This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a316430303a3a2f34302d3438203d3e20323134323037.roa File: 326130663a316363353a316430303a3a2f34302d3438203d3e20323134323037.roa (raw, json) Hash identifier: sJN3O38iskxF/ySKC7f7k72Sc+zvBUnS1cC3zmiR5wI= Subject key identifier: 16:0A:D2:A9:24:6D:16:5B:5B:E1:CA:F7:5F:3F:B0:A2:9B:48:E9:3D Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 08F0E5180F9AED6829A0A4D2B3CD68E7F8A66AE8 Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a316430303a3a2f34302d3438203d3e20323134323037.roa Signing time: Mon 01 Dec 2025 15:22:33 +0000 ROA not before: Mon 01 Dec 2025 15:17:33 +0000 ROA not after: Mon 30 Nov 2026 15:22:33 +0000 asID: 214207 IP address blocks: 2a0f:1cc5:1d00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f0:e5:18:0f:9a:ed:68:29:a0:a4:d2:b3:cd:68:e7:f8:a6:6a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Dec 1 15:17:33 2025 GMT Not After : Nov 30 15:22:33 2026 GMT Subject: CN=160AD2A9246D165B5BE1CAF75F3FB0A29B48E93D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:49:74:ca:49:a4:2e:c3:0f:ac:eb:90:dd:5c: df:f2:19:f6:98:30:60:cd:a5:64:48:23:c4:e0:fc: d6:53:42:9a:81:14:c6:4a:6e:16:01:e7:5f:c0:d3: a7:68:83:39:73:f0:68:39:64:72:f7:19:29:3c:18: 4f:b0:0b:4b:89:6c:96:71:f8:ec:d6:7d:2e:2f:53: 60:ae:66:57:94:be:d1:9f:b6:9a:1c:82:c2:f6:67: dd:85:eb:65:8d:5d:20:4c:c0:62:0d:1e:d0:2b:2f: ae:4e:ab:dd:81:f4:3b:70:93:b6:16:65:58:db:71: c5:47:64:2a:b8:5e:fd:52:e1:b4:f0:27:3e:be:05: ff:88:c0:f9:4a:80:44:6b:49:85:f1:c4:c1:63:c1: 21:cc:d7:a3:be:e0:9a:9b:a9:b0:0a:e0:20:2b:dd: 77:04:c6:cf:68:60:c9:bf:cf:42:6e:1a:58:fe:e7: 38:ff:3a:6f:d9:f1:89:62:97:12:80:88:65:d6:d6: b9:4e:97:6e:6c:bd:63:83:b9:2c:2c:b9:51:ce:8a: 3e:43:83:85:eb:47:b5:8e:3d:99:82:81:fd:4c:5e: 06:fc:e2:6e:a1:a5:26:bc:38:95:91:c0:2f:ff:15: 22:69:f1:1a:40:be:30:a8:d8:39:ac:a2:1b:5f:00: 0d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0A:D2:A9:24:6D:16:5B:5B:E1:CA:F7:5F:3F:B0:A2:9B:48:E9:3D X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a316430303a3a2f34302d3438203d3e20323134323037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1d00::/40 Signature Algorithm: sha256WithRSAEncryption 7a:4f:7d:70:6c:e2:9f:57:ed:d1:f8:0a:cf:58:51:74:94:05: 95:11:f9:46:42:a0:5e:b9:5a:eb:32:59:fe:22:e2:17:21:7b: 7e:9f:5e:27:1d:6c:45:98:3f:3f:ed:8c:01:28:77:92:cc:12: c8:f2:bd:d4:09:0a:94:dd:56:c1:b3:94:e6:92:e2:c3:1d:1b: e7:af:74:ab:f0:bd:09:88:60:cb:21:61:1c:9c:a0:12:3c:13: 37:08:4c:82:d4:81:ee:84:70:75:d2:10:2d:65:e8:53:88:e3: 96:a6:70:05:57:e3:9e:4b:a6:b6:3c:43:2c:d8:08:47:55:0e: 81:8b:90:5f:26:3e:9c:e7:e9:8e:2f:ed:ac:b7:ee:5f:18:c5: 67:63:a1:76:1f:17:c6:15:88:6f:06:02:d3:e9:24:cc:72:eb: d8:11:40:a1:66:5e:ee:d0:5e:a3:8c:d3:e1:a9:d8:0e:05:1d: ba:ff:6e:bb:b2:ac:77:c3:3e:cc:2e:fd:d4:52:c5:95:c6:ab: df:c7:86:d1:4b:34:0c:fa:70:7a:7b:3d:1c:8a:8c:17:ac:10: 72:e6:6b:01:ab:0c:3a:2e:17:82:00:d7:d3:17:9a:de:6e:5e: d1:a6:ad:20:ec:3d:ca:db:5e:24:15:1c:7a:2b:47:da:99:79: 84:42:63:87 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUCPDlGA+a7WgpoKTSs81o5/imaugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTEyMDExNTE3MzNaFw0yNjExMzAxNTIyMzNaMDMxMTAvBgNV BAMTKDE2MEFEMkE5MjQ2RDE2NUI1QkUxQ0FGNzVGM0ZCMEEyOUI0OEU5M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5SXTKSaQuww+s65DdXN/yGfaY MGDNpWRII8Tg/NZTQpqBFMZKbhYB51/A06dogzlz8Gg5ZHL3GSk8GE+wC0uJbJZx +OzWfS4vU2CuZleUvtGftpocgsL2Z92F62WNXSBMwGINHtArL65Oq92B9Dtwk7YW ZVjbccVHZCq4Xv1S4bTwJz6+Bf+IwPlKgERrSYXxxMFjwSHM16O+4JqbqbAK4CAr 3XcExs9oYMm/z0JuGlj+5zj/Om/Z8YlilxKAiGXW1rlOl25svWODuSwsuVHOij5D g4XrR7WOPZmCgf1MXgb84m6hpSa8OJWRwC//FSJp8RpAvjCo2DmsohtfAA01AgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUFgrSqSRtFltb4cr3Xz+woptI6T0wHwYDVR0j BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50 a3ZBNC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYt NGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzMTY0MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNDMyMzAzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoPHMUdMA0GCSqGSIb3DQEBCwUAA4IBAQB6T31wbOKfV+3R+ArP WFF0lAWVEflGQqBeuVrrMln+IuIXIXt+n14nHWxFmD8/7YwBKHeSzBLI8r3UCQqU 3VbBs5TmkuLDHRvnr3Sr8L0JiGDLIWEcnKASPBM3CEyC1IHuhHB10hAtZehTiOOW pnAFV+OeS6a2PEMs2AhHVQ6Bi5BfJj6c5+mOL+2st+5fGMVnY6F2HxfGFYhvBgLT 6STMcuvYEUChZl7u0F6jjNPhqdgOBR26/267sqx3wz7MLv3UUsWVxqvfx4bRSzQM +nB6ez0ciowXrBBy5msBqww6LheCANfTF5rebl7Rpq0g7D3K214kFRx6K0famXmE QmOH -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:46 2025 by rpki-client