This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233342e302f32342d3234203d3e203136353039.roa File: 3139342e3132342e3233342e302f32342d3234203d3e203136353039.roa (raw, json) Hash identifier: yz5dw8t6yWoO2T3DnzEAtHSSXtxqaxMtoTJQ4OPxYFQ= Subject key identifier: 1A:29:89:00:71:ED:00:09:F4:53:E1:30:7E:20:F0:57:B4:12:74:60 Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 3D311FACE174BA44F479436DA51A61B1AB80C455 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233342e302f32342d3234203d3e203136353039.roa Signing time: Tue 03 Feb 2026 09:12:35 +0000 ROA not before: Tue 03 Feb 2026 09:07:35 +0000 ROA not after: Tue 02 Feb 2027 09:12:35 +0000 asID: 16509 IP address blocks: 194.124.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Feb 2026 13:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:31:1f:ac:e1:74:ba:44:f4:79:43:6d:a5:1a:61:b1:ab:80:c4:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Feb 3 09:07:35 2026 GMT Not After : Feb 2 09:12:35 2027 GMT Subject: CN=1A29890071ED0009F453E1307E20F057B4127460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:f6:0b:b1:3f:f2:bd:4c:c9:29:5b:0a:f3: c6:c9:2e:89:d6:3e:e4:3b:ed:7b:b0:23:5b:15:ff: dd:16:13:d6:4c:70:9a:8e:70:04:cc:a9:da:c8:79: fb:f1:52:7d:ff:14:e9:9a:a0:fd:e6:3e:b5:cb:f4: 5e:82:b6:c7:37:e7:03:c9:62:6b:88:eb:32:94:4d: 5d:5d:b1:d4:1e:ed:0d:66:a4:60:4e:33:c2:85:e6: 08:1a:c8:3a:27:c2:cb:cf:36:ce:0a:e0:88:4d:7a: 22:21:9e:17:21:97:fb:61:4c:30:bc:72:a8:ae:49: e0:0a:57:2a:01:b8:5c:f4:e1:9d:53:34:57:1f:91: 0b:fb:10:b3:e1:93:84:fd:71:ff:89:e8:bc:a4:90: bd:ab:d7:06:d2:0e:dd:20:cb:28:f9:43:ec:c8:d1: 15:0a:8a:04:5d:67:da:e8:4e:81:4e:8e:6a:5e:1f: 0f:d0:b9:d8:2f:b5:c4:33:19:71:61:a1:96:15:03: 3d:a5:d5:a9:81:53:a2:d1:e6:83:5e:90:0b:a8:7f: 29:01:7a:7c:4a:d5:ce:0f:07:37:ab:a0:73:f0:5a: 71:3b:6f:5a:4f:d9:ff:6d:0e:b4:fc:09:90:b0:c7: 35:18:9d:f5:a7:71:27:65:bc:9e:cb:18:2a:53:27: 8e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:29:89:00:71:ED:00:09:F4:53:E1:30:7E:20:F0:57:B4:12:74:60 X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233342e302f32342d3234203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.124.234.0/24 Signature Algorithm: sha256WithRSAEncryption 52:2e:da:f5:56:9f:29:c3:97:f5:b0:11:8e:e7:41:34:fb:86: 1f:a9:12:09:61:3b:a5:8f:95:7b:81:44:28:2b:b1:8b:b8:9d: b9:9f:57:65:37:42:30:3a:fe:7c:f1:73:ca:a8:3c:86:15:9a: ab:79:f6:bf:0f:15:49:8c:10:c1:b4:d0:04:8e:5e:51:65:7e: 5d:bf:85:02:14:d4:f3:20:6a:e1:0c:ed:37:74:2c:31:a2:05: 5a:02:81:fb:0d:d2:bf:a0:1c:88:4e:ac:e8:52:f2:f5:41:d0: 3c:c4:7e:e7:96:f8:45:fa:be:d0:3d:9c:cf:23:63:2f:27:d0: 3d:90:02:80:5a:4b:c0:e7:93:7c:bb:e2:ee:05:82:8f:24:0c: 82:0b:b3:fb:62:3e:02:1e:69:40:bd:d1:ca:ca:db:c6:6a:d2: 36:b0:de:e5:1e:0b:14:a7:f4:9d:aa:7c:ca:4a:53:2b:68:d8: 76:5a:cc:3c:8e:ea:4c:5c:43:0e:5a:90:e0:fb:e8:40:1f:5c: 14:02:5b:07:d8:ab:50:a1:f4:f2:3e:d2:26:76:aa:6f:ed:a1: 20:d6:04:05:53:41:be:9b:f8:e9:43:56:b3:0d:54:39:0c:fd: 35:bc:b0:0b:a8:10:5c:b7:fa:7e:13:2a:45:f6:e4:e5:27:50: 4c:56:14:86 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUPTEfrOF0ukT0eUNtpRphsauAxFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNjAyMDMwOTA3MzVaFw0yNzAyMDIwOTEyMzVaMDMxMTAvBgNV BAMTKDFBMjk4OTAwNzFFRDAwMDlGNDUzRTEzMDdFMjBGMDU3QjQxMjc0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnzfYLsT/yvUzJKVsK88bJLonW PuQ77XuwI1sV/90WE9ZMcJqOcATMqdrIefvxUn3/FOmaoP3mPrXL9F6Ctsc35wPJ YmuI6zKUTV1dsdQe7Q1mpGBOM8KF5ggayDonwsvPNs4K4IhNeiIhnhchl/thTDC8 cqiuSeAKVyoBuFz04Z1TNFcfkQv7ELPhk4T9cf+J6LykkL2r1wbSDt0gyyj5Q+zI 0RUKigRdZ9roToFOjmpeHw/QudgvtcQzGXFhoZYVAz2l1amBU6LR5oNekAuofykB enxK1c4PBzeroHPwWnE7b1pP2f9tDrT8CZCwxzUYnfWncSdlvJ7LGCpTJ457AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUGimJAHHtAAn0U+EwfiDwV7QSdGAwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgt N2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhmMDZlLzAvMzEzOTM0MmUzMTMyMzQyZTMy MzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzYzNTMwMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADCfOowDQYJKoZIhvcNAQELBQADggEBAFIu2vVWnynDl/WwEY7nQTT7hh+pEglh O6WPlXuBRCgrsYu4nbmfV2U3QjA6/nzxc8qoPIYVmqt59r8PFUmMEMG00ASOXlFl fl2/hQIU1PMgauEM7Td0LDGiBVoCgfsN0r+gHIhOrOhS8vVB0DzEfueW+EX6vtA9 nM8jYy8n0D2QAoBaS8Dnk3y74u4Fgo8kDIILs/tiPgIeaUC90crK28Zq0jaw3uUe CxSn9J2qfMpKUyto2HZazDyO6kxcQw5akOD76EAfXBQCWwfYq1Ch9PI+0iZ2qm/t oSDWBAVTQb6b+OlDVrMNVDkM/TW8sAuoEFy3+n4TKkX25OUnUExWFIY= -----END CERTIFICATE-----Generated at Mon Feb 16 06:37:03 2026 by rpki-client