This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a316330303a3a2f34302d3438203d3e20323037333033.roa File: 326130663a316363353a316330303a3a2f34302d3438203d3e20323037333033.roa (raw, json) Hash identifier: EihRffawBVAsHoxUDK7RdpJ91PtiH/oeMgAq3P0cdY8= Subject key identifier: EC:3A:BD:E3:1F:2E:A1:90:DC:F3:91:66:3A:2F:D5:16:97:74:84:AF Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 0F84EF50698F7CDCD75DD1770E0BAAB2D0E8CA56 Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a316330303a3a2f34302d3438203d3e20323037333033.roa Signing time: Wed 03 Dec 2025 01:27:47 +0000 ROA not before: Wed 03 Dec 2025 01:22:47 +0000 ROA not after: Wed 02 Dec 2026 01:27:47 +0000 asID: 207303 IP address blocks: 2a0f:1cc5:1c00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:84:ef:50:69:8f:7c:dc:d7:5d:d1:77:0e:0b:aa:b2:d0:e8:ca:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Dec 3 01:22:47 2025 GMT Not After : Dec 2 01:27:47 2026 GMT Subject: CN=EC3ABDE31F2EA190DCF391663A2FD516977484AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:54:56:fe:a5:b6:29:d0:dd:7f:4a:1f:64:14: c5:c6:3f:7d:66:04:27:53:a2:45:5b:a8:8e:b6:25: e7:75:a0:d5:f4:d4:3f:f7:1f:98:30:05:bc:87:1a: 8b:a9:97:cf:74:02:1e:ea:90:e2:a8:be:39:cd:aa: 65:60:3d:90:d7:9c:68:e6:10:85:39:c1:a7:5a:29: 82:35:a9:69:4d:21:60:09:de:5d:f4:e2:cc:5d:dc: 79:84:9f:98:1e:43:f3:48:fa:b8:16:e4:26:b6:59: c3:29:b6:65:c6:96:74:f3:5c:04:0e:1b:cf:7e:41: 6b:7e:4a:09:1a:e8:db:4a:47:87:af:a3:6b:1b:e8: c8:e9:85:32:30:41:c0:0b:ff:0b:9c:88:83:9d:dd: cc:80:f1:05:8a:70:c5:98:94:93:c2:a7:96:23:ed: 5b:56:be:7a:6e:2e:d6:b9:45:97:41:7f:b1:05:c3: 8f:f1:e5:b8:e1:90:bd:6b:d4:c3:28:63:ee:50:a0: e3:89:ec:ae:59:fb:53:3b:0c:0d:b7:3e:8d:a9:3b: 36:47:3e:30:2d:e1:8b:01:a9:e8:66:0d:8b:34:34: 4f:d5:ae:98:75:da:74:ba:43:fe:7c:a8:94:ef:68: 23:bf:ed:36:c5:b2:29:84:18:34:af:8e:62:d9:34: 85:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3A:BD:E3:1F:2E:A1:90:DC:F3:91:66:3A:2F:D5:16:97:74:84:AF X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a316330303a3a2f34302d3438203d3e20323037333033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1c00::/40 Signature Algorithm: sha256WithRSAEncryption 7f:ba:2e:f6:73:68:fd:8e:02:2e:cd:c1:41:7e:b4:72:58:1a: 61:ad:f9:e8:61:1e:91:33:a0:26:d8:ac:c7:14:c3:93:4c:bf: fe:94:cf:fa:be:78:0e:19:b4:2e:2f:ac:20:42:b0:96:e7:16: 40:47:64:6a:4c:fb:fa:bd:45:37:43:60:d9:99:d6:26:c4:e7: 52:12:b3:ef:c6:4e:21:89:b1:d7:d8:50:d5:97:e8:cb:86:03: f3:68:59:c1:87:6b:71:d4:2c:aa:f9:9e:25:e7:57:4d:23:69: 2a:c7:0a:c0:d7:c6:94:e2:54:5a:bf:48:d0:d7:0d:d2:fc:50: 2b:a0:79:0f:b9:93:fb:c4:01:4a:46:23:a3:aa:5e:a9:1b:62: 53:ec:82:84:e9:f2:7d:97:8c:34:3f:14:6a:d6:16:50:a7:9f: 40:07:e3:0f:94:b3:85:d5:5a:e2:0f:58:c4:38:4f:12:e1:8b: 35:be:96:40:4e:10:4e:2c:83:e7:5c:bd:04:52:1e:a9:6b:f9: 10:71:b1:36:c5:ea:31:af:a4:07:ed:21:f5:3e:7f:76:9f:3c: c4:ff:c2:17:7d:04:40:06:ab:8e:b0:14:56:99:8e:78:68:a8: c3:8f:5c:45:ca:f9:2a:70:33:c5:d7:eb:a1:84:7f:fc:d2:81: e9:91:b6:ca -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUD4TvUGmPfNzXXdF3DguqstDoylYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTEyMDMwMTIyNDdaFw0yNjEyMDIwMTI3NDdaMDMxMTAvBgNV BAMTKEVDM0FCREUzMUYyRUExOTBEQ0YzOTE2NjNBMkZENTE2OTc3NDg0QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChVFb+pbYp0N1/Sh9kFMXGP31m BCdTokVbqI62Jed1oNX01D/3H5gwBbyHGoupl890Ah7qkOKovjnNqmVgPZDXnGjm EIU5wadaKYI1qWlNIWAJ3l304sxd3HmEn5geQ/NI+rgW5Ca2WcMptmXGlnTzXAQO G89+QWt+Sgka6NtKR4evo2sb6MjphTIwQcAL/wuciIOd3cyA8QWKcMWYlJPCp5Yj 7VtWvnpuLta5RZdBf7EFw4/x5bjhkL1r1MMoY+5QoOOJ7K5Z+1M7DA23Po2pOzZH PjAt4YsBqehmDYs0NE/Vrph12nS6Q/58qJTvaCO/7TbFsimEGDSvjmLZNIXpAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQU7Dq94x8uoZDc85FmOi/VFpd0hK8wHwYDVR0j BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50 a3ZBNC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYt NGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzMTYzMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzNzMzMzAzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoPHMUcMA0GCSqGSIb3DQEBCwUAA4IBAQB/ui72c2j9jgIuzcFB frRyWBphrfnoYR6RM6Am2KzHFMOTTL/+lM/6vngOGbQuL6wgQrCW5xZAR2RqTPv6 vUU3Q2DZmdYmxOdSErPvxk4hibHX2FDVl+jLhgPzaFnBh2tx1Cyq+Z4l51dNI2kq xwrA18aU4lRav0jQ1w3S/FAroHkPuZP7xAFKRiOjql6pG2JT7IKE6fJ9l4w0PxRq 1hZQp59AB+MPlLOF1VriD1jEOE8S4Ys1vpZAThBOLIPnXL0EUh6pa/kQcbE2xeox r6QH7SH1Pn92nzzE/8IXfQRABquOsBRWmY54aKjDj1xFyvkqcDPF1+uhhH/80oHp kbbK -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:56 2025 by rpki-client