This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a313230303a3a2f34302d3438203d3e20323032373334.roa
File: 326130663a316363353a313230303a3a2f34302d3438203d3e20323032373334.roa (raw, json)
Hash identifier: +2G14D4ToayXcy2T1mXM6FrlMQGmbxgczr9bqeRxpZQ=
Subject key identifier: 5C:0F:03:65:E9:55:D7:40:32:9F:4C:28:73:F2:EB:52:06:3B:08:B6
Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Certificate serial: 5FBEC78EB5275B7673ED2E59447D98BA1347061A
Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a313230303a3a2f34302d3438203d3e20323032373334.roa
Signing time: Fri 26 Dec 2025 21:03:24 +0000
ROA not before: Fri 26 Dec 2025 20:58:24 +0000
ROA not after: Fri 25 Dec 2026 21:03:24 +0000
asID: 202734
IP address blocks: 2a0f:1cc5:1200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:be:c7:8e:b5:27:5b:76:73:ed:2e:59:44:7d:98:ba:13:47:06:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Validity
Not Before: Dec 26 20:58:24 2025 GMT
Not After : Dec 25 21:03:24 2026 GMT
Subject: CN=5C0F0365E955D740329F4C2873F2EB52063B08B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6e:b9:1f:0c:a1:76:52:c6:cf:9d:d2:f9:2d:
25:72:d6:20:d8:8e:7f:c7:61:74:ea:f7:96:0a:1d:
80:7d:95:da:c4:87:1a:cc:7a:5e:34:1f:9b:e5:fc:
e9:5a:0b:0f:11:93:62:4a:4d:82:12:74:84:71:a0:
d8:dc:65:4b:f4:f0:33:9f:5a:ec:27:7c:bd:78:38:
d4:99:6d:37:e1:32:ff:a5:df:8d:99:4b:52:75:91:
92:77:b5:3c:d7:b2:61:1d:e3:bf:9f:10:fa:db:72:
a2:db:bf:51:7c:66:ca:7b:8b:ee:2c:b8:8a:fd:bd:
a7:0c:4c:e0:14:5e:56:3b:a8:cf:0c:97:5a:a7:f1:
ed:1d:41:ca:a4:d1:02:30:ea:8f:49:e9:c8:40:6d:
74:b7:79:0f:ee:84:29:31:2c:4a:af:82:9b:c8:47:
01:9a:b2:1e:81:0f:0b:57:27:b0:9d:89:d4:22:b6:
9d:80:41:af:35:67:88:b4:ce:7a:47:88:15:93:55:
dd:e2:03:df:02:07:6c:e3:a1:b0:8e:3d:b3:e5:c7:
ea:16:ed:30:67:68:a6:c3:38:78:a8:6a:81:d1:ef:
57:70:16:d0:85:68:41:4c:98:6d:c0:69:bd:ee:fa:
29:89:04:27:9e:ec:26:40:e5:4a:2d:9c:5a:e6:69:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0F:03:65:E9:55:D7:40:32:9F:4C:28:73:F2:EB:52:06:3B:08:B6
X509v3 Authority Key Identifier:
keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a313230303a3a2f34302d3438203d3e20323032373334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:1200::/40
Signature Algorithm: sha256WithRSAEncryption
3c:98:6d:4f:c7:6b:75:0e:5b:c1:4d:d7:af:24:43:87:ac:7d:
dd:e2:e1:50:ec:70:37:68:11:93:ba:04:aa:05:e4:a6:cc:64:
8f:cf:8c:4f:ec:ad:04:63:82:b3:a2:07:e2:7f:d3:60:93:84:
ab:90:8c:cf:4d:09:57:76:39:a2:92:f9:2a:eb:27:a7:1a:92:
9e:90:2d:8e:6a:be:66:97:07:1c:b6:56:ed:f7:37:d0:49:29:
f5:64:92:4d:73:91:10:f9:68:62:78:56:8a:11:ba:a8:4e:01:
db:38:25:87:60:e1:92:df:12:ac:76:6d:0d:ef:7d:8b:9c:3a:
35:16:3d:14:8c:6d:e8:d9:10:e1:e4:48:03:75:85:ee:4c:93:
30:66:09:de:f5:0d:bb:a4:1e:f8:f6:55:81:4c:a1:4c:c8:4e:
37:d9:aa:02:ab:ec:00:0b:9a:61:33:5d:d4:67:2c:19:e1:0f:
01:f0:ce:02:a9:66:e1:28:83:c8:15:39:55:a2:ec:b0:dc:bf:
51:a6:6a:5c:cd:e6:3b:30:14:e9:7d:7f:66:32:1e:f1:8e:42:
44:c2:b5:38:26:fb:17:95:66:4d:23:03:c9:14:25:d0:01:50:
c7:4c:0c:55:a2:91:6f:de:a3:c6:95:5d:e0:94:7d:2b:d7:7c:
c9:c3:ca:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:43:05 2026 by rpki-client