This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33382e302f32342d3234203d3e2037303138.roa File: 39352e3231342e33382e302f32342d3234203d3e2037303138.roa (raw, json) Hash identifier: MQ/DukzlE0rk2gOBi/eCDBeDmhaGDb5iy0F2wvkKR74= Subject key identifier: 4B:51:7B:8E:45:48:FE:4E:57:39:46:A4:B1:1D:79:F9:FB:3E:43:F4 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 5288EE07CD61E9F8A648F5AACBD1481ABFD6A63F Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33382e302f32342d3234203d3e2037303138.roa Signing time: Wed 28 Jan 2026 13:00:52 +0000 ROA not before: Wed 28 Jan 2026 12:55:52 +0000 ROA not after: Wed 27 Jan 2027 13:00:52 +0000 asID: 7018 IP address blocks: 95.214.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:88:ee:07:cd:61:e9:f8:a6:48:f5:aa:cb:d1:48:1a:bf:d6:a6:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:52 2026 GMT Not After : Jan 27 13:00:52 2027 GMT Subject: CN=4B517B8E4548FE4E573946A4B11D79F9FB3E43F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b8:0e:6d:d9:19:ce:c6:3f:3d:8b:c2:05:bc: 0f:76:84:50:f8:5c:67:81:24:aa:e1:e6:13:62:5b: 4e:3d:bf:a6:fb:bf:eb:30:8c:40:af:9c:ff:84:77: f7:d9:72:ee:43:a2:8f:2d:5b:25:92:5a:73:3f:c4: 35:6d:98:9d:12:30:5e:6e:fa:b2:a0:36:58:3d:39: 39:1d:b9:c5:f6:92:e2:bd:a7:8e:ce:9a:ea:cf:3a: b2:86:60:b9:2c:26:fc:dd:62:1f:e8:38:45:2d:0c: 2d:5a:cf:5f:6a:1a:e1:0b:82:56:40:3b:7f:86:50: 09:49:8f:c6:11:e6:32:a6:73:ef:51:4b:a9:de:ed: a5:c3:32:8e:2a:cd:3e:5e:35:26:ee:d2:b5:3a:46: 64:22:74:d3:97:d3:24:82:34:f9:a0:21:68:30:fa: 52:e8:a2:7c:ff:47:ce:87:68:02:b1:e6:ae:83:12: 88:6e:60:c6:f2:bb:ad:4b:dc:7e:b2:71:91:8b:2b: f8:8b:dc:5b:38:5d:1a:c7:75:6a:e5:7d:2e:5e:5a: 73:2d:73:d8:98:a6:c5:fd:37:5b:df:f5:d1:a5:e6: 77:f7:8f:16:86:22:f5:16:7e:67:f5:96:27:20:ca: 45:27:74:48:87:f8:fa:7b:6d:0d:49:93:ab:a6:b3: 8f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:51:7B:8E:45:48:FE:4E:57:39:46:A4:B1:1D:79:F9:FB:3E:43:F4 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33382e302f32342d3234203d3e2037303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.38.0/24 Signature Algorithm: sha256WithRSAEncryption 98:bf:73:50:b7:f4:bb:b0:a5:55:d3:d2:38:30:4a:13:ee:d6: 6e:08:2d:3f:d3:c7:92:17:df:e6:b2:b6:e7:c6:c8:43:5b:6c: fb:73:c1:6c:4b:3a:82:6a:1e:40:db:8b:c7:e8:a5:78:31:5e: 91:18:df:4b:f8:67:16:53:c8:84:41:ad:1b:70:7c:1a:ee:82: ec:74:99:16:03:4d:e9:3e:9f:e7:99:4f:07:9a:d5:96:42:6d: 76:68:4f:56:de:80:db:25:67:a8:9f:63:ab:df:e6:b2:bf:a5: 0d:f7:e7:f3:04:7c:c9:8f:c4:19:7b:ee:b0:ae:cb:08:4e:72: f7:f4:89:2a:ce:d0:1a:bd:70:98:29:bd:3b:c5:24:32:5a:c2: 97:2d:21:a3:d0:06:45:ef:ed:50:5a:ed:62:06:06:92:52:9a: 0c:6c:ec:bc:95:40:64:46:9e:f3:e5:20:87:c3:11:13:52:dd: 66:3c:14:e9:d7:06:76:65:19:f6:5a:66:6e:c3:71:30:cf:0a: 58:e2:02:3a:ae:35:af:c2:e8:fb:8c:2b:aa:39:62:ca:50:af: 41:55:54:96:bf:65:f3:24:af:f9:8c:65:2f:20:2e:37:f9:66: 01:16:ac:58:9d:e1:10:51:29:5d:b6:f5:94:ff:bc:8c:89:1e: 18:ab:2c:19 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUUojuB81h6fimSPWqy9FIGr/Wpj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTJaFw0yNzAxMjcxMzAwNTJaMDMxMTAvBgNV BAMTKDRCNTE3QjhFNDU0OEZFNEU1NzM5NDZBNEIxMUQ3OUY5RkIzRTQzRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjuA5t2RnOxj89i8IFvA92hFD4 XGeBJKrh5hNiW049v6b7v+swjECvnP+Ed/fZcu5Doo8tWyWSWnM/xDVtmJ0SMF5u +rKgNlg9OTkducX2kuK9p47OmurPOrKGYLksJvzdYh/oOEUtDC1az19qGuELglZA O3+GUAlJj8YR5jKmc+9RS6ne7aXDMo4qzT5eNSbu0rU6RmQidNOX0ySCNPmgIWgw +lLoonz/R86HaAKx5q6DEohuYMbyu61L3H6ycZGLK/iL3Fs4XRrHdWrlfS5eWnMt c9iYpsX9N1vf9dGl5nf3jxaGIvUWfmf1licgykUndEiH+Pp7bQ1Jk6ums49hAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUS1F7jkVI/k5XOUaksR15+fs+Q/QwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzkzNTJlMzIzMTM0MmUzMzM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABf1iYw DQYJKoZIhvcNAQELBQADggEBAJi/c1C39LuwpVXT0jgwShPu1m4ILT/Tx5IX3+ay tufGyENbbPtzwWxLOoJqHkDbi8fopXgxXpEY30v4ZxZTyIRBrRtwfBrugux0mRYD Tek+n+eZTwea1ZZCbXZoT1begNslZ6ifY6vf5rK/pQ335/MEfMmPxBl77rCuywhO cvf0iSrO0Bq9cJgpvTvFJDJawpctIaPQBkXv7VBa7WIGBpJSmgxs7LyVQGRGnvPl IIfDERNS3WY8FOnXBnZlGfZaZm7DcTDPCljiAjquNa/C6PuMK6o5YspQr0FVVJa/ ZfMkr/mMZS8gLjf5ZgEWrFid4RBRKV229ZT/vIyJHhirLBk= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:03 2026 by rpki-client