This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363313a3a2f33322d3438203d3e20323134303236.roa File: 326130663a316363313a3a2f33322d3438203d3e20323134303236.roa (raw, json) Hash identifier: QXNdFTOOI4CfOCblNYV8y6Y9SVihHKNj7V5+rqZqbt4= Subject key identifier: 16:C3:AF:FE:7E:12:79:6D:EA:C9:7E:44:C2:49:23:7E:A2:80:CB:B1 Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 53FD03091CFB3CDBBBA427B1B40B2981FE5BC024 Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363313a3a2f33322d3438203d3e20323134303236.roa Signing time: Fri 12 Dec 2025 18:03:17 +0000 ROA not before: Fri 12 Dec 2025 17:58:17 +0000 ROA not after: Fri 11 Dec 2026 18:03:17 +0000 asID: 214026 IP address blocks: 2a0f:1cc1::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:fd:03:09:1c:fb:3c:db:bb:a4:27:b1:b4:0b:29:81:fe:5b:c0:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Dec 12 17:58:17 2025 GMT Not After : Dec 11 18:03:17 2026 GMT Subject: CN=16C3AFFE7E12796DEAC97E44C249237EA280CBB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:41:19:40:90:55:74:42:90:9d:b8:60:c3:e7: 9d:85:b0:81:28:7b:da:15:c7:7f:2b:6c:60:4e:47: 01:df:5f:2d:3c:0d:62:b6:0b:9f:c2:b0:7f:1b:21: 26:3f:b4:70:b1:33:8d:79:cb:10:51:2d:29:09:f8: ba:3f:72:30:77:c4:e7:df:ab:e6:b6:a0:47:ca:3e: 91:30:52:fa:00:fe:98:4c:84:b8:1e:39:0f:12:4d: 93:13:9b:1f:46:94:47:67:dc:58:23:ae:1c:d3:2c: ae:24:43:53:ab:cf:97:7b:16:c2:a1:48:23:d0:25: 1d:f2:b6:8b:60:c3:89:2c:ea:0c:47:69:f6:33:30: 69:6c:a6:15:84:2d:6e:40:ab:45:2e:e6:e5:20:5a: 51:49:9e:5d:b9:86:e4:0a:98:76:b7:a6:3d:8e:d8: 9a:69:09:ee:08:d6:81:0c:46:72:f5:bd:84:8c:53: 6a:8c:d5:85:28:b3:5e:e9:06:68:17:36:29:12:8f: 41:89:ce:cb:32:48:86:be:c0:4b:39:09:cc:14:fc: b9:63:38:e2:36:fc:f1:ea:d3:c5:fb:ce:21:0b:d7: 4b:e7:a4:53:0e:4e:4d:61:6c:8f:05:44:f4:53:2e: dd:76:6b:6a:f9:2d:de:b9:d3:cd:9f:db:1d:a1:77: 07:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C3:AF:FE:7E:12:79:6D:EA:C9:7E:44:C2:49:23:7E:A2:80:CB:B1 X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363313a3a2f33322d3438203d3e20323134303236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc1::/32 Signature Algorithm: sha256WithRSAEncryption 6f:5c:c8:0b:31:3c:4e:f5:89:f6:70:7f:8c:6b:ac:50:b5:d5: d7:86:8d:ae:ca:e1:7f:94:96:14:2a:29:62:d8:c4:21:72:07: 91:f1:ab:df:2c:e5:97:e5:7a:e1:9b:c4:ec:11:2b:2f:cc:98: 4b:2a:6d:ed:9a:fe:68:e1:ad:d6:c9:f2:3f:dc:37:2a:1a:8d: 17:f2:dd:be:7b:54:3e:f7:6e:a3:ca:bd:f7:df:d4:1a:88:d9: df:d1:a7:e9:c8:9c:e2:9d:84:e6:0f:ae:df:fe:1d:f7:a5:a3: 8e:b3:d3:b5:1c:bf:c6:ec:44:19:6a:ea:83:20:7c:6a:b4:2b: 89:39:87:2e:ce:7c:b5:fa:65:80:36:8b:13:76:b5:3b:cc:d4: 59:dc:f7:3f:54:e6:60:3a:46:b5:87:28:73:30:f9:18:68:33: 55:94:72:c1:46:9b:f7:b0:ca:bc:48:2c:08:97:3c:44:f2:e5: 7f:ef:10:fd:42:21:2b:c0:e6:5c:41:6e:63:86:87:76:00:05: a8:1e:91:1e:5f:74:06:df:c7:79:3b:53:74:e3:7e:3b:8b:42: 7e:aa:fb:9d:e0:db:c3:31:61:ea:ae:69:50:aa:e5:9c:83:b3: e1:50:23:47:a4:65:f9:31:75:4a:c3:0a:f9:3a:8d:2a:aa:e2: 61:c8:12:8a -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUU/0DCRz7PNu7pCextAspgf5bwCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTEyMTIxNzU4MTdaFw0yNjEyMTExODAzMTdaMDMxMTAvBgNV BAMTKDE2QzNBRkZFN0UxMjc5NkRFQUM5N0U0NEMyNDkyMzdFQTI4MENCQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWQRlAkFV0QpCduGDD552FsIEo e9oVx38rbGBORwHfXy08DWK2C5/CsH8bISY/tHCxM415yxBRLSkJ+Lo/cjB3xOff q+a2oEfKPpEwUvoA/phMhLgeOQ8STZMTmx9GlEdn3FgjrhzTLK4kQ1Orz5d7FsKh SCPQJR3ytotgw4ks6gxHafYzMGlsphWELW5Aq0Uu5uUgWlFJnl25huQKmHa3pj2O 2JppCe4I1oEMRnL1vYSMU2qM1YUos17pBmgXNikSj0GJzssySIa+wEs5CcwU/Llj OOI2/PHq08X7ziEL10vnpFMOTk1hbI8FRPRTLt12a2r5Ld65082f2x2hdwcxAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUFsOv/n4SeW3qyX5EwkkjfqKAy7EwHwYDVR0j BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50 a3ZBNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYt NGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzAvMzI2MTMwNjYzYTMxNjM2MzMx M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzMTM0MzAzMjM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA Kg8cwTANBgkqhkiG9w0BAQsFAAOCAQEAb1zICzE8TvWJ9nB/jGusULXV14aNrsrh f5SWFCopYtjEIXIHkfGr3yzll+V64ZvE7BErL8yYSypt7Zr+aOGt1snyP9w3KhqN F/LdvntUPvduo8q999/UGojZ39Gn6cic4p2E5g+u3/4d96WjjrPTtRy/xuxEGWrq gyB8arQriTmHLs58tfplgDaLE3a1O8zUWdz3P1TmYDpGtYcoczD5GGgzVZRywUab 97DKvEgsCJc8RPLlf+8Q/UIhK8DmXEFuY4aHdgAFqB6RHl90Bt/HeTtTdON+O4tC fqr7neDbwzFh6q5pUKrlnIOz4VAjR6Rl+TF1SsMK+TqNKqriYcgSig== -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:45 2025 by rpki-client