This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3134362e31392e33382e302f32342d3234203d3e203136323736.roa File: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (raw, json) Hash identifier: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao= Subject key identifier: 48:19:52:70:3E:B0:5C:8F:94:47:5C:3E:6F:D7:35:9F:65:46:0F:F1 Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Certificate serial: 2BDD36D79F8649B5A6EA92C0E0A6FE40D2E43974 Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3134362e31392e33382e302f32342d3234203d3e203136323736.roa Signing time: Sun 11 Jan 2026 15:03:30 +0000 ROA not before: Sun 11 Jan 2026 14:58:30 +0000 ROA not after: Sun 10 Jan 2027 15:03:30 +0000 asID: 16276 IP address blocks: 146.19.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:dd:36:d7:9f:86:49:b5:a6:ea:92:c0:e0:a6:fe:40:d2:e4:39:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Validity Not Before: Jan 11 14:58:30 2026 GMT Not After : Jan 10 15:03:30 2027 GMT Subject: CN=481952703EB05C8F94475C3E6FD7359F65460FF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ab:c8:8a:36:55:53:79:fc:62:86:3c:da:3c: a2:11:09:66:9c:24:43:f7:00:11:ef:e3:49:98:de: 45:ec:ed:23:39:09:ee:01:62:73:19:2c:50:c8:ff: 02:80:f1:96:9f:af:40:f0:2d:23:81:b5:ea:93:28: c0:88:1a:7a:46:c0:ec:b0:d0:a2:28:3e:dc:77:22: d0:b9:96:2c:ff:70:72:19:cf:67:67:fc:00:d0:4c: 46:51:9b:ac:7d:4e:e2:7b:de:0c:b2:84:09:4e:11: 5f:45:8e:b0:6f:27:5f:a2:63:ff:2e:78:a7:8c:fb: dd:62:c4:52:73:8c:ad:f2:b6:50:12:f3:91:16:3a: e8:1a:2c:b1:c0:56:cc:c8:ce:dd:a6:7e:ee:8c:d3: 96:e4:b8:6f:86:c2:a1:e6:74:86:ca:1f:38:88:db: f0:ff:44:f4:79:5f:00:15:01:35:cb:86:c7:fd:41: 4b:f8:fe:fb:7e:42:e7:55:64:48:08:b7:0a:3b:01: 81:f9:40:7c:7f:a1:82:1c:12:88:29:c0:92:09:0b: 48:84:28:55:9c:5b:2a:f0:40:66:7b:e0:98:a8:79: 1b:8b:58:1c:67:53:5a:1a:25:1e:8b:1b:bc:23:0c: 08:c2:d1:c0:ca:bd:10:f0:1c:e1:c6:f0:53:73:63: 5b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:19:52:70:3E:B0:5C:8F:94:47:5C:3E:6F:D7:35:9F:65:46:0F:F1 X509v3 Authority Key Identifier: keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3134362e31392e33382e302f32342d3234203d3e203136323736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.38.0/24 Signature Algorithm: sha256WithRSAEncryption 69:ec:c0:45:89:9e:50:25:f5:65:5c:96:c9:ce:9a:1d:a1:13: c5:c5:d9:fa:08:0d:90:a2:a7:f3:7f:cb:8f:c7:a7:d1:0d:0b: ae:2a:6b:ca:74:1d:5b:11:5e:35:ab:19:3f:0a:2a:10:3d:47: 85:b7:52:88:7b:c3:c4:8d:0c:99:3b:48:70:6c:76:9b:77:f0: aa:a7:9d:d6:d9:db:f2:33:c0:37:a9:27:27:c7:05:86:27:34: b9:49:c7:00:25:97:7d:c1:35:b3:c8:da:d1:50:62:fb:d7:42: 17:26:6c:93:23:15:9d:fe:75:b8:c5:95:1f:ea:e3:59:44:ff: 01:7f:0f:a2:74:a0:36:44:c0:14:d3:1b:8f:7e:22:a4:f3:36: 14:fd:d9:e2:b2:1d:72:04:f6:02:69:1f:05:dd:59:e8:68:a1: 55:ce:86:2f:2c:f2:83:53:f0:ef:0e:9e:48:f6:bf:a7:ed:8d: 45:ff:84:07:86:53:e2:60:74:68:a7:8c:08:3c:a3:72:c5:ad: e7:40:35:d2:01:15:b7:b8:b6:cc:8a:ad:e7:b0:9d:21:8b:4c: 1c:04:00:97:ff:c2:fb:08:94:c3:36:9f:75:0b:77:9f:90:fb: 9b:c3:55:29:f6:0e:c1:a6:0b:01:8b:b9:c8:18:bf:d1:32:0a: 92:f7:2e:21 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUK90215+GSbWm6pLA4Kb+QNLkOXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz NTRmNDVjNjAeFw0yNjAxMTExNDU4MzBaFw0yNzAxMTAxNTAzMzBaMDMxMTAvBgNV BAMTKDQ4MTk1MjcwM0VCMDVDOEY5NDQ3NUMzRTZGRDczNTlGNjU0NjBGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMq8iKNlVTefxihjzaPKIRCWac JEP3ABHv40mY3kXs7SM5Ce4BYnMZLFDI/wKA8Zafr0DwLSOBteqTKMCIGnpGwOyw 0KIoPtx3ItC5liz/cHIZz2dn/ADQTEZRm6x9TuJ73gyyhAlOEV9FjrBvJ1+iY/8u eKeM+91ixFJzjK3ytlAS85EWOugaLLHAVszIzt2mfu6M05bkuG+GwqHmdIbKHziI 2/D/RPR5XwAVATXLhsf9QUv4/vt+QudVZEgItwo7AYH5QHx/oYIcEogpwJIJC0iE KFWcWyrwQGZ74JioeRuLWBxnU1oaJR6LG7wjDAjC0cDKvRDwHOHG8FNzY1vtAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUSBlScD6wXI+UR1w+b9c1n2VGD/EwHwYDVR0j BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW UFJjWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzEzNDM2MmUzMTM5MmUzMzM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNjMyMzczNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJIT JjANBgkqhkiG9w0BAQsFAAOCAQEAaezARYmeUCX1ZVyWyc6aHaETxcXZ+ggNkKKn 83/Lj8en0Q0LriprynQdWxFeNasZPwoqED1HhbdSiHvDxI0MmTtIcGx2m3fwqqed 1tnb8jPAN6knJ8cFhic0uUnHACWXfcE1s8ja0VBi+9dCFyZskyMVnf51uMWVH+rj WUT/AX8PonSgNkTAFNMbj34ipPM2FP3Z4rIdcgT2AmkfBd1Z6GihVc6GLyzyg1Pw 7w6eSPa/p+2NRf+EB4ZT4mB0aKeMCDyjcsWt50A10gEVt7i2zIqt57CdIYtMHAQA l//C+wiUwzafdQt3n5D7m8NVKfYOwaYLAYu5yBi/0TIKkvcuIQ== -----END CERTIFICATE-----Generated at Mon Jan 12 01:57:47 2026 by rpki-client