This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036663a3a2f34382d3438203d3e20323134393330.roa File: 326130653a386630323a663036663a3a2f34382d3438203d3e20323134393330.roa (raw, json) Hash identifier: retHIJU+OEtxVBS8V8jgLUhkCyVMMNuYOtSiXFFGSio= Subject key identifier: 87:CF:7F:E2:66:84:4D:EA:A7:7B:04:1D:6C:E3:FB:30:09:98:FB:37 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 5CB88E802A50FD7779B8AC7B4C4967F6CB4EC418 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036663a3a2f34382d3438203d3e20323134393330.roa Signing time: Thu 11 Dec 2025 01:27:34 +0000 ROA not before: Thu 11 Dec 2025 01:22:34 +0000 ROA not after: Thu 10 Dec 2026 01:27:34 +0000 asID: 214930 IP address blocks: 2a0e:8f02:f06f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b8:8e:80:2a:50:fd:77:79:b8:ac:7b:4c:49:67:f6:cb:4e:c4:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:22:34 2025 GMT Not After : Dec 10 01:27:34 2026 GMT Subject: CN=87CF7FE266844DEAA77B041D6CE3FB300998FB37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7d:7d:74:d7:2c:8d:c7:4f:d4:b5:4e:0c:61: 3c:35:07:50:61:df:b9:da:5a:65:fb:09:11:18:a3: 6e:c3:be:c8:a8:26:1f:aa:89:74:83:63:da:1a:f5: 24:88:c7:ec:c5:ba:03:d3:f7:23:47:be:97:04:0a: 16:28:94:ff:32:64:f3:e9:5a:62:55:ab:68:d3:98: e0:e1:b2:49:4a:ec:f8:9a:3d:59:40:bd:51:e0:ec: 78:9b:83:86:cf:9c:62:e0:49:15:09:53:14:3f:85: b4:86:34:46:bd:ce:f3:22:40:30:22:3a:f4:33:57: c5:29:20:f6:a1:c3:9d:f0:23:fa:cc:0f:31:10:79: 38:8b:ec:b1:1c:84:ce:3a:d9:fb:8f:fd:54:e4:b6: 06:3c:a2:7d:cd:c7:1d:fe:9f:00:a7:2f:59:6a:d2: 4d:78:a3:3f:48:d6:67:db:65:7b:cd:c0:b4:fc:4f: e4:82:84:97:77:0d:46:82:49:2b:ef:fe:be:56:e1: 9a:7b:0b:a9:ee:19:0d:f8:a5:80:fa:a7:73:e9:41: 36:19:4a:80:e2:71:60:6a:a7:99:5e:dd:d8:05:49: e1:a4:9f:66:5d:3f:ee:21:8e:88:18:9a:b6:72:57: e4:b1:72:c0:c1:4a:60:77:ce:c9:82:03:b7:58:d6: ba:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CF:7F:E2:66:84:4D:EA:A7:7B:04:1D:6C:E3:FB:30:09:98:FB:37 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663036663a3a2f34382d3438203d3e20323134393330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f06f::/48 Signature Algorithm: sha256WithRSAEncryption 18:e3:5d:6f:c4:21:b5:0f:f1:4b:9e:f3:58:d6:78:15:5c:00: b0:e7:17:c3:41:b5:8f:55:29:b5:d1:11:6f:5f:45:c8:8f:f0: 06:cb:e7:be:61:1d:7d:6f:10:97:f1:50:36:af:53:80:09:fb: 95:2c:94:6f:d7:5a:47:4f:9d:7b:2f:5f:01:31:97:32:a8:54: 5d:09:68:ad:df:4d:d3:b5:80:70:9d:6b:83:3c:62:e0:41:4f: 95:53:9c:4c:93:e9:a0:e4:ef:34:ef:a6:5b:93:71:0b:f7:c7: f6:ca:87:01:6a:9e:c0:6b:c3:dd:14:11:d1:23:11:96:da:97: 59:2f:14:ad:9d:33:f0:29:2b:88:9c:19:a7:f5:db:47:c1:04: 66:28:c1:68:25:8d:fb:be:ff:05:ff:c1:4c:69:95:bc:9b:a9: 06:9c:31:69:7c:ac:8d:e9:ed:5c:11:7f:5e:a6:39:6f:95:bd: 7e:2f:06:28:17:8d:b7:13:7f:c8:5d:ed:7f:05:18:8a:90:f2: 7b:db:4c:be:42:88:5a:a6:e6:ff:e0:e0:01:ec:48:eb:e2:6c: 36:cb:eb:e8:97:5f:f9:db:39:0d:8b:34:59:6e:42:2d:0b:51: 93:97:46:d2:71:0e:7a:da:2d:2c:17:c4:78:f6:5a:58:04:9a: 72:b5:ed:84 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUXLiOgCpQ/Xd5uKx7TEln9stOxBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIyMzRaFw0yNjEyMTAwMTI3MzRaMDMxMTAvBgNV BAMTKDg3Q0Y3RkUyNjY4NDRERUFBNzdCMDQxRDZDRTNGQjMwMDk5OEZCMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSfX101yyNx0/UtU4MYTw1B1Bh 37naWmX7CREYo27DvsioJh+qiXSDY9oa9SSIx+zFugPT9yNHvpcEChYolP8yZPPp WmJVq2jTmODhsklK7PiaPVlAvVHg7Hibg4bPnGLgSRUJUxQ/hbSGNEa9zvMiQDAi OvQzV8UpIPahw53wI/rMDzEQeTiL7LEchM462fuP/VTktgY8on3Nxx3+nwCnL1lq 0k14oz9I1mfbZXvNwLT8T+SChJd3DUaCSSvv/r5W4Zp7C6nuGQ34pYD6p3PpQTYZ SoDicWBqp5le3dgFSeGkn2ZdP+4hjogYmrZyV+SxcsDBSmB3zsmCA7dY1ro5AgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUh89/4maETeqnewQdbOP7MAmY+zcwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM2NjYzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzQzOTMzMzAu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8G8wDQYJKoZIhvcNAQELBQADggEBABjjXW/EIbUP8Uue 81jWeBVcALDnF8NBtY9VKbXREW9fRciP8AbL575hHX1vEJfxUDavU4AJ+5UslG/X WkdPnXsvXwExlzKoVF0JaK3fTdO1gHCda4M8YuBBT5VTnEyT6aDk7zTvpluTcQv3 x/bKhwFqnsBrw90UEdEjEZbal1kvFK2dM/ApK4icGaf120fBBGYowWgljfu+/wX/ wUxplbybqQacMWl8rI3p7VwRf16mOW+VvX4vBigXjbcTf8hd7X8FGIqQ8nvbTL5C iFqm5v/g4AHsSOvibDbL6+iXX/nbOQ2LNFluQi0LUZOXRtJxDnraLSwXxHj2WlgE mnK17YQ= -----END CERTIFICATE-----Generated at Fri Dec 12 14:31:21 2025 by rpki-client