This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/326130393a323530303a3a2f34382d3438203d3e203532313132.roa File: 326130393a323530303a3a2f34382d3438203d3e203532313132.roa (raw, json) Hash identifier: TDWiIW/XU7HlZAno8Kh/w5WDO0yfFHK1ooS2A8uJ/gU= Subject key identifier: C7:15:77:76:61:B1:21:64:A2:CD:42:25:F1:EC:AC:1A:59:32:09:91 Certificate issuer: /CN=e7585b5cd477d90075cdb63109f57279766c2976 Certificate serial: 6F21612BD9E9BDF277723E2F4A6AD3F9F1D629C0 Authority key identifier: E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/326130393a323530303a3a2f34382d3438203d3e203532313132.roa Signing time: Sun 28 Dec 2025 02:09:20 +0000 ROA not before: Sun 28 Dec 2025 02:04:20 +0000 ROA not after: Sun 27 Dec 2026 02:09:20 +0000 asID: 52112 IP address blocks: 2a09:2500::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:21:61:2b:d9:e9:bd:f2:77:72:3e:2f:4a:6a:d3:f9:f1:d6:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7585b5cd477d90075cdb63109f57279766c2976 Validity Not Before: Dec 28 02:04:20 2025 GMT Not After : Dec 27 02:09:20 2026 GMT Subject: CN=C715777661B12164A2CD4225F1ECAC1A59320991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:a7:4b:3d:d4:ed:f3:0f:ad:aa:de:a2:2a: 92:8e:89:23:74:3b:42:32:8a:3a:8d:30:e2:f8:01: 3f:13:6d:82:4b:4b:4b:68:d9:28:f4:4a:e0:ae:2f: 15:51:91:9a:f3:e6:8d:aa:7f:2c:fb:94:d6:90:77: 1a:c3:c8:3a:22:30:a3:35:b5:f2:b6:a3:c9:e2:a5: 9f:d2:a5:61:7f:60:12:59:cd:fb:cd:58:10:97:07: 01:d5:9a:b9:f0:f9:77:47:b4:62:0d:81:76:10:66: cd:b5:c5:b7:38:32:d9:92:52:19:52:4e:03:ff:bc: 7d:a3:ce:89:4e:a1:06:73:d7:c6:cc:fd:b8:91:a2: 5f:3e:af:b3:e9:f2:9c:45:8d:54:55:6e:4e:30:49: 60:50:2e:93:81:48:7a:d7:25:de:0a:fe:23:1a:e0: ff:e7:d9:3f:42:30:14:92:6c:1d:e8:5e:00:35:9a: 41:95:21:8f:fb:8a:99:38:5a:31:1d:be:10:cc:bf: 34:e0:6d:c7:72:0b:b5:ec:82:ac:b8:ab:c0:42:d2: 7e:79:33:af:8d:ad:11:f4:05:9b:84:2c:9b:de:bc: 38:fa:85:ed:57:e1:a7:94:30:05:14:f9:21:ff:c1: a6:04:28:fb:50:99:01:ea:dc:6a:e6:e0:3a:a5:6c: 9f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:15:77:76:61:B1:21:64:A2:CD:42:25:F1:EC:AC:1A:59:32:09:91 X509v3 Authority Key Identifier: keyid:E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/326130393a323530303a3a2f34382d3438203d3e203532313132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:2500::/48 Signature Algorithm: sha256WithRSAEncryption 1d:74:f5:96:b6:ad:29:62:e7:55:3c:b7:2a:b4:34:1f:77:10: 6f:f3:c2:08:f9:84:ce:73:a4:c3:3b:3c:b7:c7:df:d2:7d:d6: