This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037383a3a2f34382d3438203d3e20323034323134.roa File: 326130653a386630323a663037383a3a2f34382d3438203d3e20323034323134.roa (raw, json) Hash identifier: wMBOWBkhmi0JxxhSCqgOSP0KaMwF4PNvXixGBPxRLQI= Subject key identifier: 2D:D9:EE:A4:8B:B2:97:04:C8:FF:84:A9:64:56:8C:C8:CF:05:92:99 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 5F52028B9DCE8FEEC2C4549F0B5E4B58E53C883F Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037383a3a2f34382d3438203d3e20323034323134.roa Signing time: Thu 11 Dec 2025 01:26:48 +0000 ROA not before: Thu 11 Dec 2025 01:21:48 +0000 ROA not after: Thu 10 Dec 2026 01:26:48 +0000 asID: 204214 IP address blocks: 2a0e:8f02:f078::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:52:02:8b:9d:ce:8f:ee:c2:c4:54:9f:0b:5e:4b:58:e5:3c:88:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:21:48 2025 GMT Not After : Dec 10 01:26:48 2026 GMT Subject: CN=2DD9EEA48BB29704C8FF84A964568CC8CF059299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:15:ae:f2:d1:fe:7f:7c:37:e2:44:78:d0:69: 60:7a:3d:20:cd:b6:2a:41:21:2e:93:0e:2f:60:54: 7a:83:2c:38:cd:34:b1:49:9f:c4:30:ea:e3:5a:6e: 80:1a:d1:b2:e2:82:27:6c:89:81:b1:57:76:be:56: 5a:fc:69:2a:d3:e1:ac:80:a7:1e:84:3a:7f:ee:dd: f6:44:51:5a:35:b9:b6:97:cb:4b:c6:4e:ed:3a:e1: cb:0c:d0:90:68:93:70:47:5c:f2:11:d2:fe:8b:29: 85:ca:fa:db:ac:21:73:84:e2:d5:f3:84:3a:d0:db: 3e:6d:1a:b3:91:44:ce:59:f6:5d:f8:70:87:2e:d1: 69:63:82:02:36:98:81:d3:aa:74:f7:cf:be:cb:29: cc:fe:6d:d0:93:91:d6:03:08:33:6b:61:45:f2:2e: de:bb:69:06:09:f0:3a:41:4b:62:86:c1:45:24:71: 04:70:27:79:4e:86:50:4e:e8:9a:de:75:2e:07:a7: 13:45:96:79:74:9e:ab:61:d1:77:66:a2:2e:c8:f1: 52:00:93:39:9c:b1:24:64:54:43:17:39:89:81:c4: eb:da:8a:06:01:e7:23:5c:84:83:c6:69:e5:79:8a: ba:f0:b4:77:1b:fb:45:8d:43:6f:28:e0:c4:4f:74: 78:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D9:EE:A4:8B:B2:97:04:C8:FF:84:A9:64:56:8C:C8:CF:05:92:99 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037383a3a2f34382d3438203d3e20323034323134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f078::/48 Signature Algorithm: sha256WithRSAEncryption 5c:9d:d1:e0:15:ac:54:66:70:b3:4b:f6:9e:0b:a8:d7:37:b9: 73:2f:2a:ee:01:08:f7:43:69:a0:e4:08:ab:e3:97:ba:da:6e: f8:95:97:98:96:bb:e5:59:0b:fe:e3:d4:0e:fc:4d:dc:26:66: 1b:c0:43:81:da:98:0e:11:26:1f:c8:80:72:d5:fe:23:90:04: ac:f2:d2:8e:be:27:fb:81:b7:40:25:3c:4a:f8:ff:e9:d3:00: c5:87:f9:1b:f7:df:90:59:47:ee:39:09:dc:9f:71:08:b3:b7: a8:c6:b1:75:88:fb:fd:72:69:34:07:60:71:d0:84:97:d6:03: 5b:d5:d2:82:6e:a6:bc:5a:6f:57:18:45:41:c5:c3:82:a0:86: 16:e7:4b:87:24:0a:fd:16:6f:a1:e5:4c:e4:fc:82:ea:83:06: 10:f1:3c:38:1c:5d:d6:37:e9:a2:50:73:91:0b:61:66:36:58: db:ae:a8:bc:0c:3b:ab:c2:59:c8:c4:95:e6:1f:5d:7d:18:0e: fb:fe:e3:b8:de:38:5a:56:4c:10:7f:ff:39:82:9f:e6:13:26: 3d:86:d2:25:bc:3a:d5:a4:eb:b8:bf:c4:97:6c:b9:2a:ad:2f: aa:e4:af:64:0c:47:e5:a8:e5:a1:bf:98:0d:d1:c7:68:e2:da: 51:f5:27:75 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUX1ICi53Oj+7CxFSfC15LWOU8iD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIxNDhaFw0yNjEyMTAwMTI2NDhaMDMxMTAvBgNV BAMTKDJERDlFRUE0OEJCMjk3MDRDOEZGODRBOTY0NTY4Q0M4Q0YwNTkyOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGFa7y0f5/fDfiRHjQaWB6PSDN tipBIS6TDi9gVHqDLDjNNLFJn8Qw6uNaboAa0bLigidsiYGxV3a+Vlr8aSrT4ayA px6EOn/u3fZEUVo1ubaXy0vGTu064csM0JBok3BHXPIR0v6LKYXK+tusIXOE4tXz hDrQ2z5tGrORRM5Z9l34cIcu0WljggI2mIHTqnT3z77LKcz+bdCTkdYDCDNrYUXy Lt67aQYJ8DpBS2KGwUUkcQRwJ3lOhlBO6JredS4HpxNFlnl0nqth0Xdmoi7I8VIA kzmcsSRkVEMXOYmBxOvaigYB5yNchIPGaeV5irrwtHcb+0WNQ28o4MRPdHhtAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQULdnupIuylwTI/4SpZFaMyM8FkpkwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM3MzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzQzMjMxMzQu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8HgwDQYJKoZIhvcNAQELBQADggEBAFyd0eAVrFRmcLNL 9p4LqNc3uXMvKu4BCPdDaaDkCKvjl7rabviVl5iWu+VZC/7j1A78TdwmZhvAQ4Ha mA4RJh/IgHLV/iOQBKzy0o6+J/uBt0AlPEr4/+nTAMWH+Rv335BZR+45CdyfcQiz t6jGsXWI+/1yaTQHYHHQhJfWA1vV0oJuprxab1cYRUHFw4KghhbnS4ckCv0Wb6Hl TOT8guqDBhDxPDgcXdY36aJQc5ELYWY2WNuuqLwMO6vCWcjEleYfXX0YDvv+47je OFpWTBB//zmCn+YTJj2G0iW8OtWk67i/xJdsuSqtL6rkr2QMR+Wo5aG/mA3Rx2ji 2lH1J3U= -----END CERTIFICATE-----Generated at Fri Dec 12 14:33:31 2025 by rpki-client