: 2f:8f:10:2c:06:44:fc:82:71:8d:f7:94:81:30:5b: c5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:25:23:60:32:98:16:C3:44:1F:9F:86:42:29:9A:5B:9A:FF:11:2F X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036643a3a2f34382d3438203d3e20323134393939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f06d::/48 Signature Algorithm: sha256WithRSAEncryption 58:4a:87:6b:5b:5f:b4:23:b0:6e:ed:84:2a:52:eb:df:e3:5c: 67:5c:32:a9:7c:6f:8e:bd:64:86:c5:ce:56:db:d5:55:be:40: de:14:0c:bd:9e:33:80:b1:75:9c:c4:eb:60:2f:45:57:95:06: 8a:92:b0:95:f9:3e:ff:d4:92:72:49:45:16:84:37:0d:27:9e: fc:b1:2c:95:a5:ca:a1:5c:80:39:05:fd:8b:5d:aa:dd:c9:4f: ee:5d:42:c6:2b:ef:59:4d:08:4a:17:6b:22:a2:bd:fe:c8:42: a4:4b:99:b3:92:3e:53:bd:00:47:91:15:d1:7e:0a:89:b4:7f: 2d:14:cf:5a:35:7d:3e:9a:54:7f:16:8e:63:9d:82:b9:45:2e: 5a:76:ed:5f:fa:ef:09:38:f4:d5:c7:7f:93:84:0f:96:0b:ad: cf:a3:84:d9:c3:46:de:cb:e4:bc:72:14:ff:a6:c3:be:48:05: 7d:8b:bc:36:84:28:26:05:e2:98:5a:ab:85:6c:1d:7a:40:57: ac:6d:86:9e:1b:75:a2:83:97:07:b1:21:e0:19:10:33:67:a4: dd:59:98:09:05:47:bb:e5:9a:70:3c:a0:b2:b4:07:32:9f:60: 6d:76:27:57:44:3f:36:70:73:62:96:8a:63:ee:74:b3:74:7c: d1:0a:7c:81 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUSK/lQDcQ/TKCGy14ISRdOJpxpzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIyNDZaFw0yNjEyMTAwMTI3NDZaMDMxMTAvBgNV BAMTKDUxMjUyMzYwMzI5ODE2QzM0NDFGOUY4NjQyMjk5QTVCOUFGRjExMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA8Kpy5fU3gvytqX3gN7xvXbjC 93DOZw/hDDK8XERKZ5ejZHZFuoKBxExgANr3K+fmAIjEhdEcCaF4dQuoFE21d2Ga h1zhE1Mon/415HOITVMNmk3dxuLzQl3qqn/JfdjsbG6yh1RsAdBQeeuaQI3fX9Zq Qfo2nTm3zCht7yPWpp3GT79a+HWQMEWJMzUl7x7L/XIhPp9LG5rJUx5JLnApm4DJ KmdycGIWsitM8hs9kdvanJslA+2fONlUBSPXWzDwz3oTNNGKud7XjedZCl5+E9cr RLqwvllQa7a9K0h/D9EoN9534sc/+DIgltFEkS+PECwGRPyCcY33lIEwW8WjAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUUSUjYDKYFsNEH5+GQimaW5r/ES8wHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM2NjQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzQzOTM5Mzku cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8G0wDQYJKoZIhvcNAQELBQADggEBAFhKh2tbX7QjsG7t hCpS69/jXGdcMql8b469ZIbFzlbb1VW+QN4UDL2eM4CxdZzE62AvRVeVBoqSsJX5 Pv/UknJJRRaENw0nnvyxLJWlyqFcgDkF/Ytdqt3JT+5dQsYr71lNCEoXayKivf7I QqRLmbOSPlO9AEeRFdF+Com0fy0Uz1o1fT6aVH8WjmOdgrlFLlp27V/67wk49NXH f5OED5YLrc+jhNnDRt7L5LxyFP+mw75IBX2LvDaEKCYF4phaq4VsHXpAV6xthp4b daKDlwexIeAZEDNnpN1ZmAkFR7vlmnA8oLK0BzKfYG12J1dEPzZwc2KWimPudLN0 fNEKfIE= -----END CERTIFICATE-----Generated at Fri Dec 12 14:31:21 2025 by rpki-client