This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363313a3a2f33322d3438203d3e203430393239.roa File: 326130663a316363313a3a2f33322d3438203d3e203430393239.roa (raw, json) Hash identifier: Jb6dakHIlxZlju4TdmqA0Pyi9Qoe3ObqAtW2veuoD8s= Subject key identifier: 09:13:BA:AC:83:5A:DE:18:C0:B0:E2:33:74:CD:45:4A:D5:46:3D:68 Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 459A3E0C63B5CB1180E756D0391C2A8A4EE7F298 Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363313a3a2f33322d3438203d3e203430393239.roa Signing time: Thu 06 Nov 2025 15:35:42 +0000 ROA not before: Thu 06 Nov 2025 15:30:42 +0000 ROA not after: Thu 05 Nov 2026 15:35:42 +0000 asID: 40929 IP address blocks: 2a0f:1cc1::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9a:3e:0c:63:b5:cb:11:80:e7:56:d0:39:1c:2a:8a:4e:e7:f2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Nov 6 15:30:42 2025 GMT Not After : Nov 5 15:35:42 2026 GMT Subject: CN=0913BAAC835ADE18C0B0E23374CD454AD5463D68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:b4:77:d5:26:48:7a:51:ce:18:b4:72:c4: 1c:89:dc:66:49:45:c6:e1:55:3b:5f:60:4e:bf:73: 12:44:a4:84:c0:07:9a:b1:99:a3:42:3f:f1:14:0b: ba:a6:ba:d7:10:c6:49:6f:1c:06:2c:4b:35:f0:df: 7d:f1:71:15:a2:42:70:1e:25:b4:a9:b8:44:6a:a1: 84:30:31:ce:d2:95:c5:79:f7:6f:a6:a2:0f:3f:ad: 10:47:96:7b:dc:91:18:85:ad:d1:2b:fd:86:e7:72: 14:0f:96:58:44:88:19:ac:29:e8:92:0b:0b:ed:0d: 1d:f2:20:dc:99:44:30:f0:61:de:06:14:6e:34:8a: de:32:d3:18:e0:f3:59:c7:c4:57:8b:51:85:9b:63: 16:37:9f:c8:c8:77:48:4f:04:47:fa:5c:ce:d6:46: af:30:32:46:56:3b:43:a3:ae:c4:41:ce:11:dc:79: 15:87:51:57:fc:a1:1d:23:88:74:af:2f:23:c5:ed: 12:f6:90:ad:af:3b:1a:cd:b5:5e:ec:34:84:39:48: d2:e4:6a:1b:f3:a9:05:cb:6d:64:12:71:29:c3:0e: 62:c8:4d:30:a6:b6:c8:f1:5a:8e:c0:87:60:c0:8b: 8f:86:c2:c0:05:8e:b7:3e:0c:e8:fa:53:18:08:bb: 6c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:13:BA:AC:83:5A:DE:18:C0:B0:E2:33:74:CD:45:4A:D5:46:3D:68 X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363313a3a2f33322d3438203d3e203430393239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc1::/32 Signature Algorithm: sha256WithRSAEncryption 2a:23:66:47:f9:6d:e8:dd:11:56:1d:9f:71:6b:ac:a8:23:d2: b3:2d:9c:16:56:23:b0:98:a5:f4:6c:e5:71:5c:4e:c6:f4:d9: 45:23:88:a7:78:2f:a5:92:db:6a:96:53:be:fa:99:fb:b5:50: a8:b9:e9:be:2c:64:cc:e4:f3:b1:00:74:e7:0b:9d:b9:e0:48: 3d:87:95:cb:51:73:01:c6:74:86:6d:82:13:f2:c3:6e:e0:59: a3:b8:6b:bb:67:76:5f:78:db:0b:65:36:e1:ad:90:dc:55:c2: 4f:e9:fc:75:5f:70:d0:c2:8b:a3:cc:c7:08:cf:3c:f0:9a:bd: 07:ba:a8:7e:db:9b:83:11:53:bf:79:f8:c1:79:36:72:1b:70: 3a:eb:98:0a:bb:99:55:4c:90:5e:23:de:d8:1d:ec:52:d4:b5: 9e:b4:69:45:f9:8a:b0:84:d8:e2:66:c0:1a:a5:c6:db:94:6f: a7:ee:a8:9f:cd:fb:8d:9f:a5:0f:eb:de:3d:1c:8f:e3:08:6e: 13:94:3c:1f:14:ca:59:ea:89:b4:ea:82:a8:ec:a2:f6:27:71: 7a:21:9a:e5:ec:ac:aa:9d:54:8d:42:d9:95:c5:22:52:1f:ca: f8:e9:2c:19:89:de:3f:9c:ea:3d:b0:44:29:fd:03:e8:4e:0c: 51:df:99:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZo+DGO1yxGA51bQORwqik7n8pgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTExMDYxNTMwNDJaFw0yNjExMDUxNTM1NDJaMDMxMTAvBgNV BAMTKDA5MTNCQUFDODM1QURFMThDMEIwRTIzMzc0Q0Q0NTRBRDU0NjNENjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrdLR31SZIelHOGLRyxByJ3GZJ RcbhVTtfYE6/cxJEpITAB5qxmaNCP/EUC7qmutcQxklvHAYsSzXw333xcRWiQnAe JbSpuERqoYQwMc7SlcV592+mog8/rRBHlnvckRiFrdEr/YbnchQPllhEiBmsKeiS CwvtDR3yINyZRDDwYd4GFG40it4y0xjg81nHxFeLUYWbYxY3n8jId0hPBEf6XM7W Rq8wMkZWO0OjrsRBzhHceRWHUVf8oR0jiHSvLyPF7RL2kK2vOxrNtV7sNIQ5SNLk ahvzqQXLbWQScSnDDmLITTCmtsjxWo7Ah2DAi4+GwsAFjrc+DOj6UxgIu2zBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCRO6rINa3hjAsOIzdM1FStVGPWgwHwYDVR0j BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50 a3ZBNC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYt NGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzAvMzI2MTMwNjYzYTMxNjM2MzMx M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzQzMDM5MzIzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoP HMEwDQYJKoZIhvcNAQELBQADggEBACojZkf5bejdEVYdn3FrrKgj0rMtnBZWI7CY pfRs5XFcTsb02UUjiKd4L6WS22qWU776mfu1UKi56b4sZMzk87EAdOcLnbngSD2H lctRcwHGdIZtghPyw27gWaO4a7tndl942wtlNuGtkNxVwk/p/HVfcNDCi6PMxwjP PPCavQe6qH7bm4MRU795+MF5NnIbcDrrmAq7mVVMkF4j3tgd7FLUtZ60aUX5irCE 2OJmwBqlxtuUb6fuqJ/N+42fpQ/r3j0cj+MIbhOUPB8UylnqibTqgqjsovYncXoh muXsrKqdVI1C2ZXFIlIfyvjpLBmJ3j+c6j2wRCn9A+hODFHfmXk= -----END CERTIFICATE-----Generated at Sat Dec 6 05:37:24 2025 by rpki-client