This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e33362e3136332e302f32342d3234203d3e2035363530.roa File: 3139332e33362e3136332e302f32342d3234203d3e2035363530.roa (raw, json) Hash identifier: H4to4Ot9Kxo3R+S3ErS+7uMB/YhljaBiia8uy21ZTNc= Subject key identifier: CF:06:50:C1:E9:D2:5E:A3:91:CE:11:B9:7F:B3:4E:6F:72:BC:D5:35 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 5A987195A2E78C119762AA63FA3ED8D0140F4A65 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e33362e3136332e302f32342d3234203d3e2035363530.roa Signing time: Wed 28 Jan 2026 13:00:53 +0000 ROA not before: Wed 28 Jan 2026 12:55:53 +0000 ROA not after: Wed 27 Jan 2027 13:00:53 +0000 asID: 5650 IP address blocks: 193.36.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:98:71:95:a2:e7:8c:11:97:62:aa:63:fa:3e:d8:d0:14:0f:4a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:53 2026 GMT Not After : Jan 27 13:00:53 2027 GMT Subject: CN=CF0650C1E9D25EA391CE11B97FB34E6F72BCD535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2c:e5:ec:7c:31:be:71:5d:1b:6c:0b:7e:7b: 99:8d:ae:1a:aa:fa:64:07:ad:23:94:c5:ea:1f:56: ac:66:40:77:ca:7d:58:3a:8f:6a:87:f2:62:c5:42: c4:7b:c1:5c:96:ec:66:5a:2f:4b:fc:ba:03:8d:41: d0:1b:9e:af:3a:1e:20:bb:a5:0a:1e:b7:ba:4f:6f: 44:c9:f5:ff:b5:a0:9f:bf:c7:1a:9c:5d:a6:af:72: 7a:50:be:9d:c8:a7:64:0d:7f:c0:90:99:3c:cd:8a: 13:85:50:4e:d4:f5:74:ae:94:36:f9:72:21:e8:1a: ad:81:7c:b9:b3:eb:c7:dc:29:03:39:2f:19:bd:c3: 30:34:de:ac:e6:87:8f:be:c7:3d:45:c9:0c:05:10: 68:18:06:0b:72:7f:b4:91:9d:24:81:fc:62:8a:1b: 97:87:31:49:5f:fd:bb:17:92:63:85:84:55:bb:8e: e4:1b:ed:90:5b:13:d8:5e:60:17:d7:14:3e:9c:be: c1:82:d1:ef:37:4d:12:85:7e:13:e7:51:89:3b:2a: 55:55:34:b5:0d:7c:f7:85:48:8f:3f:79:42:cf:4f: d6:f0:1b:e2:6e:cf:f8:83:f3:d6:76:01:8c:6f:c4: 38:f2:db:ef:3e:d2:01:a0:59:6b:ce:89:e9:cd:b8: 41:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:06:50:C1:E9:D2:5E:A3:91:CE:11:B9:7F:B3:4E:6F:72:BC:D5:35 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e33362e3136332e302f32342d3234203d3e2035363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.163.0/24 Signature Algorithm: sha256WithRSAEncryption d0:af:2f:36:e1:69:ee:c9:06:9b:ae:a9:3c:ea:9a:28:a6:59: 9a:28:b4:da:10:4b:6b:32:81:bb:b4:66:aa:a8:cf:a5:25:28: 9f:75:0e:e0:43:ef:1e:73:a5:31:b6:75:6a:be:7b:0d:4b:13: 5d:80:50:e2:c0:4a:f8:8d:ad:5d:a9:df:a2:01:35:34:5a:63: 23:f6:81:81:84:41:c2:5b:bf:a6:52:05:5c:47:de:57:5a:ab: d9:e5:92:6b:2b:55:0a:eb:14:d3:cf:26:11:68:ba:c5:b3:9f: e8:0c:c6:fe:2f:2d:3f:57:0b:b2:ec:16:bf:fb:3f:bd:22:47: c5:bd:77:16:db:50:25:77:2c:4f:75:2c:ec:cf:de:8f:37:c2: c3:c4:45:1c:05:6c:2c:3d:e4:0b:5c:30:61:07:8c:0b:56:c3: a7:56:f9:8f:3c:ab:b5:ef:6d:cd:7f:1a:a5:cc:66:f3:e1:4c: 6e:bd:02:95:3d:db:5a:4e:10:ed:b2:f5:3d:52:da:fd:ed:e1: 5e:24:0a:60:9c:a4:ce:6b:15:b0:3b:d7:e0:8b:0e:aa:23:c6: ea:38:de:73:37:fb:0b:8a:34:27:68:05:75:ba:6c:46:d4:78: a4:70:95:fd:8e:8d:ba:17:71:7d:5d:c9:f5:16:63:ee:bf:29: bd:e4:26:78 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUWphxlaLnjBGXYqpj+j7Y0BQPSmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTNaFw0yNzAxMjcxMzAwNTNaMDMxMTAvBgNV BAMTKENGMDY1MEMxRTlEMjVFQTM5MUNFMTFCOTdGQjM0RTZGNzJCQ0Q1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPLOXsfDG+cV0bbAt+e5mNrhqq +mQHrSOUxeofVqxmQHfKfVg6j2qH8mLFQsR7wVyW7GZaL0v8ugONQdAbnq86HiC7 pQoet7pPb0TJ9f+1oJ+/xxqcXaavcnpQvp3Ip2QNf8CQmTzNihOFUE7U9XSulDb5 ciHoGq2BfLmz68fcKQM5Lxm9wzA03qzmh4++xz1FyQwFEGgYBgtyf7SRnSSB/GKK G5eHMUlf/bsXkmOFhFW7juQb7ZBbE9heYBfXFD6cvsGC0e83TRKFfhPnUYk7KlVV NLUNfPeFSI8/eULPT9bwG+Juz/iD89Z2AYxvxDjy2+8+0gGgWWvOienNuEF1AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUzwZQwenSXqORzhG5f7NOb3K81TUwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzEzOTMzMmUzMzM2MmUzMTM2 MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM2MzUzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEk ozANBgkqhkiG9w0BAQsFAAOCAQEA0K8vNuFp7skGm66pPOqaKKZZmii02hBLazKB u7RmqqjPpSUon3UO4EPvHnOlMbZ1ar57DUsTXYBQ4sBK+I2tXanfogE1NFpjI/aB gYRBwlu/plIFXEfeV1qr2eWSaytVCusU088mEWi6xbOf6AzG/i8tP1cLsuwWv/s/ vSJHxb13FttQJXcsT3Us7M/ejzfCw8RFHAVsLD3kC1wwYQeMC1bDp1b5jzyrte9t zX8apcxm8+FMbr0ClT3bWk4Q7bL1PVLa/e3hXiQKYJykzmsVsDvX4IsOqiPG6jje czf7C4o0J2gFdbpsRtR4pHCV/Y6NuhdxfV3J9RZj7r8pveQmeA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:25 2026 by rpki-client