This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a313430303a3a2f34302d3438203d3e20323133383738.roa File: 326130663a316363353a313430303a3a2f34302d3438203d3e20323133383738.roa (raw, json) Hash identifier: Kmhqh7tjgfCBXe7i5LaakDMLpRE+EF0tyt1nt73lymc= Subject key identifier: E0:85:0F:68:A6:F7:B0:54:F2:BA:3F:18:65:BF:6C:C7:ED:86:24:89 Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 4FAC0C6CD97B0543E137F96FE91722FE3E27D1EF Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a313430303a3a2f34302d3438203d3e20323133383738.roa Signing time: Mon 15 Dec 2025 15:51:54 +0000 ROA not before: Mon 15 Dec 2025 15:46:54 +0000 ROA not after: Mon 14 Dec 2026 15:51:54 +0000 asID: 213878 IP address blocks: 2a0f:1cc5:1400::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ac:0c:6c:d9:7b:05:43:e1:37:f9:6f:e9:17:22:fe:3e:27:d1:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Dec 15 15:46:54 2025 GMT Not After : Dec 14 15:51:54 2026 GMT Subject: CN=E0850F68A6F7B054F2BA3F1865BF6CC7ED862489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:36:4b:3a:91:79:f3:e5:6d:d9:a1:49:d4:8f: 8e:cd:98:dc:07:64:40:91:f3:71:02:bc:a4:b7:38: 47:ca:56:dd:84:95:c5:3b:9b:b2:29:fb:bc:72:17: ee:7d:3d:e6:c6:df:b7:95:18:f9:f7:b8:46:21:7c: ea:22:27:cc:55:06:b3:32:7b:d6:65:3f:e7:ee:7f: c8:9d:d3:9c:6f:0e:e9:8c:c8:51:57:86:b0:24:78: 06:e1:45:99:f7:72:3f:3c:62:d0:86:fd:ce:49:91: b7:f0:a9:be:20:87:06:1e:99:c7:74:b5:69:77:75: 74:34:61:17:0a:d0:c0:fd:dc:4d:4d:d5:20:53:61: 72:7c:68:cd:f6:4c:09:a6:1e:e9:09:07:22:0b:44: d8:9c:c9:64:ce:72:4c:fc:57:64:54:8c:9a:58:6f: cb:b4:82:ae:8c:6d:e5:f2:3c:e9:57:86:d0:1e:d8: fa:2e:6f:85:36:45:a2:6e:9c:1d:ea:a9:13:6f:7e: 98:d0:27:74:81:3c:f4:fe:b2:88:65:6d:4d:4c:2a: 95:72:7a:57:04:fd:99:f4:c3:de:aa:ce:28:bb:c3: a5:95:92:89:5d:0a:1a:e9:b1:f9:71:23:0c:05:2d: 0b:5e:b0:24:90:b7:ac:ad:fb:70:40:32:75:b4:05: f3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:85:0F:68:A6:F7:B0:54:F2:BA:3F:18:65:BF:6C:C7:ED:86:24:89 X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a313430303a3a2f34302d3438203d3e20323133383738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1400::/40 Signature Algorithm: sha256WithRSAEncryption 84:51:10:76:da:96:4f:3d:ae:ed:7c:29:f1:c3:c8:11:a1:c5: ff:f7:06:bb:1b:ef:9c:d3:1b:f3:74:01:1e:eb:aa:da:6e:b0: f2:fb:6e:b3:30:21:42:fc:81:05:c2:4a:18:b0:29:43:06:66: e3:1e:65:18:72:66:f7:f8:d0:0b:9f:7b:50:f4:ba:2b:3c:de: ab:bf:f6:66:3b:e9:e6:b1:8f:cf:d4:a8:89:08:0c:f7:19:e3: 16:c9:75:2b:15:84:33:91:aa:e1:61:82:a4:66:18:35:b4:17: a9:eb:c5:ab:a1:72:71:da:c5:53:7c:b8:1c:70:10:19:b8:95: ff:f5:72:5e:64:32:5d:f3:ea:bb:a1:a6:6b:a5:3e:fb:ce:6e: 29:dc:81:39:b9:3f:09:9c:77:1d:b3:ad:4e:ba:2f:61:ed:ff: 07:19:92:88:6c:9b:1b:5f:45:ce:74:da:9c:91:fa:90:ff:18: 41:bb:ed:c6:c9:f7:0e:c9:a8:36:3e:1d:e2:81:ea:dd:a8:5e: ba:83:bc:27:d8:c0:37:5e:e1:4e:a8:4c:42:f3:89:a9:45:4c: 24:fb:25:fa:82:f8:9a:8b:9c:d5:27:67:66:0e:3d:2e:7c:46: 90:61:c1:f5:6d:71:2f:48:83:20:b0:46:65:f1:a8:35:0b:3b: 56:d0:78:fd -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUT6wMbNl7BUPhN/lv6Rci/j4n0e8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTEyMTUxNTQ2NTRaFw0yNjEyMTQxNTUxNTRaMDMxMTAvBgNV BAMTKEUwODUwRjY4QTZGN0IwNTRGMkJBM0YxODY1QkY2Q0M3RUQ4NjI0ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsNks6kXnz5W3ZoUnUj47NmNwH ZECR83ECvKS3OEfKVt2ElcU7m7Ip+7xyF+59PebG37eVGPn3uEYhfOoiJ8xVBrMy e9ZlP+fuf8id05xvDumMyFFXhrAkeAbhRZn3cj88YtCG/c5Jkbfwqb4ghwYemcd0 tWl3dXQ0YRcK0MD93E1N1SBTYXJ8aM32TAmmHukJByILRNicyWTOckz8V2RUjJpY b8u0gq6MbeXyPOlXhtAe2Poub4U2RaJunB3qqRNvfpjQJ3SBPPT+sohlbU1MKpVy elcE/Zn0w96qzii7w6WVkoldChrpsflxIwwFLQtesCSQt6yt+3BAMnW0BfNpAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQU4IUPaKb3sFTyuj8YZb9sx+2GJIkwHwYDVR0j BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50 a3ZBNC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYt NGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzMTM0MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzMzM4MzczOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoPHMUUMA0GCSqGSIb3DQEBCwUAA4IBAQCEURB22pZPPa7tfCnx w8gRocX/9wa7G++c0xvzdAEe66rabrDy+26zMCFC/IEFwkoYsClDBmbjHmUYcmb3 +NALn3tQ9LorPN6rv/ZmO+nmsY/P1KiJCAz3GeMWyXUrFYQzkarhYYKkZhg1tBep 68WroXJx2sVTfLgccBAZuJX/9XJeZDJd8+q7oaZrpT77zm4p3IE5uT8JnHcds61O ui9h7f8HGZKIbJsbX0XOdNqckfqQ/xhBu+3GyfcOyag2Ph3igerdqF66g7wn2MA3 XuFOqExC84mpRUwk+yX6gviai5zVJ2dmDj0ufEaQYcH1bXEvSIMgsEZl8ag1CztW 0Hj9 -----END CERTIFICATE-----Generated at Thu Dec 18 09:21:36 2025 by rpki-client