This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33382e302f32342d3234203d3e203235313938.roa File: 3231322e37342e33382e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: K8Znumtkhpgx8/8zWqU2xEKd95ssp8EE1Utb/XIZytM= Subject key identifier: D9:ED:FA:B5:1C:7B:7C:43:E4:FD:35:19:96:7B:49:3E:6C:65:2F:AF Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 14E87F6FA1F34E6A0C274F33114AB5FBED1016E2 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33382e302f32342d3234203d3e203235313938.roa Signing time: Wed 14 Jan 2026 13:53:49 +0000 ROA not before: Wed 14 Jan 2026 13:48:49 +0000 ROA not after: Wed 13 Jan 2027 13:53:49 +0000 asID: 25198 IP address blocks: 212.74.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 17:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e8:7f:6f:a1:f3:4e:6a:0c:27:4f:33:11:4a:b5:fb:ed:10:16:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 14 13:48:49 2026 GMT Not After : Jan 13 13:53:49 2027 GMT Subject: CN=D9EDFAB51C7B7C43E4FD3519967B493E6C652FAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b0:ea:78:5c:84:5a:e5:90:da:26:dc:11:07: 61:ee:54:14:27:30:fa:86:7f:4c:aa:2e:ac:ed:90: 53:81:a2:90:b0:ee:02:92:cb:be:bd:98:0f:eb:81: 47:5f:8a:17:bb:0a:3d:bd:22:2c:c1:01:03:0e:62: 0f:d0:a4:78:5b:6e:7a:97:d8:37:72:44:0f:bb:ad: 33:04:d7:e9:26:c4:4c:8f:5d:06:ab:00:5c:f1:23: e3:1d:b7:dd:f3:04:4e:92:fb:ae:48:5c:af:a4:71: 44:76:b4:72:5e:98:03:4c:a9:94:c4:c4:26:bf:21: fe:1f:d8:9c:cb:67:83:c1:7d:b2:93:03:0d:50:03: 44:0e:94:12:1a:d7:5a:fb:52:37:f7:30:09:df:68: 3c:45:df:2d:12:bb:78:5e:d4:7a:4a:c7:35:84:01: 14:c6:6b:e8:7d:00:4c:6e:8b:d8:6b:aa:b2:f8:c0: 14:d3:cb:50:ca:ca:33:7c:b2:07:d9:13:51:49:cc: 42:40:13:bd:4a:a3:cc:10:20:6f:6f:74:d9:53:23: 37:38:c8:44:85:57:20:5a:b3:f0:04:92:d9:a9:58: a6:7f:64:3a:eb:0e:76:e0:47:7e:27:f6:3d:3e:38: e2:79:ce:c9:c5:be:d9:a3:7a:25:8f:bd:f6:bb:fe: 22:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:ED:FA:B5:1C:7B:7C:43:E4:FD:35:19:96:7B:49:3E:6C:65:2F:AF X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33382e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.38.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:57:81:bb:71:96:ab:7a:de:c1:20:c1:e7:ab:1f:e9:1d:6f: b5:5b:3b:43:36:a9:8c:8c:af:29:48:c7:d3:10:c8:af:27:18: ea:6b:e5:04:b3:09:2b:d5:4e:0d:f1:47:25:ec:f2:b5:bb:ca: 7a:20:0e:5d:c8:b9:fa:84:59:92:1b:e8:98:7d:92:4f:9b:4f: 33:0b:30:a3:5a:2e:ad:4a:80:4d:95:4a:d1:20:b6:a3:b2:f0: cb:af:76:d6:47:a0:26:5d:c9:06:5e:ab:1d:da:f6:c7:51:21: 20:b6:f2:b1:33:89:a1:5a:73:6a:fb:7b:91:c2:59:29:6b:bf: e1:04:dc:5e:8e:dc:f8:37:60:f2:ab:a0:91:37:93:13:f0:4e: 4e:54:6f:b6:27:27:3b:0f:77:1d:4f:9a:91:1c:18:1a:30:6a: 6e:1e:07:36:43:4c:96:f1:9f:1a:b0:5d:ba:24:12:c9:a0:97: 23:d2:14:0f:f4:8a:6c:19:8c:68:29:17:73:37:34:0b:95:9a: 9a:88:43:a2:98:30:8b:a6:27:f4:5b:04:d5:cd:75:f9:a8:0d: 2a:0a:0c:cd:2e:71:48:46:6c:fc:ef:1f:06:15:25:c9:3d:2f: 9d:02:dc:67:4f:1c:a2:89:29:2d:fd:e8:12:ae:13:4d:ca:cc: bb:56:11:8c -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUFOh/b6HzTmoMJ08zEUq1++0QFuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMTQxMzQ4NDlaFw0yNzAxMTMxMzUzNDlaMDMxMTAvBgNV BAMTKEQ5RURGQUI1MUM3QjdDNDNFNEZEMzUxOTk2N0I0OTNFNkM2NTJGQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5sOp4XIRa5ZDaJtwRB2HuVBQn MPqGf0yqLqztkFOBopCw7gKSy769mA/rgUdfihe7Cj29IizBAQMOYg/QpHhbbnqX 2DdyRA+7rTME1+kmxEyPXQarAFzxI+Mdt93zBE6S+65IXK+kcUR2tHJemANMqZTE xCa/If4f2JzLZ4PBfbKTAw1QA0QOlBIa11r7Ujf3MAnfaDxF3y0Su3he1HpKxzWE ARTGa+h9AExui9hrqrL4wBTTy1DKyjN8sgfZE1FJzEJAE71Ko8wQIG9vdNlTIzc4 yESFVyBas/AEktmpWKZ/ZDrrDnbgR34n9j0+OOJ5zsnFvtmjeiWPvfa7/iLNAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU2e36tRx7fEPk/TUZlntJPmxlL68wHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzMzM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNTMxMzkzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRK JjANBgkqhkiG9w0BAQsFAAOCAQEAKleBu3GWq3rewSDB56sf6R1vtVs7QzapjIyv KUjH0xDIrycY6mvlBLMJK9VODfFHJezytbvKeiAOXci5+oRZkhvomH2ST5tPMwsw o1ourUqATZVK0SC2o7Lwy6921kegJl3JBl6rHdr2x1EhILbysTOJoVpzavt7kcJZ KWu/4QTcXo7c+Ddg8qugkTeTE/BOTlRvticnOw93HU+akRwYGjBqbh4HNkNMlvGf GrBduiQSyaCXI9IUD/SKbBmMaCkXczc0C5WamohDopgwi6Yn9FsE1c11+agNKgoM zS5xSEZs/O8fBhUlyT0vnQLcZ08cookpLf3oEq4TTcrMu1YRjA== -----END CERTIFICATE-----Generated at Sun Jan 18 06:40:56 2026 by rpki-client