This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a326230303a3a2f34302d3438203d3e20323131373239.roa
File: 326130663a316363353a326230303a3a2f34302d3438203d3e20323131373239.roa (raw, json)
Hash identifier: ++ZXQO6DX2y5MC2lZZ9Rb2AxtnLGg97iXOGF4nak+wk=
Subject key identifier: F2:33:E8:43:94:47:C2:D3:18:63:A2:01:0F:BA:DD:BB:0A:C9:6E:06
Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Certificate serial: 4801CE6E37F684D5BAB6E7E7EB81861BB39063D9
Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a326230303a3a2f34302d3438203d3e20323131373239.roa
Signing time: Sun 04 Jan 2026 18:30:42 +0000
ROA not before: Sun 04 Jan 2026 18:25:42 +0000
ROA not after: Sun 03 Jan 2027 18:30:42 +0000
asID: 211729
IP address blocks: 2a0f:1cc5:2b00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:01:ce:6e:37:f6:84:d5:ba:b6:e7:e7:eb:81:86:1b:b3:90:63:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Validity
Not Before: Jan 4 18:25:42 2026 GMT
Not After : Jan 3 18:30:42 2027 GMT
Subject: CN=F233E8439447C2D31863A2010FBADDBB0AC96E06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:8f:54:c3:80:20:73:17:32:fe:88:cb:3b:
76:ff:dc:a8:dc:25:3a:fd:d2:76:04:46:4b:a7:e0:
76:dc:36:55:26:11:ab:b1:e4:c7:02:66:83:b7:73:
5e:9f:54:26:c0:54:79:88:4a:82:36:4f:90:0d:44:
4e:48:19:83:b2:70:ec:57:49:8d:59:f1:30:78:25:
f6:89:67:37:42:37:1d:8e:79:d0:4e:2d:5e:a0:c7:
58:a9:ef:c5:93:5c:99:46:49:20:fd:a8:af:23:b3:
bc:d6:74:8d:72:6a:15:75:74:c1:e1:3c:5c:ef:22:
34:21:c7:16:1d:3e:32:e0:6e:d3:06:86:68:7e:f9:
d0:1c:64:e4:43:e0:3f:68:e5:1a:5f:9e:77:57:5f:
84:2c:f6:b0:a8:12:d1:14:16:77:10:2c:93:5f:95:
f5:23:a3:fa:9c:6d:b2:c9:50:fb:5d:f9:4b:97:9d:
ee:1f:ab:fa:44:b5:26:ff:87:b5:c4:f7:61:b7:f9:
1d:96:ff:44:a4:e5:2c:78:18:b5:42:0b:4e:9d:a5:
62:00:08:74:62:5d:45:53:7b:5d:d1:0e:1c:1f:c8:
41:76:0d:c7:b2:4f:1a:94:eb:51:dd:af:90:b2:ba:
3f:80:16:c7:54:ea:9c:44:01:14:52:e6:5d:1f:75:
4c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:33:E8:43:94:47:C2:D3:18:63:A2:01:0F:BA:DD:BB:0A:C9:6E:06
X509v3 Authority Key Identifier:
keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a326230303a3a2f34302d3438203d3e20323131373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:2b00::/40
Signature Algorithm: sha256WithRSAEncryption
5e:6a:72:75:be:89:4f:d1:d8:c9:f0:83:8c:bc:26:29:21:b0:
ed:2b:e6:30:60:99:a0:2b:c0:20:6f:b8:ea:53:0d:82:11:6e:
04:5f:fc:a4:5b:a5:77:5f:a0:a3:77:32:e4:ab:55:93:37:be:
bc:13:dd:00:a8:51:ac:80:89:e9:20:e3:46:dd:bc:71:2b:bf:
a3:30:73:4d:97:5f:69:1b:a0:70:02:29:93:8a:54:c3:ca:6b:
bd:97:3b:48:05:d1:18:53:cd:2a:33:27:96:0a:97:12:fa:92:
8e:cb:33:ec:ef:4b:ef:1e:13:93:12:38:97:cd:76:b7:ba:a6:
6c:58:9d:ff:dd:71:f0:e1:20:33:ee:38:e4:6d:f4:0f:02:72:
46:1b:cd:f1:1b:09:8a:a0:b8:0d:87:28:04:27:80:30:94:0a:
4f:3e:d7:ba:38:37:75:61:88:2f:be:a3:2a:db:e8:80:69:26:
2d:c9:8c:5e:b0:1f:88:f2:6f:8b:e7:af:3c:8b:c0:b8:c2:55:
d6:ce:86:56:5f:74:83:e6:70:3a:fd:64:20:b9:97:10:4b:c8:
74:2f:5d:8a:f3:35:39:48:1b:35:df:58:bf:11:58:0f:6a:45:
5e:09:ec:fa:f0:82:17:8b:fc:3c:1b:e3:c8:72:f8:8f:52:bd:
75:56:58:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:41:00 2026 by rpki-client