This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/39312e3234362e32362e302f32342d3234203d3e20323039333336.roa File: 39312e3234362e32362e302f32342d3234203d3e20323039333336.roa (raw, json) Hash identifier: rEAGLVQ5nYAtmkH/uKeHkUcPnM4QU/FZwu/LTkZBgUo= Subject key identifier: AF:4F:68:A1:38:76:04:00:A7:31:36:72:56:FE:D1:61:F3:39:47:49 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 228D159C1805BBECF9A1CDFF2056758B6E8C8F4A Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/39312e3234362e32362e302f32342d3234203d3e20323039333336.roa Signing time: Wed 12 Nov 2025 15:03:59 +0000 ROA not before: Wed 12 Nov 2025 14:58:59 +0000 ROA not after: Wed 11 Nov 2026 15:03:59 +0000 asID: 209336 IP address blocks: 91.246.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:8d:15:9c:18:05:bb:ec:f9:a1:cd:ff:20:56:75:8b:6e:8c:8f:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 12 14:58:59 2025 GMT Not After : Nov 11 15:03:59 2026 GMT Subject: CN=AF4F68A138760400A731367256FED161F3394749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bf:c4:20:62:22:44:12:30:a3:8a:63:a2:b0: 16:9e:2c:ae:8a:d0:e2:56:63:a6:8e:9e:1e:4d:88: a7:d4:47:98:0f:31:f2:1a:c4:1d:d3:d7:da:a4:25: 07:81:28:86:d8:73:b0:7f:7b:5b:db:c9:a3:82:60: ed:8b:39:4e:9c:6d:07:67:07:a1:02:cd:20:a1:37: d6:e9:77:ba:7b:4e:4e:68:00:cb:ad:00:5e:9a:be: 5c:7f:f8:5a:69:ab:50:ad:eb:ea:39:b2:7c:ad:af: 8f:6d:f4:63:19:e1:fd:7a:de:a8:29:9d:49:73:4b: 28:62:be:e5:74:93:1e:ea:3a:4f:9b:ce:a3:e6:2a: ca:0b:26:fb:45:60:de:e4:21:ad:d5:c1:49:07:54: 2d:22:e4:60:8c:f6:78:31:23:90:64:2c:b5:e4:09: 2c:82:7c:0d:5d:a7:fc:45:22:ef:c1:31:bf:d3:7f: 35:5f:01:fb:05:e4:24:59:7f:30:d5:22:cf:7a:db: ea:0c:b0:fb:ae:c6:58:58:f5:0f:f6:ff:b3:fa:c8: a4:90:cb:c1:df:19:c9:0e:ed:be:e1:2c:00:4b:60: 04:a4:f0:a1:2f:29:59:a4:18:cf:5d:44:ff:cc:67: 75:68:7e:37:81:3b:11:26:ec:a1:b5:65:43:a5:fc: 18:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:4F:68:A1:38:76:04:00:A7:31:36:72:56:FE:D1:61:F3:39:47:49 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/39312e3234362e32362e302f32342d3234203d3e20323039333336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.246.26.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:ed:d6:b5:8d:8d:d8:df:39:0c:bd:71:8c:f1:44:f4:3f:fc: 3e:50:c7:5c:9b:d5:fc:58:97:5f:76:07:14:82:88:63:fd:5d: b7:17:59:90:b4:1e:8c:e6:c2:cc:10:e8:80:47:1c:37:50:f7: 7e:37:99:97:6d:86:75:76:57:bb:62:93:1c:57:0d:33:ec:1c: 34:0c:b7:ed:eb:2a:af:de:57:19:e4:f5:37:21:65:29:72:f2: 2b:5d:d5:c1:4c:d0:bb:17:08:61:a6:ab:d4:e7:d6:31:83:aa: 7d:c3:5e:56:11:5a:71:69:f1:f5:ec:21:29:df:7e:38:e2:72: fa:c9:0b:93:1c:82:1b:fc:c7:9a:03:da:d2:ad:cf:b6:6c:9c: 1f:a7:44:5c:ef:92:93:1d:87:4d:46:59:00:cc:d3:0b:ab:12: a8:30:e7:10:7d:30:ec:00:8d:54:cf:c6:3c:fa:b9:ff:f4:e1: c0:41:8f:ce:47:b7:0e:b1:02:fc:16:7c:a8:c7:2c:aa:71:eb: e2:87:d4:bd:ba:11:e0:3b:92:60:61:08:79:4b:60:9b:77:a5: 33:39:72:13:cb:80:68:ba:86:1f:90:36:47:aa:b5:0a:8a:74: 0e:9a:58:f6:ab:85:24:5b:91:6a:51:01:33:c5:ae:ee:c2:54: 6d:e3:0f:3c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIo0VnBgFu+z5oc3/IFZ1i26Mj0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTIxNDU4NTlaFw0yNjExMTExNTAzNTlaMDMxMTAvBgNV BAMTKEFGNEY2OEExMzg3NjA0MDBBNzMxMzY3MjU2RkVEMTYxRjMzOTQ3NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChv8QgYiJEEjCjimOisBaeLK6K 0OJWY6aOnh5NiKfUR5gPMfIaxB3T19qkJQeBKIbYc7B/e1vbyaOCYO2LOU6cbQdn B6ECzSChN9bpd7p7Tk5oAMutAF6avlx/+Fppq1Ct6+o5snytr49t9GMZ4f163qgp nUlzSyhivuV0kx7qOk+bzqPmKsoLJvtFYN7kIa3VwUkHVC0i5GCM9ngxI5BkLLXk CSyCfA1dp/xFIu/BMb/TfzVfAfsF5CRZfzDVIs962+oMsPuuxlhY9Q/2/7P6yKSQ y8HfGckO7b7hLABLYASk8KEvKVmkGM9dRP/MZ3VofjeBOxEm7KG1ZUOl/BjHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUr09ooTh2BACnMTZyVv7RYfM5R0kwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzkzMTJlMzIzNDM2MmUzMjM2 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM5MzMzMzM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA W/YaMA0GCSqGSIb3DQEBCwUAA4IBAQCe7da1jY3Y3zkMvXGM8UT0P/w+UMdcm9X8 WJdfdgcUgohj/V23F1mQtB6M5sLMEOiARxw3UPd+N5mXbYZ1dle7YpMcVw0z7Bw0 DLft6yqv3lcZ5PU3IWUpcvIrXdXBTNC7FwhhpqvU59Yxg6p9w15WEVpxafH17CEp 33444nL6yQuTHIIb/MeaA9rSrc+2bJwfp0Rc75KTHYdNRlkAzNMLqxKoMOcQfTDs AI1Uz8Y8+rn/9OHAQY/OR7cOsQL8Fnyoxyyqcevih9S9uhHgO5JgYQh5S2Cbd6Uz OXITy4BouoYfkDZHqrUKinQOmlj2q4UkW5FqUQEzxa7uwlRt4w88 -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:47 2025 by rpki-client