This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/3139332e32342e302e302f32342d3234203d3e203530333835.roa File: 3139332e32342e302e302f32342d3234203d3e203530333835.roa (raw, json) Hash identifier: ZF+yUQjQ8mafUSh2s0Gf6Vv2FDEQSv7tGMKU59lfZ0Y= Subject key identifier: 80:F3:92:A5:F1:5C:CA:27:74:23:66:0D:EC:D0:58:32:F0:A0:70:58 Certificate issuer: /CN=1f84a2481d280de0a103598276db0c954193c755 Certificate serial: 4C558D17309322591B0EA370942AB8BBD155BA1C Authority key identifier: 1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/3139332e32342e302e302f32342d3234203d3e203530333835.roa Signing time: Thu 29 Jan 2026 07:31:41 +0000 ROA not before: Thu 29 Jan 2026 07:26:41 +0000 ROA not after: Thu 28 Jan 2027 07:31:41 +0000 asID: 50385 IP address blocks: 193.24.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 08:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:55:8d:17:30:93:22:59:1b:0e:a3:70:94:2a:b8:bb:d1:55:ba:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f84a2481d280de0a103598276db0c954193c755 Validity Not Before: Jan 29 07:26:41 2026 GMT Not After : Jan 28 07:31:41 2027 GMT Subject: CN=80F392A5F15CCA277423660DECD05832F0A07058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:ff:18:f2:55:49:a5:a5:93:a2:80:08:5e: a7:32:19:86:f4:ab:74:21:f8:fc:a8:31:5e:70:27: f1:2a:93:cb:d4:ad:d0:78:72:dc:19:19:3f:b5:b3: 4a:7b:8b:31:b6:65:16:ea:ef:28:d4:b7:d7:59:f4: 6d:28:97:3c:2e:ab:cc:75:87:8c:7a:a1:2e:06:ef: 0c:8d:ca:69:0c:6a:9b:32:a2:4b:89:41:ef:8a:ac: 29:5c:f5:85:e3:4a:bd:13:c1:61:43:29:05:b4:f6: 4d:df:82:e0:2b:ba:28:97:0b:90:b7:15:88:71:a7: ec:ba:50:64:13:0a:f0:5f:00:c8:f7:b8:6b:fa:51: 63:9e:59:34:da:45:4d:3e:0e:80:13:1a:04:64:f2: 8f:a6:e7:e9:f9:a5:ed:55:da:9f:68:20:9c:a4:1a: 26:14:43:35:72:1a:55:45:82:85:d0:a5:b1:95:47: d6:bb:05:44:bf:77:c5:7f:aa:12:40:1d:a8:79:b6: 5b:7f:21:0c:9e:ca:02:f5:3c:ca:00:e8:41:47:67: 4f:62:10:3f:d1:08:18:bb:e5:55:9a:f8:db:a1:b0: a8:95:06:93:ec:16:65:67:77:22:a9:b6:14:dd:9d: a4:5f:af:32:06:50:58:de:42:da:cd:da:a8:ff:3f: 97:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F3:92:A5:F1:5C:CA:27:74:23:66:0D:EC:D0:58:32:F0:A0:70:58 X509v3 Authority Key Identifier: keyid:1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/3139332e32342e302e302f32342d3234203d3e203530333835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.0.0/24 Signature Algorithm: sha256WithRSAEncryption 57:12:8e:c8:9f:44:7a:d7:05:94:0d:f6:a3:2a:e5:ea:55:78: f6:66:ad:40:74:f5:0f:1f:1b:a2:52:df:74:63:92:3d:69:ad: