This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036653a3a2f34382d3438203d3e20323134393539.roa File: 326130653a386630323a663036653a3a2f34382d3438203d3e20323134393539.roa (raw, json) Hash identifier: 8U5hM6zbvA6UwXoj7I/aljikdBIlHluJkwgjXrjgEYE= Subject key identifier: E0:E4:86:84:6D:88:BD:9A:94:06:F4:18:A2:6C:DE:C6:2F:82:5C:64 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 2B3707224922A8949DCA0397FF3DE68EC703E1A3 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036653a3a2f34382d3438203d3e20323134393539.roa Signing time: Thu 11 Dec 2025 01:27:40 +0000 ROA not before: Thu 11 Dec 2025 01:22:40 +0000 ROA not after: Thu 10 Dec 2026 01:27:40 +0000 asID: 214959 IP address blocks: 2a0e:8f02:f06e::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:37:07:22:49:22:a8:94:9d:ca:03:97:ff:3d:e6:8e:c7:03:e1:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:22:40 2025 GMT Not After : Dec 10 01:27:40 2026 GMT Subject: CN=E0E486846D88BD9A9406F418A26CDEC62F825C64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c9:25:17:33:fa:56:b1:5e:78:b5:a0:3f:3c: 24:6f:57:97:86:a9:4d:02:08:1c:c2:35:75:bc:48: 66:d4:f1:35:38:91:40:c0:13:34:00:58:5f:d3:1b: 6d:80:b4:8e:80:89:58:4f:99:83:89:a8:a3:4a:17: 95:fc:16:31:46:36:ba:71:cd:07:60:5d:bb:50:da: 2b:17:bb:69:1e:4e:13:c3:de:45:9a:dc:8d:af:0c: 87:bd:f7:43:89:e2:31:55:3d:f2:7b:20:65:23:ea: 2f:e9:fa:7c:d8:71:ea:8a:68:ef:30:26:ab:7b:94: 33:66:2d:7e:c0:56:e5:3c:2e:3b:57:6f:63:af:18: e0:45:4f:8f:77:48:6e:5d:53:45:62:28:20:50:f9: 31:97:37:2d:9d:73:75:e6:3a:81:36:56:de:95:ff: 50:cc:da:4f:87:fa:70:46:2f:d0:e0:ab:31:bf:50: 04:ab:87:c9:73:30:7c:91:11:c0:b6:b1:f9:d8:b0: e6:ba:f1:c3:c6:9e:d8:59:f1:46:4a:06:a5:8d:a3: 5c:42:81:72:4a:7a:17:32:c8:9c:0c:97:e0:dc:a3: 34:4b:b2:4e:ff:d1:6a:92:d2:98:21:68:fe:6b:73: df:ec:10:ed:fa:2d:40:3a:ef:57:e0:05:49:cd:ae: d0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E4:86:84:6D:88:BD:9A:94:06:F4:18:A2:6C:DE:C6:2F:82:5C:64 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036653a3a2f34382d3438203d3e20323134393539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f06e::/48 Signature Algorithm: sha256WithRSAEncryption 99:8c:84:c5:58:1e:ee:f2:11:7b:18:fd:a0:01:96:e2:9e:c8: 60:a6:46:7b:57:b7:4d:4a:50:6d:5e:33:85:dd:c2:ce:72:f4: c1:15:c8:50:00:54:8b:45:4e:1f:b0:17:72:9d:17:27:0c:ce: a7:86:11:9a:7a:6b:62:d3:9f:ca:b6:e1:1f:53:2e:35:c6:77: de:52:ce:18:1e:73:54:25:87:15:86:2d:62:c2:c2:06:a6:db: 90:5c:fe:56:f8:e6:d5:f0:3b:9d:3e:13:4b:5e:1b:96:52:c8: b3:79:23:c3:f9:f3:61:11:06:b0:da:fc:a4:d9:9c:ff:84:cc: 52:2a:9c:74:72:bc:38:31:6c:44:7e:f1:5d:4b:24:3d:a8:0b: 2a:a0:62:07:af:c6:a6:b8:ed:fd:55:7e:c8:c1:b6:9c:54:fc: 2c:c5:d2:ed:97:31:cd:21:a5:0c:ab:93:ea:a0:29:e1:65:e9: e4:45:33:91:65:02:db:5d:d2:6a:5b:43:98:6c:67:91:17:00: 65:15:0a:48:9d:1b:f6:29:db:83:4a:3b:8c:df:18:ce:ee:d5: c8:05:01:c8:39:48:34:4e:73:c9:af:9e:74:ac:98:fb:bf:c6: b1:3a:d1:6e:bd:c1:c6:34:1b:4c:74:c5:6a:1f:6b:51:0d:fc: 52:91:dc:1a -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUKzcHIkkiqJSdygOX/z3mjscD4aMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIyNDBaFw0yNjEyMTAwMTI3NDBaMDMxMTAvBgNV BAMTKEUwRTQ4Njg0NkQ4OEJEOUE5NDA2RjQxOEEyNkNERUM2MkY4MjVDNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPySUXM/pWsV54taA/PCRvV5eG qU0CCBzCNXW8SGbU8TU4kUDAEzQAWF/TG22AtI6AiVhPmYOJqKNKF5X8FjFGNrpx zQdgXbtQ2isXu2keThPD3kWa3I2vDIe990OJ4jFVPfJ7IGUj6i/p+nzYceqKaO8w Jqt7lDNmLX7AVuU8LjtXb2OvGOBFT493SG5dU0ViKCBQ+TGXNy2dc3XmOoE2Vt6V /1DM2k+H+nBGL9DgqzG/UASrh8lzMHyREcC2sfnYsOa68cPGnthZ8UZKBqWNo1xC gXJKehcyyJwMl+DcozRLsk7/0WqS0pghaP5rc9/sEO36LUA671fgBUnNrtB7AgMB AAGjggJLMIICRzAdBgNVHQ4EFgQU4OSGhG2IvZqUBvQYomzexi+CXGQwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM2NjUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzQzOTM1Mzku cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8G4wDQYJKoZIhvcNAQELBQADggEBAJmMhMVYHu7yEXsY /aABluKeyGCmRntXt01KUG1eM4Xdws5y9MEVyFAAVItFTh+wF3KdFycMzqeGEZp6 a2LTn8q24R9TLjXGd95Szhgec1QlhxWGLWLCwgam25Bc/lb45tXwO50+E0teG5ZS yLN5I8P582ERBrDa/KTZnP+EzFIqnHRyvDgxbER+8V1LJD2oCyqgYgevxqa47f1V fsjBtpxU/CzF0u2XMc0hpQyrk+qgKeFl6eRFM5FlAttd0mpbQ5hsZ5EXAGUVCkid G/Yp24NKO4zfGM7u1cgFAcg5SDROc8mvnnSsmPu/xrE60W69wcY0G0x0xWofa1EN /FKR3Bo= -----END CERTIFICATE-----Generated at Fri Dec 12 14:32:00 2025 by rpki-client