This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630363a3a2f33322d3438203d3e203538323939.roa File: 326130653a386630363a3a2f33322d3438203d3e203538323939.roa (raw, json) Hash identifier: zHh6V2fVeukEnPHJ1wY8CvW5k/tv0+f8qlsMDai+btw= Subject key identifier: DB:51:B7:74:7C:B2:EC:2D:50:88:B7:57:B8:43:37:31:13:25:28:A3 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 0F5B2AB094C44BBAFFE6915D6B368CE6B585E2AA Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630363a3a2f33322d3438203d3e203538323939.roa Signing time: Thu 11 Dec 2025 01:25:38 +0000 ROA not before: Thu 11 Dec 2025 01:20:38 +0000 ROA not after: Thu 10 Dec 2026 01:25:38 +0000 asID: 58299 IP address blocks: 2a0e:8f06::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:5b:2a:b0:94:c4:4b:ba:ff:e6:91:5d:6b:36:8c:e6:b5:85:e2:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:20:38 2025 GMT Not After : Dec 10 01:25:38 2026 GMT Subject: CN=DB51B7747CB2EC2D5088B757B8433731132528A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:fa:c4:03:a0:3f:7d:12:45:21:3c:e5:89: ae:ef:e2:24:7a:15:35:fb:36:e1:de:8a:5c:fc:f0: b6:c4:5c:73:65:79:fe:e3:80:e7:fa:37:d7:30:46: c9:a8:e0:6b:6c:62:64:f5:42:e6:ec:c0:30:13:6a: 7b:b8:4b:1d:88:bc:64:75:8d:f4:4a:ce:89:97:27: 41:68:e0:6d:bd:61:81:3c:40:e8:7f:28:05:2d:b9: 30:b7:7a:ee:8b:98:16:1c:fe:1a:ad:e6:94:68:04: 6f:0a:29:47:65:a5:3f:09:d1:75:8e:a8:6f:9a:7d: 58:14:21:be:3b:f4:b0:b8:50:04:9d:84:12:6b:3c: 6b:79:93:8b:13:4d:16:b0:d7:28:12:59:69:43:44: ed:30:1b:53:4a:2d:d6:64:8c:f2:ea:5c:fe:85:ca: ec:b2:ec:ac:94:fd:e9:77:5b:b7:8b:e3:27:9d:16: 37:d8:79:6f:fb:f9:12:a4:fa:a8:f3:3f:d5:06:cc: 89:1b:e2:4d:1f:ce:f6:a3:df:67:bb:ec:32:e9:f8: 6e:df:4e:07:15:a4:aa:50:39:7a:1b:a4:2e:0d:20: 42:af:16:9a:be:45:a6:d9:07:db:75:de:51:b8:af: 02:ac:db:cd:d6:bc:64:40:1d:ef:c2:c4:42:87:f7: e3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:51:B7:74:7C:B2:EC:2D:50:88:B7:57:B8:43:37:31:13:25:28:A3 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630363a3a2f33322d3438203d3e203538323939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f06::/32 Signature Algorithm: sha256WithRSAEncryption 2f:67:26:b5:55:62:f6:da:76:59:ea:7d:be:31:52:bb:24:f2: 8f:58:c4:d2:89:d6:6c:02:d3:3d:dd:91:47:5e:61:58:d5:02: 62:fd:96:89:9a:18:ca:0b:28:c5:50:62:8d:4f:0c:84:7d:a7: 85:24:9e:9c:8e:72:d2:10:32:ae:49:c1:9f:f3:40:2f:5e:04: 10:1a:18:bc:d0:57:72:3d:04:23:ac:14:c0:18:b1:a6:0b:07: 42:31:dc:4b:45:72:22:7b:b0:3e:f9:56:8d:7f:3f:d8:9a:2b: 5c:a2:95:89:04:1b:1e:1e:33:a7:9c:75:98:71:ff:3c:8b:99: 4e:f3:86:84:65:a9:88:3c:20:a5:00:8f:66:79:8e:18:b8:8b: 00:3d:21:f2:58:2b:2e:b2:75:f4:a5:73:bb:9a:b2:a2:2a:db: 37:0c:a1:b9:c8:03:a4:cb:ab:a3:24:9a:e1:89:8d:25:64:83: ba:65:d8:15:1a:2f:7c:86:e2:9c:b8:7f:35:af:1e:7b:a7:69: af:f5:dd:c0:d0:ab:78:a7:60:76:fb:6c:45:69:0d:e0:03:bd: 2b:98:fc:82:84:4a:7b:ed:b7:ae:38:68:74:71:e4:63:ae:e9: 1a:8a:d5:3b:65:e4:6c:13:17:c1:11:58:38:ff:ec:83:e6:3e: b2:9d:ba:ff -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUD1sqsJTES7r/5pFdazaM5rWF4qowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIwMzhaFw0yNjEyMTAwMTI1MzhaMDMxMTAvBgNV BAMTKERCNTFCNzc0N0NCMkVDMkQ1MDg4Qjc1N0I4NDMzNzMxMTMyNTI4QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5MPrEA6A/fRJFITzlia7v4iR6 FTX7NuHeilz88LbEXHNlef7jgOf6N9cwRsmo4GtsYmT1QubswDATanu4Sx2IvGR1 jfRKzomXJ0Fo4G29YYE8QOh/KAUtuTC3eu6LmBYc/hqt5pRoBG8KKUdlpT8J0XWO qG+afVgUIb479LC4UASdhBJrPGt5k4sTTRaw1ygSWWlDRO0wG1NKLdZkjPLqXP6F yuyy7KyU/el3W7eL4yedFjfYeW/7+RKk+qjzP9UGzIkb4k0fzvaj32e77DLp+G7f TgcVpKpQOXobpC4NIEKvFpq+RabZB9t13lG4rwKs283WvGRAHe/CxEKH9+NJAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU21G3dHyy7C1QiLdXuEM3MRMlKKMwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUHMAuGgYtyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz NjNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzgzMjM5Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAq Do8GMA0GCSqGSIb3DQEBCwUAA4IBAQAvZya1VWL22nZZ6n2+MVK7JPKPWMTSidZs AtM93ZFHXmFY1QJi/ZaJmhjKCyjFUGKNTwyEfaeFJJ6cjnLSEDKuScGf80AvXgQQ Ghi80FdyPQQjrBTAGLGmCwdCMdxLRXIie7A++VaNfz/YmitcopWJBBseHjOnnHWY cf88i5lO84aEZamIPCClAI9meY4YuIsAPSHyWCsusnX0pXO7mrKiKts3DKG5yAOk y6ujJJrhiY0lZIO6ZdgVGi98huKcuH81rx57p2mv9d3A0Kt4p2B2+2xFaQ3gA70r mPyChEp77beuOGh0ceRjrukaitU7ZeRsExfBEVg4/+yD5j6ynbr/ -----END CERTIFICATE-----Generated at Fri Dec 12 14:32:00 2025 by rpki-client