This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037333a3a2f34382d3438203d3e20323133363535.roa File: 326130653a386630323a663037333a3a2f34382d3438203d3e20323133363535.roa (raw, json) Hash identifier: Tl52N7izEsdRdhc5kMlS6ir1Yn1LTpOCXum3f60Mmk8= Subject key identifier: 3C:66:DD:07:D5:0D:58:62:76:39:F9:83:08:AF:1F:D1:AA:27:75:53 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 48E70852DF28449106B6E46FACAF7F7EBAEB52D1 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037333a3a2f34382d3438203d3e20323133363535.roa Signing time: Thu 11 Dec 2025 01:27:16 +0000 ROA not before: Thu 11 Dec 2025 01:22:16 +0000 ROA not after: Thu 10 Dec 2026 01:27:16 +0000 asID: 213655 IP address blocks: 2a0e:8f02:f073::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e7:08:52:df:28:44:91:06:b6:e4:6f:ac:af:7f:7e:ba:eb:52:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:22:16 2025 GMT Not After : Dec 10 01:27:16 2026 GMT Subject: CN=3C66DD07D50D58627639F98308AF1FD1AA277553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9e:c8:af:39:4d:31:c7:89:0d:54:26:38:af: 6b:23:25:17:72:f1:5b:aa:a0:e2:81:a7:1b:83:ab: 9c:cc:6d:1a:18:ba:bd:ad:b1:29:30:96:03:f9:8f: 9b:51:08:e4:2c:9e:92:7d:9c:fb:dc:c0:f3:39:e2: 03:a5:42:e3:85:72:20:cb:b3:7c:26:51:8b:f3:5b: 14:cc:dd:4b:7f:ca:60:71:39:76:37:d6:77:c3:38: 78:01:c5:2a:d5:b4:6a:b6:5b:da:b9:92:45:95:04: 3e:e1:4c:f8:08:26:a4:11:d7:80:02:e5:9e:d3:0c: b8:56:b5:89:28:4d:03:67:1c:80:a5:7d:d9:f9:08: 6e:4b:d2:61:e3:08:d8:1e:39:f2:5b:30:7d:3d:92: 58:87:00:e9:8d:02:91:df:de:ea:7f:40:b0:44:08: 04:b2:a9:e1:e3:a4:ef:d3:ee:f3:30:28:8c:ef:83: 8b:13:6b:58:79:4e:58:73:2a:3f:d2:6c:80:9a:34: 2f:fd:12:80:51:82:66:37:91:a8:e3:63:30:ce:9a: ba:fb:d1:97:d4:93:0b:be:f2:c1:8d:8d:1e:30:ab: bd:5c:96:92:0d:08:7b:d4:86:54:4f:36:44:55:90: 8d:0c:65:dc:1f:11:56:1c:05:59:5b:fd:76:fd:8d: 57:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:66:DD:07:D5:0D:58:62:76:39:F9:83:08:AF:1F:D1:AA:27:75:53 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037333a3a2f34382d3438203d3e20323133363535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f073::/48 Signature Algorithm: sha256WithRSAEncryption 2b:4a:a7:72:ba:25:4e:5d:24:b1:be:1a:6c:0c:d4:10:56:50: c9:fe:45:f0:5b:82:b0:ac:4a:0c:91:3a:4d:bd:e9:f0:70:4b: 30:e5:de:52:7b:70:27:76:8e:64:d7:f2:22:92:43:8a:3f:85: 05:c7:16:5f:a0:2a:8a:5d:1f:4b:3f:18:74:33:c0:26:af:f2: 53:b3:3d:4e:48:31:c8:67:eb:38:f7:3a:35:ee:7a:67:d1:e2: 47:7e:5f:e0:8c:51:4c:c0:09:45:55:80:41:98:30:55:36:6a: 49:c2:f8:78:15:f8:bd:52:67:9c:91:44:11:43:c0:51:9c:92: 1f:22:32:f9:e8:f3:67:e1:be:79:94:dc:78:be:4b:f7:dd:13: 20:1e:2e:e5:2b:9f:8b:10:ff:ac:f0:2d:61:e2:da:e8:9b:cf: e6:2d:fe:b9:1a:b1:2f:64:eb:23:b6:d9:5e:98:95:ab:48:03: 35:eb:5c:b8:63:95:1f:12:36:c6:77:28:ab:65:f9:db:ef:14: 5a:25:bb:ce:26:1b:cb:41:ed:1e:80:46:85:25:58:0e:06:f5: c6:53:64:f7:8a:69:fa:53:3e:87:d8:d7:34:43:6d:e9:9b:bd: 4a:a0:cf:2c:7f:a1:2f:a3:1c:21:a5:1e:42:fb:2f:ec:df:19: 2f:a5:a9:d5 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUSOcIUt8oRJEGtuRvrK9/frrrUtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIyMTZaFw0yNjEyMTAwMTI3MTZaMDMxMTAvBgNV BAMTKDNDNjZERDA3RDUwRDU4NjI3NjM5Rjk4MzA4QUYxRkQxQUEyNzc1NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHnsivOU0xx4kNVCY4r2sjJRdy 8VuqoOKBpxuDq5zMbRoYur2tsSkwlgP5j5tRCOQsnpJ9nPvcwPM54gOlQuOFciDL s3wmUYvzWxTM3Ut/ymBxOXY31nfDOHgBxSrVtGq2W9q5kkWVBD7hTPgIJqQR14AC 5Z7TDLhWtYkoTQNnHIClfdn5CG5L0mHjCNgeOfJbMH09kliHAOmNApHf3up/QLBE CASyqeHjpO/T7vMwKIzvg4sTa1h5TlhzKj/SbICaNC/9EoBRgmY3kajjYzDOmrr7 0ZfUkwu+8sGNjR4wq71clpINCHvUhlRPNkRVkI0MZdwfEVYcBVlb/Xb9jVf9AgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUPGbdB9UNWGJ2OfmDCK8f0aondVMwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM3MzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzMzNjM1MzUu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8HMwDQYJKoZIhvcNAQELBQADggEBACtKp3K6JU5dJLG+ GmwM1BBWUMn+RfBbgrCsSgyROk296fBwSzDl3lJ7cCd2jmTX8iKSQ4o/hQXHFl+g KopdH0s/GHQzwCav8lOzPU5IMchn6zj3OjXuemfR4kd+X+CMUUzACUVVgEGYMFU2 aknC+HgV+L1SZ5yRRBFDwFGckh8iMvno82fhvnmU3Hi+S/fdEyAeLuUrn4sQ/6zw LWHi2uibz+Yt/rkasS9k6yO22V6YlatIAzXrXLhjlR8SNsZ3KKtl+dvvFFolu84m G8tB7R6ARoUlWA4G9cZTZPeKafpTPofY1zRDbembvUqgzyx/oS+jHCGlHkL7L+zf GS+lqdU= -----END CERTIFICATE-----Generated at Fri Dec 12 14:31:21 2025 by rpki-client