This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3130303a3a2f34302d3438203d3e20323033333039.roa File: 326130663a316363353a3130303a3a2f34302d3438203d3e20323033333039.roa (raw, json) Hash identifier: ex5BqlX36n5RPvYxb1eeKZWccPmcITckkGj5zu/ZvW8= Subject key identifier: AA:A8:11:5B:DD:16:43:24:F9:6C:1B:03:5D:8E:65:B5:9A:DE:B0:78 Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 4741302588B29E62FB29B0D344381A90B8C104FC Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3130303a3a2f34302d3438203d3e20323033333039.roa Signing time: Sun 30 Nov 2025 08:15:04 +0000 ROA not before: Sun 30 Nov 2025 08:10:04 +0000 ROA not after: Sun 29 Nov 2026 08:15:04 +0000 asID: 203309 IP address blocks: 2a0f:1cc5:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:41:30:25:88:b2:9e:62:fb:29:b0:d3:44:38:1a:90:b8:c1:04:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Nov 30 08:10:04 2025 GMT Not After : Nov 29 08:15:04 2026 GMT Subject: CN=AAA8115BDD164324F96C1B035D8E65B59ADEB078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b9:ba:0e:1b:4a:7e:dd:c3:8a:4d:1e:3f:4a: ef:71:13:13:3e:35:17:eb:93:de:d6:7b:4a:9e:c1: 2d:c6:0e:28:27:d6:9d:76:41:73:c9:56:1c:60:1b: 02:e9:3e:44:9a:af:3c:a4:0b:d1:05:30:95:04:20: 14:95:35:d8:ea:ce:7f:0d:96:35:9c:04:9e:fd:fa: 5e:ae:81:18:61:27:0f:fd:e4:f8:ae:83:63:cc:07: 61:df:e6:f2:93:93:fe:f9:e3:ba:c8:f7:90:a7:f8: 6d:e5:13:21:f1:04:30:ee:d6:cf:91:11:03:58:3d: ed:27:62:8d:65:a8:37:1d:60:2d:a4:d8:ad:bd:d1: cb:26:8e:1f:69:1a:21:fe:b4:61:7e:a8:6c:82:53: d1:65:50:84:2b:c7:d5:25:49:81:4f:f2:81:61:ad: 65:90:7e:e0:a3:23:74:72:3e:11:de:ef:7e:af:64: a4:74:f9:e8:2a:d4:89:4a:ff:59:18:79:bc:48:49: 60:8e:8c:35:53:5f:69:c6:ed:50:b4:9c:fb:c5:51: 25:74:3e:e0:57:a9:01:5e:23:ff:58:08:b1:27:38: 8a:90:7f:54:26:13:79:3d:d9:07:3d:7c:b1:c9:ff: 94:b3:10:ed:4e:88:10:7e:ed:b7:37:11:47:0e:2c: 60:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A8:11:5B:DD:16:43:24:F9:6C:1B:03:5D:8E:65:B5:9A:DE:B0:78 X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3130303a3a2f34302d3438203d3e20323033333039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:100::/40 Signature Algorithm: sha256WithRSAEncryption 81:1d:e0:47:5d:27:15:4e:f3:95:3e:4d:c9:e6:0a:64:f8:ee: 5d:ea:eb:32:69:0a:e5:e3:05:7d:14:ae:b1:07:5d:74:fc:79: 63:ea:36:12:f0:89:f9:d5:b0:51:79:f5:f2:48:9a:db:7f:f9: 69:3b:c5:7d:c0:ca:4d:6f:41:97:4f:0d:0f:6e:1e:b5:a2:39: 26:22:68:d1:e6:86:c3:4a:01:bd:0e:6d:47:e2:35:7b:1e:4a: 1f:6d:6f:37:4c:60:90:ba:c8:27:81:2f:fc:06:7f:3e:22:d5: 25:91:01:c0:50:91:8d:b6:8b:54:85:3e:50:eb:a4:8d:2d:70: 35:b3:07:fa:ff:98:4a:13:37:9e:fd:32:db:a7:b2:2f:14:13: 31:01:e1:33:1a:62:84:34:0a:20:01:ef:80:2c:af:b7:82:ae: 39:61:07:5d:34:ad:7a:c5:90:dc:bb:df:98:4f:5d:55:c7:d4: 78:d5:0e:fe:66:a2:c4:93:89:19:48:ad:1e:64:5d:d0:4e:21: a0:31:9c:e8:54:17:de:fa:cd:6a:6a:7c:7c:95:25:f2:b3:cc: ed:63:6a:ff:73:44:e3:86:dd:66:64:07:8b:a6:dc:8e:5f:5f: 43:16:66:83:60:ab:39:41:ab:c8:d0:fa:eb:e7:33:39:e7:71: 2a:06:2d:73 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUR0EwJYiynmL7KbDTRDgakLjBBPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTExMzAwODEwMDRaFw0yNjExMjkwODE1MDRaMDMxMTAvBgNV BAMTKEFBQTgxMTVCREQxNjQzMjRGOTZDMUIwMzVEOEU2NUI1OUFERUIwNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuuboOG0p+3cOKTR4/Su9xExM+ NRfrk97We0qewS3GDign1p12QXPJVhxgGwLpPkSarzykC9EFMJUEIBSVNdjqzn8N ljWcBJ79+l6ugRhhJw/95Piug2PMB2Hf5vKTk/7547rI95Cn+G3lEyHxBDDu1s+R EQNYPe0nYo1lqDcdYC2k2K290csmjh9pGiH+tGF+qGyCU9FlUIQrx9UlSYFP8oFh rWWQfuCjI3RyPhHe736vZKR0+egq1IlK/1kYebxISWCOjDVTX2nG7VC0nPvFUSV0 PuBXqQFeI/9YCLEnOIqQf1QmE3k92Qc9fLHJ/5SzEO1OiBB+7bc3EUcOLGDvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqqgRW90WQyT5bBsDXY5ltZresHgwHwYDVR0j BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50 a3ZBNC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYt NGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzMTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMwMzMzMzMwMzkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAqDxzFATANBgkqhkiG9w0BAQsFAAOCAQEAgR3gR10nFU7zlT5NyeYK ZPjuXerrMmkK5eMFfRSusQdddPx5Y+o2EvCJ+dWwUXn18kia23/5aTvFfcDKTW9B l08ND24etaI5JiJo0eaGw0oBvQ5tR+I1ex5KH21vN0xgkLrIJ4Ev/AZ/PiLVJZEB wFCRjbaLVIU+UOukjS1wNbMH+v+YShM3nv0y26eyLxQTMQHhMxpihDQKIAHvgCyv t4KuOWEHXTStesWQ3LvfmE9dVcfUeNUO/maixJOJGUitHmRd0E4hoDGc6FQX3vrN amp8fJUl8rPM7WNq/3NE44bdZmQHi6bcjl9fQxZmg2CrOUGryND66+czOedxKgYt cw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:01 2025 by rpki-client