This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/3139332e32342e342e302f32342d3234203d3e203539343332.roa File: 3139332e32342e342e302f32342d3234203d3e203539343332.roa (raw, json) Hash identifier: 2szFDzNMiU++d5K+UAqAdfyAdV0l7//47s1tM+CWoPQ= Subject key identifier: 49:7F:80:A8:63:E4:C6:A5:FE:30:07:85:3E:08:21:38:68:C2:36:1B Certificate issuer: /CN=1f84a2481d280de0a103598276db0c954193c755 Certificate serial: 3121722C4C751621CA1A2BAA7F5A5CC048B86D51 Authority key identifier: 1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/3139332e32342e342e302f32342d3234203d3e203539343332.roa Signing time: Thu 29 Jan 2026 07:31:52 +0000 ROA not before: Thu 29 Jan 2026 07:26:52 +0000 ROA not after: Thu 28 Jan 2027 07:31:52 +0000 asID: 59432 IP address blocks: 193.24.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 20:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:21:72:2c:4c:75:16:21:ca:1a:2b:aa:7f:5a:5c:c0:48:b8:6d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f84a2481d280de0a103598276db0c954193c755 Validity Not Before: Jan 29 07:26:52 2026 GMT Not After : Jan 28 07:31:52 2027 GMT Subject: CN=497F80A863E4C6A5FE3007853E08213868C2361B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:08:8d:71:4e:a1:3f:ff:d9:5a:85:4c:57:ec: 0e:7c:74:41:87:6b:f6:d3:1b:fd:06:64:7a:9c:ed: 7b:12:83:3c:0e:c1:4e:f5:6a:08:dd:f0:f9:4f:e4: 4e:6c:d9:a6:61:76:70:aa:cc:b1:05:94:a5:4e:d3: 3f:73:23:26:c7:7d:5f:c7:6c:21:c8:90:5d:30:e8: 0f:d5:7e:d7:2c:39:ca:da:2c:44:f3:4d:d7:c4:3c: 39:c8:dc:1a:fa:eb:5c:e3:e5:bb:57:1b:c2:63:ca: ff:f5:45:1c:75:2e:8c:6e:a1:c1:e7:97:bf:ae:64: 1c:66:5d:bb:77:f0:30:ac:0d:1e:d8:ef:26:82:31: e7:17:45:97:68:ca:ad:5a:28:42:46:89:3c:9d:3d: 81:57:ee:a5:7a:6d:cf:48:b2:24:0b:c9:24:d2:45: 66:40:6b:5b:c5:ca:2b:89:51:3c:73:49:73:0b:af: f8:ae:af:a7:7a:cd:d9:30:f5:b3:7c:51:14:db:22: 0e:80:cb:0f:2c:be:14:c7:dc:37:a6:f6:31:d0:73: a3:90:9d:47:44:77:cf:81:43:cf:83:eb:b1:8b:cd: 70:fa:5c:f2:4d:f4:f8:38:f4:8f:6e:53:c9:65:a9: d5:3e:ce:95:00:c8:0c:cf:24:f4:bd:16:b1:dd:df: 29:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7F:80:A8:63:E4:C6:A5:FE:30:07:85:3E:08:21:38:68:C2:36:1B X509v3 Authority Key Identifier: keyid:1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/3139332e32342e342e302f32342d3234203d3e203539343332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.4.0/24 Signature Algorithm: sha256WithRSAEncryption 65:ca:87:98:23:46:84:4f:4d:b8:6b:ba:2c:72:53:02:36:b9: 2e:77:64:7a:7b:9c:60:64:1f:67:d1:34:2b:5e:68:b3:65:a6: