This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/38392e33392e3230332e302f32342d3234203d3e203333383233.roa File: 38392e33392e3230332e302f32342d3234203d3e203333383233.roa (raw, json) Hash identifier: ZPgROkPVYB3uj73z9XxBfC9juuk8fNjE8uzWAF58nEg= Subject key identifier: 88:3C:FD:52:E5:73:21:AE:6A:DC:AC:21:C4:62:94:E0:64:85:EA:72 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 55299895619DEC762865DFE4369885529B884393 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/38392e33392e3230332e302f32342d3234203d3e203333383233.roa Signing time: Wed 28 Jan 2026 13:00:51 +0000 ROA not before: Wed 28 Jan 2026 12:55:51 +0000 ROA not after: Wed 27 Jan 2027 13:00:51 +0000 asID: 33823 IP address blocks: 89.39.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:29:98:95:61:9d:ec:76:28:65:df:e4:36:98:85:52:9b:88:43:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:51 2026 GMT Not After : Jan 27 13:00:51 2027 GMT Subject: CN=883CFD52E57321AE6ADCAC21C46294E06485EA72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:3d:9c:24:ae:c3:ac:45:81:f0:75:a3:5f: a0:c7:e9:85:2d:b4:01:f6:81:b7:ce:9e:69:2c:f7: 85:34:1d:98:84:2f:f8:0a:54:7c:a1:12:95:3b:7c: 2a:f4:ef:51:06:b8:00:46:31:88:73:ac:1b:27:71: 76:4b:b1:f9:24:f3:01:10:2b:e8:05:ba:fa:45:a9: 2b:2d:8f:2b:2b:f5:8e:48:8a:96:f7:21:0d:06:4b: 93:4c:02:88:e0:bc:e2:01:84:2d:45:25:c5:ab:f1: 9e:27:71:84:b8:e7:52:cf:f1:97:f9:eb:b9:50:c0: ca:fe:5e:2b:cd:5f:7c:9b:17:9b:2a:de:9c:23:04: 6b:95:0a:1d:7a:71:19:9f:1e:d2:53:a1:2f:f3:08: 5e:b6:b4:8b:1a:ac:f4:4e:2d:ca:a9:bf:c2:a6:ff: d1:b3:10:f3:41:bf:b7:e8:b0:d4:14:af:77:8c:c2: 48:a0:49:ff:5f:1c:23:f1:f0:5c:09:c1:8f:53:b1: 5b:6b:b1:5a:04:55:cf:ca:58:98:ce:5c:52:3f:01: 5c:63:26:24:92:b8:33:ec:b0:40:12:1b:42:58:32: 12:47:18:ad:09:eb:2a:27:69:b2:48:94:c5:95:79: 2d:51:d0:3d:53:71:50:ac:59:96:9f:c0:85:cf:73: 07:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3C:FD:52:E5:73:21:AE:6A:DC:AC:21:C4:62:94:E0:64:85:EA:72 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/38392e33392e3230332e302f32342d3234203d3e203333383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.39.203.0/24 Signature Algorithm: sha256WithRSAEncryption eb:37:18:42:83:9b:e5:90:e6:c2:8d:b3:e8:20:75:cc:b0:0f: 53:ac:fe:ea:3b:a3:8d:4a:6d:4c:1a:3b:1e:c7:10:7d:bb:d7: fe:f4:45:52:35:42:49:28:eb:c5:3c:0d:69:0e:1b:a0:48:47: 90:ec:b4:ae:88:39:99:e3:aa:df:7c:d4:3a:00:ba:6c:2f:b6: 3c:7e:96:c2:64:80:a3:96:a1:a8:45:18:3a:05:5d:ed:ff:37: 7d:9a:f9:fd:49:7d:c0:a6:67:6d:f4:48:01:b8:d9:0b:44:6d: 9c:f9:e4:8e:22:48:71:7f:ac:db:9a:f9:03:45:d4:90:0d:67: e7:70:b6:9c:f8:22:2f:7d:7e:10:82:c0:89:5f:e4:17:a7:f2: b3:17:6a:56:c5:dc:f0:57:5e:5c:bd:75:64:e4:28:cc:4f:b4: ca:82:30:05:78:2a:a1:ec:47:4d:51:24:5d:b7:a9:7d:23:82: 13:76:37:41:14:45:d9:de:9b:dd:58:34:e2:ce:18:cc:1c:4a: d4:da:84:2f:c4:04:38:d6:8a:5c:a1:ec:bc:ba:5a:34:1b:c9: a2:2e:e7:7d:4e:07:91:82:75:66:d5:9c:da:20:3d:c1:c4:f6: c6:82:27:b2:f2:d1:a7:e6:85:a2:b8:9f:ca:14:b4:00:5c:83: c2:1e:f6:bf -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUVSmYlWGd7HYoZd/kNpiFUpuIQ5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTFaFw0yNzAxMjcxMzAwNTFaMDMxMTAvBgNV BAMTKDg4M0NGRDUyRTU3MzIxQUU2QURDQUMyMUM0NjI5NEUwNjQ4NUVBNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+mz2cJK7DrEWB8HWjX6DH6YUt tAH2gbfOnmks94U0HZiEL/gKVHyhEpU7fCr071EGuABGMYhzrBsncXZLsfkk8wEQ K+gFuvpFqSstjysr9Y5Iipb3IQ0GS5NMAojgvOIBhC1FJcWr8Z4ncYS451LP8Zf5 67lQwMr+XivNX3ybF5sq3pwjBGuVCh16cRmfHtJToS/zCF62tIsarPROLcqpv8Km /9GzEPNBv7fosNQUr3eMwkigSf9fHCPx8FwJwY9TsVtrsVoEVc/KWJjOXFI/AVxj JiSSuDPssEASG0JYMhJHGK0J6yonabJIlMWVeS1R0D1TcVCsWZafwIXPcwfrAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUiDz9UuVzIa5q3KwhxGKU4GSF6nIwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzgzOTJlMzMzOTJlMzIzMDMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzMzM4MzIzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFkn yzANBgkqhkiG9w0BAQsFAAOCAQEA6zcYQoOb5ZDmwo2z6CB1zLAPU6z+6jujjUpt TBo7HscQfbvX/vRFUjVCSSjrxTwNaQ4boEhHkOy0rog5meOq33zUOgC6bC+2PH6W wmSAo5ahqEUYOgVd7f83fZr5/Ul9wKZnbfRIAbjZC0RtnPnkjiJIcX+s25r5A0XU kA1n53C2nPgiL31+EILAiV/kF6fysxdqVsXc8FdeXL11ZOQozE+0yoIwBXgqoexH TVEkXbepfSOCE3Y3QRRF2d6b3Vg04s4YzBxK1NqEL8QEONaKXKHsvLpaNBvJoi7n fU4HkYJ1ZtWc2iA9wcT2xoInsvLRp+aForifyhS0AFyDwh72vw== -----END CERTIFICATE-----Generated at Mon Feb 9 23:47:29 2026 by rpki-client