This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630373a3a2f33322d3438203d3e203538323939.roa File: 326130653a386630373a3a2f33322d3438203d3e203538323939.roa (raw, json) Hash identifier: k8TgBsnEoYHU8KFFTe9PohRVgxzl0zqnNGYv8Ti0QB8= Subject key identifier: 75:F4:8E:58:DC:51:38:C9:91:CD:B0:12:E3:54:02:56:58:87:BB:F4 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 445664AE1FCFEB1FA6797C5FB0CC27D53A3A08A6 Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630373a3a2f33322d3438203d3e203538323939.roa Signing time: Thu 11 Dec 2025 01:25:24 +0000 ROA not before: Thu 11 Dec 2025 01:20:24 +0000 ROA not after: Thu 10 Dec 2026 01:25:24 +0000 asID: 58299 IP address blocks: 2a0e:8f07::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:56:64:ae:1f:cf:eb:1f:a6:79:7c:5f:b0:cc:27:d5:3a:3a:08:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:20:24 2025 GMT Not After : Dec 10 01:25:24 2026 GMT Subject: CN=75F48E58DC5138C991CDB012E35402565887BBF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a1:26:17:50:df:d3:d6:a3:33:5a:74:7b:fb: ab:0b:26:53:ad:1d:f1:de:7c:05:67:ff:03:81:5b: 23:c5:2a:51:b8:5a:9d:16:ab:d7:64:84:d5:56:27: 5b:9f:55:28:da:ba:31:3f:5c:ba:d2:57:09:87:73: 54:ca:1e:09:90:21:37:23:54:14:7f:d4:34:7a:23: 61:d7:a3:bb:8c:04:31:94:fb:76:d4:4a:b7:d0:24: dd:cd:5e:1a:c0:77:6e:ed:3b:8d:17:3e:b2:c4:3e: 32:54:6d:2b:27:ee:fc:46:d4:d3:6f:e8:af:be:05: 71:44:23:84:af:db:e2:c7:d4:f3:13:9a:79:6d:ce: 39:9a:71:0d:16:24:fa:73:50:f6:24:b0:44:75:22: 56:75:3d:80:cc:c1:68:5a:7f:f9:67:5d:cc:bf:f4: 63:45:a3:3c:4a:1e:5f:3c:25:0a:d1:20:de:27:44: d3:62:43:8a:0c:2c:ef:54:b3:f3:72:fe:8d:73:8e: 04:de:fc:58:65:bd:78:a1:33:97:65:8a:a4:48:ba: 09:78:a0:cd:c4:00:df:c7:6b:8c:48:36:bd:ff:45: 66:61:4d:eb:88:88:be:47:b4:06:7c:c2:be:80:31: 92:74:d1:58:4c:e0:92:98:00:30:39:00:65:34:cf: 69:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F4:8E:58:DC:51:38:C9:91:CD:B0:12:E3:54:02:56:58:87:BB:F4 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630373a3a2f33322d3438203d3e203538323939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f07::/32 Signature Algorithm: sha256WithRSAEncryption 8c:4a:d0:31:de:56:d2:52:ce:29:bb:3b:5d:ff:75:d3:c3:f8: 95:9a:ba:a6:5e:4a:cc:a5:af:d9:00:ae:45:2b:64:3a:31:32: ff:76:03:93:ad:1d:0b:f4:fb:e2:29:26:ec:cc:45:8c:fd:24: ce:7d:bb:8e:4a:e0:53:93:bf:55:36:7e:1c:77:62:73:65:06: 0a:6f:f6:f6:1d:ea:5f:12:1c:76:b6:e3:33:4d:91:1c:63:6f: fa:70:83:ff:96:0e:35:87:4f:1e:2e:c1:d6:70:26:7e:6c:c8: 0e:ab:6f:16:01:3a:a1:8a:b1:42:e0:18:46:88:cb:75:da:41: 3f:1e:cc:7c:01:e5:92:48:46:fb:ae:50:73:38:12:43:25:68: 9b:ca:8e:d8:f6:62:33:91:f7:1a:97:d5:71:69:a6:7f:ac:64: 0a:a5:d1:52:51:c7:43:70:05:a0:0d:fc:57:f3:41:bb:23:6e: 4d:d5:09:d3:fa:62:b5:64:50:09:a3:07:9d:93:0d:20:66:9a: 30:6c:91:6d:b2:18:7e:c3:95:ef:7b:75:3f:3d:3c:28:e8:fe: 60:db:3d:3e:a2:cf:7f:ec:91:e6:ea:96:44:a9:89:58:89:58: e0:60:d6:7e:5c:10:b3:6c:23:d6:bf:c7:a8:eb:1c:c4:1d:3c: c7:55:fa:7e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIURFZkrh/P6x+meXxfsMwn1To6CKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTIwMjRaFw0yNjEyMTAwMTI1MjRaMDMxMTAvBgNV BAMTKDc1RjQ4RTU4REM1MTM4Qzk5MUNEQjAxMkUzNTQwMjU2NTg4N0JCRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWoSYXUN/T1qMzWnR7+6sLJlOt HfHefAVn/wOBWyPFKlG4Wp0Wq9dkhNVWJ1ufVSjaujE/XLrSVwmHc1TKHgmQITcj VBR/1DR6I2HXo7uMBDGU+3bUSrfQJN3NXhrAd27tO40XPrLEPjJUbSsn7vxG1NNv 6K++BXFEI4Sv2+LH1PMTmnltzjmacQ0WJPpzUPYksER1IlZ1PYDMwWhaf/lnXcy/ 9GNFozxKHl88JQrRIN4nRNNiQ4oMLO9Us/Ny/o1zjgTe/FhlvXihM5dliqRIugl4 oM3EAN/Ha4xINr3/RWZhTeuIiL5HtAZ8wr6AMZJ00VhM4JKYADA5AGU0z2n9AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUdfSOWNxROMmRzbAS41QCVliHu/QwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUHMAuGgYtyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz NzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzgzMjM5Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAq Do8HMA0GCSqGSIb3DQEBCwUAA4IBAQCMStAx3lbSUs4puztd/3XTw/iVmrqmXkrM pa/ZAK5FK2Q6MTL/dgOTrR0L9PviKSbszEWM/STOfbuOSuBTk79VNn4cd2JzZQYK b/b2HepfEhx2tuMzTZEcY2/6cIP/lg41h08eLsHWcCZ+bMgOq28WATqhirFC4BhG iMt12kE/Hsx8AeWSSEb7rlBzOBJDJWibyo7Y9mIzkfcal9VxaaZ/rGQKpdFSUcdD cAWgDfxX80G7I25N1QnT+mK1ZFAJowedkw0gZpowbJFtshh+w5Xve3U/PTwo6P5g 2z0+os9/7JHm6pZEqYlYiVjgYNZ+XBCzbCPWv8eo6xzEHTzHVfp+ -----END CERTIFICATE-----Generated at Fri Dec 12 14:31:21 2025 by rpki-client