ba:1b:bb:fb:21:5e:45:34:a0:4f:46:c5:c8:3e:a6:8b:d8:6b: 71:60:c0:53:3b:a5:5a:92:09:4f:d5:f4:b3:39:52:53:96:48: ef:38:2c:37:0e:56:66:a3:cb:7d:e2:f5:52:48:70:04:8e:83: b2:fe:f2:91:95:90:f1:eb:a9:72:3e:75:35:d0:02:bd:91:fb: 07:22:67:b0:39:6d:42:13:87:b8:ba:cf:2d:1e:27:53:0d:c8: 1a:b3:3e:b7:fb:84:a1:81:f6:93:f5:08:6e:61:2c:23:dd:26: f5:2b:5f:de:b0:e7:06:f0:a6:d0:1e:3b:a9:6c:f7:e3:16:ce: f9:e1:b1:5f:04:9e:e8:b3:8e:60:4d:3b:ad:f6:34:d8:ef:15: 08:92:e5:53:cc:34:a1:0e:95:e6:9d:bd:38:e6:d9:5f:f6:ee: ac:03:39:e4:2d:fb:a8:93:f3:ae:5c:30:46:fc:a3:45:85:00: 48:ef:01:85:ab:0e:da:21:f2:39:ad:b6:24:29:9f:41:65:1e: fe:88:72:88:5f:bf:89:53:94:bf:e3:29:af:56:ee:51:c0:4c: 9a:51:6e:c6 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUbyFhK9npvfJ3cj4vSmrT+fHWKcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTc1ODViNWNkNDc3ZDkwMDc1Y2RiNjMxMDlmNTcyNzk3 NjZjMjk3NjAeFw0yNTEyMjgwMjA0MjBaFw0yNjEyMjcwMjA5MjBaMDMxMTAvBgNV BAMTKEM3MTU3Nzc2NjFCMTIxNjRBMkNENDIyNUYxRUNBQzFBNTkzMjA5OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/r6dLPdTt8w+tqt6iKpKOiSN0 O0IyijqNMOL4AT8TbYJLS0to2Sj0SuCuLxVRkZrz5o2qfyz7lNaQdxrDyDoiMKM1 tfK2o8nipZ/SpWF/YBJZzfvNWBCXBwHVmrnw+XdHtGINgXYQZs21xbc4MtmSUhlS TgP/vH2jzolOoQZz18bM/biRol8+r7Pp8pxFjVRVbk4wSWBQLpOBSHrXJd4K/iMa 4P/n2T9CMBSSbB3oXgA1mkGVIY/7ipk4WjEdvhDMvzTgbcdyC7Xsgqy4q8BC0n55 M6+NrRH0BZuELJvevDj6he1X4aeUMAUU+SH/waYEKPtQmQHq3Grm4DqlbJ+jAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUxxV3dmGxIWSizUIl8eysGlkyCZEwHwYDVR0j BBgwFoAU51hbXNR32QB1zbYxCfVyeXZsKXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzEvRTc1ODVCNUNENDc3RDkwMDc1Q0RCNjMxMDlGNTcyNzk3NjZDMjk3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxaGJYTlIzMlFCMXpiWXhDZlZ5ZVha c0tYWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTMwZGU4NGIt NDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1YjQ5LzEvMzI2MTMwMzkzYTMyMzUzMDMw M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzMjMxMzEzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoJ JQAAADANBgkqhkiG9w0BAQsFAAOCAQEAHXT1lratKWLnVTy3KrQ0H3cQb/PCCPmE znOkwzs8t8ff0n3Wuhu7+yFeRTSgT0bFyD6mi9hrcWDAUzulWpIJT9X0szlSU5ZI 7zgsNw5WZqPLfeL1UkhwBI6Dsv7ykZWQ8eupcj51NdACvZH7ByJnsDltQhOHuLrP LR4nUw3IGrM+t/uEoYH2k/UIbmEsI90m9Stf3rDnBvCm0B47qWz34xbO+eGxXwSe 6LOOYE07rfY02O8VCJLlU8w0oQ6V5p29OObZX/burAM55C37qJPzrlwwRvyjRYUA SO8BhasO2iHyOa22JCmfQWUe/ohyiF+/iVOUv+Mpr1buUcBMmlFuxg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:33 2026 by rpki-client