This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363323a3a2f33322d3430203d3e203535323031.roa File: 326130663a316363323a3a2f33322d3430203d3e203535323031.roa (raw, json) Hash identifier: K81imrdKUY4/dIV+yK9xpMvNWDrLRFnQ/A7raX+RneU= Subject key identifier: E5:51:62:19:A7:58:D7:E4:64:D8:68:42:0D:78:80:BB:A0:ED:AB:3E Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 23AEC5635770EBCE585A9AFD46233FEB4A74CC90 Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363323a3a2f33322d3430203d3e203535323031.roa Signing time: Tue 16 Dec 2025 11:18:45 +0000 ROA not before: Tue 16 Dec 2025 11:13:45 +0000 ROA not after: Tue 15 Dec 2026 11:18:45 +0000 asID: 55201 IP address blocks: 2a0f:1cc2::/32 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ae:c5:63:57:70:eb:ce:58:5a:9a:fd:46:23:3f:eb:4a:74:cc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Dec 16 11:13:45 2025 GMT Not After : Dec 15 11:18:45 2026 GMT Subject: CN=E5516219A758D7E464D868420D7880BBA0EDAB3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:16:fb:5b:d5:3b:31:26:63:74:ac:3b:39:5d: df:3b:e6:28:27:ae:8b:22:d7:e7:b9:5d:48:83:9a: c7:78:0c:7a:f1:d5:c1:66:1f:06:9c:8f:97:11:41: b5:36:52:14:81:7a:34:ce:0c:c4:fd:e2:b0:94:c1: aa:69:86:c0:d9:53:16:c0:8a:19:44:ce:8d:ef:fa: 7e:3e:d5:60:de:48:f4:ce:85:a8:34:1e:29:aa:30: e9:b3:9e:da:b3:6a:b1:d4:36:48:d8:95:39:d4:43: 84:65:df:4c:5a:71:d4:ac:c6:b9:ae:19:71:c3:0b: 78:7f:6b:a4:c2:5a:fb:b0:3d:de:b5:fc:aa:d0:9a: c2:39:a6:d5:33:15:d4:52:59:33:da:69:91:a6:11: a9:3c:57:af:f0:ff:7e:91:71:b9:d6:da:57:4a:5c: 44:1a:f1:49:e5:91:77:42:4d:52:0c:dd:74:b0:e5: e2:14:8c:e9:9b:26:51:a0:c4:8e:ce:89:12:23:3f: 61:c7:f6:60:6c:46:75:79:a4:46:21:15:c1:a4:c9: a2:92:ee:35:64:f4:ac:bc:a7:08:7c:70:21:6a:d7: fb:b4:bc:0b:0e:34:f6:1e:82:b8:00:c2:1c:a1:ae: 60:e5:f1:b9:25:bc:8d:76:e9:84:8e:5d:fd:a9:ae: 7b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:51:62:19:A7:58:D7:E4:64:D8:68:42:0D:78:80:BB:A0:ED:AB:3E X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363323a3a2f33322d3430203d3e203535323031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc2::/32 Signature Algorithm: sha256WithRSAEncryption 22:79:17:35:95:cf:b4:3b:0d:f6:5d:57:f6:7e:1e:db:69:58: fb:b5:84:a2:fe:fd:1b:b9:d5:cb:95:89:f0:aa:8a:43:e1:76: 63:09:4b:24:8a:58:2d:d0:fb:96:41:c6:e3:78:cd:d8:14:da: a9:d9:6e:72:6f:9e:06:4f:6a:b3:ec:b2:97:a8:a4:dc:d8:c5: 1c:4f:e2:f2:df:01:20:29:db:5b:20:ce:5d:8f:63:5c:9c:6c: a5:c4:7b:4f:67:a8:a5:50:00:aa:fc:e1:a5:8a:28:8c:c6:e0: 5a:26:5b:5d:2e:89:99:d0:2f:10:5c:ed:74:b7:e4:5b:0f:57: 95:02:0b:ff:49:82:b7:09:7b:77:8e:b3:d2:13:cc:b2:ac:ea: a2:34:42:8a:80:de:0b:31:60:6a:d0:88:a9:ae:60:f5:06:8b: a1:c5:5c:00:90:37:3b:03:75:f0:90:db:41:4b:b3:12:f4:9f: 55:ef:56:9b:f4:e0:bd:1c:42:c9:02:2b:f5:83:9f:92:69:95: 4c:31:ce:c1:dd:a3:80:ca:4c:08:79:2c:f5:f8:1d:6f:6b:e5: 01:da:2e:49:d1:6f:38:d7:f8:8b:ae:44:dc:ce:7b:91:f3:f9: 2e:54:5c:ae:70:3d:93:b9:13:df:05:8f:4f:98:e2:b5:a8:e4: e2:0c:e0:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI67FY1dw685YWpr9RiM/60p0zJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTEyMTYxMTEzNDVaFw0yNjEyMTUxMTE4NDVaMDMxMTAvBgNV BAMTKEU1NTE2MjE5QTc1OEQ3RTQ2NEQ4Njg0MjBENzg4MEJCQTBFREFCM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdFvtb1TsxJmN0rDs5Xd875ign rosi1+e5XUiDmsd4DHrx1cFmHwacj5cRQbU2UhSBejTODMT94rCUwapphsDZUxbA ihlEzo3v+n4+1WDeSPTOhag0HimqMOmzntqzarHUNkjYlTnUQ4Rl30xacdSsxrmu GXHDC3h/a6TCWvuwPd61/KrQmsI5ptUzFdRSWTPaaZGmEak8V6/w/36RcbnW2ldK XEQa8UnlkXdCTVIM3XSw5eIUjOmbJlGgxI7OiRIjP2HH9mBsRnV5pEYhFcGkyaKS 7jVk9Ky8pwh8cCFq1/u0vAsONPYegrgAwhyhrmDl8bklvI126YSOXf2prnvDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5VFiGadY1+Rk2GhCDXiAu6Dtqz4wHwYDVR0j BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50 a3ZBNC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYt NGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzAvMzI2MTMwNjYzYTMxNjM2MzMy M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzUzNTMyMzAzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoP HMIwDQYJKoZIhvcNAQELBQADggEBACJ5FzWVz7Q7DfZdV/Z+HttpWPu1hKL+/Ru5 1cuVifCqikPhdmMJSySKWC3Q+5ZBxuN4zdgU2qnZbnJvngZParPsspeopNzYxRxP 4vLfASAp21sgzl2PY1ycbKXEe09nqKVQAKr84aWKKIzG4FomW10uiZnQLxBc7XS3 5FsPV5UCC/9JgrcJe3eOs9ITzLKs6qI0QoqA3gsxYGrQiKmuYPUGi6HFXACQNzsD dfCQ20FLsxL0n1XvVpv04L0cQskCK/WDn5JplUwxzsHdo4DKTAh5LPX4HW9r5QHa LknRbzjX+IuuRNzOe5Hz+S5UXK5wPZO5E98Fj0+Y4rWo5OIM4H8= -----END CERTIFICATE-----Generated at Wed Dec 17 21:18:33 2025 by rpki-client