This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a313630303a3a2f34302d3438203d3e20313939333130.roa File: 326130663a316363353a313630303a3a2f34302d3438203d3e20313939333130.roa (raw, json) Hash identifier: /UuO/rV3/2cc0l8nhmg9GAQtruoYJQkFm0A/soZNW4g= Subject key identifier: 90:99:5C:B6:E7:07:9F:8C:B1:FF:1D:96:D3:A7:AF:FA:C0:75:7E:86 Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 1BE07E0A0F2EB0CD92746ABFA3C8109850831F75 Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a313630303a3a2f34302d3438203d3e20313939333130.roa Signing time: Fri 12 Dec 2025 18:09:06 +0000 ROA not before: Fri 12 Dec 2025 18:04:06 +0000 ROA not after: Fri 11 Dec 2026 18:09:06 +0000 asID: 199310 IP address blocks: 2a0f:1cc5:1600::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e0:7e:0a:0f:2e:b0:cd:92:74:6a:bf:a3:c8:10:98:50:83:1f:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Dec 12 18:04:06 2025 GMT Not After : Dec 11 18:09:06 2026 GMT Subject: CN=90995CB6E7079F8CB1FF1D96D3A7AFFAC0757E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f2:aa:06:15:cc:82:7e:6f:d7:05:d5:d3:9f: f8:0a:ed:9e:b6:e8:0e:32:a6:27:8c:ca:45:04:94: 8a:d0:02:d8:d6:5d:73:c6:88:0c:d4:f1:dc:14:c0: c2:cf:b0:3e:ca:36:db:2d:99:fa:2f:a1:d5:4b:81: 2f:71:e5:89:f3:7c:20:c4:10:fd:5c:9c:bd:a4:f2: 63:5f:e8:c8:74:d4:a9:73:e1:c2:ed:65:44:16:80: fa:c6:65:f8:f6:36:bc:82:4d:04:cc:d5:3e:cf:d8: b8:3a:52:a1:ef:43:83:56:dd:18:cf:93:8f:a4:42: 46:39:6b:db:60:25:95:cb:4f:d2:62:a3:cc:b2:99: 91:25:0e:dc:8a:df:39:04:b5:13:6c:14:e5:ac:ad: 08:ce:ce:cf:71:29:73:3b:b6:d5:83:8f:7a:df:fc: e6:b7:d5:d9:8b:93:99:bc:05:2f:cd:b1:79:07:2a: a6:2b:61:ca:76:65:c4:2e:cb:93:b7:c2:af:18:61: 6e:61:91:2c:0b:ac:8b:d0:cd:e7:31:20:13:21:5d: 30:57:76:b5:8e:64:a6:df:4d:31:a1:a9:04:6d:63: b6:4a:4b:0a:1a:8e:0a:9a:86:8e:b9:aa:74:67:b9: 77:0b:15:2b:d2:1a:46:82:9e:c2:76:94:01:04:24: 22:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:99:5C:B6:E7:07:9F:8C:B1:FF:1D:96:D3:A7:AF:FA:C0:75:7E:86 X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a313630303a3a2f34302d3438203d3e20313939333130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1600::/40 Signature Algorithm: sha256WithRSAEncryption ad:8a:0b:e2:d5:68:ad:f2:d1:db:13:7c:a2:ad:e0:dc:72:fc: 91:37:7c:49:7a:55:4f:2e:43:be:10:02:0b:02:03:e3:29:2a: 96:7b:c4:a7:9f:a1:81:f3:e3:52:0d:3d:50:c0:6d:d6:ec:ea: 59:5c:b0:30:25:5b:f1:10:24:79:cf:70:c6:a6:11:77:ce:bd: ec:d6:1d:f9:94:3d:5c:81:47:31:f0:da:74:83:3f:84:d7:49: 42:c3:b7:e6:8a:0e:a6:22:d7:eb:aa:8c:d0:9d:6f:de:0a:6e: 2d:63:5f:45:1c:26:56:3f:c2:9b:d6:ae:8a:41:cb:81:a9:ff: 88:ec:a1:6a:f3:a0:1f:38:98:36:1f:f8:de:4d:f9:ad:60:76: 55:1c:14:1c:68:58:53:9d:8c:26:12:7c:d2:ae:52:95:2d:93: 14:f2:a1:c2:3a:4e:30:ad:8f:57:7e:8e:d8:00:ba:85:af:ea: 44:01:92:d7:d8:7d:4e:04:69:de:63:9d:56:03:02:1e:98:f0: 47:5e:07:e9:5a:aa:ba:48:3c:df:90:88:2f:9d:e0:63:a8:c9: 19:ab:f6:52:4e:1a:c5:49:3e:fe:aa:d4:2b:a6:ce:72:b3:7d: 01:17:a8:e2:4b:23:0b:65:67:7d:66:47:b4:4c:3e:17:bc:e6: 44:73:c8:5c -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUG+B+Cg8usM2SdGq/o8gQmFCDH3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTEyMTIxODA0MDZaFw0yNjEyMTExODA5MDZaMDMxMTAvBgNV BAMTKDkwOTk1Q0I2RTcwNzlGOENCMUZGMUQ5NkQzQTdBRkZBQzA3NTdFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj8qoGFcyCfm/XBdXTn/gK7Z62 6A4ypieMykUElIrQAtjWXXPGiAzU8dwUwMLPsD7KNtstmfovodVLgS9x5YnzfCDE EP1cnL2k8mNf6Mh01Klz4cLtZUQWgPrGZfj2NryCTQTM1T7P2Lg6UqHvQ4NW3RjP k4+kQkY5a9tgJZXLT9Jio8yymZElDtyK3zkEtRNsFOWsrQjOzs9xKXM7ttWDj3rf /Oa31dmLk5m8BS/NsXkHKqYrYcp2ZcQuy5O3wq8YYW5hkSwLrIvQzecxIBMhXTBX drWOZKbfTTGhqQRtY7ZKSwoajgqaho65qnRnuXcLFSvSGkaCnsJ2lAEEJCJ3AgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUkJlctucHn4yx/x2W06ev+sB1foYwHwYDVR0j BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50 a3ZBNC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYt NGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzMTM2MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMxMzkzOTMzMzEzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoPHMUWMA0GCSqGSIb3DQEBCwUAA4IBAQCtigvi1Wit8tHbE3yi reDccvyRN3xJelVPLkO+EAILAgPjKSqWe8Snn6GB8+NSDT1QwG3W7OpZXLAwJVvx ECR5z3DGphF3zr3s1h35lD1cgUcx8Np0gz+E10lCw7fmig6mItfrqozQnW/eCm4t Y19FHCZWP8Kb1q6KQcuBqf+I7KFq86AfOJg2H/jeTfmtYHZVHBQcaFhTnYwmEnzS rlKVLZMU8qHCOk4wrY9Xfo7YALqFr+pEAZLX2H1OBGneY51WAwIemPBHXgfpWqq6 SDzfkIgvneBjqMkZq/ZSThrFST7+qtQrps5ys30BF6jiSyMLZWd9Zke0TD4XvOZE c8hc -----END CERTIFICATE-----Generated at Thu Dec 18 20:29:56 2025 by rpki-client