This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33382e302f32342d3234203d3e20343031383338.roa File: 39352e3231342e33382e302f32342d3234203d3e20343031383338.roa (raw, json) Hash identifier: j4mOYRoEOsaBeK55TYTEHRWCC8t1KLluCqZKKfHadpI= Subject key identifier: 37:A3:BF:BA:72:BF:4F:04:74:BC:D4:DF:B8:F3:D7:4F:E3:30:35:04 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 6158F2892206B4B9FF2DDF4E0DF779FF01A35664 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33382e302f32342d3234203d3e20343031383338.roa Signing time: Wed 28 Jan 2026 13:00:51 +0000 ROA not before: Wed 28 Jan 2026 12:55:51 +0000 ROA not after: Wed 27 Jan 2027 13:00:51 +0000 asID: 401838 IP address blocks: 95.214.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:58:f2:89:22:06:b4:b9:ff:2d:df:4e:0d:f7:79:ff:01:a3:56:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:51 2026 GMT Not After : Jan 27 13:00:51 2027 GMT Subject: CN=37A3BFBA72BF4F0474BCD4DFB8F3D74FE3303504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1a:3f:5b:c5:87:b8:ec:e1:7c:ec:c5:3e:8e: 40:a7:35:52:16:ac:97:cd:0e:23:5a:6b:f6:60:a1: c0:d9:83:15:ee:42:85:42:0a:eb:89:f3:86:bc:cc: 27:3a:f1:59:30:48:bc:b0:60:2f:91:c1:fe:11:55: e6:f7:c4:69:49:f7:e3:6d:cf:c1:89:71:4b:39:86: c1:df:4c:3e:b7:0d:cb:51:23:ba:55:7f:ff:ec:88: 6e:a3:e3:c2:ae:d1:b4:11:5b:db:2f:f1:e6:12:22: bb:22:9b:ca:0b:e1:e2:e8:0e:a7:f0:96:4a:ff:be: e8:22:e6:8f:1a:a5:85:59:b5:28:6e:73:c4:ff:ff: 93:9b:69:b7:90:21:bd:79:10:d4:cd:1e:03:f8:1b: 21:8e:67:7f:7c:b7:95:e9:a3:7a:07:d4:cb:02:79: 19:73:8c:c2:b5:6a:08:b6:b5:95:c7:b8:a7:00:ba: f9:b4:60:1a:2a:93:30:f8:3f:25:98:fe:4a:20:8b: c7:6f:84:cd:6b:bc:ac:1d:02:18:2c:9f:5a:fd:4b: 51:45:8c:32:d0:1a:95:1b:af:02:3c:08:30:a0:20: 90:f7:02:9c:3a:93:c6:e9:28:7f:c0:8a:49:a5:e2: 9a:c1:81:d5:b9:84:1b:58:42:30:5d:af:17:e2:25: 83:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A3:BF:BA:72:BF:4F:04:74:BC:D4:DF:B8:F3:D7:4F:E3:30:35:04 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33382e302f32342d3234203d3e20343031383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.38.0/24 Signature Algorithm: sha256WithRSAEncryption ae:93:f1:72:7c:c3:ec:ad:fd:04:9f:6a:47:39:ee:56:29:25: 7d:7e:94:af:60:ee:a2:9c:e2:1d:1e:6a:d2:dc:30:14:28:7e: c1:a1:e3:86:8e:d8:9a:12:42:5a:9b:8f:65:71:9d:55:29:d3: 61:fa:25:ca:ca:c2:38:97:7d:3e:50:a3:f5:24:5e:a9:ce:90: 28:30:4d:66:bc:79:8b:4c:75:cd:55:b8:a5:95:d1:50:ca:7f: 64:f1:0a:25:ca:0e:82:4d:3b:2a:d2:58:36:2f:17:a8:f0:fa: eb:44:aa:3c:b0:a9:0d:4d:17:a8:5a:31:49:1b:d8:b8:cb:71: 2d:07:61:07:09:e2:05:00:6f:01:c7:ae:2e:34:fd:55:d9:cf: c8:3c:fb:f8:c3:a5:4d:f0:ef:08:b0:9f:b6:71:57:ce:c3:ab: 2a:20:b1:96:bd:c6:fb:d5:4b:2a:6c:1f:6a:9a:04:d8:43:f7: 13:54:6f:03:b4:63:93:e1:7a:75:92:d5:0e:11:b1:b3:38:46: c7:ef:b8:36:0e:ac:9b:3e:41:7b:eb:50:99:7e:d1:d3:8e:6c: 45:60:bb:a8:d0:4b:e9:10:3a:b1:33:58:1f:fa:15:11:53:ab: 58:52:ed:67:92:fc:ef:a9:b0:d3:22:85:56:0c:e9:7d:f3:2f: ed:20:e1:35 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUYVjyiSIGtLn/Ld9ODfd5/wGjVmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTFaFw0yNzAxMjcxMzAwNTFaMDMxMTAvBgNV BAMTKDM3QTNCRkJBNzJCRjRGMDQ3NEJDRDRERkI4RjNENzRGRTMzMDM1MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClGj9bxYe47OF87MU+jkCnNVIW rJfNDiNaa/ZgocDZgxXuQoVCCuuJ84a8zCc68VkwSLywYC+Rwf4RVeb3xGlJ9+Nt z8GJcUs5hsHfTD63DctRI7pVf//siG6j48Ku0bQRW9sv8eYSIrsim8oL4eLoDqfw lkr/vugi5o8apYVZtShuc8T//5ObabeQIb15ENTNHgP4GyGOZ398t5Xpo3oH1MsC eRlzjMK1agi2tZXHuKcAuvm0YBoqkzD4PyWY/kogi8dvhM1rvKwdAhgsn1r9S1FF jDLQGpUbrwI8CDCgIJD3Apw6k8bpKH/Aikml4prBgdW5hBtYQjBdrxfiJYNHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUN6O/unK/TwR0vNTfuPPXT+MwNQQwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzkzNTJlMzIzMTM0MmUzMzM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMxMzgzMzM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA X9YmMA0GCSqGSIb3DQEBCwUAA4IBAQCuk/FyfMPsrf0En2pHOe5WKSV9fpSvYO6i nOIdHmrS3DAUKH7BoeOGjtiaEkJam49lcZ1VKdNh+iXKysI4l30+UKP1JF6pzpAo ME1mvHmLTHXNVbilldFQyn9k8Qolyg6CTTsq0lg2Lxeo8PrrRKo8sKkNTReoWjFJ G9i4y3EtB2EHCeIFAG8Bx64uNP1V2c/IPPv4w6VN8O8IsJ+2cVfOw6sqILGWvcb7 1UsqbB9qmgTYQ/cTVG8DtGOT4Xp1ktUOEbGzOEbH77g2DqybPkF761CZftHTjmxF YLuo0EvpEDqxM1gf+hURU6tYUu1nkvzvqbDTIoVWDOl98y/tIOE1 -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:07 2026 by rpki-client