This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3530303a3a2f34302d3438203d3e20323037333137.roa File: 326130663a316363353a3530303a3a2f34302d3438203d3e20323037333137.roa (raw, json) Hash identifier: JnVH8nJsv3TvzSbViENhlNQrMHqVCHUCAmtV1KjwRFo= Subject key identifier: DB:83:F1:41:13:61:C6:FE:DD:45:B4:6C:C7:39:14:D6:63:E6:2D:61 Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 0E57AF80DA8A0317C02FC0C918B88A387CDCBFB4 Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3530303a3a2f34302d3438203d3e20323037333137.roa Signing time: Mon 10 Nov 2025 14:47:35 +0000 ROA not before: Mon 10 Nov 2025 14:42:35 +0000 ROA not after: Mon 09 Nov 2026 14:47:35 +0000 asID: 207317 IP address blocks: 2a0f:1cc5:500::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:57:af:80:da:8a:03:17:c0:2f:c0:c9:18:b8:8a:38:7c:dc:bf:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Nov 10 14:42:35 2025 GMT Not After : Nov 9 14:47:35 2026 GMT Subject: CN=DB83F1411361C6FEDD45B46CC73914D663E62D61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:55:4c:30:2a:97:77:8c:5d:7f:7c:6f:ab:f3: 5a:e0:2a:7c:2a:5f:4b:32:86:79:22:92:aa:25:85: 32:d0:b7:8f:be:f0:90:0e:8c:ad:71:12:65:0a:79: 92:38:11:df:81:26:f6:ea:e0:e9:9d:12:c1:9b:a9: 78:f6:52:15:21:02:93:1f:ef:af:69:5d:4b:26:f5: 01:c7:36:ed:e6:1b:3a:78:68:f3:3c:3e:32:bc:4d: 2e:4e:3e:a2:f4:df:ff:1e:aa:4e:b1:b5:09:e7:11: 9a:56:30:bd:25:45:98:05:52:78:4f:9b:93:cb:58: e5:72:95:05:e1:66:61:96:48:55:48:33:58:b1:b4: 31:03:7a:3e:64:09:95:e5:f7:4c:84:8f:6e:79:05: b9:58:4d:8e:f1:86:d1:a0:84:3b:44:58:00:d1:81: 2d:a3:8d:e6:89:f6:b0:75:91:17:1e:37:c7:18:75: 38:3c:5d:6b:be:5a:f0:20:5c:7c:62:ee:81:0b:69: 00:2d:83:a9:01:17:5e:e2:a2:89:1c:4c:1a:9e:ec: c0:aa:1e:16:54:4d:ce:db:e9:3d:86:a9:b7:47:43: d8:b1:84:6d:1e:e6:1d:2b:ca:a1:94:3b:a7:a4:d2: 7a:ee:bd:98:f4:3e:33:1f:09:9d:ca:b1:f9:73:ac: c3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:83:F1:41:13:61:C6:FE:DD:45:B4:6C:C7:39:14:D6:63:E6:2D:61 X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3530303a3a2f34302d3438203d3e20323037333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:500::/40 Signature Algorithm: sha256WithRSAEncryption 53:40:6f:12:39:75:91:78:bf:ce:60:e5:ad:a6:2f:2e:e8:57: 8a:bb:da:4c:58:4c:23:fa:8a:7b:3a:c9:48:e2:ca:80:83:84: 93:ae:15:4c:34:ac:b5:04:6e:16:6a:d6:0f:6d:c7:7d:54:16: 4b:f2:4d:e2:1a:0a:1f:bc:f5:ca:65:e6:94:c2:32:83:c6:b1: c5:33:dd:03:4b:89:39:94:03:c2:0c:65:4b:a7:a9:20:ae:7e: 21:ce:31:3e:5b:fa:41:1c:2e:95:e2:7f:5a:25:c0:b4:52:48: 2e:05:21:ae:b6:5c:5c:1d:e0:a4:ae:f9:e9:80:50:b1:2a:82: ef:ea:89:b0:3c:47:fc:f5:56:29:6a:c5:41:5f:2c:bd:7e:e5: 10:5f:32:81:c2:f5:cf:b3:ed:a1:78:2e:cd:0c:6e:63:7a:00: b6:31:d5:02:7b:04:3e:73:6a:c3:e3:64:80:c6:d5:3c:40:fd: d0:85:94:b5:34:1b:49:68:86:98:53:c0:5e:65:8d:6e:e3:65: 3a:c1:66:d0:8a:86:40:35:7a:33:38:eb:91:aa:3b:84:c1:19: 14:dc:67:c0:81:cb:bc:0b:e7:98:fd:4b:62:e9:ee:3e:3b:4e: 33:20:5d:f6:11:fc:20:48:a8:56:81:7c:d1:21:1e:c5:d2:25: 61:08:34:1a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDlevgNqKAxfAL8DJGLiKOHzcv7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTExMTAxNDQyMzVaFw0yNjExMDkxNDQ3MzVaMDMxMTAvBgNV BAMTKERCODNGMTQxMTM2MUM2RkVERDQ1QjQ2Q0M3MzkxNEQ2NjNFNjJENjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXVUwwKpd3jF1/fG+r81rgKnwq X0syhnkikqolhTLQt4++8JAOjK1xEmUKeZI4Ed+BJvbq4OmdEsGbqXj2UhUhApMf 769pXUsm9QHHNu3mGzp4aPM8PjK8TS5OPqL03/8eqk6xtQnnEZpWML0lRZgFUnhP m5PLWOVylQXhZmGWSFVIM1ixtDEDej5kCZXl90yEj255BblYTY7xhtGghDtEWADR gS2jjeaJ9rB1kRceN8cYdTg8XWu+WvAgXHxi7oELaQAtg6kBF17iookcTBqe7MCq HhZUTc7b6T2GqbdHQ9ixhG0e5h0ryqGUO6ek0nruvZj0PjMfCZ3KsflzrMN7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU24PxQRNhxv7dRbRsxzkU1mPmLWEwHwYDVR0j BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50 a3ZBNC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYt NGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzNTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMwMzczMzMxMzcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAqDxzFBTANBgkqhkiG9w0BAQsFAAOCAQEAU0BvEjl1kXi/zmDlraYv LuhXirvaTFhMI/qKezrJSOLKgIOEk64VTDSstQRuFmrWD23HfVQWS/JN4hoKH7z1 ymXmlMIyg8axxTPdA0uJOZQDwgxlS6epIK5+Ic4xPlv6QRwuleJ/WiXAtFJILgUh rrZcXB3gpK756YBQsSqC7+qJsDxH/PVWKWrFQV8svX7lEF8ygcL1z7PtoXguzQxu Y3oAtjHVAnsEPnNqw+NkgMbVPED90IWUtTQbSWiGmFPAXmWNbuNlOsFm0IqGQDV6 Mzjrkao7hMEZFNxnwIHLvAvnmP1LYunuPjtOMyBd9hH8IEioVoF80SEexdIlYQg0 Gg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:56 2025 by rpki-client