This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037303a3a2f34382d3438203d3e20323134393031.roa File: 326130653a386630323a663037303a3a2f34382d3438203d3e20323134393031.roa (raw, json) Hash identifier: d11TZnQ5XaIDQf6vMzp8hB7AKRISIPB85RCNYKtHr28= Subject key identifier: 21:A0:C3:98:AD:24:1B:64:77:50:3E:31:ED:39:87:ED:05:37:46:F2 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 16B82BC4C708B910E921EA68B9BEC2681E655E8F Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037303a3a2f34382d3438203d3e20323134393031.roa Signing time: Thu 11 Dec 2025 01:27:27 +0000 ROA not before: Thu 11 Dec 2025 01:22:27 +0000 ROA not after: Thu 10 Dec 2026 01:27:27 +0000 asID: 214901 IP address blocks: 2a0e:8f02:f070::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b8:2b:c4:c7:08:b9:10:e9:21:ea:68:b9:be:c2:68:1e:65:5e:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:22:27 2025 GMT Not After : Dec 10 01:27:27 2026 GMT Subject: CN=21A0C398AD241B6477503E31ED3987ED053746F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:49:9c:97:f2:f5:07:c1:d0:4d:59:7c:b1:07: 61:f7:8b:95:b9:2a:ab:b8:be:3c:d7:b0:ae:06:79: c9:02:c0:87:f5:35:cf:a9:0b:2c:85:49:00:0f:88: 57:aa:26:d6:45:45:a3:e8:3c:4b:4c:e3:80:ea:19: 64:11:a5:09:8f:ae:1a:aa:7e:c5:cc:94:17:df:c6: 6b:42:06:7f:84:c6:11:22:74:1b:bf:1d:31:22:12: ef:aa:bc:cd:2e:4b:6b:e3:69:52:f7:e7:74:d4:f8: 64:07:2e:93:9e:8c:58:d9:85:68:d5:a7:13:c1:d9: ca:18:f5:72:a0:6e:ae:07:22:9b:7f:41:ef:6b:28: b2:5d:fc:95:00:bb:4d:3f:7b:12:87:6a:71:02:63: 34:72:f5:00:68:07:34:67:3f:3d:bb:53:99:25:8b: 7c:a4:c8:a1:a6:ef:6b:3a:81:53:00:6b:60:dc:04: 2f:1f:03:e7:ac:da:f0:81:91:60:16:cc:b5:8e:16: 8c:4c:14:db:ae:61:a0:27:ca:96:9e:e8:55:d3:b9: 1e:0d:4a:31:5d:4d:3c:4e:4a:15:77:13:91:b7:a9: d1:85:97:da:80:9e:d3:f1:b2:af:99:63:a9:90:dd: 94:3a:9c:74:c6:99:82:d8:3a:e2:f3:ab:71:12:54: 2b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A0:C3:98:AD:24:1B:64:77:50:3E:31:ED:39:87:ED:05:37:46:F2 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037303a3a2f34382d3438203d3e20323134393031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f070::/48 Signature Algorithm: sha256WithRSAEncryption 56:16:7c:07:e5:fd:a3:45:5c:63:04:16:9a:66:72:6c:40:84: 70:4d:f5:47:aa:c5:8a:42:0a:48:ad:c8:aa:e1:3b:f8:84:50: b5:2b:75:c3:b3:6c:eb:22:6e:28:37:88:db:64:f0:f0:9c:89: a3:4a:80:d8:76:94:d2:77:06:cb:b6:b6:44:5e:fc:84:8a:ad: 50:01:14:26:d8:12:6c:ae:2d:67:3c:46:de:ee:b9:92:fe:9f: 6b:93:56:7f:7c:78:5f:70:51:85:18:50:8a:53:7b:02:ee:bf: 6c:4f:9f:fb:34:8f:a6:a5:8a:8e:81:aa:40:1f:d2:2f:77:9a: 89:62:47:10:a4:62:4e:d8:a0:48:56:b4:f2:e1:5c:75:0e:4a: 34:66:3f:73:30:b8:af:0c:9b:8a:7e:4a:d8:8d:82:d6:ee:7d: a5:79:84:50:ec:ec:dd:ce:00:03:c9:e3:0f:5b:36:46:fc:98: 6f:9e:53:b0:6b:a9:da:4e:f6:88:b0:71:bd:6e:06:b1:a4:37: 05:77:c9:35:3e:3c:85:98:c7:59:78:42:9c:10:40:92:d6:33: 5e:59:79:b2:34:0e:bd:a8:92:0d:b8:b4:92:fc:98:08:e2:d3: 19:89:a4:32:38:c4:29:05:5b:0a:7d:fa:22:27:03:2d:71:ee: b7:7a:12:e7 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUFrgrxMcIuRDpIepoub7CaB5lXo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIyMjdaFw0yNjEyMTAwMTI3MjdaMDMxMTAvBgNV BAMTKDIxQTBDMzk4QUQyNDFCNjQ3NzUwM0UzMUVEMzk4N0VEMDUzNzQ2RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSZyX8vUHwdBNWXyxB2H3i5W5 Kqu4vjzXsK4GeckCwIf1Nc+pCyyFSQAPiFeqJtZFRaPoPEtM44DqGWQRpQmPrhqq fsXMlBffxmtCBn+ExhEidBu/HTEiEu+qvM0uS2vjaVL353TU+GQHLpOejFjZhWjV pxPB2coY9XKgbq4HIpt/Qe9rKLJd/JUAu00/exKHanECYzRy9QBoBzRnPz27U5kl i3ykyKGm72s6gVMAa2DcBC8fA+es2vCBkWAWzLWOFoxMFNuuYaAnypae6FXTuR4N SjFdTTxOShV3E5G3qdGFl9qAntPxsq+ZY6mQ3ZQ6nHTGmYLYOuLzq3ESVCt3AgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUIaDDmK0kG2R3UD4x7TmH7QU3RvIwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM3MzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzQzOTMwMzEu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8HAwDQYJKoZIhvcNAQELBQADggEBAFYWfAfl/aNFXGME FppmcmxAhHBN9UeqxYpCCkityKrhO/iEULUrdcOzbOsibig3iNtk8PCciaNKgNh2 lNJ3Bsu2tkRe/ISKrVABFCbYEmyuLWc8Rt7uuZL+n2uTVn98eF9wUYUYUIpTewLu v2xPn/s0j6alio6BqkAf0i93moliRxCkYk7YoEhWtPLhXHUOSjRmP3MwuK8Mm4p+ StiNgtbufaV5hFDs7N3OAAPJ4w9bNkb8mG+eU7BrqdpO9oiwcb1uBrGkNwV3yTU+ PIWYx1l4QpwQQJLWM15ZebI0Dr2okg24tJL8mAji0xmJpDI4xCkFWwp9+iInAy1x 7rd6Euc= -----END CERTIFICATE-----Generated at Fri Dec 12 14:33:31 2025 by rpki-client