This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33392e302f32342d3234203d3e20343031383338.roa File: 39352e3231342e33392e302f32342d3234203d3e20343031383338.roa (raw, json) Hash identifier: 8mBup2iGZOCYWY9/rZ/rxcTkqnYMn6MThDA3NwWr/Bw= Subject key identifier: C7:16:44:DC:22:B4:41:2C:EF:2D:18:93:87:EC:FB:07:0E:38:CF:65 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 063724A6824670F674EF22AAF7A0D147E19119FA Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33392e302f32342d3234203d3e20343031383338.roa Signing time: Wed 28 Jan 2026 13:00:53 +0000 ROA not before: Wed 28 Jan 2026 12:55:53 +0000 ROA not after: Wed 27 Jan 2027 13:00:53 +0000 asID: 401838 IP address blocks: 95.214.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:37:24:a6:82:46:70:f6:74:ef:22:aa:f7:a0:d1:47:e1:91:19:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:53 2026 GMT Not After : Jan 27 13:00:53 2027 GMT Subject: CN=C71644DC22B4412CEF2D189387ECFB070E38CF65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:19:7d:dc:eb:b4:c7:d8:5f:a2:ce:92:09:02: 87:41:16:a6:eb:93:f7:1b:e5:66:14:0a:6e:39:85: 29:d3:9f:01:7a:18:be:46:20:7d:89:ef:40:ca:75: 9e:3f:05:d0:1c:0f:bf:63:bc:81:fa:4a:b9:2f:96: 33:67:82:72:5b:a0:57:a4:3b:3e:cf:fc:d4:8d:90: f0:ed:fd:20:69:87:c9:57:f3:51:3b:ce:19:37:40: bd:c6:1b:05:7f:be:12:a6:df:51:ea:9c:9d:42:86: 09:88:67:8f:a0:5c:2a:bb:5c:7c:cf:b8:4c:ce:32: bc:cf:89:87:2c:c1:34:d9:27:a1:09:48:5e:93:b1: 25:40:28:cd:06:ad:7b:08:dd:c1:f5:5c:f3:41:2c: e0:3b:3a:cd:4c:1f:ae:4e:03:13:66:fe:af:c6:04: 82:f3:48:e4:8a:74:c5:f0:0b:fd:c2:8c:eb:7c:7a: 9a:f6:f5:e8:35:e3:42:2f:7a:7f:ef:17:08:6a:f5: a9:5d:42:c7:13:73:a3:c2:44:39:0b:6a:87:76:ac: 26:5e:49:4b:f0:15:47:c9:85:96:23:4a:b6:78:9f: 27:d7:b6:a4:0c:ee:de:7d:b3:bb:e5:44:33:7a:38: 6e:d9:9d:22:b3:02:d3:9c:4f:da:4f:21:cc:7b:cc: a8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:16:44:DC:22:B4:41:2C:EF:2D:18:93:87:EC:FB:07:0E:38:CF:65 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33392e302f32342d3234203d3e20343031383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.39.0/24 Signature Algorithm: sha256WithRSAEncryption 33:cc:b3:04:4c:db:66:c2:84:ae:36:76:dc:a8:02:a2:19:31: e6:67:b4:3b:d2:bb:78:3b:71:47:29:32:85:21:22:94:83:9e: c6:64:8b:c0:04:4a:91:86:64:18:e0:57:20:8d:70:1d:88:8b: b1:da:7e:1d:dd:16:3e:67:86:91:31:4b:1f:1f:e1:4c:ae:3c: 81:1e:3d:81:43:28:1a:a5:13:cc:24:fd:7a:fb:c2:65:f5:4d: 03:48:7e:21:d6:f3:41:10:2a:2a:91:91:8c:a7:bc:d7:ae:92: 23:b1:89:f0:9c:d4:33:11:87:5e:7e:38:80:8a:4d:1f:54:2f: b1:22:05:79:0f:73:2c:a1:5e:21:fb:d2:fa:b0:a7:c4:1a:cc: de:13:62:13:67:af:99:60:d8:25:a1:62:8b:5d:28:fa:bf:10: cf:95:aa:99:40:d8:92:c6:4a:be:bc:79:bd:1d:a9:e3:58:60: 35:21:6e:9e:26:35:2c:9b:b2:05:a7:99:dc:a0:6b:e6:c0:1e: db:d7:e9:5c:9f:d3:de:77:69:f5:88:5a:b8:47:55:5a:66:9f: d3:10:47:c7:fa:20:54:0e:ab:aa:3e:23:6e:db:2c:22:4c:3f: 6f:0a:d3:04:41:cb:7e:8d:69:40:e0:4f:2c:d5:06:4f:3d:7d: ea:6c:9e:7a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUBjckpoJGcPZ07yKq96DRR+GRGfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTNaFw0yNzAxMjcxMzAwNTNaMDMxMTAvBgNV BAMTKEM3MTY0NERDMjJCNDQxMkNFRjJEMTg5Mzg3RUNGQjA3MEUzOENGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUGX3c67TH2F+izpIJAodBFqbr k/cb5WYUCm45hSnTnwF6GL5GIH2J70DKdZ4/BdAcD79jvIH6SrkvljNngnJboFek Oz7P/NSNkPDt/SBph8lX81E7zhk3QL3GGwV/vhKm31HqnJ1ChgmIZ4+gXCq7XHzP uEzOMrzPiYcswTTZJ6EJSF6TsSVAKM0GrXsI3cH1XPNBLOA7Os1MH65OAxNm/q/G BILzSOSKdMXwC/3CjOt8epr29eg140Iven/vFwhq9aldQscTc6PCRDkLaod2rCZe SUvwFUfJhZYjSrZ4nyfXtqQM7t59s7vlRDN6OG7ZnSKzAtOcT9pPIcx7zKg1AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUxxZE3CK0QSzvLRiTh+z7Bw44z2UwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzkzNTJlMzIzMTM0MmUzMzM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMxMzgzMzM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA X9YnMA0GCSqGSIb3DQEBCwUAA4IBAQAzzLMETNtmwoSuNnbcqAKiGTHmZ7Q70rt4 O3FHKTKFISKUg57GZIvABEqRhmQY4FcgjXAdiIux2n4d3RY+Z4aRMUsfH+FMrjyB Hj2BQygapRPMJP16+8Jl9U0DSH4h1vNBECoqkZGMp7zXrpIjsYnwnNQzEYdefjiA ik0fVC+xIgV5D3MsoV4h+9L6sKfEGszeE2ITZ6+ZYNgloWKLXSj6vxDPlaqZQNiS xkq+vHm9HanjWGA1IW6eJjUsm7IFp5ncoGvmwB7b1+lcn9Ped2n1iFq4R1VaZp/T EEfH+iBUDquqPiNu2ywiTD9vCtMEQct+jWlA4E8s1QZPPX3qbJ56 -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:56 2026 by rpki-client