This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363313a3a2f33322d3438203d3e20323033333134.roa File: 326130663a316363313a3a2f33322d3438203d3e20323033333134.roa (raw, json) Hash identifier: 8ESY978LKeZG5FEqpAAVJdUptfnGdJVbSznLtIdLsqY= Subject key identifier: 67:FB:37:E4:E9:9C:AE:F6:D5:3E:39:A1:E2:F5:C9:94:89:EE:D4:57 Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 7BEE28EFA94A576C1880CD5AD813791204429238 Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363313a3a2f33322d3438203d3e20323033333134.roa Signing time: Fri 12 Dec 2025 18:03:40 +0000 ROA not before: Fri 12 Dec 2025 17:58:40 +0000 ROA not after: Fri 11 Dec 2026 18:03:40 +0000 asID: 203314 IP address blocks: 2a0f:1cc1::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ee:28:ef:a9:4a:57:6c:18:80:cd:5a:d8:13:79:12:04:42:92:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Dec 12 17:58:40 2025 GMT Not After : Dec 11 18:03:40 2026 GMT Subject: CN=67FB37E4E99CAEF6D53E39A1E2F5C99489EED457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a4:5e:bb:66:44:20:3f:99:c1:9e:af:9b:d3: 31:28:42:62:d4:2a:fa:bf:29:22:5c:37:c1:e5:35: ef:7c:ed:e5:40:cf:95:e2:cd:ba:e8:d6:73:c4:58: f4:3a:d0:77:80:f5:50:25:b1:af:cd:fe:41:04:04: 6d:2b:fd:aa:7a:e2:35:b2:28:3b:0c:9d:18:d5:cd: c4:7a:e5:d9:5a:4d:fb:da:6d:16:7d:b4:95:ce:b8: d3:a4:d4:3f:f6:52:b6:e2:dc:de:26:43:8c:d7:9f: 76:8f:a6:56:20:8e:f4:1b:c2:f6:1b:0a:db:7f:10: 6a:02:f2:15:ba:9b:b0:c4:ac:6b:4d:d9:8c:43:0a: d8:dd:17:69:6c:02:cc:e6:b0:29:37:4c:48:83:e2: ed:1b:c1:cc:10:a2:d8:16:d2:d4:85:95:c5:4b:bc: 54:8e:33:9b:cd:01:41:cb:3d:aa:a5:78:92:48:70: 20:ec:de:6b:99:4b:06:b4:cb:29:5d:69:48:6b:ca: 3f:a8:0d:fd:0e:24:10:2b:03:98:27:15:f8:8e:12: f9:b5:22:71:10:e4:bb:7d:65:4a:07:06:80:a7:a5: 51:be:e4:3c:e6:1c:9c:3e:b8:9c:aa:ea:71:71:ee: 5c:84:ee:0a:4f:c7:d4:a7:c3:29:44:b8:94:01:81: d4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FB:37:E4:E9:9C:AE:F6:D5:3E:39:A1:E2:F5:C9:94:89:EE:D4:57 X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363313a3a2f33322d3438203d3e20323033333134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc1::/32 Signature Algorithm: sha256WithRSAEncryption 58:71:a7:b9:20:8d:38:69:0f:b7:91:af:85:b0:01:57:62:66: f9:c3:9b:8a:f0:ce:13:2a:9d:28:c3:b0:88:d4:da:23:66:85: 91:74:41:78:0f:9a:59:ed:c3:37:52:f9:86:8d:08:ee:6c:51: e5:6f:e3:8b:c2:bd:49:e8:be:1b:8e:85:6b:e0:aa:59:24:06: bf:e2:63:fe:fd:71:ec:50:41:ff:b2:20:fe:a2:ee:43:ba:25: be:d5:47:62:87:eb:3d:8b:d9:07:33:0e:b9:0f:a3:81:19:a7: 63:23:d0:0d:2d:25:00:3b:0f:29:fc:f0:f6:58:2d:0c:ac:40: e1:98:af:62:eb:bf:a2:98:74:ac:c9:6e:d1:da:e7:d6:f7:fc: 33:39:7b:67:4a:6e:f4:76:b3:7c:af:c2:c4:0f:8c:f9:33:a9: fc:21:23:b5:31:75:8c:99:33:68:f5:e5:e6:e9:50:e4:bd:e0: bb:c1:56:fa:bf:78:7b:ca:2b:17:16:e1:31:6c:7e:52:3c:b6: 5d:e8:4c:23:2b:d1:88:7d:59:33:e4:1b:a4:10:49:b2:23:fb: ea:62:c5:4f:94:e8:52:3c:49:49:50:46:b8:01:b4:07:4d:df: 50:80:85:9e:c6:ad:7f:55:6e:6c:a3:2a:a0:dd:79:0c:6f:0d: 39:3a:c7:6c -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUe+4o76lKV2wYgM1a2BN5EgRCkjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTEyMTIxNzU4NDBaFw0yNjEyMTExODAzNDBaMDMxMTAvBgNV BAMTKDY3RkIzN0U0RTk5Q0FFRjZENTNFMzlBMUUyRjVDOTk0ODlFRUQ0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3pF67ZkQgP5nBnq+b0zEoQmLU Kvq/KSJcN8HlNe987eVAz5Xizbro1nPEWPQ60HeA9VAlsa/N/kEEBG0r/ap64jWy KDsMnRjVzcR65dlaTfvabRZ9tJXOuNOk1D/2Urbi3N4mQ4zXn3aPplYgjvQbwvYb Ctt/EGoC8hW6m7DErGtN2YxDCtjdF2lsAszmsCk3TEiD4u0bwcwQotgW0tSFlcVL vFSOM5vNAUHLPaqleJJIcCDs3muZSwa0yyldaUhryj+oDf0OJBArA5gnFfiOEvm1 InEQ5Lt9ZUoHBoCnpVG+5DzmHJw+uJyq6nFx7lyE7gpPx9SnwylEuJQBgdRLAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUZ/s35OmcrvbVPjmh4vXJlInu1FcwHwYDVR0j BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50 a3ZBNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYt NGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzAvMzI2MTMwNjYzYTMxNjM2MzMx M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzMDMzMzMzMTM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA Kg8cwTANBgkqhkiG9w0BAQsFAAOCAQEAWHGnuSCNOGkPt5GvhbABV2Jm+cObivDO EyqdKMOwiNTaI2aFkXRBeA+aWe3DN1L5ho0I7mxR5W/ji8K9Sei+G46Fa+CqWSQG v+Jj/v1x7FBB/7Ig/qLuQ7olvtVHYofrPYvZBzMOuQ+jgRmnYyPQDS0lADsPKfzw 9lgtDKxA4ZivYuu/oph0rMlu0drn1vf8Mzl7Z0pu9HazfK/CxA+M+TOp/CEjtTF1 jJkzaPXl5ulQ5L3gu8FW+r94e8orFxbhMWx+Ujy2XehMIyvRiH1ZM+QbpBBJsiP7 6mLFT5ToUjxJSVBGuAG0B03fUICFnsatf1VubKMqoN15DG8NOTrHbA== -----END CERTIFICATE-----Generated at Fri Dec 19 11:14:43 2025 by rpki-client