This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33392e302f32342d3234203d3e2037303138.roa File: 39352e3231342e33392e302f32342d3234203d3e2037303138.roa (raw, json) Hash identifier: MNvOEJh4DQOm/knhdb+recKn1IvYV2j51oWLcJLp+4Q= Subject key identifier: AA:BF:3D:B5:90:6F:EC:BB:3D:CE:05:75:CE:EF:22:B3:6D:7D:B8:2A Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 5D79E3B9ACAABC254EC460511CE4748A8AB84F16 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33392e302f32342d3234203d3e2037303138.roa Signing time: Wed 28 Jan 2026 13:00:51 +0000 ROA not before: Wed 28 Jan 2026 12:55:51 +0000 ROA not after: Wed 27 Jan 2027 13:00:51 +0000 asID: 7018 IP address blocks: 95.214.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:79:e3:b9:ac:aa:bc:25:4e:c4:60:51:1c:e4:74:8a:8a:b8:4f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:51 2026 GMT Not After : Jan 27 13:00:51 2027 GMT Subject: CN=AABF3DB5906FECBB3DCE0575CEEF22B36D7DB82A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:2b:ed:5e:70:39:16:e6:c6:07:5b:50:93: 66:fe:eb:48:4a:23:8b:c7:42:df:fe:17:40:aa:03: a7:da:a3:c1:32:fc:4b:5e:87:3c:e3:4e:82:29:fe: 79:92:4f:79:8f:7b:68:d7:19:57:6a:8b:5d:98:fb: 65:0e:b8:a5:f2:2f:6d:8a:f9:b9:a3:bc:4d:5b:d2: 11:57:f5:e4:bf:c1:bb:18:ba:16:fc:72:d4:32:6d: 08:c1:4e:6a:ae:44:d2:d3:dc:98:80:61:e9:ff:07: a6:29:68:03:36:10:4d:e8:f2:9d:e3:79:73:f0:e4: 7e:d0:22:8d:55:89:17:3a:48:5a:42:ba:4e:70:08: 19:f8:73:e9:c6:4a:af:a3:ee:30:27:ff:4c:15:9c: ed:db:bc:92:eb:93:66:61:66:ef:60:ec:5a:e8:30: cc:6e:d3:05:ed:f0:47:57:80:cd:2a:f4:0b:81:af: d6:f0:7e:95:9b:03:77:46:d1:ec:0d:d6:f8:00:13: bd:30:01:37:5f:2a:0c:40:84:b3:ec:92:4b:1c:62: b1:44:55:a5:dc:80:ce:24:85:82:00:5a:0c:54:de: 72:78:62:45:71:7c:8a:35:d2:50:4c:39:e2:16:2b: e6:86:fe:93:ed:91:1b:e2:52:d9:e3:e0:e8:14:01: 18:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BF:3D:B5:90:6F:EC:BB:3D:CE:05:75:CE:EF:22:B3:6D:7D:B8:2A X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33392e302f32342d3234203d3e2037303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.39.0/24 Signature Algorithm: sha256WithRSAEncryption e5:28:54:02:cc:60:55:45:b1:66:97:61:28:24:c1:2e:27:8b: c2:fb:df:f3:4d:69:2f:c9:ef:12:78:3d:7b:9b:ae:30:84:5d: a1:ea:b8:58:a9:52:79:2a:3a:fb:cf:84:3a:2e:35:2e:74:66: 34:f7:f6:29:65:b1:23:c8:f3:38:89:1a:75:75:64:a7:5c:d8: 02:2e:d5:6a:a5:3b:d8:b4:36:7f:e3:8d:ef:0d:63:b6:6b:1d: a5:ee:ef:3a:dd:81:e5:97:ea:b2:a4:f9:18:0c:2a:93:a4:aa: 84:f5:d8:c6:c9:4e:84:a3:9c:ce:80:33:a6:74:5a:b0:e1:f0: 32:75:66:2c:49:40:fa:e1:d6:64:69:59:e7:a1:71:42:f1:dc: 20:c4:f0:c6:85:1e:a8:9e:67:12:c1:d4:11:70:0c:f0:3f:50: 36:0d:d0:5e:5b:c8:3b:b9:cc:0c:71:50:08:35:d2:44:d3:73: 3e:55:be:d1:4f:81:0f:0b:7e:87:13:65:0d:82:58:98:47:61: 83:94:b4:3d:39:a2:ff:c2:0c:bf:bd:3a:25:fd:3e:56:28:cb: 17:dc:58:7d:c0:4e:3d:7a:87:b8:15:c3:56:68:66:1a:1d:53: dd:08:39:ca:57:93:1d:93:20:4b:7f:68:fd:fb:2b:5d:6b:2b: 4a:34:69:04 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUXXnjuayqvCVOxGBRHOR0ioq4TxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTFaFw0yNzAxMjcxMzAwNTFaMDMxMTAvBgNV BAMTKEFBQkYzREI1OTA2RkVDQkIzRENFMDU3NUNFRUYyMkIzNkQ3REI4MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/uSvtXnA5FubGB1tQk2b+60hK I4vHQt/+F0CqA6fao8Ey/EtehzzjToIp/nmST3mPe2jXGVdqi12Y+2UOuKXyL22K +bmjvE1b0hFX9eS/wbsYuhb8ctQybQjBTmquRNLT3JiAYen/B6YpaAM2EE3o8p3j eXPw5H7QIo1ViRc6SFpCuk5wCBn4c+nGSq+j7jAn/0wVnO3bvJLrk2ZhZu9g7Fro MMxu0wXt8EdXgM0q9AuBr9bwfpWbA3dG0ewN1vgAE70wATdfKgxAhLPskkscYrFE VaXcgM4khYIAWgxU3nJ4YkVxfIo10lBMOeIWK+aG/pPtkRviUtnj4OgUARh/AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUqr89tZBv7Ls9zgV1zu8is219uCowHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzkzNTJlMzIzMTM0MmUzMzM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABf1icw DQYJKoZIhvcNAQELBQADggEBAOUoVALMYFVFsWaXYSgkwS4ni8L73/NNaS/J7xJ4 PXubrjCEXaHquFipUnkqOvvPhDouNS50ZjT39illsSPI8ziJGnV1ZKdc2AIu1Wql O9i0Nn/jje8NY7ZrHaXu7zrdgeWX6rKk+RgMKpOkqoT12MbJToSjnM6AM6Z0WrDh 8DJ1ZixJQPrh1mRpWeehcULx3CDE8MaFHqieZxLB1BFwDPA/UDYN0F5byDu5zAxx UAg10kTTcz5VvtFPgQ8LfocTZQ2CWJhHYYOUtD05ov/CDL+9OiX9PlYoyxfcWH3A Tj16h7gVw1ZoZhodU90IOcpXkx2TIEt/aP37K11rK0o0aQQ= -----END CERTIFICATE-----Generated at Mon Feb 9 22:14:58 2026 by rpki-client