This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a313530303a3a2f34302d3438203d3e20313938303235.roa File: 326130663a316363353a313530303a3a2f34302d3438203d3e20313938303235.roa (raw, json) Hash identifier: 4gfq2N0ecRD/yKAPnQhzkxfon89aO3hM60c0FHWViv0= Subject key identifier: 2E:C5:F7:6E:14:0B:74:6C:3F:A9:6F:89:55:D5:9B:6C:87:9A:0C:23 Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 2242904AA28403A985D41031C818011D58167E1F Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a313530303a3a2f34302d3438203d3e20313938303235.roa Signing time: Mon 15 Dec 2025 15:59:07 +0000 ROA not before: Mon 15 Dec 2025 15:54:07 +0000 ROA not after: Mon 14 Dec 2026 15:59:07 +0000 asID: 198025 IP address blocks: 2a0f:1cc5:1500::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:42:90:4a:a2:84:03:a9:85:d4:10:31:c8:18:01:1d:58:16:7e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Dec 15 15:54:07 2025 GMT Not After : Dec 14 15:59:07 2026 GMT Subject: CN=2EC5F76E140B746C3FA96F8955D59B6C879A0C23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b8:ce:bc:e2:2e:bd:72:2b:6e:62:f1:b8:97: a8:17:7d:9e:9b:ad:91:cb:4e:7b:20:07:75:d5:d8: e1:fa:ec:6e:b6:dd:68:26:5d:42:5f:be:f3:9d:e1: 7e:87:ca:9c:0e:5e:a2:d9:7d:44:33:82:ec:22:5c: 29:77:28:c8:e5:d6:c2:44:54:6a:52:76:a0:bd:83: 05:0c:ed:bd:7b:dc:19:c0:f1:4c:2c:89:2c:70:f4: 03:ee:ed:87:c6:23:94:68:97:f3:87:35:2d:43:36: 15:e8:1e:10:aa:4b:a9:57:ca:69:7d:a1:f7:54:82: b5:ba:5f:2b:a4:75:81:3b:62:1f:ec:53:d6:ae:e4: ad:31:5c:ee:80:8f:7c:88:2f:d0:88:7d:00:e3:62: ed:53:44:4f:b8:9e:57:de:c7:ab:18:4a:4d:89:23: 18:ab:9a:b3:f4:5a:39:da:dc:19:74:53:44:ad:e5: 34:ef:13:b0:88:03:a3:51:76:13:fa:80:e5:f1:99: 32:83:95:d3:5d:f1:a8:3b:f8:ab:df:78:92:71:99: fa:94:81:57:09:35:bc:32:ad:6a:95:43:6e:92:55: 03:45:23:29:72:08:47:53:75:56:ca:b7:90:0d:ef: 8c:39:bd:9c:40:94:86:bc:a8:37:9e:61:85:37:6b: 4a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C5:F7:6E:14:0B:74:6C:3F:A9:6F:89:55:D5:9B:6C:87:9A:0C:23 X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a313530303a3a2f34302d3438203d3e20313938303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1500::/40 Signature Algorithm: sha256WithRSAEncryption be:f6:5a:53:89:f0:e3:ef:06:3e:93:7b:56:55:86:62:ac:2d: 78:a4:6e:7d:21:8f:14:d9:30:7d:71:43:0c:12:f4:79:51:41: 7c:2d:44:3c:c5:0c:71:20:25:6b:87:4b:d7:ec:d6:e8:50:3c: 0b:f2:08:ec:42:48:a7:4e:f6:e0:fa:9f:6c:c8:bf:ee:ad:8f: 09:86:9a:7c:49:eb:d4:53:f0:35:d0:90:88:c5:df:2a:77:80: 87:27:fe:ef:f6:b8:fd:fd:90:3c:9c:b2:da:17:92:0f:73:d7: 45:eb:80:d6:83:0e:77:b1:47:81:2d:f8:8e:5e:05:52:d9:91: 4d:ac:70:ff:9b:25:cd:f1:01:54:f3:4f:01:78:aa:5a:ff:c7: f6:03:f4:a3:5b:5f:83:81:b2:46:22:9b:e7:7d:cb:e6:e5:fc: d2:31:87:36:06:2f:99:9b:05:90:95:c5:ac:42:99:26:4b:c9: 61:06:bd:2b:87:87:2f:a1:10:0b:85:5a:bb:40:05:5d:78:ec: 09:d0:99:40:54:1d:e8:d4:c4:39:27:52:5b:dd:42:94:43:ad: e6:21:ae:d6:44:02:32:a3:8e:e4:12:09:9f:42:7b:93:93:ee: 07:0b:22:c8:a3:66:5c:97:2f:74:47:8e:a0:04:30:6c:76:ab: 97:57:68:31 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUIkKQSqKEA6mF1BAxyBgBHVgWfh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTEyMTUxNTU0MDdaFw0yNjEyMTQxNTU5MDdaMDMxMTAvBgNV BAMTKDJFQzVGNzZFMTQwQjc0NkMzRkE5NkY4OTU1RDU5QjZDODc5QTBDMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDduM684i69cituYvG4l6gXfZ6b rZHLTnsgB3XV2OH67G623WgmXUJfvvOd4X6HypwOXqLZfUQzguwiXCl3KMjl1sJE VGpSdqC9gwUM7b173BnA8UwsiSxw9APu7YfGI5Rol/OHNS1DNhXoHhCqS6lXyml9 ofdUgrW6XyukdYE7Yh/sU9au5K0xXO6Aj3yIL9CIfQDjYu1TRE+4nlfex6sYSk2J IxirmrP0Wjna3Bl0U0St5TTvE7CIA6NRdhP6gOXxmTKDldNd8ag7+KvfeJJxmfqU gVcJNbwyrWqVQ26SVQNFIylyCEdTdVbKt5AN74w5vZxAlIa8qDeeYYU3a0ozAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQULsX3bhQLdGw/qW+JVdWbbIeaDCMwHwYDVR0j BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50 a3ZBNC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYt NGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzMTM1MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMxMzkzODMwMzIzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoPHMUVMA0GCSqGSIb3DQEBCwUAA4IBAQC+9lpTifDj7wY+k3tW VYZirC14pG59IY8U2TB9cUMMEvR5UUF8LUQ8xQxxICVrh0vX7NboUDwL8gjsQkin Tvbg+p9syL/urY8Jhpp8SevUU/A10JCIxd8qd4CHJ/7v9rj9/ZA8nLLaF5IPc9dF 64DWgw53sUeBLfiOXgVS2ZFNrHD/myXN8QFU808BeKpa/8f2A/SjW1+DgbJGIpvn fcvm5fzSMYc2Bi+ZmwWQlcWsQpkmS8lhBr0rh4cvoRALhVq7QAVdeOwJ0JlAVB3o 1MQ5J1Jb3UKUQ63mIa7WRAIyo47kEgmfQnuTk+4HCyLIo2Zcly90R46gBDBsdquX V2gx -----END CERTIFICATE-----Generated at Fri Dec 19 23:29:26 2025 by rpki-client