fb:69:39:a2:79:41:67:af:04:76:60:c2:13:36:da:71:55:52: 57:0b:43:d0:81:d1:d5:17:9c:eb:52:a1:bf:80:aa:9f:13:be: 6a:56:f5:d4:9b:97:50:ba:e8:8f:6f:67:c0:ca:a4:20:66:a6: 74:6f:09:68:44:40:77:f5:c0:c8:6c:c6:0f:03:2d:f6:45:c7: d7:e8:40:12:d7:df:b8:93:c4:9b:b0:da:f6:e2:31:8e:f5:40: 29:7a:d7:be:85:4f:b6:95:cb:c3:22:27:dc:d1:ef:8b:dd:21: b7:be:58:07:63:fc:70:ce:d5:be:de:95:a3:82:ef:0f:b2:ed: e9:cf:b6:71:f0:25:62:1c:3c:9d:8d:8d:01:f1:1a:98:94:a8: d4:f4:d8:8b:bd:6a:4a:4b:ca:18:e1:b2:f2:48:f3:dd:af:27: fb:3d:42:e7:ef:db:03:0b:af:fd:1d:f3:30:d7:e8:47:22:25: 29:aa:98:9d:94:9f:d5:9a:b6:56:a5:95:a1:fa:73:de:dc:ca: 47:e6:e0:73:4e:34:ac:88:87:75:96:b0:29:b5:1f:5c:9e:f8: bc:5e:ff:e5 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUTFWNFzCTIlkbDqNwlCq4u9FVuhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMWY4NGEyNDgxZDI4MGRlMGExMDM1OTgyNzZkYjBjOTU0 MTkzYzc1NTAeFw0yNjAxMjkwNzI2NDFaFw0yNzAxMjgwNzMxNDFaMDMxMTAvBgNV BAMTKDgwRjM5MkE1RjE1Q0NBMjc3NDIzNjYwREVDRDA1ODMyRjBBMDcwNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBmf8Y8lVJpaWTooAIXqcyGYb0 q3Qh+PyoMV5wJ/Eqk8vUrdB4ctwZGT+1s0p7izG2ZRbq7yjUt9dZ9G0olzwuq8x1 h4x6oS4G7wyNymkMapsyokuJQe+KrClc9YXjSr0TwWFDKQW09k3fguAruiiXC5C3 FYhxp+y6UGQTCvBfAMj3uGv6UWOeWTTaRU0+DoATGgRk8o+m5+n5pe1V2p9oIJyk GiYUQzVyGlVFgoXQpbGVR9a7BUS/d8V/qhJAHah5tlt/IQyeygL1PMoA6EFHZ09i ED/RCBi75VWa+NuhsKiVBpPsFmVndyKpthTdnaRfrzIGUFjeQtrN2qj/P5chAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUgPOSpfFcyid0I2YN7NBYMvCgcFgwHwYDVR0j BBgwFoAUH4SiSB0oDeChA1mCdtsMlUGTx1UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDVlNjQ4YzMtMTQ4MS00NzhmLTgzZTItYjI1MTI3ZmE5 NWNkLzAvMUY4NEEyNDgxRDI4MERFMEExMDM1OTgyNzZEQjBDOTU0MTkzQzc1NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0g0U2lTQjBvRGVDaEExbUNkdHNNbFVH VHgxVS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDVlNjQ4YzMt MTQ4MS00NzhmLTgzZTItYjI1MTI3ZmE5NWNkLzAvMzEzOTMzMmUzMjM0MmUzMDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzAzMzM4MzUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBGAAw DQYJKoZIhvcNAQELBQADggEBAFcSjsifRHrXBZQN9qMq5epVePZmrUB09Q8fG6JS 33Rjkj1prftpOaJ5QWevBHZgwhM22nFVUlcLQ9CB0dUXnOtSob+Aqp8TvmpW9dSb l1C66I9vZ8DKpCBmpnRvCWhEQHf1wMhsxg8DLfZFx9foQBLX37iTxJuw2vbiMY71 QCl6176FT7aVy8MiJ9zR74vdIbe+WAdj/HDO1b7elaOC7w+y7enPtnHwJWIcPJ2N jQHxGpiUqNT02Iu9akpLyhjhsvJI892vJ/s9Qufv2wMLr/0d8zDX6EciJSmqmJ2U n9WatlallaH6c97cykfm4HNONKyIh3WWsCm1H1ye+Lxe/+U= -----END CERTIFICATE-----Generated at Fri Jan 30 00:00:53 2026 by rpki-client