This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a316230303a3a2f34302d3438203d3e20323033313638.roa File: 326130663a316363353a316230303a3a2f34302d3438203d3e20323033313638.roa (raw, json) Hash identifier: i72zk5+YBksIqh8q0oFYXo9te3wD0dukHxuxazvPvFs= Subject key identifier: C1:E2:BB:98:9F:8B:5D:02:2A:A9:E7:92:D6:A9:BB:AD:D3:89:48:D8 Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 674719384190CCFDD6DE39824FF042197BAF9875 Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a316230303a3a2f34302d3438203d3e20323033313638.roa Signing time: Wed 03 Dec 2025 18:08:33 +0000 ROA not before: Wed 03 Dec 2025 18:03:33 +0000 ROA not after: Wed 02 Dec 2026 18:08:33 +0000 asID: 203168 IP address blocks: 2a0f:1cc5:1b00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:47:19:38:41:90:cc:fd:d6:de:39:82:4f:f0:42:19:7b:af:98:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Dec 3 18:03:33 2025 GMT Not After : Dec 2 18:08:33 2026 GMT Subject: CN=C1E2BB989F8B5D022AA9E792D6A9BBADD38948D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9b:95:0e:9b:fc:0e:2e:56:c5:9c:b3:7d:36: 31:a9:61:c2:76:8d:1d:97:18:4f:13:ca:68:c0:cd: 2c:c1:74:cb:15:67:7d:92:78:f2:93:f3:61:7b:c9: 77:69:ee:3e:a0:c0:2a:39:d2:02:3f:bb:ea:65:09: ca:ae:57:71:a7:cb:0c:d5:ce:20:e6:da:24:b4:57: f7:10:fb:3a:c7:11:a4:11:d5:37:d6:b0:10:9e:95: 5b:bc:18:55:96:51:72:46:31:c8:b4:af:4a:2f:4a: d6:4a:bb:bc:66:1f:0d:67:67:e2:78:95:8d:c0:42: df:d3:2e:2e:27:3b:d0:b3:39:94:8d:42:05:8d:6a: 8f:34:e1:f7:3f:9f:89:d4:23:c6:a5:9f:3a:a6:3e: 81:3e:27:9d:0e:87:c3:2b:e6:e4:10:78:d2:24:73: 6a:3a:94:5a:9f:c7:07:7e:74:76:29:8e:55:ec:f8: 02:a5:7f:b7:1f:72:08:d5:b7:bc:9a:02:cf:98:fc: 83:e9:82:05:8c:f3:3a:80:07:07:ee:5b:1e:c0:0e: a1:d8:8a:cd:c4:0b:d3:12:63:1e:e9:cd:fc:57:40: e9:75:1b:64:d2:6a:8b:92:cf:df:00:ac:84:2c:ee: 05:d7:18:bc:ed:16:39:d5:aa:ff:2a:88:1d:b7:1e: 51:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E2:BB:98:9F:8B:5D:02:2A:A9:E7:92:D6:A9:BB:AD:D3:89:48:D8 X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a316230303a3a2f34302d3438203d3e20323033313638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1b00::/40 Signature Algorithm: sha256WithRSAEncryption 88:06:b2:91:3c:39:53:d2:3f:2d:e0:26:88:a5:71:f9:11:54: 0d:45:d4:29:11:da:81:2d:91:11:0e:7c:56:2b:e2:78:9f:c3: 8d:4e:2f:0d:78:cf:d4:2c:e8:27:24:33:ff:2d:89:18:f9:06: 5c:56:4c:63:fd:4b:8b:de:d5:6c:5a:fd:8e:93:65:a4:25:bc: ad:17:ac:e2:ef:d1:bb:32:66:52:d6:1a:f1:0f:73:9c:44:3b: 2b:c7:c9:97:ff:94:5c:ac:55:50:1f:73:fd:cf:89:78:f5:7b: c1:b6:14:0c:51:d0:8e:d1:0c:ef:46:16:6e:f1:80:d6:09:ef: 96:87:0c:12:a7:4e:a6:27:4c:8d:c8:56:de:86:73:ac:0f:2e: f2:79:28:59:44:fd:39:83:af:c1:9e:58:08:77:e1:e5:96:6f: 65:7b:84:0d:d1:90:61:c5:aa:ec:08:9d:c7:bc:19:42:c3:88: b6:df:e3:1f:4e:42:ae:40:ec:43:20:0b:9d:ae:24:61:18:83: 5c:3d:54:09:b5:27:ef:86:a3:49:77:c9:31:f1:e1:74:cd:06: 19:50:bf:62:f6:43:ab:4f:be:04:07:fc:8b:64:e6:18:e0:63: 70:84:9d:aa:09:f5:9a:80:c9:5c:31:c6:21:9e:9d:9d:da:98: 49:c4:d5:23 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUZ0cZOEGQzP3W3jmCT/BCGXuvmHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTEyMDMxODAzMzNaFw0yNjEyMDIxODA4MzNaMDMxMTAvBgNV BAMTKEMxRTJCQjk4OUY4QjVEMDIyQUE5RTc5MkQ2QTlCQkFERDM4OTQ4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChm5UOm/wOLlbFnLN9NjGpYcJ2 jR2XGE8TymjAzSzBdMsVZ32SePKT82F7yXdp7j6gwCo50gI/u+plCcquV3GnywzV ziDm2iS0V/cQ+zrHEaQR1TfWsBCelVu8GFWWUXJGMci0r0ovStZKu7xmHw1nZ+J4 lY3AQt/TLi4nO9CzOZSNQgWNao804fc/n4nUI8alnzqmPoE+J50Oh8Mr5uQQeNIk c2o6lFqfxwd+dHYpjlXs+AKlf7cfcgjVt7yaAs+Y/IPpggWM8zqABwfuWx7ADqHY is3EC9MSYx7pzfxXQOl1G2TSaouSz98ArIQs7gXXGLztFjnVqv8qiB23HlHPAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUweK7mJ+LXQIqqeeS1qm7rdOJSNgwHwYDVR0j BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50 a3ZBNC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYt NGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzMTYyMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMzMxMzYzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoPHMUbMA0GCSqGSIb3DQEBCwUAA4IBAQCIBrKRPDlT0j8t4CaI pXH5EVQNRdQpEdqBLZERDnxWK+J4n8ONTi8NeM/ULOgnJDP/LYkY+QZcVkxj/UuL 3tVsWv2Ok2WkJbytF6zi79G7MmZS1hrxD3OcRDsrx8mX/5RcrFVQH3P9z4l49XvB thQMUdCO0QzvRhZu8YDWCe+WhwwSp06mJ0yNyFbehnOsDy7yeShZRP05g6/BnlgI d+Hllm9le4QN0ZBhxarsCJ3HvBlCw4i23+MfTkKuQOxDIAudriRhGINcPVQJtSfv hqNJd8kx8eF0zQYZUL9i9kOrT74EB/yLZOYY4GNwhJ2qCfWagMlcMcYhnp2d2phJ xNUj -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:51 2025 by rpki-client