This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/3139332e32342e312e302f32342d3234203d3e203539343332.roa File: 3139332e32342e312e302f32342d3234203d3e203539343332.roa (raw, json) Hash identifier: 5O2cZzEMXMmWIBCkLJWzm0ZnbQ+vyLUif7fdjE9+q+o= Subject key identifier: 6A:7F:6D:0F:B2:B6:0E:B1:92:79:D1:15:39:B9:14:B3:7B:3A:C4:33 Certificate issuer: /CN=1f84a2481d280de0a103598276db0c954193c755 Certificate serial: 26998DBB1D7C8C22EEBCB16F51563A1940116FA9 Authority key identifier: 1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/3139332e32342e312e302f32342d3234203d3e203539343332.roa Signing time: Thu 29 Jan 2026 07:32:01 +0000 ROA not before: Thu 29 Jan 2026 07:27:01 +0000 ROA not after: Thu 28 Jan 2027 07:32:01 +0000 asID: 59432 IP address blocks: 193.24.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 20:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:99:8d:bb:1d:7c:8c:22:ee:bc:b1:6f:51:56:3a:19:40:11:6f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f84a2481d280de0a103598276db0c954193c755 Validity Not Before: Jan 29 07:27:01 2026 GMT Not After : Jan 28 07:32:01 2027 GMT Subject: CN=6A7F6D0FB2B60EB19279D11539B914B37B3AC433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:af:7f:a3:d0:39:26:51:c7:3d:82:7e:ae: bd:e3:52:50:41:86:20:35:d1:d8:70:41:e0:ad:98: 7f:35:0f:56:94:b3:0c:5e:e4:9c:7e:ea:02:bc:44: 9c:31:e3:47:9f:74:81:06:52:0e:f1:67:28:c6:dd: c0:1a:06:95:ab:83:d4:47:b4:37:b5:08:ec:d4:90: 08:25:f8:6e:12:03:82:f8:8d:ea:94:a5:fe:b6:61: 41:64:7b:80:32:ec:23:51:2a:5c:06:fd:dd:b5:1a: 1c:a0:cc:40:2d:b4:78:b4:ed:e7:44:9d:34:7e:39: f0:45:f2:f2:0f:e3:56:3d:a2:9d:65:37:27:19:1b: d5:2a:42:d2:54:8d:44:f1:fb:dc:89:56:19:c0:7f: fd:f9:1a:63:9c:ed:ce:27:8a:37:df:3f:3f:19:f1: 9d:cd:42:eb:52:94:a6:79:2c:d4:ab:41:48:a7:27: 20:38:27:db:4c:21:60:bb:1d:c4:c1:91:a2:19:0b: f8:5b:d1:db:98:60:61:cd:fc:90:28:23:e7:02:fe: e1:37:63:d2:50:36:a4:0d:29:ce:74:83:e3:f9:b7: f7:89:18:b2:1f:e1:c7:41:f3:06:1b:43:f4:87:60: 2d:47:a7:e8:db:24:92:dd:4c:07:d9:bc:73:65:b7: 94:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7F:6D:0F:B2:B6:0E:B1:92:79:D1:15:39:B9:14:B3:7B:3A:C4:33 X509v3 Authority Key Identifier: keyid:1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/3139332e32342e312e302f32342d3234203d3e203539343332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.1.0/24 Signature Algorithm: sha256WithRSAEncryption 50:6f:95:d4:d9:8a:47:7a:0c:33:c4:af:8b:e0:4e:f8:bc:b1: 0f:df:7f:11:8c:48:86:fd:5c:f7:ec:7c:27:d5:b0:0c:c7:63: 