This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630353a3a2f33322d3438203d3e203538323939.roa File: 326130653a386630353a3a2f33322d3438203d3e203538323939.roa (raw, json) Hash identifier: ChRxp218Ppp/Ar9+SBUoeijmvhXbTstmajQAxMCZzmU= Subject key identifier: 01:A9:A1:E1:FC:71:01:F6:CB:CF:57:E8:87:8E:FA:47:A6:CB:E3:42 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 153F878DF3F469F8A5E2D39B023B5E55CF43A037 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630353a3a2f33322d3438203d3e203538323939.roa Signing time: Thu 11 Dec 2025 01:25:55 +0000 ROA not before: Thu 11 Dec 2025 01:20:55 +0000 ROA not after: Thu 10 Dec 2026 01:25:55 +0000 asID: 58299 IP address blocks: 2a0e:8f05::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:3f:87:8d:f3:f4:69:f8:a5:e2:d3:9b:02:3b:5e:55:cf:43:a0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:20:55 2025 GMT Not After : Dec 10 01:25:55 2026 GMT Subject: CN=01A9A1E1FC7101F6CBCF57E8878EFA47A6CBE342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3a:4d:33:3d:38:ee:0c:a4:cd:fb:00:37:74: 15:ce:80:2a:15:46:f4:98:e0:f3:b0:f0:91:dc:19: 01:32:27:a1:66:10:18:78:98:e0:74:c6:af:8c:7c: 34:22:1d:e4:47:2d:15:92:ad:1d:bf:72:d9:45:5e: 96:00:2e:33:3b:2a:51:5b:7b:22:bc:a7:de:d0:29: df:de:7f:35:ff:5b:4f:f9:4c:00:8f:2d:c4:75:a4: 59:4c:2d:6b:d9:e6:5d:75:fe:22:10:ef:9b:89:49: 66:f6:cb:ae:e3:d4:86:ba:6f:a7:4e:66:37:2e:97: 09:77:42:65:49:e2:e4:8d:ce:7c:14:8f:33:70:92: b0:9d:a0:50:aa:c0:a3:26:30:ef:62:78:cf:6f:29: d8:9e:8d:12:60:6d:bb:87:93:90:b4:8d:ac:3b:54: 73:d9:e8:76:08:2f:a3:4b:eb:1f:7d:9e:54:3f:91: d2:85:03:b0:dd:fd:fc:b9:52:5d:9f:96:1d:b3:67: 78:18:83:57:3a:fe:6a:e0:bd:68:a3:c2:2d:25:8a: e6:81:97:94:f4:5e:10:da:d8:3b:dd:b0:c9:ea:eb: d9:43:93:0a:1a:93:24:76:f8:b6:22:03:6f:b0:b0: 88:cf:56:c5:29:6e:ff:f0:98:73:32:39:19:8e:27: ca:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A9:A1:E1:FC:71:01:F6:CB:CF:57:E8:87:8E:FA:47:A6:CB:E3:42 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630353a3a2f33322d3438203d3e203538323939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f05::/32 Signature Algorithm: sha256WithRSAEncryption 46:00:0f:2a:27:b6:13:e3:0e:84:0c:43:86:6c:3d:06:41:ac: bb:74:17:a6:6d:0d:5e:bb:fc:c7:e3:be:8b:67:3a:b1:f8:09: 0f:87:fe:48:c4:fa:3a:4b:13:f1:ce:60:6f:9d:98:10:c9:6d: c6:a1:2a:68:57:44:7d:61:ae:8b:8e:3c:b9:5e:65:9a:b2:a2: 05:ca:da:11:d6:ea:e4:31:98:0d:c9:f9:63:32:ec:9b:df:26: 83:43:47:86:fc:fa:22:14:5c:ff:bc:dd:c1:fc:09:24:8f:78: ee:68:d4:9d:2a:b4:42:fe:9a:0a:ca:2c:f7:64:54:db:8a:04: 09:42:f9:86:49:77:2b:c2:ca:fa:97:78:c9:10:3d:4a:ee:5d: c5:ff:62:f7:88:7b:3d:10:ac:d3:a9:34:ca:79:08:1a:8a:04: 7e:22:af:82:5b:6f:87:7a:64:44:f3:60:71:79:7c:03:68:6e: 1b:5b:8e:9a:b9:d9:3c:1e:08:50:e1:9d:ce:65:92:dc:42:45: 1b:b0:c0:a1:43:f6:e8:c1:ce:c4:06:8c:69:34:62:6a:e5:bb: 48:a7:71:9f:60:c8:e0:90:d8:7f:f9:99:0c:e5:b4:d8:0e:4e: f6:8a:a4:65:30:ff:fb:03:70:84:50:81:d7:9d:ae:29:9e:05: b1:d2:e8:33 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUFT+HjfP0afil4tObAjteVc9DoDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIwNTVaFw0yNjEyMTAwMTI1NTVaMDMxMTAvBgNV BAMTKDAxQTlBMUUxRkM3MTAxRjZDQkNGNTdFODg3OEVGQTQ3QTZDQkUzNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Ok0zPTjuDKTN+wA3dBXOgCoV RvSY4POw8JHcGQEyJ6FmEBh4mOB0xq+MfDQiHeRHLRWSrR2/ctlFXpYALjM7KlFb eyK8p97QKd/efzX/W0/5TACPLcR1pFlMLWvZ5l11/iIQ75uJSWb2y67j1Ia6b6dO Zjculwl3QmVJ4uSNznwUjzNwkrCdoFCqwKMmMO9ieM9vKdiejRJgbbuHk5C0jaw7 VHPZ6HYIL6NL6x99nlQ/kdKFA7Dd/fy5Ul2flh2zZ3gYg1c6/mrgvWijwi0liuaB l5T0XhDa2DvdsMnq69lDkwoakyR2+LYiA2+wsIjPVsUpbv/wmHMyORmOJ8rFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUAamh4fxxAfbLz1foh476R6bL40IwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUHMAuGgYtyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz NTNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzgzMjM5Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAq Do8FMA0GCSqGSIb3DQEBCwUAA4IBAQBGAA8qJ7YT4w6EDEOGbD0GQay7dBembQ1e u/zH476LZzqx+AkPh/5IxPo6SxPxzmBvnZgQyW3GoSpoV0R9Ya6Ljjy5XmWasqIF ytoR1urkMZgNyfljMuyb3yaDQ0eG/PoiFFz/vN3B/Akkj3juaNSdKrRC/poKyiz3 ZFTbigQJQvmGSXcrwsr6l3jJED1K7l3F/2L3iHs9EKzTqTTKeQgaigR+Iq+CW2+H emRE82BxeXwDaG4bW46audk8HghQ4Z3OZZLcQkUbsMChQ/bowc7EBoxpNGJq5btI p3GfYMjgkNh/+ZkM5bTYDk72iqRlMP/7A3CEUIHXna4pngWx0ugz -----END CERTIFICATE-----Generated at Fri Dec 12 14:31:22 2025 by rpki-client