This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323233303a3a2f34342d3438203d3e20323037333134.roa File: 326130653a386630323a323233303a3a2f34342d3438203d3e20323037333134.roa (raw, json) Hash identifier: 6jhIQwYm0E6oLNNVH8K64qfsAzFCt9swfU252EHs/4E= Subject key identifier: CC:46:7B:35:59:14:36:5F:96:B9:A7:02:F7:A7:42:8C:A5:F5:C9:F2 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 06AC2AB5D56DF7D1CF323DC8F89C2595EB15494C Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323233303a3a2f34342d3438203d3e20323037333134.roa Signing time: Tue 30 Dec 2025 20:10:58 +0000 ROA not before: Tue 30 Dec 2025 20:05:58 +0000 ROA not after: Tue 29 Dec 2026 20:10:58 +0000 asID: 207314 IP address blocks: 2a0e:8f02:2230::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ac:2a:b5:d5:6d:f7:d1:cf:32:3d:c8:f8:9c:25:95:eb:15:49:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 30 20:05:58 2025 GMT Not After : Dec 29 20:10:58 2026 GMT Subject: CN=CC467B355914365F96B9A702F7A7428CA5F5C9F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f3:de:15:59:5c:63:33:4c:86:54:5f:27:08: 57:62:4c:25:bd:17:ff:02:d5:04:2d:81:3e:fa:a0: 99:9f:b5:6c:f1:5a:94:98:27:33:fb:43:5a:93:80: ed:ff:a2:42:34:89:e9:ff:e9:d8:45:ba:fe:c6:7e: e9:6b:dc:cb:e5:19:7b:a0:3d:51:86:8c:80:6f:1a: e3:b4:5f:c3:bd:21:7b:5b:ae:73:7e:f3:21:fa:cb: f5:bd:7e:0b:1b:14:55:25:e9:50:96:53:ae:af:db: b1:26:5f:1c:b8:31:6c:5e:81:9b:1a:30:8c:dd:c0: cf:90:e5:09:e1:eb:15:80:aa:c3:97:de:11:79:bc: 1f:a3:04:c0:12:fb:8e:8c:a7:73:4b:47:14:28:05: 49:8c:b2:99:1f:55:a1:57:ba:f1:7a:db:73:9a:52: 5e:44:e5:40:b6:46:ce:5b:fa:91:f2:7b:c0:b9:d2: bd:af:f1:d2:0a:14:d7:2e:1f:99:31:41:ff:0a:23: 26:7f:ed:8c:16:76:04:ae:56:9e:e7:48:64:49:63: 0a:60:5b:0b:20:2b:22:03:14:c5:09:c7:ab:a3:fe: da:2b:be:06:f5:ad:3e:d7:b5:bd:b9:5f:40:20:7d: 0a:5a:84:dc:c7:fe:d0:6b:06:72:a0:a0:51:c5:25: 45:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:46:7B:35:59:14:36:5F:96:B9:A7:02:F7:A7:42:8C:A5:F5:C9:F2 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a323233303a3a2f34342d3438203d3e20323037333134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:2230::/44 Signature Algorithm: sha256WithRSAEncryption 4b:7a:74:6a:2f:e8:c8:36:2b:28:dc:a3:73:b0:83:2f:e5:79: 65:35:df:b5:1d:5c:f0:03:1b:5f:5e:69:79:57:92:27:4f:bd: 0a:8c:68:e1:a9:0e:24:70:84:c8:fa:48:8a:24:6c:fa:34:85: 7a:03:15:ac:e4:8e:c9:e5:bf:73:5c:4e:2c:5a:d1:18:98:11: 47:94:76:f0:13:e1:98:3e:ac:67:ee:c4:54:a5:9a:ae:d1:7f: 5f:4f:02:0b:69:23:c6:20:d5:80:a5:ae:40:15:36:2b:5c:5a: 7e:ba:79:af:9b:33:09:31:eb:d0:d6:a9:ca:11:4e:1a:0c:98: 50:c5:2c:7d:92:db:4e:15:7e:76:2d:53:10:a5:b1:f7:fb:01: 49:0c:af:a4:a8:6f:c5:1f:d8:80:64:d3:2f:91:b5:2e:66:80: 21:04:dc:a0:58:14:e9:53:7a:db:78:21:3b:0a:15:12:1c:17: 53:67:4c:25:7a:48:f6:5b:8a:0e:2c:5c:e3:cf:24:39:65:fe: e7:0f:9d:f0:7f:c0:86:77:70:41:fc:a5:32:24:b0:88:41:a7: 52:8d:40:48:3f:bc:4d:23:09:46:5a:c7:22:77:ef:14:f1:b4: b7:ee:d5:a5:12:1e:7f:33:9f:38:5c:e5:f5:ba:8e:0b:a6:ee: a3:dd:c0:a6 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUBqwqtdVt99HPMj3I+JwllesVSUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMzAyMDA1NThaFw0yNjEyMjkyMDEwNThaMDMxMTAvBgNV BAMTKENDNDY3QjM1NTkxNDM2NUY5NkI5QTcwMkY3QTc0MjhDQTVGNUM5RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu894VWVxjM0yGVF8nCFdiTCW9 F/8C1QQtgT76oJmftWzxWpSYJzP7Q1qTgO3/okI0ien/6dhFuv7Gfulr3MvlGXug PVGGjIBvGuO0X8O9IXtbrnN+8yH6y/W9fgsbFFUl6VCWU66v27EmXxy4MWxegZsa MIzdwM+Q5Qnh6xWAqsOX3hF5vB+jBMAS+46Mp3NLRxQoBUmMspkfVaFXuvF623Oa Ul5E5UC2Rs5b+pHye8C50r2v8dIKFNcuH5kxQf8KIyZ/7YwWdgSuVp7nSGRJYwpg WwsgKyIDFMUJx6uj/torvgb1rT7Xtb25X0AgfQpahNzH/tBrBnKgoFHFJUXHAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUzEZ7NVkUNl+WuacC96dCjKX1yfIwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhMzIzMjMzMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjMwMzczMzMxMzQu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwQqDo8CIjAwDQYJKoZIhvcNAQELBQADggEBAEt6dGov6Mg2Kyjc o3Owgy/leWU137UdXPADG19eaXlXkidPvQqMaOGpDiRwhMj6SIokbPo0hXoDFazk jsnlv3NcTixa0RiYEUeUdvAT4Zg+rGfuxFSlmq7Rf19PAgtpI8Yg1YClrkAVNitc Wn66ea+bMwkx69DWqcoRThoMmFDFLH2S204VfnYtUxClsff7AUkMr6Sob8Uf2IBk 0y+RtS5mgCEE3KBYFOlTett4ITsKFRIcF1NnTCV6SPZbig4sXOPPJDll/ucPnfB/ wIZ3cEH8pTIksIhBp1KNQEg/vE0jCUZaxyJ37xTxtLfu1aUSHn8znzhc5fW6jgum 7qPdwKY= -----END CERTIFICATE-----Generated at Sun Jan 25 15:47:30 2026 by rpki-client