This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138362e302f32332d3233203d3e2039343537.roa File: 3139332e3136382e3138362e302f32332d3233203d3e2039343537.roa (raw, json) Hash identifier: xdgNpn6nOs3JD62JlOiE+fWXTmUHiJQBPt6YXOW6VTc= Subject key identifier: B1:A8:EF:CC:56:62:58:A8:8A:83:89:5E:6A:0A:00:C7:55:96:3B:A8 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 2C995B0B38471E06D809291D89C1F5832516BADC Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138362e302f32332d3233203d3e2039343537.roa Signing time: Sat 31 Jan 2026 09:33:01 +0000 ROA not before: Sat 31 Jan 2026 09:28:01 +0000 ROA not after: Sat 30 Jan 2027 09:33:01 +0000 asID: 9457 IP address blocks: 193.168.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:99:5b:0b:38:47:1e:06:d8:09:29:1d:89:c1:f5:83:25:16:ba:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 31 09:28:01 2026 GMT Not After : Jan 30 09:33:01 2027 GMT Subject: CN=B1A8EFCC566258A88A83895E6A0A00C755963BA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4f:bc:54:4f:ab:51:68:7a:21:05:68:bd:58: b7:cf:0c:a4:71:ca:17:53:6d:00:f7:78:ed:c6:97: 97:bb:99:db:8d:69:6d:67:7b:a7:d3:dc:4d:58:09: 55:86:06:34:79:b4:97:0d:1c:8b:48:4a:43:f4:f9: ff:bd:b5:21:82:77:43:c9:29:3e:e6:a3:45:c4:26: ab:cc:75:4d:3d:49:c4:ba:8e:0e:cc:66:e1:d2:77: ea:fd:7f:23:57:f7:a6:8c:d1:85:03:ff:1b:97:d5: 6d:53:ca:e2:62:bf:7d:33:1e:f4:cb:53:09:b5:16: 6f:eb:92:42:82:b0:d1:39:22:15:f7:d0:fe:72:69: c8:21:09:c3:63:b2:67:9f:9e:9c:4a:f6:e5:15:31: df:9c:ff:a5:7c:c9:1b:5e:17:54:98:cd:27:a9:d4: 4e:66:b2:52:8d:c1:7b:cf:0f:74:d1:ea:86:3f:72: 0b:45:3b:2c:fc:f6:b5:6b:d7:f2:fc:71:e0:ca:b4: 55:4d:08:23:dd:03:16:42:d7:d2:a2:e6:6d:8b:b1: e2:db:62:24:8f:51:22:ca:07:be:4c:8b:d6:db:a1: ea:ad:ad:91:b2:01:e8:7e:96:b8:28:d7:b0:76:ae: 2d:12:c5:d5:24:68:b7:61:73:09:46:79:d9:ca:70: 5f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A8:EF:CC:56:62:58:A8:8A:83:89:5E:6A:0A:00:C7:55:96:3B:A8 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138362e302f32332d3233203d3e2039343537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.168.186.0/23 Signature Algorithm: sha256WithRSAEncryption b1:bc:5e:8e:37:c2:90:e3:c8:3f:30:33:7a:1f:78:a2:02:20: f9:cd:13:4a:92:e7:a4:eb:56:1f:9d:f8:24:38:74:60:78:a3: 97:9a:3a:f8:53:6e:ba:9c:c4:21:be:7b:f1:34:21:2a:5f:40: 0e:1c:3c:c0:f9:ff:64:57:bc:89:f7:7f:54:59:62:18:6d:b8: 6a:15:89:12:c6:f0:0a:b7:2f:ad:03:65:f4:b8:eb:61:d6:2f: fd:08:64:9a:fd:de:90:05:d8:c5:fa:5c:fe:c5:3e:52:85:db: a4:4c:93:58:1e:af:04:bc:62:1b:ca:08:e1:54:72:85:d2:4e: 76:26:b8:e5:9c:04:f5:05:a3:55:3a:95:58:e1:fd:e8:16:ce: 11:c9:90:be:13:ea:e7:a8:55:6e:84:97:97:8f:b1:2f:af:d4: 72:0f:2f:3f:bc:a1:dd:d2:fa:2a:a3:b0:cf:5a:63:a7:26:51: 0b:ff:cf:1a:04:d9:bf:93:98:38:7c:db:70:af:f6:ef:16:c2: 5d:27:8b:4b:b8:7f:14:33:bd:cd:1f:79:6d:fe:41:ca:71:20: 04:e6:6a:3a:45:f3:26:28:0c:05:19:aa:e1:a7:4f:04:0c:e7: 18:47:ed:3e:e6:f8:e1:1a:9b:27:3f:77:1d:22:78:c1:28:62: 14:08:f3:5f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIULJlbCzhHHgbYCSkdicH1gyUWutwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMzEwOTI4MDFaFw0yNzAxMzAwOTMzMDFaMDMxMTAvBgNV BAMTKEIxQThFRkNDNTY2MjU4QTg4QTgzODk1RTZBMEEwMEM3NTU5NjNCQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDT7xUT6tRaHohBWi9WLfPDKRx yhdTbQD3eO3Gl5e7mduNaW1ne6fT3E1YCVWGBjR5tJcNHItISkP0+f+9tSGCd0PJ KT7mo0XEJqvMdU09ScS6jg7MZuHSd+r9fyNX96aM0YUD/xuX1W1TyuJiv30zHvTL Uwm1Fm/rkkKCsNE5IhX30P5yacghCcNjsmefnpxK9uUVMd+c/6V8yRteF1SYzSep 1E5mslKNwXvPD3TR6oY/cgtFOyz89rVr1/L8ceDKtFVNCCPdAxZC19Ki5m2LseLb YiSPUSLKB75Mi9bboeqtrZGyAeh+lrgo17B2ri0SxdUkaLdhcwlGednKcF8JAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUsajvzFZiWKiKg4leagoAx1WWO6gwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzEzOTMzMmUzMTM2MzgyZTMx MzgzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM5MzQzNTM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB wai6MA0GCSqGSIb3DQEBCwUAA4IBAQCxvF6ON8KQ48g/MDN6H3iiAiD5zRNKkuek 61YfnfgkOHRgeKOXmjr4U266nMQhvnvxNCEqX0AOHDzA+f9kV7yJ939UWWIYbbhq FYkSxvAKty+tA2X0uOth1i/9CGSa/d6QBdjF+lz+xT5ShdukTJNYHq8EvGIbygjh VHKF0k52JrjlnAT1BaNVOpVY4f3oFs4RyZC+E+rnqFVuhJeXj7Evr9RyDy8/vKHd 0voqo7DPWmOnJlEL/88aBNm/k5g4fNtwr/bvFsJdJ4tLuH8UM73NH3lt/kHKcSAE 5mo6RfMmKAwFGarhp08EDOcYR+0+5vjhGpsnP3cdInjBKGIUCPNf -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:37 2026 by rpki-client