This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e33362e3136322e302f32342d3234203d3e203235313938.roa File: 3139332e33362e3136322e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: qSkjBJhNbch2e0X95zuFM7bTTjSmlJBnLt9Kz0d4ZFE= Subject key identifier: 5C:69:F1:94:DD:F3:7B:83:FA:23:3D:75:C3:B3:28:F0:0D:9C:20:CD Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 6BC473947782BDA0F533F24BE40275244FB2C236 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e33362e3136322e302f32342d3234203d3e203235313938.roa Signing time: Wed 28 Jan 2026 13:00:53 +0000 ROA not before: Wed 28 Jan 2026 12:55:53 +0000 ROA not after: Wed 27 Jan 2027 13:00:53 +0000 asID: 25198 IP address blocks: 193.36.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:c4:73:94:77:82:bd:a0:f5:33:f2:4b:e4:02:75:24:4f:b2:c2:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:53 2026 GMT Not After : Jan 27 13:00:53 2027 GMT Subject: CN=5C69F194DDF37B83FA233D75C3B328F00D9C20CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:92:4f:6a:fd:aa:73:bf:de:47:b8:f2:3c:98: 9c:ff:47:62:20:60:7b:38:70:2c:52:4d:c6:b3:b4: 9c:47:3e:2d:b6:7d:4a:4b:67:02:a7:b0:35:c0:6b: 86:95:10:2b:a0:ff:70:8f:e7:9f:1d:0b:49:a0:e8: 03:5d:f9:cf:50:f8:cc:71:03:b0:3b:59:cc:bb:f5: 5e:16:54:3d:0e:2f:e0:09:54:b3:f6:c9:7e:c5:51: ef:b4:30:74:84:a4:49:a6:a4:b9:5c:52:84:02:52: 79:a4:ad:46:90:42:b4:a0:8b:7d:b9:eb:ea:ce:e6: 21:b4:bc:fe:a8:60:d3:8a:23:84:02:3b:71:88:a8: bc:65:7f:95:88:f4:fb:35:f2:ca:c6:f5:59:12:60: de:f2:cd:31:b4:e3:b9:9c:03:af:73:5e:23:85:fc: 20:c6:43:df:d6:17:c2:ab:a5:83:cd:95:f1:5c:a3: 8c:ab:7f:56:f8:ea:a1:42:d7:32:a4:1e:c5:c4:0c: 2f:84:1c:0d:b9:83:1b:65:7b:54:63:7c:c1:94:18: 7f:4b:ce:dc:12:28:8f:f6:ae:79:42:f6:23:3b:82: df:97:20:94:1e:c2:0f:b3:62:16:01:31:ce:5a:59: 4c:42:a3:9f:d0:68:be:fc:2f:75:8f:14:f7:b2:d9: 01:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:69:F1:94:DD:F3:7B:83:FA:23:3D:75:C3:B3:28:F0:0D:9C:20:CD X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e33362e3136322e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.162.0/24 Signature Algorithm: sha256WithRSAEncryption 47:be:cd:f8:d6:07:17:f9:93:1e:63:50:ab:0a:ad:38:a3:23: a3:b1:35:9f:22:e9:96:97:14:1f:4d:f1:0f:2f:1e:74:eb:a0: 14:a7:71:3a:d3:d0:7f:82:80:e3:5a:92:37:f5:a9:29:90:58: e7:b7:9b:75:12:2f:54:8b:7c:e2:4b:7f:aa:94:db:42:fc:f6: f7:88:ee:f6:de:ee:04:a8:c2:ec:17:8b:53:bf:d9:e9:49:d8: 76:8d:79:cf:39:69:82:df:98:9e:ec:98:c2:ea:3e:54:f3:bc: ee:24:63:0d:2f:3d:59:d5:1f:9c:b9:70:3a:2b:99:c8:d8:18: 99:a2:69:bc:dd:7b:ab:4e:b6:0c:f7:cf:50:75:e4:e8:f2:bf: 51:b0:7d:ab:aa:1f:33:55:72:0d:33:cd:b2:b8:1f:c4:e9:88: cb:9b:1c:93:6b:2d:55:27:74:3d:46:5a:a2:1a:f8:64:1a:20: b4:5b:ba:20:c6:1e:e1:4a:83:90:29:a0:f6:59:62:3c:07:0c: 0b:4b:89:02:3a:98:01:79:c4:e7:bd:e0:f5:d9:cb:3d:a2:03: b6:cd:f1:da:7f:ff:a9:23:8e:96:a6:68:db:03:93:ee:be:65: ce:8f:6a:46:81:c9:33:a8:b6:24:f9:67:98:46:10:5e:5c:bc: c6:48:6f:31 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUa8RzlHeCvaD1M/JL5AJ1JE+ywjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTNaFw0yNzAxMjcxMzAwNTNaMDMxMTAvBgNV BAMTKDVDNjlGMTk0RERGMzdCODNGQTIzM0Q3NUMzQjMyOEYwMEQ5QzIwQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdkk9q/apzv95HuPI8mJz/R2Ig YHs4cCxSTcaztJxHPi22fUpLZwKnsDXAa4aVECug/3CP558dC0mg6ANd+c9Q+Mxx A7A7Wcy79V4WVD0OL+AJVLP2yX7FUe+0MHSEpEmmpLlcUoQCUnmkrUaQQrSgi325 6+rO5iG0vP6oYNOKI4QCO3GIqLxlf5WI9Ps18srG9VkSYN7yzTG047mcA69zXiOF /CDGQ9/WF8KrpYPNlfFco4yrf1b46qFC1zKkHsXEDC+EHA25gxtle1RjfMGUGH9L ztwSKI/2rnlC9iM7gt+XIJQewg+zYhYBMc5aWUxCo5/QaL78L3WPFPey2QGZAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUXGnxlN3ze4P6Iz11w7Mo8A2cIM0wHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzEzOTMzMmUzMzM2MmUzMTM2 MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM1MzEzOTM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA wSSiMA0GCSqGSIb3DQEBCwUAA4IBAQBHvs341gcX+ZMeY1CrCq04oyOjsTWfIumW lxQfTfEPLx5066AUp3E609B/goDjWpI39akpkFjnt5t1Ei9Ui3ziS3+qlNtC/Pb3 iO723u4EqMLsF4tTv9npSdh2jXnPOWmC35ie7JjC6j5U87zuJGMNLz1Z1R+cuXA6 K5nI2BiZomm83XurTrYM989QdeTo8r9RsH2rqh8zVXINM82yuB/E6YjLmxyTay1V J3Q9RlqiGvhkGiC0W7ogxh7hSoOQKaD2WWI8BwwLS4kCOpgBecTnveD12cs9ogO2 zfHaf/+pI46WpmjbA5PuvmXOj2pGgckzqLYk+WeYRhBeXLzGSG8x -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:36 2026 by rpki-client