This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/38302e39312e3232312e302f32342d3234203d3e2036303739.roa File: 38302e39312e3232312e302f32342d3234203d3e2036303739.roa (raw, json) Hash identifier: Ms3lYl3aLRx8LXCZTfwzlSt+s+ZEQro2d7d2+QMSgk8= Subject key identifier: 30:AD:A9:E2:F7:74:CB:AE:17:A9:7E:FB:FB:F0:57:C8:9C:C4:54:8A Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 7EB7D952F095A5F83E4DEB213ABFFBAEA9E4910C Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/38302e39312e3232312e302f32342d3234203d3e2036303739.roa Signing time: Wed 28 Jan 2026 13:00:53 +0000 ROA not before: Wed 28 Jan 2026 12:55:53 +0000 ROA not after: Wed 27 Jan 2027 13:00:53 +0000 asID: 6079 IP address blocks: 80.91.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:b7:d9:52:f0:95:a5:f8:3e:4d:eb:21:3a:bf:fb:ae:a9:e4:91:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:53 2026 GMT Not After : Jan 27 13:00:53 2027 GMT Subject: CN=30ADA9E2F774CBAE17A97EFBFBF057C89CC4548A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0a:84:43:ea:a9:26:88:3a:18:49:56:5c:17: 2c:91:eb:96:12:4f:1f:5f:68:e4:bc:e8:07:13:2d: 14:3f:68:cc:2f:c3:d0:da:aa:34:ce:cd:49:96:9d: a1:79:b8:30:5b:c7:23:c2:38:53:70:47:ac:80:48: 2f:2c:83:e6:34:2d:da:91:e8:57:f6:01:f1:aa:ef: 2d:b6:e0:f8:05:79:74:02:86:91:4f:a5:90:64:15: 6e:30:23:cf:5e:10:0c:67:cb:fe:b8:28:ff:0a:d6: 84:f7:95:82:e6:7c:69:1b:67:9f:c0:8c:86:0c:5b: e3:77:33:c9:3e:0b:0c:44:f6:0b:0c:d2:18:91:3b: 47:a5:8a:1e:b5:ce:41:25:c5:9c:6c:5f:98:8e:5c: 31:b9:bb:99:38:db:96:1f:e6:3c:65:dd:7c:05:ba: 4b:41:17:6c:ba:36:de:3d:2a:33:08:4e:c9:1e:06: 3d:e9:5e:ff:6c:fb:03:15:d9:fb:ec:85:15:bb:af: 62:96:d9:e3:3e:f5:d1:b9:6c:8a:3d:01:cd:59:76: 8a:f6:0f:46:c3:44:1a:25:59:cd:c3:a6:22:29:d6: 06:ea:4c:50:3e:74:22:88:34:02:71:fc:37:8f:f1: 7c:49:4c:54:aa:bc:c1:56:1d:d0:98:a9:33:16:e6: d5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AD:A9:E2:F7:74:CB:AE:17:A9:7E:FB:FB:F0:57:C8:9C:C4:54:8A X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/38302e39312e3232312e302f32342d3234203d3e2036303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.91.221.0/24 Signature Algorithm: sha256WithRSAEncryption 14:26:95:9d:eb:ec:bd:81:74:2f:f8:65:95:96:cd:8b:a8:7e: f0:40:80:6c:27:0e:2e:eb:7d:b5:9c:59:cc:e4:bb:ae:3a:88: d1:5b:73:7b:d6:7a:1b:62:1d:32:33:cf:08:ef:b0:36:89:07: 90:b3:0a:ac:99:19:f5:79:16:24:5a:d1:b2:f3:5f:af:58:e3: 5c:ef:c0:52:91:c3:de:68:be:cf:57:99:66:29:a9:5d:f5:43: b2:ef:8b:0f:03:7f:bf:87:50:76:ed:89:d4:db:cd:70:9c:85: c2:c6:4d:8d:3e:a1:a5:4e:12:3e:7e:74:ef:3e:d5:54:01:b7: 44:ab:a5:a4:25:02:14:58:fb:36:ca:8e:d5:f0:a0:15:76:7d: 60:fa:28:ef:54:74:52:75:f5:2c:73:40:30:97:42:49:2b:c5: 0f:92:fe:11:d1:d8:bc:03:1b:fe:5b:1b:f4:31:c0:36:af:91: 61:6c:c2:23:0d:90:a8:46:77:89:4e:47:79:49:bb:d8:62:0f: 83:dd:30:26:af:ae:b2:9e:44:85:59:33:b4:76:22:93:8a:27: be:1f:2d:30:69:ed:f1:f0:de:61:8e:08:35:33:a7:77:65:e4: e9:45:94:4e:68:c6:03:99:ee:1c:7e:cf:6e:ec:e8:ec:3d:43: de:b2:88:c5 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUfrfZUvCVpfg+TeshOr/7rqnkkQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTNaFw0yNzAxMjcxMzAwNTNaMDMxMTAvBgNV BAMTKDMwQURBOUUyRjc3NENCQUUxN0E5N0VGQkZCRjA1N0M4OUNDNDU0OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9CoRD6qkmiDoYSVZcFyyR65YS Tx9faOS86AcTLRQ/aMwvw9DaqjTOzUmWnaF5uDBbxyPCOFNwR6yASC8sg+Y0LdqR 6Ff2AfGq7y224PgFeXQChpFPpZBkFW4wI89eEAxny/64KP8K1oT3lYLmfGkbZ5/A jIYMW+N3M8k+CwxE9gsM0hiRO0elih61zkElxZxsX5iOXDG5u5k425Yf5jxl3XwF uktBF2y6Nt49KjMITskeBj3pXv9s+wMV2fvshRW7r2KW2eM+9dG5bIo9Ac1Zdor2 D0bDRBolWc3DpiIp1gbqTFA+dCKINAJx/DeP8XxJTFSqvMFWHdCYqTMW5tVhAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUMK2p4vd0y64XqX77+/BXyJzEVIowHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzgzMDJlMzkzMTJlMzIzMjMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMDM3Mzkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABQW90w DQYJKoZIhvcNAQELBQADggEBABQmlZ3r7L2BdC/4ZZWWzYuofvBAgGwnDi7rfbWc Wczku646iNFbc3vWehtiHTIzzwjvsDaJB5CzCqyZGfV5FiRa0bLzX69Y41zvwFKR w95ovs9XmWYpqV31Q7Lviw8Df7+HUHbtidTbzXCchcLGTY0+oaVOEj5+dO8+1VQB t0SrpaQlAhRY+zbKjtXwoBV2fWD6KO9UdFJ19SxzQDCXQkkrxQ+S/hHR2LwDG/5b G/QxwDavkWFswiMNkKhGd4lOR3lJu9hiD4PdMCavrrKeRIVZM7R2IpOKJ74fLTBp 7fHw3mGOCDUzp3dl5OlFlE5oxgOZ7hx+z27s6Ow9Q96yiMU= -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:41 2026 by rpki-client