This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138342e302f32332d3234203d3e203432343233.roa File: 3139332e3136382e3138342e302f32332d3234203d3e203432343233.roa (raw, json) Hash identifier: Xmadi8q3vQYi9nEjuV0ny6fnJlyWEELvJTPESl6Lfd8= Subject key identifier: 11:8F:35:32:43:EB:AF:91:13:16:5D:90:EB:A9:66:3F:67:C0:57:7E Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 51B73AACF3CF3AA650020C2A887816D2C794BFBF Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138342e302f32332d3234203d3e203432343233.roa Signing time: Wed 28 Jan 2026 13:00:53 +0000 ROA not before: Wed 28 Jan 2026 12:55:53 +0000 ROA not after: Wed 27 Jan 2027 13:00:53 +0000 asID: 42423 IP address blocks: 193.168.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b7:3a:ac:f3:cf:3a:a6:50:02:0c:2a:88:78:16:d2:c7:94:bf:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:53 2026 GMT Not After : Jan 27 13:00:53 2027 GMT Subject: CN=118F353243EBAF9113165D90EBA9663F67C0577E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:75:78:4f:4d:07:85:fe:d9:b9:a2:82:62:33: 47:46:cb:84:b0:68:cb:9e:d0:9f:c8:4c:b6:16:41: 3a:82:fa:64:c3:28:a8:5b:02:30:e7:d8:0e:09:cd: 02:3c:78:ec:58:23:54:cd:89:bb:39:0b:75:00:5a: 9b:f6:70:29:f1:bb:be:ad:87:e5:59:63:dd:0e:2c: d3:ca:8b:6b:17:c0:52:45:59:d9:3e:1f:9f:1e:5f: 73:3c:b7:5e:bf:f8:b9:db:24:64:9e:4e:24:b4:bd: 7c:aa:59:c6:26:23:e9:2d:dd:8a:d1:dd:96:60:33: d7:74:52:03:2d:c2:57:5b:6e:23:c6:4d:c0:65:e5: 6a:f1:7b:cc:d7:6d:c4:ae:33:34:1c:57:a5:fc:cc: 8b:60:72:5f:21:f8:b4:ee:ba:fa:ad:8e:a9:f6:b2: fd:b2:c2:43:cb:36:a7:32:8a:b4:b5:64:32:b9:18: 0a:a6:0c:08:94:56:49:2e:df:e3:b0:81:1c:ba:f9: 16:75:48:31:79:b0:52:f3:0e:33:7e:fa:dd:9a:03: b6:a5:7b:51:98:37:a3:19:e7:5f:a3:2c:43:e3:4d: f1:f3:3f:94:f3:64:78:6d:30:c2:f6:f9:7c:f7:ce: 5a:be:e4:eb:ad:fe:53:f1:e9:10:fc:9b:01:58:e4: 2b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8F:35:32:43:EB:AF:91:13:16:5D:90:EB:A9:66:3F:67:C0:57:7E X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138342e302f32332d3234203d3e203432343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.168.184.0/23 Signature Algorithm: sha256WithRSAEncryption c9:51:81:c0:b4:60:d5:99:23:7b:ae:4e:10:b0:e1:7a:cb:5c: 40:d6:01:d1:4e:bf:f5:29:bc:29:1d:32:a4:c9:ff:10:62:6f: 62:07:5f:f4:6d:b9:ff:ba:27:d0:45:86:de:34:9f:00:19:d4: 39:bc:6c:14:ba:43:aa:37:85:0d:5d:fe:08:83:38:1e:d2:45: c6:99:f4:51:53:10:5a:5b:4b:cd:47:89:59:4d:24:8e:ea:d8: 06:53:2c:f9:81:84:87:f2:39:df:97:31:2e:ae:63:7d:b5:a5: 35:33:32:5d:60:62:b1:28:2d:27:4e:db:cf:85:99:34:de:e3: f6:36:9a:ef:c4:ec:0d:9e:a0:ba:80:18:9d:7c:19:3d:37:7b: bb:86:c8:0d:ea:6e:07:8b:57:67:36:e9:b7:77:3b:83:27:30: c9:d1:e4:73:03:77:21:de:d6:ce:bf:05:7c:76:14:81:a4:84: e0:88:83:b3:f8:50:71:31:ad:20:1c:7c:84:48:af:0d:06:16: f7:cf:01:2e:a5:8c:ed:e0:1e:41:7f:03:cd:14:6d:79:f6:7d: df:c0:fc:e9:81:87:12:bc:ef:47:d5:90:df:18:fc:60:b0:12: 8c:61:8e:86:aa:2f:29:04:00:98:92:90:66:16:99:9f:7a:83: 95:f9:de:8e -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUUbc6rPPPOqZQAgwqiHgW0seUv78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTNaFw0yNzAxMjcxMzAwNTNaMDMxMTAvBgNV BAMTKDExOEYzNTMyNDNFQkFGOTExMzE2NUQ5MEVCQTk2NjNGNjdDMDU3N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkdXhPTQeF/tm5ooJiM0dGy4Sw aMue0J/ITLYWQTqC+mTDKKhbAjDn2A4JzQI8eOxYI1TNibs5C3UAWpv2cCnxu76t h+VZY90OLNPKi2sXwFJFWdk+H58eX3M8t16/+LnbJGSeTiS0vXyqWcYmI+kt3YrR 3ZZgM9d0UgMtwldbbiPGTcBl5Wrxe8zXbcSuMzQcV6X8zItgcl8h+LTuuvqtjqn2 sv2ywkPLNqcyirS1ZDK5GAqmDAiUVkku3+OwgRy6+RZ1SDF5sFLzDjN++t2aA7al e1GYN6MZ51+jLEPjTfHzP5TzZHhtMML2+Xz3zlq+5Out/lPx6RD8mwFY5CsxAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUEY81MkPrr5ETFl2Q66lmP2fAV34wHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzEzOTMzMmUzMTM2MzgyZTMx MzgzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzIzNDMyMzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHBqLgwDQYJKoZIhvcNAQELBQADggEBAMlRgcC0YNWZI3uuThCw4XrLXEDWAdFO v/UpvCkdMqTJ/xBib2IHX/Rtuf+6J9BFht40nwAZ1Dm8bBS6Q6o3hQ1d/giDOB7S RcaZ9FFTEFpbS81HiVlNJI7q2AZTLPmBhIfyOd+XMS6uY321pTUzMl1gYrEoLSdO 28+FmTTe4/Y2mu/E7A2eoLqAGJ18GT03e7uGyA3qbgeLV2c26bd3O4MnMMnR5HMD dyHe1s6/BXx2FIGkhOCIg7P4UHExrSAcfIRIrw0GFvfPAS6ljO3gHkF/A80UbXn2 fd/A/OmBhxK870fVkN8Y/GCwEoxhjoaqLykEAJiSkGYWmZ96g5X53o4= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:27 2026 by rpki-client