This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3330303a3a2f34302d3438203d3e20313939303138.roa
File: 326130663a316363353a3330303a3a2f34302d3438203d3e20313939303138.roa (raw, json)
Hash identifier: zdGhikculMhr+GeBze37eKI9IQzTXIIIKcp/ZRpL4kQ=
Subject key identifier: FD:81:51:BA:A1:C1:1D:D3:0B:B5:8C:0F:F6:F5:3E:58:6F:DD:49:27
Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Certificate serial: 11902C24126AF893A4AB752C98FCEE7360E24C4E
Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3330303a3a2f34302d3438203d3e20313939303138.roa
Signing time: Wed 12 Nov 2025 12:15:44 +0000
ROA not before: Wed 12 Nov 2025 12:10:44 +0000
ROA not after: Wed 11 Nov 2026 12:15:44 +0000
asID: 199018
IP address blocks: 2a0f:1cc5:300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl
rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 15:09:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:90:2c:24:12:6a:f8:93:a4:ab:75:2c:98:fc:ee:73:60:e2:4c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Validity
Not Before: Nov 12 12:10:44 2025 GMT
Not After : Nov 11 12:15:44 2026 GMT
Subject: CN=FD8151BAA1C11DD30BB58C0FF6F53E586FDD4927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:36:3b:66:05:01:e7:11:07:50:bd:cd:54:
9d:87:d2:f8:92:40:c3:b5:6d:2f:6f:03:db:a2:e0:
a9:f1:47:7d:60:ae:73:1c:58:6c:fc:86:72:b5:66:
3c:8c:72:7b:0d:f8:5d:37:48:4a:bb:41:e4:94:d1:
7e:0f:7d:0e:74:6d:11:60:0c:a7:52:03:fd:a4:3e:
4e:5a:04:7d:1b:a6:72:e1:2d:46:b6:dc:d6:20:13:
a2:4b:87:f4:3f:07:4a:41:19:bd:7c:35:8a:2a:df:
9d:b8:0c:95:00:fe:a8:11:37:0e:73:3a:0d:da:f0:
58:5e:c8:df:26:18:4b:79:92:3b:0e:25:fb:c5:e8:
b2:ea:7b:96:42:1c:be:56:84:25:b6:41:ba:b8:15:
97:75:25:16:4f:1e:95:b2:a2:b5:56:14:d7:e2:08:
17:88:b7:1c:fd:80:57:b3:f4:20:43:31:46:e8:39:
e1:83:fc:5b:9d:5e:e3:c3:7b:da:7c:58:2b:2a:6d:
f7:6c:e0:34:f4:60:ab:52:12:a2:13:15:29:9b:a3:
aa:29:11:2e:31:b6:28:9a:26:46:4a:17:44:e6:8e:
35:9a:2f:64:4e:91:fb:a0:93:a2:aa:55:e5:95:d4:
f6:83:1e:cf:a7:4a:a6:59:0d:07:02:92:ca:07:bb:
cb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:81:51:BA:A1:C1:1D:D3:0B:B5:8C:0F:F6:F5:3E:58:6F:DD:49:27
X509v3 Authority Key Identifier:
keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3330303a3a2f34302d3438203d3e20313939303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:300::/40
Signature Algorithm: sha256WithRSAEncryption
07:07:24:c9:c0:87:fb:25:5a:64:0b:24:d4:35:02:b7:ab:3a:
0d:b2:6a:da:10:1f:eb:ee:e1:b6:f7:10:2c:29:40:55:87:ae:
71:c7:88:fc:4d:20:c4:b3:c2:16:7e:84:aa:66:73:19:31:d6:
a1:c0:18:cc:b4:bf:6f:40:06:f2:e5:78:7d:96:5e:45:e8:ce:
52:7a:08:39:1b:41:e0:14:18:7a:a3:9c:26:ef:51:66:48:e8:
10:5b:19:b0:a5:a3:6a:f0:69:27:01:a0:22:31:9d:38:b9:3c:
3b:39:d4:ed:3c:e0:32:4d:4a:0b:8f:d9:ea:b4:c4:a4:a2:d4:
67:02:76:8b:d0:ce:0e:01:e4:f2:60:cb:56:89:e2:31:f1:93:
0e:40:e6:af:7a:c3:21:ba:32:7b:c6:0d:1e:e2:e5:76:0a:99:
35:81:72:dd:23:03:de:e4:7c:32:63:49:2d:74:a5:cc:b7:89:
28:20:98:ee:bb:ad:94:43:6d:d8:10:19:7e:5c:4d:58:94:b6:
88:5c:0b:fd:ff:07:e3:87:da:d7:4d:2e:80:e7:50:10:2b:d2:
ca:c5:56:d8:87:3d:0e:a9:39:56:8d:50:8a:6e:22:5e:82:c2:
19:c3:25:2a:26:1e:77:d2:7f:d8:da:14:77:c5:3d:89:8f:d7:
2c:6d:f5:3b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUEZAsJBJq+JOkq3UsmPzuc2DiTE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3
YjY0YmMwZTAeFw0yNTExMTIxMjEwNDRaFw0yNjExMTExMjE1NDRaMDMxMTAvBgNV
BAMTKEZEODE1MUJBQTFDMTFERDMwQkI1OEMwRkY2RjUzRTU4NkZERDQ5MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9GzY7ZgUB5xEHUL3NVJ2H0viS
QMO1bS9vA9ui4KnxR31grnMcWGz8hnK1ZjyMcnsN+F03SEq7QeSU0X4PfQ50bRFg
DKdSA/2kPk5aBH0bpnLhLUa23NYgE6JLh/Q/B0pBGb18NYoq3524DJUA/qgRNw5z
Og3a8FheyN8mGEt5kjsOJfvF6LLqe5ZCHL5WhCW2Qbq4FZd1JRZPHpWyorVWFNfi
CBeItxz9gFez9CBDMUboOeGD/FudXuPDe9p8WCsqbfds4DT0YKtSEqITFSmbo6op
ES4xtiiaJkZKF0TmjjWaL2ROkfugk6KqVeWV1PaDHs+nSqZZDQcCksoHu8tbAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU/YFRuqHBHdMLtYwP9vU+WG/dSScwHwYDVR0j
BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj
MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50
a3ZBNC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYt
NGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzAvMzI2MTMwNjYzYTMxNjM2MzM1
M2EzMzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMTM5MzkzMDMxMzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAqDxzFAzANBgkqhkiG9w0BAQsFAAOCAQEABwckycCH+yVaZAsk1DUC
t6s6DbJq2hAf6+7htvcQLClAVYeucceI/E0gxLPCFn6EqmZzGTHWocAYzLS/b0AG
8uV4fZZeRejOUnoIORtB4BQYeqOcJu9RZkjoEFsZsKWjavBpJwGgIjGdOLk8OznU
7TzgMk1KC4/Z6rTEpKLUZwJ2i9DODgHk8mDLVoniMfGTDkDmr3rDIboye8YNHuLl
dgqZNYFy3SMD3uR8MmNJLXSlzLeJKCCY7rutlENt2BAZflxNWJS2iFwL/f8H44fa
100ugOdQECvSysVW2Ic9Dqk5Vo1Qim4iXoLCGcMlKiYed9J/2NoUd8U9iY/XLG31
Ow==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:42:02 2025 by rpki-client