This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a316630303a3a2f34302d3438203d3e20323132353332.roa File: 326130663a316363353a316630303a3a2f34302d3438203d3e20323132353332.roa (raw, json) Hash identifier: tbDYBXbgoiDoilrZ6LcrlZ50K3z4YjfM7E9fGaQZHYI= Subject key identifier: 79:16:86:28:AD:24:3C:FE:7C:D0:79:9B:51:9A:92:B2:9F:60:65:97 Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 735A9BEC27FEF9273D74C734E12A5D8DE5E07477 Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a316630303a3a2f34302d3438203d3e20323132353332.roa Signing time: Sun 30 Nov 2025 08:14:18 +0000 ROA not before: Sun 30 Nov 2025 08:09:18 +0000 ROA not after: Sun 29 Nov 2026 08:14:18 +0000 asID: 212532 IP address blocks: 2a0f:1cc5:1f00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:5a:9b:ec:27:fe:f9:27:3d:74:c7:34:e1:2a:5d:8d:e5:e0:74:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Nov 30 08:09:18 2025 GMT Not After : Nov 29 08:14:18 2026 GMT Subject: CN=79168628AD243CFE7CD0799B519A92B29F606597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:b6:00:d6:a1:1b:20:1a:fc:91:08:5a:8d: 71:70:75:cf:1c:f8:35:86:67:30:3e:a5:60:2a:bb: b5:7e:29:da:0d:46:63:cf:26:4e:0b:19:1f:21:38: e2:6e:ef:73:26:6a:a5:48:1b:60:25:08:9d:6e:ab: d0:01:73:4f:d1:65:6e:48:21:fe:65:b8:27:46:04: 7e:e0:b8:3d:51:e3:b6:8b:98:d7:b8:08:31:6b:83: ef:2b:42:d5:6a:6a:23:1f:19:d7:6f:c8:13:22:94: 36:3a:fe:90:63:98:a8:25:a0:95:9a:84:fa:7d:da: 18:f8:18:92:f1:1b:81:a1:b2:7d:23:29:fd:3b:33: a4:9d:4d:75:48:ba:85:ff:96:48:f3:42:1e:ac:6a: 71:d0:75:d5:2b:04:fc:44:ae:8c:10:a6:64:4a:a2: fa:8d:38:cd:71:eb:57:92:9b:b1:d5:25:0a:fe:c4: 0c:d3:11:1c:bc:fe:92:bf:2c:f2:8e:7b:d9:93:d8: 15:ff:55:b0:83:f2:82:02:64:8e:55:15:a9:e4:4a: 0f:b4:74:60:48:f0:4b:58:39:56:66:40:7f:b6:0c: 2c:15:d7:f0:c0:3b:16:02:07:a1:80:81:1a:19:47: 7f:ff:91:96:46:f2:18:45:a3:63:4d:80:b0:7d:3b: 08:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:16:86:28:AD:24:3C:FE:7C:D0:79:9B:51:9A:92:B2:9F:60:65:97 X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a316630303a3a2f34302d3438203d3e20323132353332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1f00::/40 Signature Algorithm: sha256WithRSAEncryption 66:35:56:f8:38:ac:60:80:d2:c5:03:10:04:15:34:08:10:8a: a7:54:91:e2:27:b1:8d:e9:c6:aa:f7:b6:35:07:04:19:2d:0e: 3a:75:f7:13:b1:00:68:7b:df:96:3c:2d:41:66:b0:fb:cf:c5: 95:ed:f4:10:15:aa:d9:95:3b:3b:b0:8c:bd:4a:8a:f8:d0:d4: 56:91:a0:c9:76:94:ab:94:5d:dc:be:f8:d8:ad:bd:ff:0d:f9: 43:66:08:01:c1:bb:1f:a7:60:83:1c:df:9b:98:76:fd:b0:0e: 05:45:e2:28:0f:92:b6:bc:42:d0:ff:42:c2:46:b8:51:0d:0d: 61:c7:2a:8b:40:8b:05:6f:ee:80:4b:ce:81:9b:ee:66:97:e1: 51:55:8e:7c:69:a9:ce:3d:88:87:72:60:2d:ad:b1:87:99:42: 46:a7:b4:a4:64:dd:30:08:68:3e:17:54:93:42:f2:a1:ce:6b: 5b:44:7c:a2:2b:16:fd:ca:a3:6b:5d:8b:50:53:a8:87:be:cf: 46:f2:fa:5f:1f:9b:b7:b0:c0:58:f8:24:00:69:f9:ba:9e:18: 0c:4b:88:72:3f:77:38:e0:9b:3f:7f:d6:68:77:7b:e0:68:33: f4:09:19:67:4e:ce:3f:5f:58:75:d2:fe:7f:e2:1d:cc:67:8d: 96:b0:14:d5 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUc1qb7Cf++Sc9dMc04SpdjeXgdHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTExMzAwODA5MThaFw0yNjExMjkwODE0MThaMDMxMTAvBgNV BAMTKDc5MTY4NjI4QUQyNDNDRkU3Q0QwNzk5QjUxOUE5MkIyOUY2MDY1OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6g7YA1qEbIBr8kQhajXFwdc8c +DWGZzA+pWAqu7V+KdoNRmPPJk4LGR8hOOJu73MmaqVIG2AlCJ1uq9ABc0/RZW5I If5luCdGBH7guD1R47aLmNe4CDFrg+8rQtVqaiMfGddvyBMilDY6/pBjmKgloJWa hPp92hj4GJLxG4Ghsn0jKf07M6SdTXVIuoX/lkjzQh6sanHQddUrBPxErowQpmRK ovqNOM1x61eSm7HVJQr+xAzTERy8/pK/LPKOe9mT2BX/VbCD8oICZI5VFankSg+0 dGBI8EtYOVZmQH+2DCwV1/DAOxYCB6GAgRoZR3//kZZG8hhFo2NNgLB9OwjNAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUeRaGKK0kPP580HmbUZqSsp9gZZcwHwYDVR0j BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50 a3ZBNC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYt NGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzMTY2MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzMjM1MzMzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoPHMUfMA0GCSqGSIb3DQEBCwUAA4IBAQBmNVb4OKxggNLFAxAE FTQIEIqnVJHiJ7GN6caq97Y1BwQZLQ46dfcTsQBoe9+WPC1BZrD7z8WV7fQQFarZ lTs7sIy9Sor40NRWkaDJdpSrlF3cvvjYrb3/DflDZggBwbsfp2CDHN+bmHb9sA4F ReIoD5K2vELQ/0LCRrhRDQ1hxyqLQIsFb+6AS86Bm+5ml+FRVY58aanOPYiHcmAt rbGHmUJGp7SkZN0wCGg+F1STQvKhzmtbRHyiKxb9yqNrXYtQU6iHvs9G8vpfH5u3 sMBY+CQAafm6nhgMS4hyP3c44Js/f9Zod3vgaDP0CRlnTs4/X1h10v5/4h3MZ42W sBTV -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:58 2025 by rpki-client