This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132322e302f32342d3234203d3e20323033303736.roa File: 3138352e3136392e3132322e302f32342d3234203d3e20323033303736.roa (raw, json) Hash identifier: 0jqjsp4C4hfIP9hDOVzhNE9DViOjtTLwlxxewiSiW1A= Subject key identifier: 79:F3:53:80:80:1B:AE:89:EF:A7:37:2F:F1:DC:6D:39:E3:23:4E:F6 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 794E23B83A6DF3FEAAE997A98A1A244EE2B66200 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132322e302f32342d3234203d3e20323033303736.roa Signing time: Tue 03 Feb 2026 05:51:34 +0000 ROA not before: Tue 03 Feb 2026 05:46:34 +0000 ROA not after: Tue 02 Feb 2027 05:51:34 +0000 asID: 203076 IP address blocks: 185.169.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:4e:23:b8:3a:6d:f3:fe:aa:e9:97:a9:8a:1a:24:4e:e2:b6:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Feb 3 05:46:34 2026 GMT Not After : Feb 2 05:51:34 2027 GMT Subject: CN=79F35380801BAE89EFA7372FF1DC6D39E3234EF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e2:5d:ba:b5:65:a3:d8:09:6c:a3:9f:c3:71: 54:08:dd:c4:24:50:66:7e:57:31:1b:6c:b3:32:74: 32:bc:45:af:2a:b0:25:be:f7:e3:dd:d7:14:88:29: a3:d5:dc:2a:b8:3e:6f:5a:3e:ce:44:88:3a:bc:cb: 88:c9:65:dc:ce:69:b7:59:16:e1:78:a0:e8:e8:fe: 7f:72:05:54:59:4f:8d:92:7b:3a:78:07:75:5b:14: 58:10:af:c4:fa:89:e0:84:ad:e0:a0:42:e6:da:66: 3c:ab:7f:c4:0a:ab:78:6b:9e:bb:90:d0:20:46:78: d2:0c:7b:6f:0a:c9:4f:09:fa:87:8f:8a:f4:93:0b: 89:f5:3d:65:a0:c9:49:fb:c3:b2:3e:28:41:46:ee: 4a:63:6a:1a:de:9c:81:41:7b:70:0e:eb:5d:0a:7f: 92:a3:56:8c:f8:34:47:4f:e8:97:11:2f:b6:47:a4: 59:a0:f9:10:85:06:9a:90:ad:c3:83:09:35:00:59: 04:5d:54:24:cf:ac:21:5a:a0:b6:1a:4b:8f:60:bf: 5e:37:0c:0f:62:72:25:35:9e:47:88:56:b1:57:1a: 5f:60:18:58:90:df:58:2d:11:33:86:7c:ec:8b:32: 09:3d:c4:d8:1e:8b:c1:24:b7:a0:e8:d0:8e:a7:61: e3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F3:53:80:80:1B:AE:89:EF:A7:37:2F:F1:DC:6D:39:E3:23:4E:F6 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132322e302f32342d3234203d3e20323033303736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.122.0/24 Signature Algorithm: sha256WithRSAEncryption 50:da:03:45:e9:d3:d5:1d:31:b6:5b:0a:61:80:13:cf:a8:52: 6e:f6:8c:34:fe:a0:16:19:b3:de:6b:cc:39:25:88:ff:30:51: 95:0d:91:f8:00:65:5e:6d:b2:20:2c:87:42:a8:54:d4:f1:34: 01:9e:86:5c:4c:15:f1:eb:00:9e:26:38:0f:2c:bd:20:87:fb: d8:27:16:ae:21:1b:17:5e:33:b9:9d:26:8e:31:8d:cb:87:ec: dd:67:dd:b5:5a:b9:aa:62:3d:19:d2:2e:29:4e:9a:c1:1e:38: 86:1d:a5:cc:75:61:92:0a:68:c5:cc:61:6a:e0:bb:21:c7:14: 4d:90:95:3b:0e:da:0e:a9:1e:ae:ce:52:0e:d3:08:f9:7c:74: ab:50:1b:d2:06:08:af:87:d7:34:2f:da:76:75:44:c8:c5:8e: ad:4a:b1:25:cc:3d:4d:38:ff:bd:28:54:04:5c:e4:4b:22:fc: eb:fa:a9:0d:1f:93:f5:2a:ea:ae:a7:9a:a6:e7:7a:38:f7:94: 41:bc:55:d4:06:ec:93:d9:a3:d7:2d:be:7d:12:2a:94:4e:a0: 7b:ef:d5:0c:54:66:a7:5e:a1:9d:0d:9c:db:e5:27:20:33:ca: 42:f4:71:47:10:c9:a9:c1:a8:6a:96:0c:05:4a:2a:ec:7e:0b: bd:fe:f1:3b -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUeU4juDpt8/6q6ZepihokTuK2YgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAyMDMwNTQ2MzRaFw0yNzAyMDIwNTUxMzRaMDMxMTAvBgNV BAMTKDc5RjM1MzgwODAxQkFFODlFRkE3MzcyRkYxREM2RDM5RTMyMzRFRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI4l26tWWj2Also5/DcVQI3cQk UGZ+VzEbbLMydDK8Ra8qsCW+9+Pd1xSIKaPV3Cq4Pm9aPs5EiDq8y4jJZdzOabdZ FuF4oOjo/n9yBVRZT42Sezp4B3VbFFgQr8T6ieCEreCgQubaZjyrf8QKq3hrnruQ 0CBGeNIMe28KyU8J+oePivSTC4n1PWWgyUn7w7I+KEFG7kpjahrenIFBe3AO610K f5KjVoz4NEdP6JcRL7ZHpFmg+RCFBpqQrcODCTUAWQRdVCTPrCFaoLYaS49gv143 DA9iciU1nkeIVrFXGl9gGFiQ31gtETOGfOyLMgk9xNgei8Ekt6Do0I6nYeMxAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUefNTgIAbronvpzcv8dxtOeMjTvYwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzEzODM1MmUzMTM2MzkyZTMx MzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMzMwMzczNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALmpejANBgkqhkiG9w0BAQsFAAOCAQEAUNoDRenT1R0xtlsKYYATz6hSbvaM NP6gFhmz3mvMOSWI/zBRlQ2R+ABlXm2yICyHQqhU1PE0AZ6GXEwV8esAniY4Dyy9 IIf72CcWriEbF14zuZ0mjjGNy4fs3WfdtVq5qmI9GdIuKU6awR44hh2lzHVhkgpo xcxhauC7IccUTZCVOw7aDqkers5SDtMI+Xx0q1Ab0gYIr4fXNC/adnVEyMWOrUqx Jcw9TTj/vShUBFzkSyL86/qpDR+T9Srqrqeapud6OPeUQbxV1Absk9mj1y2+fRIq lE6ge+/VDFRmp16hnQ2c2+UnIDPKQvRxRxDJqcGoapYMBUoq7H4Lvf7xOw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:04:36 2026 by rpki-client