This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132332e302f32342d3234203d3e20323033303736.roa File: 3138352e3136392e3132332e302f32342d3234203d3e20323033303736.roa (raw, json) Hash identifier: Lbkm8+fp0rSP1QyuUSq/tvSuSL/Jz6ymTaUKQh9JT2M= Subject key identifier: BB:D3:96:E4:80:FD:63:11:FC:70:5E:AC:18:F4:71:5F:CA:8E:C0:61 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 1C4F829039C06B00351B3B72F3325EAD3C03E344 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132332e302f32342d3234203d3e20323033303736.roa Signing time: Tue 03 Feb 2026 05:51:33 +0000 ROA not before: Tue 03 Feb 2026 05:46:33 +0000 ROA not after: Tue 02 Feb 2027 05:51:33 +0000 asID: 203076 IP address blocks: 185.169.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:4f:82:90:39:c0:6b:00:35:1b:3b:72:f3:32:5e:ad:3c:03:e3:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Feb 3 05:46:33 2026 GMT Not After : Feb 2 05:51:33 2027 GMT Subject: CN=BBD396E480FD6311FC705EAC18F4715FCA8EC061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d6:c4:46:a1:33:b6:8f:34:1d:eb:78:6b:a0: 40:87:93:da:f1:e6:ab:fe:6d:c0:11:cf:0b:23:85: ec:9b:ae:ab:cf:d8:96:ef:20:75:87:f5:88:30:92: 33:96:ef:3c:5f:5a:27:4f:e8:c5:e6:9a:1c:c7:f6: cb:be:4c:ed:6f:5f:6e:23:ac:6b:b4:1f:96:e5:c6: ec:e2:ac:2e:be:ca:3f:7b:dd:c8:50:01:0a:23:5d: 72:0b:cc:e4:af:bc:02:fd:8f:b2:5a:a9:e6:e3:ca: 7c:22:c0:f3:d7:f2:ac:ea:e3:05:31:30:84:8d:82: da:4b:44:79:dd:7f:f2:b7:e4:5b:ad:53:ad:e8:b7: 9f:36:89:ac:3c:5c:03:65:03:0d:a4:9b:19:9b:53: 56:7c:c6:16:b9:7c:69:d8:1c:5c:ea:ff:6d:0f:02: 1e:92:ad:2b:ff:e3:13:85:2b:c3:38:b9:4e:9a:18: d6:0a:fc:f1:e4:0d:9f:b2:6f:14:a7:ea:93:17:38: 4d:c4:fc:97:00:e5:b9:19:a4:39:21:61:13:f6:6a: 9d:93:d3:1b:c4:c5:53:63:9c:4f:6e:8f:13:b4:b7: b9:b6:78:32:05:ee:74:91:3b:a1:a1:9c:0a:92:20: cc:7d:4f:41:6a:81:da:8c:62:06:58:64:46:29:94: 8c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D3:96:E4:80:FD:63:11:FC:70:5E:AC:18:F4:71:5F:CA:8E:C0:61 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132332e302f32342d3234203d3e20323033303736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.123.0/24 Signature Algorithm: sha256WithRSAEncryption 77:f7:da:07:59:36:1c:97:99:10:c2:1a:ce:cc:29:d7:53:6a: 96:4d:68:80:2a:b3:25:43:e1:e4:03:eb:be:57:b1:51:18:5c: 24:03:b5:22:81:5c:e5:e7:05:da:77:db:40:60:cf:15:11:78: f3:60:51:3b:c1:2a:43:d2:c2:34:78:b5:4d:6f:ac:d0:4e:2b: 1d:19:0b:19:16:ea:2a:65:7a:e9:17:75:a7:23:33:fe:8a:7c: 46:82:22:51:fb:44:f2:ed:ce:70:78:14:30:94:6f:b1:85:2b: fc:49:aa:98:35:b4:0e:29:43:9c:ba:19:22:7c:94:ce:52:e5: 3a:4d:0b:43:dc:30:72:f6:15:69:86:69:c0:e5:c0:31:46:2d: 0e:60:85:aa:e1:d3:39:19:70:e7:53:5c:1a:3c:c5:5c:77:f2: f6:98:d9:0e:53:a5:d1:56:e5:d6:b8:8f:45:c6:12:ce:62:20: fa:55:56:2d:05:ef:dd:ed:a4:7b:08:ac:ef:19:14:30:1e:8d: f7:0d:6a:0e:27:fc:07:63:aa:16:6a:37:b6:22:d9:8d:74:66: 12:c7:97:8b:8f:32:87:26:cd:ce:fd:b3:bd:0c:45:77:fb:6d: 20:9a:a9:48:a3:ae:e4:b4:a7:91:5e:d5:8c:e0:f6:03:20:e4: 87:a2:6d:56 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUHE+CkDnAawA1Gzty8zJerTwD40QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAyMDMwNTQ2MzNaFw0yNzAyMDIwNTUxMzNaMDMxMTAvBgNV BAMTKEJCRDM5NkU0ODBGRDYzMTFGQzcwNUVBQzE4RjQ3MTVGQ0E4RUMwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1sRGoTO2jzQd63hroECHk9rx 5qv+bcARzwsjheybrqvP2JbvIHWH9YgwkjOW7zxfWidP6MXmmhzH9su+TO1vX24j rGu0H5blxuzirC6+yj973chQAQojXXILzOSvvAL9j7JaqebjynwiwPPX8qzq4wUx MISNgtpLRHndf/K35FutU63ot582iaw8XANlAw2kmxmbU1Z8xha5fGnYHFzq/20P Ah6SrSv/4xOFK8M4uU6aGNYK/PHkDZ+ybxSn6pMXOE3E/JcA5bkZpDkhYRP2ap2T 0xvExVNjnE9ujxO0t7m2eDIF7nSRO6GhnAqSIMx9T0FqgdqMYgZYZEYplIwhAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUu9OW5ID9YxH8cF6sGPRxX8qOwGEwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzEzODM1MmUzMTM2MzkyZTMx MzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMzMwMzczNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALmpezANBgkqhkiG9w0BAQsFAAOCAQEAd/faB1k2HJeZEMIazswp11Nqlk1o gCqzJUPh5APrvlexURhcJAO1IoFc5ecF2nfbQGDPFRF482BRO8EqQ9LCNHi1TW+s 0E4rHRkLGRbqKmV66Rd1pyMz/op8RoIiUftE8u3OcHgUMJRvsYUr/EmqmDW0DilD nLoZInyUzlLlOk0LQ9wwcvYVaYZpwOXAMUYtDmCFquHTORlw51NcGjzFXHfy9pjZ DlOl0Vbl1riPRcYSzmIg+lVWLQXv3e2kewis7xkUMB6N9w1qDif8B2OqFmo3tiLZ jXRmEseXi48yhybNzv2zvQxFd/ttIJqpSKOu5LSnkV7VjOD2AyDkh6JtVg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:04:36 2026 by rpki-client