This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035323a3a2f34382d3438203d3e20323030323430.roa File: 326130653a386630323a663035323a3a2f34382d3438203d3e20323030323430.roa (raw, json) Hash identifier: 04ECiCHNYqCW1IoBRGK/e/JmplO6ax7d35zReWZE9Bg= Subject key identifier: B9:98:E7:F9:89:A4:EF:AD:C4:15:2A:4F:19:70:F5:8F:19:68:DF:36 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 66B128125047F6FBACE9A2B74D7FBBBA84CA30EF Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035323a3a2f34382d3438203d3e20323030323430.roa Signing time: Wed 21 Jan 2026 17:08:00 +0000 ROA not before: Wed 21 Jan 2026 17:03:00 +0000 ROA not after: Wed 20 Jan 2027 17:08:00 +0000 asID: 200240 IP address blocks: 2a0e:8f02:f052::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b1:28:12:50:47:f6:fb:ac:e9:a2:b7:4d:7f:bb:ba:84:ca:30:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Jan 21 17:03:00 2026 GMT Not After : Jan 20 17:08:00 2027 GMT Subject: CN=B998E7F989A4EFADC4152A4F1970F58F1968DF36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9c:1e:52:7c:2c:92:65:c0:16:15:ef:60:20: 92:b9:62:ed:92:94:61:c9:8e:43:19:a1:1e:28:cc: 6c:36:03:66:d0:3f:ac:55:dc:9c:4d:11:1b:1c:d5: 69:b2:a2:46:ad:0f:56:32:14:e2:96:4e:8d:96:81: b5:f6:6a:b0:6d:39:62:ea:45:39:de:98:37:b0:b7: 97:71:62:0a:35:7e:a8:e8:a5:9b:d3:61:ad:68:4b: 3b:49:3e:8d:1b:9c:c9:68:f2:8d:a1:df:3a:75:38: 91:20:2a:68:74:5e:f5:47:8d:1f:91:46:06:6c:54: 97:86:b9:fb:80:9f:8e:29:22:40:de:64:b2:fc:31: c3:38:96:df:dd:5a:57:11:90:3d:d4:60:36:b6:2f: 3a:8c:b9:cc:1e:32:8d:84:23:ed:4d:88:03:4a:12: cd:75:4d:e1:20:61:79:ad:b7:9d:df:23:37:7f:a5: de:84:37:ed:97:96:34:87:95:36:af:c1:30:12:66: a7:35:15:db:b0:1b:de:b6:32:de:80:9b:0c:30:04: c5:7b:9c:78:80:7e:fb:d7:4f:d7:df:72:d0:ca:58: 29:f6:5f:bc:c8:f6:98:e4:0a:3d:ee:33:99:73:aa: e6:58:83:bb:e2:b4:a4:e9:a1:53:4b:6e:d9:28:67: b9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:98:E7:F9:89:A4:EF:AD:C4:15:2A:4F:19:70:F5:8F:19:68:DF:36 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326130653a386630323a663035323a3a2f34382d3438203d3e20323030323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:8f02:f052::/48 Signature Algorithm: sha256WithRSAEncryption 33:e9:23:3d:ec:48:05:ba:3a:b5:97:dc:05:34:df:56:2d:39: 9c:96:16:80:62:a4:e7:a0:24:a4:a1:10:ec:c6:b7:25:f4:b7: 3e:f3:91:83:03:81:94:5f:36:35:d1:d9:91:45:63:4b:98:41: fe:b9:d1:c1:1b:2f:8c:f4:6f:df:5d:0d:3c:67:3f:30:e4:9a: 9c:a2:54:05:92:f3:da:64:df:f8:ac:ca:f7:66:b8:8b:e3:2a: 89:d7:46:31:83:c7:22:fd:3e:1e:31:e3:ca:db:a3:4b:cf:dc: b2:fe:13:90:d5:cd:50:47:b1:b9:53:90:43:74:b7:f9:7b:13: a6:50:d6:6a:ee:4d:98:be:98:26:70:4a:b5:d0:4b:09:31:24: a1:1c:b9:53:46:4f:59:56:e4:85:34:f0:f2:c3:07:df:a4:be: 82:fd:d5:86:e8:7d:dc:65:e8:63:0a:a1:06:e8:c3:7f:39:86: 14:8b:d7:00:5e:86:46:35:74:cd:3e:1a:41:46:94:0f:17:22: a8:74:a2:84:fc:0e:c9:fa:f8:cc:59:e8:21:57:12:6d:ce:d9: 6c:1e:46:70:c1:8f:54:29:17:8c:8a:d9:7c:10:c7:2f:f2:78: 0f:cf:46:69:3c:ce:ab:0f:e0:23:61:ba:55:90:48:9e:4c:d1: bd:75:88:6e -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUZrEoElBH9vus6aK3TX+7uoTKMO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNjAxMjExNzAzMDBaFw0yNzAxMjAxNzA4MDBaMDMxMTAvBgNV BAMTKEI5OThFN0Y5ODlBNEVGQURDNDE1MkE0RjE5NzBGNThGMTk2OERGMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQnB5SfCySZcAWFe9gIJK5Yu2S lGHJjkMZoR4ozGw2A2bQP6xV3JxNERsc1WmyokatD1YyFOKWTo2WgbX2arBtOWLq RTnemDewt5dxYgo1fqjopZvTYa1oSztJPo0bnMlo8o2h3zp1OJEgKmh0XvVHjR+R RgZsVJeGufuAn44pIkDeZLL8McM4lt/dWlcRkD3UYDa2LzqMucweMo2EI+1NiANK Es11TeEgYXmtt53fIzd/pd6EN+2XljSHlTavwTASZqc1FduwG962Mt6AmwwwBMV7 nHiAfvvXT9ffctDKWCn2X7zI9pjkCj3uM5lzquZYg7vitKTpoVNLbtkoZ7nlAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUuZjn+Ymk763EFSpPGXD1jxlo3zYwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMyNjEzMDY1M2EzODY2MzAz MjNhNjYzMDM1MzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzAzMjM0MzAu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqDo8C8FIwDQYJKoZIhvcNAQELBQADggEBADPpIz3sSAW6OrWX 3AU031YtOZyWFoBipOegJKShEOzGtyX0tz7zkYMDgZRfNjXR2ZFFY0uYQf650cEb L4z0b99dDTxnPzDkmpyiVAWS89pk3/isyvdmuIvjKonXRjGDxyL9Ph4x48rbo0vP 3LL+E5DVzVBHsblTkEN0t/l7E6ZQ1mruTZi+mCZwSrXQSwkxJKEcuVNGT1lW5IU0 8PLDB9+kvoL91Ybofdxl6GMKoQbow385hhSL1wBehkY1dM0+GkFGlA8XIqh0ooT8 Dsn6+MxZ6CFXEm3O2WweRnDBj1QpF4yK2XwQxy/yeA/PRmk8zqsP4CNhulWQSJ5M 0b11iG4= -----END CERTIFICATE-----Generated at Sun Jan 25 15:47:31 2026 by rpki-client