This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3930303a3a2f34302d3438203d3e20323134383939.roa File: 326130663a316363353a3930303a3a2f34302d3438203d3e20323134383939.roa (raw, json) Hash identifier: 69jg5Yok+4rh4YO3h1kczl30sDedD0n6EjT313v2R2Q= Subject key identifier: 3B:1E:74:54:32:53:E9:3C:D1:70:1D:0B:DF:3B:EE:53:87:46:3D:3F Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 1E8D17FEB95DA99169A323EC15656A0FD84180C0 Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3930303a3a2f34302d3438203d3e20323134383939.roa Signing time: Wed 03 Dec 2025 15:44:44 +0000 ROA not before: Wed 03 Dec 2025 15:39:44 +0000 ROA not after: Wed 02 Dec 2026 15:44:44 +0000 asID: 214899 IP address blocks: 2a0f:1cc5:900::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:8d:17:fe:b9:5d:a9:91:69:a3:23:ec:15:65:6a:0f:d8:41:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Dec 3 15:39:44 2025 GMT Not After : Dec 2 15:44:44 2026 GMT Subject: CN=3B1E74543253E93CD1701D0BDF3BEE5387463D3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bc:8f:fb:fb:d1:f9:ba:55:3f:3f:09:c6:cd: 70:42:95:22:46:92:c7:b0:eb:4e:6e:cd:d9:15:8b: 36:1a:ed:89:51:45:47:be:e3:d1:cc:72:0d:02:f3: ec:55:a3:1a:8a:7b:a3:01:3b:2f:cd:d0:36:23:43: 16:b8:ad:19:75:b6:b5:b4:db:6b:fe:23:50:47:5f: 19:6a:37:b4:2d:ff:71:96:98:30:7c:9e:c9:0f:a4: 31:23:50:9a:3e:ce:88:75:37:89:d1:70:a1:5e:1e: 5d:7a:80:e6:60:75:1c:50:22:cd:e8:cb:a9:46:f6: b9:8c:c3:43:1b:f0:4f:77:0f:38:f5:29:bd:a7:48: 15:66:59:25:6e:16:f7:7d:7c:0e:17:bc:f3:d2:8d: 1f:62:b0:66:61:32:a6:73:a4:90:59:8d:a1:80:55: 3d:77:a3:42:b1:d1:ee:6f:ef:a0:45:1f:91:7e:f9: 0a:2e:e6:df:17:4d:69:d1:03:66:82:51:53:34:9e: 3a:02:fd:74:c4:95:15:a9:25:39:72:c6:6e:81:88: 71:85:3a:cb:03:04:fc:df:b3:ea:fd:98:7b:b4:35: 85:9a:50:d9:9e:46:be:a9:25:4b:d7:00:d2:8d:76: ad:cd:48:2d:0e:86:94:04:7f:93:36:94:e3:67:08: 73:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1E:74:54:32:53:E9:3C:D1:70:1D:0B:DF:3B:EE:53:87:46:3D:3F X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3930303a3a2f34302d3438203d3e20323134383939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:900::/40 Signature Algorithm: sha256WithRSAEncryption 96:c0:39:1a:03:3d:10:b2:64:e3:74:47:08:4d:9c:ba:81:ec: 97:8b:74:bf:7a:1d:0c:29:6f:84:98:59:10:0c:6f:7a:58:fc: e0:ff:f6:e6:f1:b0:33:68:77:6f:2e:8d:07:79:33:8b:5f:53: 96:ea:d4:30:42:24:b4:8c:f1:5c:ac:0d:ed:f8:ac:cb:86:6c: e1:1b:33:6f:ce:c4:84:b5:5f:35:13:7f:ef:f8:6f:fa:e3:11: 07:d3:82:2e:88:db:aa:6c:b6:c1:a1:bc:9a:5c:c3:eb:7c:eb: 7e:77:56:b6:10:47:9b:57:dd:04:bc:29:99:0f:94:32:a9:17: 46:75:33:64:bd:0c:d6:18:fd:f0:9d:2d:67:d5:c5:8f:e0:38: 41:a0:f6:a9:79:5c:33:71:85:c1:97:bf:61:58:e0:27:52:e9: ce:8c:1e:42:f6:70:ba:29:aa:88:2a:22:20:5e:70:64:66:5c: f6:92:99:dc:36:b8:56:51:be:dd:2b:43:33:40:35:ff:52:df: b7:2f:8b:37:c4:43:7a:09:00:58:1b:1e:b6:25:76:af:99:2b: 83:9b:a1:4d:13:c7:46:4b:1a:97:94:02:6e:15:ec:13:2a:a3: b6:1e:46:4c:00:f2:4b:3e:e8:cc:1e:93:12:56:b9:2e:27:7a: 00:ee:df:86 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHo0X/rldqZFpoyPsFWVqD9hBgMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTEyMDMxNTM5NDRaFw0yNjEyMDIxNTQ0NDRaMDMxMTAvBgNV BAMTKDNCMUU3NDU0MzI1M0U5M0NEMTcwMUQwQkRGM0JFRTUzODc0NjNEM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRvI/7+9H5ulU/PwnGzXBClSJG ksew605uzdkVizYa7YlRRUe+49HMcg0C8+xVoxqKe6MBOy/N0DYjQxa4rRl1trW0 22v+I1BHXxlqN7Qt/3GWmDB8nskPpDEjUJo+zoh1N4nRcKFeHl16gOZgdRxQIs3o y6lG9rmMw0Mb8E93Dzj1Kb2nSBVmWSVuFvd9fA4XvPPSjR9isGZhMqZzpJBZjaGA VT13o0Kx0e5v76BFH5F++Qou5t8XTWnRA2aCUVM0njoC/XTElRWpJTlyxm6BiHGF OssDBPzfs+r9mHu0NYWaUNmeRr6pJUvXANKNdq3NSC0OhpQEf5M2lONnCHPdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOx50VDJT6TzRcB0L3zvuU4dGPT8wHwYDVR0j BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50 a3ZBNC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYt NGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzOTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMxMzQzODM5Mzkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAqDxzFCTANBgkqhkiG9w0BAQsFAAOCAQEAlsA5GgM9ELJk43RHCE2c uoHsl4t0v3odDClvhJhZEAxvelj84P/25vGwM2h3by6NB3kzi19TlurUMEIktIzx XKwN7fisy4Zs4Rszb87EhLVfNRN/7/hv+uMRB9OCLojbqmy2waG8mlzD63zrfndW thBHm1fdBLwpmQ+UMqkXRnUzZL0M1hj98J0tZ9XFj+A4QaD2qXlcM3GFwZe/YVjg J1LpzoweQvZwuimqiCoiIF5wZGZc9pKZ3Da4VlG+3StDM0A1/1Lfty+LN8RDegkA WBsetiV2r5krg5uhTRPHRksal5QCbhXsEyqjth5GTADySz7ozB6TEla5Lid6AO7f hg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:54 2025 by rpki-client