This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037393a3a2f34382d3438203d3e20323130313837.roa File: 326130653a386630323a663037393a3a2f34382d3438203d3e20323130313837.roa (raw, json) Hash identifier: dNFYzs2vePQUYnK1iZf3GrO1RJCzVmPICuvkN8oJAvM= Subject key identifier: 81:B1:7B:CB:6F:2F:FF:0E:08:E2:EC:9A:D8:16:A0:AF:25:19:06:DE Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 7EB698046DAEDF23B737DB46A19C89A2FAE1DCD9 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037393a3a2f34382d3438203d3e20323130313837.roa Signing time: Thu 11 Dec 2025 01:26:41 +0000 ROA not before: Thu 11 Dec 2025 01:21:41 +0000 ROA not after: Thu 10 Dec 2026 01:26:41 +0000 asID: 210187 IP address blocks: 2a0e:8f02:f079::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:b6:98:04:6d:ae:df:23:b7:37:db:46:a1:9c:89:a2:fa:e1:dc:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:21:41 2025 GMT Not After : Dec 10 01:26:41 2026 GMT Subject: CN=81B17BCB6F2FFF0E08E2EC9AD816A0AF251906DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:de:2d:90:bb:9d:ff:f3:5c:de:1f:06:46:2d: 74:00:d6:89:d1:f1:af:67:8d:29:0a:08:6c:32:eb: 21:dd:98:e6:ae:65:16:b6:43:ec:1d:44:1d:88:bc: 64:62:23:33:1f:bc:7e:a9:54:81:d4:3a:63:43:b3: 11:c8:fd:d4:b8:1e:ee:b2:f1:9e:00:5a:23:f5:60: fd:50:0b:28:08:ca:22:97:2e:b4:7d:b2:43:90:69: dd:62:54:f9:56:5e:5e:cf:4f:a0:2b:76:b5:6f:9d: cc:57:96:23:73:07:27:95:0a:99:16:92:68:f5:f4: e4:00:67:4a:16:07:b1:56:1f:fc:64:61:c8:c3:dc: c5:58:be:56:c2:ff:99:05:f6:18:61:89:2a:6b:7a: 52:fc:ba:be:7f:a6:21:63:8a:06:97:61:93:5f:c1: cc:d9:dc:d4:f0:e5:c7:22:f3:f7:95:36:d9:ee:10: 5d:87:1e:e4:7a:18:83:ee:14:9b:c4:06:25:eb:53: e7:ce:1a:d5:15:7f:04:3c:01:4b:0b:e5:ab:71:24: 92:e5:0a:58:4e:0b:01:7d:2f:03:bc:03:3f:7b:41: 68:04:3d:0a:c6:c0:8e:2d:b9:9a:de:69:5d:8e:7a: ed:c9:92:c8:9d:66:17:8a:24:b3:2e:2e:5e:77:e7: 59:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B1:7B:CB:6F:2F:FF:0E:08:E2:EC:9A:D8:16:A0:AF:25:19:06:DE X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663037393a3a2f34382d3438203d3e20323130313837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f079::/48 Signature Algorithm: sha256WithRSAEncryption 40:1c:b0:ac:24:0d:1b:6a:af:4f:8f:6c:82:a2:39:5d:c0:2a: b7:b3:9c:4e:49:ef:99:42:b9:bc:71:b8:a9:5a:d9:89:4a:a2: fb:6c:f7:d4:0f:8f:4d:1d:60:9d:ca:2a:31:c2:0d:a3:6e:3b: ff:07:f6:2a:3d:f8:78:8f:d4:9e:ec:f9:8d:67:0c:24:a9:b5: 9e:98:9a:fe:e6:85:6c:e8:07:48:a4:4d:8e:75:96:1b:35:55: 23:1d:a1:27:97:96:6a:ba:bb:d2:a4:8a:e0:0a:88:19:61:bd: c7:b7:00:36:e0:c7:85:6c:55:3c:8d:d4:2e:97:f3:bc:da:4a: 76:4a:b7:cf:68:e9:31:dc:d8:d8:50:95:5b:bc:47:ce:9d:fb: ea:7c:1c:cc:30:19:62:66:d9:8b:01:3f:ae:28:d7:ba:2f:59: 2e:d6:75:fe:01:52:6e:dd:3c:4c:72:de:e6:00:3d:c4:62:07: ce:8e:bb:e0:2d:2f:02:8b:aa:98:9c:1b:5b:4a:b5:6b:f0:de: 98:ee:b5:23:ce:e0:17:03:0e:8e:cf:ff:2c:43:d0:da:e8:bd: ad:d0:d3:19:04:84:21:43:59:08:39:14:91:94:45:d1:3b:f5: ad:c1:9b:52:a3:db:69:3d:fb:7b:0d:85:9f:2d:93:b9:23:6e: 53:9e:53:1a -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUfraYBG2u3yO3N9tGoZyJovrh3NkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIxNDFaFw0yNjEyMTAwMTI2NDFaMDMxMTAvBgNV BAMTKDgxQjE3QkNCNkYyRkZGMEUwOEUyRUM5QUQ4MTZBMEFGMjUxOTA2REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC23i2Qu53/81zeHwZGLXQA1onR 8a9njSkKCGwy6yHdmOauZRa2Q+wdRB2IvGRiIzMfvH6pVIHUOmNDsxHI/dS4Hu6y 8Z4AWiP1YP1QCygIyiKXLrR9skOQad1iVPlWXl7PT6ArdrVvncxXliNzByeVCpkW kmj19OQAZ0oWB7FWH/xkYcjD3MVYvlbC/5kF9hhhiSprelL8ur5/piFjigaXYZNf wczZ3NTw5cci8/eVNtnuEF2HHuR6GIPuFJvEBiXrU+fOGtUVfwQ8AUsL5atxJJLl ClhOCwF9LwO8Az97QWgEPQrGwI4tuZreaV2Oeu3JksidZheKJLMuLl5351nvAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUgbF7y28v/w4I4uya2BagryUZBt4wHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM3MzkzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzAzMTM4Mzcu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8HkwDQYJKoZIhvcNAQELBQADggEBAEAcsKwkDRtqr0+P bIKiOV3AKreznE5J75lCubxxuKla2YlKovts99QPj00dYJ3KKjHCDaNuO/8H9io9 +HiP1J7s+Y1nDCSptZ6Ymv7mhWzoB0ikTY51lhs1VSMdoSeXlmq6u9KkiuAKiBlh vce3ADbgx4VsVTyN1C6X87zaSnZKt89o6THc2NhQlVu8R86d++p8HMwwGWJm2YsB P64o17ovWS7Wdf4BUm7dPExy3uYAPcRiB86Ou+AtLwKLqpicG1tKtWvw3pjutSPO 4BcDDo7P/yxD0Nrova3Q0xkEhCFDWQg5FJGURdE79a3Bm1Kj22k9+3sNhZ8tk7kj blOeUxo= -----END CERTIFICATE-----Generated at Fri Dec 12 14:31:59 2025 by rpki-client