9a:8e:bb:f4:c6:36:67:a3:e7:56:7d:8c:e5:13:a6:dc:d7:75: 36:6f:ec:bd:97:cb:1e:50:7c:10:20:62:08:a2:00:62:05:ba: 8d:96:09:00:db:7f:e5:79:3f:02:bf:e6:ba:9c:da:6e:8d:73: 40:58:21:e5:0a:31:9b:7a:03:d5:53:59:01:6b:9d:c2:20:e6: 2d:39:47:e2:ec:cb:63:b2:f0:3f:f7:84:48:a6:97:31:62:d4: e3:82:87:9a:ef:cb:7f:75:ab:84:33:37:3d:c0:f2:9e:39:da: 22:7c:36:e5:db:46:22:7d:ef:d3:9c:e2:5f:bf:53:9f:43:97: 57:8e:6a:74:b3:11:2c:eb:8c:d2:76:08:e6:c7:38:d7:8f:ef: bd:98:2a:65:37:aa:98:7d:3e:d2:59:41:e1:61:fc:83:60:f0: 1d:d6:90:42:7f:cf:ee:39:10:94:e7:bd:02:b5:a5:ed:4c:35: 1e:be:47:75:5c:6f:cf:fe:4f:74:09:4a:38:9c:f8:c8:78:55: d7:f8:06:b9:2c:d2:5f:c3:2d:bd:ec:e3:cb:14:35:26:01:8c: 30:9e:6c:35 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUJpmNux18jCLuvLFvUVY6GUARb6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMWY4NGEyNDgxZDI4MGRlMGExMDM1OTgyNzZkYjBjOTU0 MTkzYzc1NTAeFw0yNjAxMjkwNzI3MDFaFw0yNzAxMjgwNzMyMDFaMDMxMTAvBgNV BAMTKDZBN0Y2RDBGQjJCNjBFQjE5Mjc5RDExNTM5QjkxNEIzN0IzQUM0MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3va9/o9A5JlHHPYJ+rr3jUlBB hiA10dhwQeCtmH81D1aUswxe5Jx+6gK8RJwx40efdIEGUg7xZyjG3cAaBpWrg9RH tDe1COzUkAgl+G4SA4L4jeqUpf62YUFke4Ay7CNRKlwG/d21GhygzEAttHi07edE nTR+OfBF8vIP41Y9op1lNycZG9UqQtJUjUTx+9yJVhnAf/35GmOc7c4nijffPz8Z 8Z3NQutSlKZ5LNSrQUinJyA4J9tMIWC7HcTBkaIZC/hb0duYYGHN/JAoI+cC/uE3 Y9JQNqQNKc50g+P5t/eJGLIf4cdB8wYbQ/SHYC1Hp+jbJJLdTAfZvHNlt5QxAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUan9tD7K2DrGSedEVObkUs3s6xDMwHwYDVR0j BBgwFoAUH4SiSB0oDeChA1mCdtsMlUGTx1UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDVlNjQ4YzMtMTQ4MS00NzhmLTgzZTItYjI1MTI3ZmE5 NWNkLzAvMUY4NEEyNDgxRDI4MERFMEExMDM1OTgyNzZEQjBDOTU0MTkzQzc1NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0g0U2lTQjBvRGVDaEExbUNkdHNNbFVH VHgxVS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDVlNjQ4YzMt MTQ4MS00NzhmLTgzZTItYjI1MTI3ZmE5NWNkLzAvMzEzOTMzMmUzMjM0MmUzMTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzkzNDMzMzIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBGAEw DQYJKoZIhvcNAQELBQADggEBAFBvldTZikd6DDPEr4vgTvi8sQ/ffxGMSIb9XPfs fCfVsAzHY5qOu/TGNmej51Z9jOUTptzXdTZv7L2Xyx5QfBAgYgiiAGIFuo2WCQDb f+V5PwK/5rqc2m6Nc0BYIeUKMZt6A9VTWQFrncIg5i05R+Lsy2Oy8D/3hEimlzFi 1OOCh5rvy391q4QzNz3A8p452iJ8NuXbRiJ979Oc4l+/U59Dl1eOanSzESzrjNJ2 CObHONeP772YKmU3qph9PtJZQeFh/INg8B3WkEJ/z+45EJTnvQK1pe1MNR6+R3Vc b8/+T3QJSjic+Mh4Vdf4Brks0l/DLb3s48sUNSYBjDCebDU= -----END CERTIFICATE-----Generated at Fri Jan 30 03:19:38 2026 by rpki-client