This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a316530303a3a2f34302d3438203d3e20323134393638.roa File: 326130663a316363353a316530303a3a2f34302d3438203d3e20323134393638.roa (raw, json) Hash identifier: a6Y1Yki/MAcEV/imF8tSeNS0xvgM0lg48HMRfomLy7Y= Subject key identifier: 4A:34:76:0C:5A:93:47:7E:CE:DE:F4:EB:8E:C4:33:B6:34:97:DD:C9 Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 1AC098D61ECA03FE61B9927068D7C461A855878C Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a316530303a3a2f34302d3438203d3e20323134393638.roa Signing time: Mon 01 Dec 2025 14:16:02 +0000 ROA not before: Mon 01 Dec 2025 14:11:02 +0000 ROA not after: Mon 30 Nov 2026 14:16:02 +0000 asID: 214968 IP address blocks: 2a0f:1cc5:1e00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c0:98:d6:1e:ca:03:fe:61:b9:92:70:68:d7:c4:61:a8:55:87:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Dec 1 14:11:02 2025 GMT Not After : Nov 30 14:16:02 2026 GMT Subject: CN=4A34760C5A93477ECEDEF4EB8EC433B63497DDC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5f:e7:40:64:1c:b7:84:97:18:86:51:8c:11: 24:00:54:9c:c0:b3:ec:2d:57:58:4e:af:06:34:1f: 4b:d9:ca:38:0b:ff:cd:da:9f:17:fa:5e:e1:01:45: 22:5c:ed:d5:4c:84:3a:97:87:f0:de:09:25:9d:df: d0:d3:8d:bd:32:a7:a4:eb:c8:bb:ab:9b:a4:01:61: 67:a1:d7:0c:de:bb:83:f8:e3:6d:d1:a3:a4:ef:8b: 23:a6:a2:be:fd:52:70:09:86:62:91:94:1a:e4:b7: dd:52:06:7f:00:43:b9:11:77:3c:66:73:2a:78:32: a3:dd:30:8c:8d:4b:93:b3:0a:7c:a9:64:0b:07:3f: eb:ac:d7:b3:5e:f2:14:ed:81:11:c7:67:60:fe:41: 79:a4:9b:96:5e:b2:bc:bb:62:23:64:07:f4:e6:6a: 96:7b:72:dc:3d:29:b4:8e:10:df:6a:82:bc:9b:f0: 00:1a:ca:27:cb:9a:33:75:46:9a:df:6c:1e:b9:f3: e1:99:7e:8c:6c:e2:bb:93:b3:ec:97:3d:cc:8f:77: dd:8f:19:58:8e:fd:f1:81:ea:24:2b:63:4f:f3:6d: 4a:f6:dd:85:5d:1f:e3:e5:5f:e7:0c:1f:73:71:59: 36:dd:0a:be:96:6a:f2:df:21:c4:68:c2:81:be:ca: af:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:34:76:0C:5A:93:47:7E:CE:DE:F4:EB:8E:C4:33:B6:34:97:DD:C9 X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a316530303a3a2f34302d3438203d3e20323134393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1e00::/40 Signature Algorithm: sha256WithRSAEncryption 29:8e:18:84:8c:dc:c5:df:15:4b:f6:c8:bc:b7:e9:51:ec:10: cf:5b:18:08:cf:50:a9:9f:24:78:42:bf:ea:4d:a6:1c:8d:68: 2f:d6:87:11:3f:92:e8:1c:1f:59:a1:a4:0b:e4:18:28:be:c0: 12:9b:90:f0:f9:d6:cd:3c:37:22:87:a1:65:a8:c8:24:ab:16: 70:04:dd:11:b2:b2:de:56:86:d9:c6:cd:a0:0d:7b:0a:d5:50: 26:92:37:60:fe:70:37:5d:e9:3c:b7:58:3a:2f:5a:c5:a0:6c: 9a:71:31:a8:e3:1b:35:d4:76:ce:ab:59:18:9b:8f:82:86:77: 20:96:c7:44:49:70:1c:c9:2c:b4:77:28:31:28:40:39:cd:5f: 78:d1:70:8e:33:3f:a2:6e:42:a5:c0:01:23:dd:b6:d5:36:fe: f1:61:c4:77:2b:51:45:3d:b1:4f:e7:34:af:b5:c5:3f:92:c4: 00:45:2b:87:72:3d:2f:2c:c4:ef:c2:07:66:49:5d:cb:a3:5e: 4e:0a:30:6a:77:59:d8:80:4b:67:f5:80:0f:e2:96:c9:99:b4: 0b:d3:7c:88:7c:b1:96:bc:bb:c1:74:ab:03:8f:bd:7a:bd:4e: c4:56:1f:55:6e:f0:c0:28:5c:d0:0a:cf:23:5b:8c:2c:ab:b0: ae:c3:31:25 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUGsCY1h7KA/5huZJwaNfEYahVh4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTEyMDExNDExMDJaFw0yNjExMzAxNDE2MDJaMDMxMTAvBgNV BAMTKDRBMzQ3NjBDNUE5MzQ3N0VDRURFRjRFQjhFQzQzM0I2MzQ5N0REQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKX+dAZBy3hJcYhlGMESQAVJzA s+wtV1hOrwY0H0vZyjgL/83anxf6XuEBRSJc7dVMhDqXh/DeCSWd39DTjb0yp6Tr yLurm6QBYWeh1wzeu4P4423Ro6TviyOmor79UnAJhmKRlBrkt91SBn8AQ7kRdzxm cyp4MqPdMIyNS5OzCnypZAsHP+us17Ne8hTtgRHHZ2D+QXmkm5Zesry7YiNkB/Tm apZ7ctw9KbSOEN9qgryb8AAayifLmjN1RprfbB658+GZfoxs4ruTs+yXPcyPd92P GViO/fGB6iQrY0/zbUr23YVdH+PlX+cMH3NxWTbdCr6WavLfIcRowoG+yq+RAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUSjR2DFqTR37O3vTrjsQztjSX3ckwHwYDVR0j BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50 a3ZBNC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYt NGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzMTY1MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNDM5MzYzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoPHMUeMA0GCSqGSIb3DQEBCwUAA4IBAQApjhiEjNzF3xVL9si8 t+lR7BDPWxgIz1CpnyR4Qr/qTaYcjWgv1ocRP5LoHB9ZoaQL5BgovsASm5Dw+dbN PDcih6FlqMgkqxZwBN0RsrLeVobZxs2gDXsK1VAmkjdg/nA3Xek8t1g6L1rFoGya cTGo4xs11HbOq1kYm4+ChncglsdESXAcySy0dygxKEA5zV940XCOMz+ibkKlwAEj 3bbVNv7xYcR3K1FFPbFP5zSvtcU/ksQARSuHcj0vLMTvwgdmSV3Lo15OCjBqd1nY gEtn9YAP4pbJmbQL03yIfLGWvLvBdKsDj716vU7EVh9VbvDAKFzQCs8jW4wsq7Cu wzEl -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:51 2025 by rpki-client