This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630343a3a2f33322d3438203d3e203538323939.roa File: 326130653a386630343a3a2f33322d3438203d3e203538323939.roa (raw, json) Hash identifier: nXjSmoIlXocjKVgAHLvasIUcpf6lI336vehWVull5rM= Subject key identifier: 5B:A1:A9:A1:58:58:A3:F0:25:2E:2E:F3:3C:79:32:FB:FE:3D:B2:E5 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 138AF67EADA64E56E7D8550BD7F190F1BA2FCF52 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630343a3a2f33322d3438203d3e203538323939.roa Signing time: Thu 11 Dec 2025 01:26:12 +0000 ROA not before: Thu 11 Dec 2025 01:21:12 +0000 ROA not after: Thu 10 Dec 2026 01:26:12 +0000 asID: 58299 IP address blocks: 2a0e:8f04::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:8a:f6:7e:ad:a6:4e:56:e7:d8:55:0b:d7:f1:90:f1:ba:2f:cf:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:21:12 2025 GMT Not After : Dec 10 01:26:12 2026 GMT Subject: CN=5BA1A9A15858A3F0252E2EF33C7932FBFE3DB2E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:13:b9:56:e7:a7:3a:7e:2f:c4:f3:69:7f:5d: aa:22:c2:03:66:96:05:cc:c2:ac:a6:10:82:35:32: fe:33:08:ee:a7:10:d0:8c:70:20:4e:9d:88:1e:b3: b2:f8:42:16:6d:ec:15:94:56:77:b4:ff:a4:f0:8c: 58:80:12:6a:5b:19:9f:60:87:d3:db:34:82:97:ff: ee:a5:24:86:43:02:c7:ef:fb:94:fc:b4:ef:68:ea: 50:b0:cc:1e:d4:6c:5e:47:72:2a:ca:6a:0f:1b:37: a0:0e:7e:a6:7f:7f:dc:ba:09:06:13:62:90:78:11: f7:1d:0d:70:a3:f1:2a:34:7d:fe:66:13:10:7c:de: 69:19:5b:49:60:21:a2:25:b2:4b:5b:ff:6f:26:1d: e8:e7:75:cb:37:db:37:70:f8:33:21:a7:f4:ae:5c: 0f:d1:fa:10:3a:a0:11:a7:75:c3:ea:d5:dc:40:0c: 00:d2:53:e4:63:9c:23:fa:f6:aa:b8:84:a2:92:a3: 32:20:e7:a2:ea:f3:0c:8d:f6:65:b2:ee:e8:7a:84: b7:a7:2c:cd:0a:04:42:27:99:6e:d7:cf:a2:61:15: 5b:b4:7d:94:56:0c:0d:bd:55:65:cd:f8:7d:fb:6a: db:96:fd:d6:c4:9a:6c:d4:17:a9:42:fd:7e:44:39: 4b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A1:A9:A1:58:58:A3:F0:25:2E:2E:F3:3C:79:32:FB:FE:3D:B2:E5 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630343a3a2f33322d3438203d3e203538323939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f04::/32 Signature Algorithm: sha256WithRSAEncryption b0:cd:f6:c6:5a:df:8b:fc:48:0f:ca:2b:ca:6e:36:33:a2:b5: 5d:fd:6f:2c:be:b2:6c:af:aa:ad:33:5c:05:7b:60:70:64:3b: a4:68:ed:d8:fa:ed:91:e9:cd:92:65:a2:7b:04:a9:93:df:e1: c5:47:65:58:6d:82:4c:02:06:1c:7e:c8:12:1c:da:c2:82:1d: 94:48:c8:c8:01:1f:a8:61:e7:69:7c:52:67:ee:d9:53:f7:49: 9d:29:23:e5:98:2d:7e:91:28:23:7d:87:bd:30:cf:30:18:cc: 12:80:b9:65:ec:12:90:85:30:24:6e:94:59:45:72:b1:76:92: 72:58:f1:77:c9:4e:b5:3c:d6:87:e6:d8:5d:70:ae:b9:82:81: be:59:ad:b4:4a:99:9d:68:1d:37:4a:26:a1:71:2f:f1:01:22: c8:63:19:d4:53:22:d9:34:01:0e:ff:fc:fe:7a:f3:3a:99:8e: de:41:26:5c:f0:f0:05:0c:a7:60:70:9a:1d:5d:42:ac:af:68: 48:cf:c4:a4:f4:76:e9:4a:79:e8:7d:19:3b:26:c9:3e:24:3f: b2:9b:34:9f:25:f0:94:3c:46:3d:3a:14:af:0c:e9:b9:f8:3d: 6c:0d:0c:9e:56:94:0d:14:85:06:2a:3d:9c:02:59:64:01:7e: 57:a0:b9:e5 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUE4r2fq2mTlbn2FUL1/GQ8bovz1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIxMTJaFw0yNjEyMTAwMTI2MTJaMDMxMTAvBgNV BAMTKDVCQTFBOUExNTg1OEEzRjAyNTJFMkVGMzNDNzkzMkZCRkUzREIyRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaE7lW56c6fi/E82l/XaoiwgNm lgXMwqymEII1Mv4zCO6nENCMcCBOnYges7L4QhZt7BWUVne0/6TwjFiAEmpbGZ9g h9PbNIKX/+6lJIZDAsfv+5T8tO9o6lCwzB7UbF5HcirKag8bN6AOfqZ/f9y6CQYT YpB4EfcdDXCj8So0ff5mExB83mkZW0lgIaIlsktb/28mHejndcs32zdw+DMhp/Su XA/R+hA6oBGndcPq1dxADADSU+RjnCP69qq4hKKSozIg56Lq8wyN9mWy7uh6hLen LM0KBEInmW7Xz6JhFVu0fZRWDA29VWXN+H37atuW/dbEmmzUF6lC/X5EOUvHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUW6GpoVhYo/AlLi7zPHky+/49suUwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUHMAuGgYtyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz NDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzgzMjM5Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAq Do8EMA0GCSqGSIb3DQEBCwUAA4IBAQCwzfbGWt+L/EgPyivKbjYzorVd/W8svrJs r6qtM1wFe2BwZDukaO3Y+u2R6c2SZaJ7BKmT3+HFR2VYbYJMAgYcfsgSHNrCgh2U SMjIAR+oYedpfFJn7tlT90mdKSPlmC1+kSgjfYe9MM8wGMwSgLll7BKQhTAkbpRZ RXKxdpJyWPF3yU61PNaH5thdcK65goG+Wa20SpmdaB03SiahcS/xASLIYxnUUyLZ NAEO//z+evM6mY7eQSZc8PAFDKdgcJodXUKsr2hIz8Sk9HbpSnnofRk7Jsk+JD+y mzSfJfCUPEY9OhSvDOm5+D1sDQyeVpQNFIUGKj2cAllkAX5XoLnl -----END CERTIFICATE-----Generated at Fri Dec 12 14:31:21 2025 by rpki-client