This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037313a3a2f34382d3438203d3e20323134303736.roa File: 326130653a386630323a663037313a3a2f34382d3438203d3e20323134303736.roa (raw, json) Hash identifier: vtIhMr2/EjZMKc1AuHEbxCTIiztqwWu9gj5RCT4Dj2k= Subject key identifier: EB:FE:1C:62:E5:EE:CE:06:1B:55:3C:B9:94:9E:CD:A9:E3:74:49:AF Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 3F5197F572BC9AA64E064455088DCCFE4F205C4C Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037313a3a2f34382d3438203d3e20323134303736.roa Signing time: Thu 11 Dec 2025 01:27:21 +0000 ROA not before: Thu 11 Dec 2025 01:22:21 +0000 ROA not after: Thu 10 Dec 2026 01:27:21 +0000 asID: 214076 IP address blocks: 2a0e:8f02:f071::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:51:97:f5:72:bc:9a:a6:4e:06:44:55:08:8d:cc:fe:4f:20:5c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:22:21 2025 GMT Not After : Dec 10 01:27:21 2026 GMT Subject: CN=EBFE1C62E5EECE061B553CB9949ECDA9E37449AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:7a:66:09:99:6a:24:e7:8c:50:ce:e5:a4: f9:06:7d:8f:ed:88:05:bd:3d:3a:5a:9b:93:ee:4c: a3:ae:c8:9e:cd:0e:b8:fe:e1:d3:f8:ac:a4:a9:2d: 05:e8:d2:9e:ee:12:b1:24:6a:9b:68:b9:8f:63:54: c6:eb:b4:cc:39:0a:c4:21:a7:6c:50:36:a0:2f:c4: ce:22:a5:a7:ac:4b:46:dd:2d:b9:f8:f2:b8:84:e9: a9:5f:a7:62:94:0c:ed:36:9e:3f:06:76:c9:95:5a: 3d:c3:e8:63:ad:50:f6:33:77:29:3f:87:56:47:63: 43:02:ba:f3:99:91:00:5f:74:54:7b:3f:6e:35:ff: 3a:5a:7b:74:73:77:f4:e1:0e:41:46:a7:37:d7:45: 3d:f8:f9:6a:6a:b5:62:71:60:b9:96:2e:2e:ad:6b: ea:ca:74:f6:3f:15:1e:4c:72:3d:d8:32:f5:40:a8: 61:ef:8e:76:bc:bc:2c:ca:44:86:28:22:f3:c0:b2: 9b:3a:22:a3:46:b9:57:11:8e:72:3f:7c:8b:64:45: 2e:09:2c:d8:35:59:25:97:51:3b:4e:5e:4a:2f:ab: f6:26:22:d4:0a:66:9f:01:bf:f5:ae:9b:fe:b7:0f: 66:a9:ac:e0:3e:37:c2:7d:ec:b4:fe:01:5c:36:b1: 51:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FE:1C:62:E5:EE:CE:06:1B:55:3C:B9:94:9E:CD:A9:E3:74:49:AF X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037313a3a2f34382d3438203d3e20323134303736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f071::/48 Signature Algorithm: sha256WithRSAEncryption b4:21:5a:4e:91:3b:7a:5e:91:f6:f6:7b:97:f4:dd:98:ca:0d: ec:2e:df:6c:02:d5:ad:77:c8:44:19:d7:02:2a:17:43:02:82: d3:37:2b:90:e6:5b:43:50:7b:73:e2:4e:a8:f1:3f:da:e1:fa: 40:9b:44:cb:5a:91:ca:ab:6b:e6:1b:f7:f7:5e:06:98:8f:30: 2b:a6:01:9b:91:d6:22:f1:71:9d:18:5a:a4:c7:75:e0:05:89: 78:8c:9d:a7:83:84:6a:37:79:a5:63:03:c4:d3:03:dc:8c:e9: 82:3e:68:19:12:9b:38:6e:4f:12:ad:48:c2:c1:a4:15:c6:73: 1b:69:a2:65:af:ce:c6:17:c9:c4:9e:89:72:30:23:d9:e8:26: 44:5d:0b:71:b5:c5:1a:34:54:2b:a2:49:73:22:50:e8:59:29: 02:3b:54:bb:18:8d:31:23:a7:97:1d:72:b8:be:94:ea:10:10: ba:22:84:b5:84:75:37:c1:1d:81:44:5e:3b:c5:89:cd:20:df: 64:1d:d7:d0:26:12:a7:ed:af:9c:57:04:a5:35:ae:d0:c3:fc: b5:81:f8:1b:25:d6:db:d3:5b:fd:b1:ce:e7:7f:54:dd:92:96: 91:fb:63:dd:af:32:ca:01:c3:2c:5e:35:9c:26:76:46:3d:27: 90:43:c3:05 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUP1GX9XK8mqZOBkRVCI3M/k8gXEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIyMjFaFw0yNjEyMTAwMTI3MjFaMDMxMTAvBgNV BAMTKEVCRkUxQzYyRTVFRUNFMDYxQjU1M0NCOTk0OUVDREE5RTM3NDQ5QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4inpmCZlqJOeMUM7lpPkGfY/t iAW9PTpam5PuTKOuyJ7NDrj+4dP4rKSpLQXo0p7uErEkaptouY9jVMbrtMw5CsQh p2xQNqAvxM4ipaesS0bdLbn48riE6alfp2KUDO02nj8GdsmVWj3D6GOtUPYzdyk/ h1ZHY0MCuvOZkQBfdFR7P241/zpae3Rzd/ThDkFGpzfXRT34+WpqtWJxYLmWLi6t a+rKdPY/FR5Mcj3YMvVAqGHvjna8vCzKRIYoIvPAsps6IqNGuVcRjnI/fItkRS4J LNg1WSWXUTtOXkovq/YmItQKZp8Bv/Wum/63D2aprOA+N8J97LT+AVw2sVGPAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQU6/4cYuXuzgYbVTy5lJ7NqeN0Sa8wHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM3MzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzQzMDM3MzYu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8HEwDQYJKoZIhvcNAQELBQADggEBALQhWk6RO3pekfb2 e5f03ZjKDewu32wC1a13yEQZ1wIqF0MCgtM3K5DmW0NQe3PiTqjxP9rh+kCbRMta kcqra+Yb9/deBpiPMCumAZuR1iLxcZ0YWqTHdeAFiXiMnaeDhGo3eaVjA8TTA9yM 6YI+aBkSmzhuTxKtSMLBpBXGcxtpomWvzsYXycSeiXIwI9noJkRdC3G1xRo0VCui SXMiUOhZKQI7VLsYjTEjp5cdcri+lOoQELoihLWEdTfBHYFEXjvFic0g32Qd19Am Eqftr5xXBKU1rtDD/LWB+Bsl1tvTW/2xzud/VN2SlpH7Y92vMsoBwyxeNZwmdkY9 J5BDwwU= -----END CERTIFICATE-----Generated at Fri Dec 12 14:33:31 2025 by rpki-client