db:d9:8a:7b:98:36:70:61:b4:5f:b1:6a:23:b0:46:3b:90:53: f5:89:95:28:42:f0:66:8b:87:13:b2:4e:d8:36:5e:48:39:2f: c0:b8:86:91:1d:f6:70:55:f5:5f:01:69:c4:6a:75:57:5f:2f: 0c:bc:d0:8e:ca:0e:23:64:7f:dc:69:c5:b5:86:5f:6c:61:47: b8:d5:59:f0:7e:18:14:04:dc:e7:1b:aa:8b:e2:43:db:a6:6e: c9:a4:59:4f:35:a6:fd:f0:d4:40:6a:2e:d5:8a:ec:3f:9c:8e: 0d:4a:26:6e:61:72:88:66:55:98:55:f5:e5:5e:d2:57:e2:75: d7:bb:cc:8b:cb:a3:5d:18:fa:8f:80:06:d1:c3:e9:f8:ec:8e: a7:81:c0:5e:9f:f5:71:88:43:23:99:b5:b7:6b:9c:37:e4:7a: 70:72:97:23:97:87:84:c4:93:96:be:d5:56:40:4e:24:3e:b9: cc:ce:64:d3:ba:8c:62:4f:eb:43:5b:c7:b5:35:13:c5:0e:ff: ce:b7:28:99:27:fd:59:8a:fc:c0:0d:94:5c:ce:06:bb:32:ad: 99:e3:eb:e6 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUMSFyLEx1FiHKGiuqf1pcwEi4bVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMWY4NGEyNDgxZDI4MGRlMGExMDM1OTgyNzZkYjBjOTU0 MTkzYzc1NTAeFw0yNjAxMjkwNzI2NTJaFw0yNzAxMjgwNzMxNTJaMDMxMTAvBgNV BAMTKDQ5N0Y4MEE4NjNFNEM2QTVGRTMwMDc4NTNFMDgyMTM4NjhDMjM2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCI1xTqE//9lahUxX7A58dEGH a/bTG/0GZHqc7XsSgzwOwU71agjd8PlP5E5s2aZhdnCqzLEFlKVO0z9zIybHfV/H bCHIkF0w6A/VftcsOcraLETzTdfEPDnI3Br661zj5btXG8Jjyv/1RRx1LoxuocHn l7+uZBxmXbt38DCsDR7Y7yaCMecXRZdoyq1aKEJGiTydPYFX7qV6bc9IsiQLySTS RWZAa1vFyiuJUTxzSXMLr/iur6d6zdkw9bN8URTbIg6Ayw8svhTH3Dem9jHQc6OQ nUdEd8+BQ8+D67GLzXD6XPJN9Pg49I9uU8llqdU+zpUAyAzPJPS9FrHd3yklAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUSX+AqGPkxqX+MAeFPgghOGjCNhswHwYDVR0j BBgwFoAUH4SiSB0oDeChA1mCdtsMlUGTx1UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDVlNjQ4YzMtMTQ4MS00NzhmLTgzZTItYjI1MTI3ZmE5 NWNkLzAvMUY4NEEyNDgxRDI4MERFMEExMDM1OTgyNzZEQjBDOTU0MTkzQzc1NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0g0U2lTQjBvRGVDaEExbUNkdHNNbFVH VHgxVS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDVlNjQ4YzMt MTQ4MS00NzhmLTgzZTItYjI1MTI3ZmE5NWNkLzAvMzEzOTMzMmUzMjM0MmUzNDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzkzNDMzMzIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBGAQw DQYJKoZIhvcNAQELBQADggEBAGXKh5gjRoRPTbhruixyUwI2uS53ZHp7nGBkH2fR NCteaLNlptvZinuYNnBhtF+xaiOwRjuQU/WJlShC8GaLhxOyTtg2Xkg5L8C4hpEd 9nBV9V8BacRqdVdfLwy80I7KDiNkf9xpxbWGX2xhR7jVWfB+GBQE3OcbqoviQ9um bsmkWU81pv3w1EBqLtWK7D+cjg1KJm5hcohmVZhV9eVe0lfidde7zIvLo10Y+o+A BtHD6fjsjqeBwF6f9XGIQyOZtbdrnDfkenBylyOXh4TEk5a+1VZATiQ+uczOZNO6 jGJP60Nbx7U1E8UO/863KJkn/VmK/MANlFzOBrsyrZnj6+Y= -----END CERTIFICATE-----Generated at Fri Jan 30 03:22:15 2026 by rpki-client