This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037373a3a2f34382d3438203d3e20323136343338.roa File: 326130653a386630323a663037373a3a2f34382d3438203d3e20323136343338.roa (raw, json) Hash identifier: 0wDfNPJqvA+PWPMia2e8wIOAU4RL4C4eaIizVk5R1m4= Subject key identifier: 76:3E:C6:AA:1D:FD:FA:1F:B6:41:37:15:B6:BD:E0:81:CD:20:26:A5 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 687DDD562ADE6C6379A5E4E3FF16653ACBB59157 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037373a3a2f34382d3438203d3e20323136343338.roa Signing time: Thu 11 Dec 2025 01:26:59 +0000 ROA not before: Thu 11 Dec 2025 01:21:59 +0000 ROA not after: Thu 10 Dec 2026 01:26:59 +0000 asID: 216438 IP address blocks: 2a0e:8f02:f077::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7d:dd:56:2a:de:6c:63:79:a5:e4:e3:ff:16:65:3a:cb:b5:91:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:21:59 2025 GMT Not After : Dec 10 01:26:59 2026 GMT Subject: CN=763EC6AA1DFDFA1FB6413715B6BDE081CD2026A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8c:47:34:04:bb:41:fa:e7:dd:d9:52:e8:af: 5e:18:a7:58:70:57:66:a2:08:ad:59:d7:2d:ca:a0: b7:34:10:54:76:c9:35:6b:7b:02:c2:21:5f:60:bd: a0:83:c8:ec:4f:4a:8b:82:d9:06:3c:6c:79:15:af: 4a:06:a2:8a:eb:3c:e3:0c:7d:1f:fa:f4:3a:7a:c3: 14:89:63:03:95:d1:33:b0:84:93:dc:b5:cb:7c:7a: ba:9c:53:c4:04:b9:26:c9:11:a7:92:60:05:06:de: 2f:52:66:80:3a:66:05:8b:59:f8:8b:f4:d6:3f:11: 7b:be:6d:1d:6e:6b:3a:28:65:ba:7e:c8:28:a9:bc: 47:1c:03:63:58:be:65:68:a5:d6:66:a8:51:ec:93: e8:c6:45:2f:27:b4:05:01:ee:6a:56:ab:a8:5f:9c: 80:85:a9:1e:98:d1:b7:dc:61:60:4c:89:74:05:b8: b0:ba:c7:2e:4e:94:f9:4a:02:c6:88:ce:5a:a8:71: 64:ba:5d:57:0a:5d:66:ec:bb:ac:2a:56:45:57:fb: 77:d2:49:d0:e0:a4:41:77:88:30:51:3f:f7:8e:d0: 17:ce:95:ad:4a:80:57:c2:6c:31:1e:a9:b8:eb:a8: bb:14:ed:1f:06:1e:78:76:a3:b4:1d:96:af:f4:1c: ac:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3E:C6:AA:1D:FD:FA:1F:B6:41:37:15:B6:BD:E0:81:CD:20:26:A5 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037373a3a2f34382d3438203d3e20323136343338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f077::/48 Signature Algorithm: sha256WithRSAEncryption 85:6d:b4:25:9e:37:d6:03:a5:d8:0c:2e:f2:c0:31:df:42:d8: cf:6a:a2:d5:b4:e8:a6:69:2c:21:b7:14:61:bd:26:5a:12:70: 14:a5:c6:a1:37:18:70:81:94:bc:63:90:a6:34:f1:d7:09:62: 4e:ee:0e:ad:a5:24:43:86:bf:ea:b7:a0:e2:43:a0:f8:1a:6c: 7e:3a:7e:d8:08:d0:c4:01:13:3d:21:31:c7:b8:45:3b:9d:f7: 21:17:b6:d8:54:e9:3b:80:5f:a5:2f:85:7e:98:e6:39:45:73: 3f:17:20:60:b9:75:31:00:56:8a:b5:b3:95:1d:66:e7:7b:62: 3b:c1:8f:70:3f:b4:7a:82:fb:fb:0e:f1:2c:aa:24:e2:2d:c2: 8d:22:a3:cd:af:c1:83:13:e5:0d:ac:9b:ce:00:18:a0:8a:d5: 5a:fa:43:6b:68:6c:c1:85:22:b9:d5:4a:00:5f:b4:59:88:a5: 1f:c5:0b:7a:f0:53:f2:59:63:df:c9:4d:e5:a1:19:b1:af:d2: aa:8d:92:02:67:9b:82:8b:16:46:09:42:c4:7b:8d:75:09:04: 32:fa:c5:fd:86:10:72:8d:4f:5a:0f:3c:05:97:b6:ac:4e:1a: cf:a4:00:0d:18:91:13:33:e5:a3:7e:fc:5e:51:21:dc:2f:8d: 99:35:9f:d4 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUaH3dVirebGN5peTj/xZlOsu1kVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIxNTlaFw0yNjEyMTAwMTI2NTlaMDMxMTAvBgNV BAMTKDc2M0VDNkFBMURGREZBMUZCNjQxMzcxNUI2QkRFMDgxQ0QyMDI2QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0jEc0BLtB+ufd2VLor14Yp1hw V2aiCK1Z1y3KoLc0EFR2yTVrewLCIV9gvaCDyOxPSouC2QY8bHkVr0oGoorrPOMM fR/69Dp6wxSJYwOV0TOwhJPctct8erqcU8QEuSbJEaeSYAUG3i9SZoA6ZgWLWfiL 9NY/EXu+bR1uazooZbp+yCipvEccA2NYvmVopdZmqFHsk+jGRS8ntAUB7mpWq6hf nICFqR6Y0bfcYWBMiXQFuLC6xy5OlPlKAsaIzlqocWS6XVcKXWbsu6wqVkVX+3fS SdDgpEF3iDBRP/eO0BfOla1KgFfCbDEeqbjrqLsU7R8GHnh2o7Qdlq/0HKzVAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUdj7Gqh39+h+2QTcVtr3ggc0gJqUwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM3MzczYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzYzNDMzMzgu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8HcwDQYJKoZIhvcNAQELBQADggEBAIVttCWeN9YDpdgM LvLAMd9C2M9qotW06KZpLCG3FGG9JloScBSlxqE3GHCBlLxjkKY08dcJYk7uDq2l JEOGv+q3oOJDoPgabH46ftgI0MQBEz0hMce4RTud9yEXtthU6TuAX6UvhX6Y5jlF cz8XIGC5dTEAVoq1s5UdZud7YjvBj3A/tHqC+/sO8SyqJOItwo0io82vwYMT5Q2s m84AGKCK1Vr6Q2tobMGFIrnVSgBftFmIpR/FC3rwU/JZY9/JTeWhGbGv0qqNkgJn m4KLFkYJQsR7jXUJBDL6xf2GEHKNT1oPPAWXtqxOGs+kAA0YkRMz5aN+/F5RIdwv jZk1n9Q= -----END CERTIFICATE-----Generated at Fri Dec 12 14:31:22 2025 by rpki-client