This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a316130303a3a2f34302d3438203d3e20323030343535.roa File: 326130663a316363353a316130303a3a2f34302d3438203d3e20323030343535.roa (raw, json) Hash identifier: NKNc0jQeaDiLSBgfeba0LqfVl3B9k1QG6nevvmBKV5g= Subject key identifier: 6D:5D:C2:7B:FB:13:7A:9C:7F:25:19:CB:B4:3E:58:1A:6E:0A:D1:77 Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 09CB3294AFE7587CCCD7E106687EC14A3ACB700E Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a316130303a3a2f34302d3438203d3e20323030343535.roa Signing time: Thu 04 Dec 2025 11:01:03 +0000 ROA not before: Thu 04 Dec 2025 10:56:03 +0000 ROA not after: Thu 03 Dec 2026 11:01:03 +0000 asID: 200455 IP address blocks: 2a0f:1cc5:1a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:cb:32:94:af:e7:58:7c:cc:d7:e1:06:68:7e:c1:4a:3a:cb:70:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Dec 4 10:56:03 2025 GMT Not After : Dec 3 11:01:03 2026 GMT Subject: CN=6D5DC27BFB137A9C7F2519CBB43E581A6E0AD177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:57:21:60:c6:76:2e:9e:9c:4e:21:e3:c9:45: 0e:a5:42:18:9c:d5:17:a9:0c:10:6d:b3:2a:62:46: 60:c4:84:7d:79:77:bd:ae:6f:c5:79:1e:ef:f4:0a: f7:5d:50:46:49:43:86:6a:fe:72:b7:b1:52:a5:bf: a1:1d:82:dc:af:28:35:8d:55:41:4d:da:8a:41:a8: 04:6c:a1:71:28:3e:2d:5b:c5:f4:c3:6f:4e:c1:d2: 96:28:21:83:7f:66:98:77:da:c3:77:1b:9a:e9:35: 85:0a:1f:bc:e0:07:86:53:31:35:36:6d:d8:79:24: 44:02:9f:aa:b9:e5:ce:9b:dc:63:2b:7d:af:77:44: b8:fc:85:57:90:b1:19:c6:e1:d9:05:c6:37:a1:65: dc:ee:ec:d2:16:1f:e5:85:98:a9:61:e3:0c:76:d0: d5:76:f8:74:64:a1:c9:a3:6b:60:02:22:d2:9c:cd: f9:0d:10:eb:64:5d:0b:c0:f0:03:6c:b8:35:4b:f7: e6:70:48:0a:fd:46:9b:5a:83:67:a2:35:13:cc:51: ca:d8:6e:de:b2:3a:70:ef:cc:74:99:7a:80:2a:8f: c4:fc:3c:90:cd:c0:15:65:aa:64:bb:39:99:ed:36: 0e:37:db:1a:b0:b6:64:d2:76:5c:00:b8:68:bd:4f: 47:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5D:C2:7B:FB:13:7A:9C:7F:25:19:CB:B4:3E:58:1A:6E:0A:D1:77 X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a316130303a3a2f34302d3438203d3e20323030343535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1a00::/40 Signature Algorithm: sha256WithRSAEncryption 8b:fc:65:50:30:66:84:6e:bb:c0:5c:d9:27:e0:31:c0:af:9c: 26:14:88:eb:ca:4a:2c:ae:69:ce:5a:e1:a3:89:8b:ca:f0:fa: 64:16:e7:c7:1c:c1:95:9b:ab:ad:e2:04:9b:40:8d:48:82:aa: 38:92:f0:86:37:d5:2e:d2:d3:fc:e7:7c:0e:07:9b:84:62:d6: 3c:95:85:fe:85:07:4f:03:3d:69:de:a5:65:3f:97:b8:79:9d: 03:b2:a5:4f:f7:4d:92:ff:2a:7c:88:7d:b6:42:bf:2c:e9:84: c9:4e:9d:e8:51:72:27:05:fb:24:ed:5b:6a:5e:08:a3:5f:ae: 94:5b:ff:bb:da:d9:f5:47:ed:68:d1:bb:b4:8f:96:5c:fe:34: e3:2a:97:83:9d:bb:11:c6:60:31:29:b5:c2:e5:00:5c:6b:4c: d2:dd:22:47:e5:ce:57:15:80:c5:46:e8:42:08:2b:b0:08:f0: e7:59:4e:de:09:a5:29:f9:e0:11:88:df:83:a9:e3:33:0f:b6: 5f:16:12:5d:fa:ed:d0:54:10:e0:bb:0e:81:7d:f1:7a:ba:6a: 72:6f:5f:94:1f:1a:a7:54:61:9c:40:a1:b3:f1:73:57:51:f4: 09:93:83:03:8b:10:fb:cc:ab:61:bb:84:39:15:78:84:ac:fe: a9:94:92:c5 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUCcsylK/nWHzM1+EGaH7BSjrLcA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTEyMDQxMDU2MDNaFw0yNjEyMDMxMTAxMDNaMDMxMTAvBgNV BAMTKDZENURDMjdCRkIxMzdBOUM3RjI1MTlDQkI0M0U1ODFBNkUwQUQxNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeVyFgxnYunpxOIePJRQ6lQhic 1RepDBBtsypiRmDEhH15d72ub8V5Hu/0CvddUEZJQ4Zq/nK3sVKlv6EdgtyvKDWN VUFN2opBqARsoXEoPi1bxfTDb07B0pYoIYN/Zph32sN3G5rpNYUKH7zgB4ZTMTU2 bdh5JEQCn6q55c6b3GMrfa93RLj8hVeQsRnG4dkFxjehZdzu7NIWH+WFmKlh4wx2 0NV2+HRkocmja2ACItKczfkNEOtkXQvA8ANsuDVL9+ZwSAr9Rptag2eiNRPMUcrY bt6yOnDvzHSZeoAqj8T8PJDNwBVlqmS7OZntNg432xqwtmTSdlwAuGi9T0fRAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUbV3Ce/sTepx/JRnLtD5YGm4K0XcwHwYDVR0j BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50 a3ZBNC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYt NGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzMTYxMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMDM0MzUzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoPHMUaMA0GCSqGSIb3DQEBCwUAA4IBAQCL/GVQMGaEbrvAXNkn 4DHAr5wmFIjrykosrmnOWuGjiYvK8PpkFufHHMGVm6ut4gSbQI1Igqo4kvCGN9Uu 0tP853wOB5uEYtY8lYX+hQdPAz1p3qVlP5e4eZ0DsqVP902S/yp8iH22Qr8s6YTJ Tp3oUXInBfsk7VtqXgijX66UW/+72tn1R+1o0bu0j5Zc/jTjKpeDnbsRxmAxKbXC 5QBca0zS3SJH5c5XFYDFRuhCCCuwCPDnWU7eCaUp+eARiN+DqeMzD7ZfFhJd+u3Q VBDguw6BffF6umpyb1+UHxqnVGGcQKGz8XNXUfQJk4MDixD7zKthu4Q5FXiErP6p lJLF -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:49 2025 by rpki-client