This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132302e302f32342d3234203d3e20383334.roa File: 3138352e3136392e3132302e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: ffqzmoBfKzKP2MfKfFpJykI8s8jPl1/dRmaukXEwrI4= Subject key identifier: 05:3E:6A:17:B0:2A:95:1A:F5:FB:76:24:8E:7F:CB:27:A1:C5:0B:10 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 1BA8988FA762430A1218A54AF4A0F1DD30BEB481 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132302e302f32342d3234203d3e20383334.roa Signing time: Thu 05 Feb 2026 07:29:59 +0000 ROA not before: Thu 05 Feb 2026 07:24:59 +0000 ROA not after: Thu 04 Feb 2027 07:29:59 +0000 asID: 834 IP address blocks: 185.169.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a8:98:8f:a7:62:43:0a:12:18:a5:4a:f4:a0:f1:dd:30:be:b4:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Feb 5 07:24:59 2026 GMT Not After : Feb 4 07:29:59 2027 GMT Subject: CN=053E6A17B02A951AF5FB76248E7FCB27A1C50B10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bf:6e:5a:09:8d:8d:1e:8a:e0:f8:7e:95:9d: d8:3b:a6:47:11:bf:e5:3b:4e:d0:18:58:7e:0f:70: f9:34:30:c2:f6:20:bc:ec:62:cb:ae:66:36:01:99: ee:52:9a:a3:33:c1:9c:fb:4a:e7:5b:89:9d:c8:24: 7c:a2:b7:41:08:09:c5:aa:ef:eb:0d:b3:01:a0:ab: 60:a6:ef:c7:8e:aa:41:08:7b:df:9a:7a:b6:60:a8: 73:d7:1a:d2:2e:f7:9e:46:b1:4c:76:27:ff:e1:c3: 91:8f:1f:69:d1:a9:11:5e:2a:09:d2:94:d6:43:ad: 4f:11:fd:a3:a4:e2:6c:78:24:84:d1:eb:83:81:b0: 7c:35:a6:b7:4a:6d:c6:07:b2:9c:62:5d:25:04:9e: d2:9e:18:95:15:96:08:7c:ae:b9:5a:cb:81:ee:67: 9d:a8:e6:f1:7c:ec:17:da:63:dc:bd:0e:6f:f9:b1: 4f:6e:17:51:c7:d8:6c:5e:b5:8b:52:8a:8b:4b:fa: 34:fb:66:bb:aa:4c:ab:67:45:17:64:0b:e4:78:44: 68:7f:90:17:74:73:85:44:a9:77:8f:9e:79:34:62: a6:c8:ba:96:47:37:38:52:19:00:24:26:70:58:43: 47:ee:ec:ad:38:8b:4b:a4:a2:15:38:64:a0:3f:b7: 02:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3E:6A:17:B0:2A:95:1A:F5:FB:76:24:8E:7F:CB:27:A1:C5:0B:10 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132302e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.120.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:39:35:99:78:1d:9b:49:68:e9:50:9c:a9:63:e0:60:a0:43: 37:07:e7:45:a5:55:b5:78:9e:72:aa:3d:4e:4d:0e:8c:13:69: 9a:d6:48:7a:b3:62:e4:22:21:8a:ea:f1:90:eb:45:33:87:db: 4d:81:cc:9e:7a:08:27:c5:04:9a:fb:5e:b2:b9:80:e5:3e:24: 73:c1:6b:dd:8d:ea:df:34:d7:bc:6b:65:fd:6b:4c:fc:0e:b9: 30:6c:ce:4c:c3:45:1e:15:f0:db:3b:aa:15:8d:9a:8e:74:f0: 74:34:d0:31:3b:73:b6:25:3b:62:ce:0d:fd:78:29:35:76:65: 08:ae:ba:c1:4f:ab:5a:37:72:0c:dd:75:a7:6b:1e:a1:2e:f6: 4b:be:bb:d2:25:4d:b9:be:8b:5c:15:91:73:ba:07:d4:38:64: 84:8c:a2:dd:56:d9:cc:ca:5c:24:36:42:91:51:1b:b8:76:0e: c4:69:74:e6:f8:54:27:20:fe:3e:bd:ef:e9:89:f7:ef:14:73: 16:b6:2a:e4:dd:40:d3:32:4a:f5:61:ad:12:02:ab:ed:b4:ff: 66:cb:1e:22:8a:3f:9f:ac:8d:c1:7e:54:21:ad:6e:e8:22:08: 57:17:3c:ed:19:75:37:1b:69:59:3a:f2:63:93:22:9f:cf:14: c1:fd:0e:0e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUG6iYj6diQwoSGKVK9KDx3TC+tIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAyMDUwNzI0NTlaFw0yNzAyMDQwNzI5NTlaMDMxMTAvBgNV BAMTKDA1M0U2QTE3QjAyQTk1MUFGNUZCNzYyNDhFN0ZDQjI3QTFDNTBCMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEv25aCY2NHorg+H6Vndg7pkcR v+U7TtAYWH4PcPk0MML2ILzsYsuuZjYBme5SmqMzwZz7SudbiZ3IJHyit0EICcWq 7+sNswGgq2Cm78eOqkEIe9+aerZgqHPXGtIu955GsUx2J//hw5GPH2nRqRFeKgnS lNZDrU8R/aOk4mx4JITR64OBsHw1prdKbcYHspxiXSUEntKeGJUVlgh8rrlay4Hu Z52o5vF87BfaY9y9Dm/5sU9uF1HH2GxetYtSiotL+jT7ZruqTKtnRRdkC+R4RGh/ kBd0c4VEqXePnnk0YqbIupZHNzhSGQAkJnBYQ0fu7K04i0ukohU4ZKA/twKzAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUBT5qF7AqlRr1+3Ykjn/LJ6HFCxAwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzEzODM1MmUzMTM2MzkyZTMx MzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmp eDANBgkqhkiG9w0BAQsFAAOCAQEAHTk1mXgdm0lo6VCcqWPgYKBDNwfnRaVVtXie cqo9Tk0OjBNpmtZIerNi5CIhiurxkOtFM4fbTYHMnnoIJ8UEmvtesrmA5T4kc8Fr 3Y3q3zTXvGtl/WtM/A65MGzOTMNFHhXw2zuqFY2ajnTwdDTQMTtztiU7Ys4N/Xgp NXZlCK66wU+rWjdyDN11p2seoS72S7670iVNub6LXBWRc7oH1DhkhIyi3VbZzMpc JDZCkVEbuHYOxGl05vhUJyD+Pr3v6Yn37xRzFrYq5N1A0zJK9WGtEgKr7bT/Zsse Ioo/n6yNwX5UIa1u6CIIVxc87Rl1NxtpWTryY5Min88Uwf0ODg== -----END CERTIFICATE-----Generated at Sat Feb 14 17:23:54 2026 by rpki-client