This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037353a3a2f34382d3438203d3e20323038343837.roa File: 326130653a386630323a663037353a3a2f34382d3438203d3e20323038343837.roa (raw, json) Hash identifier: 65U9Ktm8EX794VdRMFOlvtnIyqnUI7f/TqgXTKd1bKA= Subject key identifier: 49:A4:BE:62:AA:00:2F:FE:F8:96:7E:F3:F6:07:75:86:FC:2B:8B:A0 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 4C0E84ED6972E57762423934D8EAB55D5B617521 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037353a3a2f34382d3438203d3e20323038343837.roa Signing time: Thu 11 Dec 2025 01:27:07 +0000 ROA not before: Thu 11 Dec 2025 01:22:07 +0000 ROA not after: Thu 10 Dec 2026 01:27:07 +0000 asID: 208487 IP address blocks: 2a0e:8f02:f075::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:0e:84:ed:69:72:e5:77:62:42:39:34:d8:ea:b5:5d:5b:61:75:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:22:07 2025 GMT Not After : Dec 10 01:27:07 2026 GMT Subject: CN=49A4BE62AA002FFEF8967EF3F6077586FC2B8BA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:a9:d7:1e:08:00:40:c6:2c:ad:78:69:29: f7:86:b7:5d:c1:00:5e:87:24:cd:1a:b7:e7:06:a2: e3:e0:49:95:cb:db:51:98:bd:d8:09:c1:2f:ed:53: 57:c8:88:d4:6e:cc:b2:d4:fa:7b:98:04:6a:0a:b9: a2:4e:d0:0a:b3:98:e8:f7:09:9c:56:55:53:dd:e1: 8f:e6:dd:e2:f9:c3:f7:8b:4f:e6:e3:2a:fa:14:9d: a8:1d:d2:fe:37:b3:a5:4a:08:75:8a:d8:e1:59:0f: 07:a0:16:43:7f:f4:bc:fd:5f:27:06:1d:04:d4:86: b2:4b:2a:b0:f8:c4:67:5a:9a:cd:fd:9b:fe:1c:d5: 7b:58:28:d7:61:e1:8b:f6:ae:38:e1:80:b8:ce:79: d2:03:2e:8a:ef:b2:c0:66:9d:b3:22:c4:d3:61:d5: d9:d8:20:32:2d:f9:66:f7:d0:f7:f9:42:5a:6f:2c: 9b:eb:1f:90:03:e2:d3:2a:88:4b:bf:cc:39:12:c0: 31:82:1b:f0:00:b5:fa:81:b3:6b:d0:f4:29:ec:36: 03:e2:9b:c1:d3:ab:82:9f:d2:11:06:79:1a:7c:61: fb:98:2e:71:29:69:fd:0a:5d:47:2a:54:11:2e:42: 82:c1:50:d5:ce:c2:cc:dc:7b:70:e9:12:27:15:cc: ac:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A4:BE:62:AA:00:2F:FE:F8:96:7E:F3:F6:07:75:86:FC:2B:8B:A0 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037353a3a2f34382d3438203d3e20323038343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f075::/48 Signature Algorithm: sha256WithRSAEncryption 3e:ae:39:eb:f9:4c:b2:74:5b:53:d2:48:e1:07:40:3c:ae:d6: 72:f9:e1:c1:51:9c:6f:5a:3c:92:91:52:2e:a8:78:44:be:c9: e5:7d:bc:9f:15:a9:87:34:46:77:b0:18:e6:42:72:99:c8:3e: 90:0e:90:5f:b1:11:b9:aa:7e:4b:22:b3:14:d6:0a:63:af:25: 30:70:b3:e9:fe:73:52:58:f6:7f:8d:6e:3f:e8:a4:b3:86:48: 23:bb:5c:7e:44:ea:2f:1a:c8:7b:53:a8:c6:68:9d:70:00:38: d1:98:5d:63:c1:be:b1:23:51:0d:bc:39:33:e4:61:35:c5:85: 14:68:02:f8:f1:4c:f4:6d:09:d5:57:20:e6:6c:f0:f5:ec:bf: be:2f:f8:a4:e1:2a:23:23:05:e0:74:57:07:75:5f:ec:d7:3c: 11:5d:a8:79:70:45:67:df:a5:2e:0b:fa:1a:65:4c:a5:15:4e: af:7e:29:59:3a:23:91:e4:f6:27:5d:d3:d7:72:88:d4:fe:bd: 12:79:fd:d8:6b:ee:bc:e1:8a:e6:4b:95:06:85:2f:bc:14:1c: 91:a8:c0:69:51:ec:82:29:fb:bc:b0:04:fb:0c:76:8b:3a:89: 1e:45:2e:7e:84:d1:f3:25:cd:3f:22:10:02:b2:2a:33:14:d0: 10:42:32:bc -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUTA6E7Wly5XdiQjk02Oq1XVthdSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIyMDdaFw0yNjEyMTAwMTI3MDdaMDMxMTAvBgNV BAMTKDQ5QTRCRTYyQUEwMDJGRkVGODk2N0VGM0Y2MDc3NTg2RkMyQjhCQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6anXHggAQMYsrXhpKfeGt13B AF6HJM0at+cGouPgSZXL21GYvdgJwS/tU1fIiNRuzLLU+nuYBGoKuaJO0AqzmOj3 CZxWVVPd4Y/m3eL5w/eLT+bjKvoUnagd0v43s6VKCHWK2OFZDwegFkN/9Lz9XycG HQTUhrJLKrD4xGdams39m/4c1XtYKNdh4Yv2rjjhgLjOedIDLorvssBmnbMixNNh 1dnYIDIt+Wb30Pf5QlpvLJvrH5AD4tMqiEu/zDkSwDGCG/AAtfqBs2vQ9CnsNgPi m8HTq4Kf0hEGeRp8YfuYLnEpaf0KXUcqVBEuQoLBUNXOwszce3DpEicVzKxPAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUSaS+YqoAL/74ln7z9gd1hvwri6AwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM3MzUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzgzNDM4Mzcu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8HUwDQYJKoZIhvcNAQELBQADggEBAD6uOev5TLJ0W1PS SOEHQDyu1nL54cFRnG9aPJKRUi6oeES+yeV9vJ8VqYc0RnewGOZCcpnIPpAOkF+x EbmqfksisxTWCmOvJTBws+n+c1JY9n+Nbj/opLOGSCO7XH5E6i8ayHtTqMZonXAA ONGYXWPBvrEjUQ28OTPkYTXFhRRoAvjxTPRtCdVXIOZs8PXsv74v+KThKiMjBeB0 Vwd1X+zXPBFdqHlwRWffpS4L+hplTKUVTq9+KVk6I5Hk9idd09dyiNT+vRJ5/dhr 7rzhiuZLlQaFL7wUHJGowGlR7IIp+7ywBPsMdos6iR5FLn6E0fMlzT8iEAKyKjMU 0BBCMrw= -----END CERTIFICATE-----Generated at Fri Dec 12 14:31:59 2025 by rpki-client