This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a313830303a3a2f34302d3438203d3e20323132343833.roa File: 326130663a316363353a313830303a3a2f34302d3438203d3e20323132343833.roa (raw, json) Hash identifier: PwvGquSnxKPGTH2LrL4Iw36OVXZu04X2fFRYSLXd/Y4= Subject key identifier: 0F:70:97:17:97:BB:0F:5B:44:8B:EF:16:24:C8:8A:75:3B:17:2C:33 Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 50BD42BE0AB95478ED005610E5C03936AF1A1C5E Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a313830303a3a2f34302d3438203d3e20323132343833.roa Signing time: Fri 12 Dec 2025 10:54:11 +0000 ROA not before: Fri 12 Dec 2025 10:49:11 +0000 ROA not after: Fri 11 Dec 2026 10:54:11 +0000 asID: 212483 IP address blocks: 2a0f:1cc5:1800::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:bd:42:be:0a:b9:54:78:ed:00:56:10:e5:c0:39:36:af:1a:1c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Dec 12 10:49:11 2025 GMT Not After : Dec 11 10:54:11 2026 GMT Subject: CN=0F70971797BB0F5B448BEF1624C88A753B172C33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ee:55:0d:ad:2d:ea:a0:ef:ae:bb:e8:57:1f: 32:ea:64:10:79:ec:ae:23:29:2a:09:72:22:41:27: ee:1a:95:35:68:19:44:67:7e:5e:02:7c:dc:3c:7a: 9a:21:6c:3f:23:32:ad:6c:58:7d:b4:92:11:41:5e: 54:9c:29:85:ac:2d:81:b9:48:0d:ab:d5:20:e2:ac: 6c:3a:09:93:8a:8b:a2:1f:46:0b:c6:86:f5:d6:87: f6:2c:5e:31:fa:9e:5c:71:60:25:d8:7b:af:e5:f5: 60:31:25:95:26:65:0a:15:5a:79:a5:99:ce:1d:c8: 2b:29:a5:a9:e1:45:ca:c7:6a:d6:31:20:30:60:ba: 38:93:d6:f5:85:8b:26:d3:86:04:65:3d:af:88:00: 03:f9:27:d1:5f:92:03:db:2e:32:06:bc:54:42:c3: 0d:0f:e5:aa:37:91:f1:50:1f:4e:83:4e:34:f0:5d: 70:6b:b8:70:9d:f3:4a:d2:22:63:7f:c8:55:da:1d: 39:6f:e3:b6:b8:44:26:70:39:d3:af:8e:2d:d7:e0: 25:27:fb:9e:9a:90:42:7e:35:4d:b1:7b:9f:26:0f: 05:38:5c:18:92:5b:39:95:e3:24:2c:01:9b:9e:0a: d8:47:66:8e:2e:c3:8a:6e:ef:62:ef:ee:e5:7f:6b: c2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:70:97:17:97:BB:0F:5B:44:8B:EF:16:24:C8:8A:75:3B:17:2C:33 X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a313830303a3a2f34302d3438203d3e20323132343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1800::/40 Signature Algorithm: sha256WithRSAEncryption 02:fd:34:20:b6:61:7c:d8:ed:7e:6d:6f:31:6b:26:66:4b:69: 88:82:85:b0:9e:7c:18:28:ac:b9:44:49:4c:40:be:6d:86:1f: 6c:bf:71:79:c9:5c:a1:fb:16:d6:85:c0:5e:de:9b:e2:15:41: 5b:76:04:42:5c:f1:9d:32:9d:e7:ba:26:a7:51:aa:2a:78:84: 74:79:64:a7:3c:c0:17:aa:ec:b5:f9:6c:b1:6a:58:12:3e:18: f3:cd:4b:32:06:57:17:4b:86:3a:7b:b2:4e:d9:87:62:17:ca: 02:a4:5b:ce:53:50:5e:0e:04:5f:00:8e:7d:f1:c1:5f:ae:14: aa:d5:4b:7c:e4:8b:6d:23:dc:f8:d8:92:5f:12:f2:28:65:3d: cc:d7:d5:c0:e5:7e:c3:ba:94:3c:01:c1:50:a3:93:f6:aa:fb: 3f:77:7b:84:c6:31:23:4a:9e:d3:db:89:3f:de:a0:23:d6:59: 3d:41:09:e8:78:fd:33:76:fd:5e:92:e1:27:3d:bd:5d:f4:1d: 48:1c:72:18:df:16:a4:aa:ff:6e:c0:b4:59:b1:f1:99:6d:83: 19:00:6e:20:97:80:27:06:f3:12:e5:ce:99:99:40:19:4e:d1: b6:ee:41:4c:8d:5f:b4:d6:2b:78:5e:3a:9f:a2:c9:51:dd:db: 98:a1:72:e7 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUUL1Cvgq5VHjtAFYQ5cA5Nq8aHF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTEyMTIxMDQ5MTFaFw0yNjEyMTExMDU0MTFaMDMxMTAvBgNV BAMTKDBGNzA5NzE3OTdCQjBGNUI0NDhCRUYxNjI0Qzg4QTc1M0IxNzJDMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz7lUNrS3qoO+uu+hXHzLqZBB5 7K4jKSoJciJBJ+4alTVoGURnfl4CfNw8epohbD8jMq1sWH20khFBXlScKYWsLYG5 SA2r1SDirGw6CZOKi6IfRgvGhvXWh/YsXjH6nlxxYCXYe6/l9WAxJZUmZQoVWnml mc4dyCsppanhRcrHatYxIDBgujiT1vWFiybThgRlPa+IAAP5J9FfkgPbLjIGvFRC ww0P5ao3kfFQH06DTjTwXXBruHCd80rSImN/yFXaHTlv47a4RCZwOdOvji3X4CUn +56akEJ+NU2xe58mDwU4XBiSWzmV4yQsAZueCthHZo4uw4pu72Lv7uV/a8L7AgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUD3CXF5e7D1tEi+8WJMiKdTsXLDMwHwYDVR0j BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50 a3ZBNC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYt NGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzMTM4MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzMjM0MzgzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoPHMUYMA0GCSqGSIb3DQEBCwUAA4IBAQAC/TQgtmF82O1+bW8x ayZmS2mIgoWwnnwYKKy5RElMQL5thh9sv3F5yVyh+xbWhcBe3pviFUFbdgRCXPGd Mp3nuianUaoqeIR0eWSnPMAXquy1+WyxalgSPhjzzUsyBlcXS4Y6e7JO2YdiF8oC pFvOU1BeDgRfAI598cFfrhSq1Ut85IttI9z42JJfEvIoZT3M19XA5X7DupQ8AcFQ o5P2qvs/d3uExjEjSp7T24k/3qAj1lk9QQnoeP0zdv1ekuEnPb1d9B1IHHIY3xak qv9uwLRZsfGZbYMZAG4gl4AnBvMS5c6ZmUAZTtG27kFMjV+01it4XjqfoslR3duY oXLn -----END CERTIFICATE-----Generated at Sun Dec 21 01:30:06 2025 by rpki-client