This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137332e302f32342d3234203d3e20383334.roa File: 39352e3231342e3137332e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: Jg1Q0RqkgI1Bru+o5L0tV+On7fhjEQhtHFzUtySiiHA= Subject key identifier: 91:F1:C6:7C:78:5E:1C:4E:23:92:2F:6C:6C:54:62:64:7E:75:C9:78 Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94 Certificate serial: 3E6B0F9B650341FF9912270FA829F8EFDE2DCB93 Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137332e302f32342d3234203d3e20383334.roa Signing time: Fri 30 Jan 2026 09:54:33 +0000 ROA not before: Fri 30 Jan 2026 09:49:33 +0000 ROA not after: Fri 29 Jan 2027 09:54:33 +0000 asID: 834 IP address blocks: 95.214.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 03:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:6b:0f:9b:65:03:41:ff:99:12:27:0f:a8:29:f8:ef:de:2d:cb:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94 Validity Not Before: Jan 30 09:49:33 2026 GMT Not After : Jan 29 09:54:33 2027 GMT Subject: CN=91F1C67C785E1C4E23922F6C6C5462647E75C978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:be:a4:e2:87:1c:01:c1:8f:d9:a7:00:01:87: 88:7e:88:28:b3:17:74:88:1d:3c:28:b5:0c:a9:72: 5b:45:b4:58:c5:4a:1d:1a:78:bc:70:ca:c0:5f:58: 65:1e:56:dc:31:6f:be:65:4f:db:2e:73:ed:f1:e2: 24:e6:be:07:4b:0d:29:52:26:4b:0c:13:f2:85:9c: ae:c9:cb:57:1b:15:05:6b:f6:0e:e3:ad:bc:0b:5e: 09:4a:e3:03:97:7d:0b:be:b8:f2:f8:40:fa:19:0b: a1:53:94:c3:9b:d9:1e:5a:9b:e6:9b:a9:80:ef:2f: d4:51:89:9d:b8:87:2f:7b:5b:a3:c0:f8:58:18:32: e2:35:d3:1d:d8:b9:28:2c:e3:8f:74:7b:3a:03:ae: 52:0f:b9:06:8c:9e:c7:a3:85:4f:4a:04:a6:73:a7: 6a:fc:45:21:56:64:74:ab:ad:df:a9:94:6e:90:df: ef:30:b8:2f:6d:2f:d6:39:c9:36:4a:2d:e8:a8:19: 1a:a1:77:c4:22:0b:5f:20:69:19:d8:4b:8c:bb:78: 79:6f:bc:99:92:2b:73:7a:10:ba:fc:aa:fc:ba:0a: 54:6e:6d:bd:69:c9:b7:e5:c6:48:73:50:76:2c:19: af:3f:2e:3a:29:8f:2c:9c:ab:a4:67:55:36:e1:01: 9a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F1:C6:7C:78:5E:1C:4E:23:92:2F:6C:6C:54:62:64:7E:75:C9:78 X509v3 Authority Key Identifier: keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137332e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.173.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:b6:59:1f:46:46:6a:e4:12:1f:f2:66:4b:75:c1:90:a7:4f: 04:a3:30:b4:87:41:ec:12:01:c8:2c:81:0e:51:24:6e:fb:15: b1:1c:9b:39:35:af:c4:16:b0:02:3a:8d:10:ac:71:38:6c:cb: bb:fe:0a:f0:ff:40:ad:a6:45:bd:fd:a9:4a:2f:86:3d:63:0c: d9:0e:a2:df:e6:fe:5e:af:49:e9:a8:cb:2a:83:4e:86:8b:ec: 76:40:92:42:b4:fb:c1:37:3a:5d:69:5a:86:5d:12:3b:8f:76: 39:9f:23:11:48:90:46:04:f5:cf:52:37:b3:40:5a:3a:da:58: 56:bf:1f:07:38:b4:cd:8b:b0:1f:23:95:4e:4b:fe:1e:89:10: 51:94:8f:39:c3:72:f6:6b:d4:07:46:56:d6:ba:e7:09:5b:c0: a2:f8:a6:15:0b:e8:bc:10:18:d3:de:d2:ca:85:e8:aa:fe:82: 0b:65:d1:ba:57:12:5c:43:3a:d2:33:b6:56:8b:97:b3:9f:db: e5:f1:20:e4:f1:52:da:a7:0c:f6:12:4c:69:23:04:6b:3e:43: 4e:cc:f5:ac:8a:a1:c5:dd:5c:b2:3e:ee:b0:5d:5e:69:99:3d: a3:59:af:bd:33:36:ee:9d:54:0c:ad:f3:65:48:36:65:4f:b7: 2b:d9:29:f0 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUPmsPm2UDQf+ZEicPqCn4794ty5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJmNDlkZTg2ODRmMTI4N2Y0ZjZjYjE4NWQ1Y2Y3ZGU4 MGM5MGI5NDAeFw0yNjAxMzAwOTQ5MzNaFw0yNzAxMjkwOTU0MzNaMDMxMTAvBgNV BAMTKDkxRjFDNjdDNzg1RTFDNEUyMzkyMkY2QzZDNTQ2MjY0N0U3NUM5NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFvqTihxwBwY/ZpwABh4h+iCiz F3SIHTwotQypcltFtFjFSh0aeLxwysBfWGUeVtwxb75lT9suc+3x4iTmvgdLDSlS JksME/KFnK7Jy1cbFQVr9g7jrbwLXglK4wOXfQu+uPL4QPoZC6FTlMOb2R5am+ab qYDvL9RRiZ24hy97W6PA+FgYMuI10x3YuSgs4490ezoDrlIPuQaMnsejhU9KBKZz p2r8RSFWZHSrrd+plG6Q3+8wuC9tL9Y5yTZKLeioGRqhd8QiC18gaRnYS4y7eHlv vJmSK3N6ELr8qvy6ClRubb1pybflxkhzUHYsGa8/Ljopjyycq6RnVTbhAZphAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUkfHGfHheHE4jki9sbFRiZH51yXgwHwYDVR0j BBgwFoAUkvSd6GhPEof09ssYXVz33oDJC5QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjA5MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMw M2QwLzAvOTJGNDlERTg2ODRGMTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2t2U2Q2R2hQRW9mMDlzc1lYVnozM29E SkM1US5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjA5MjMzODkt MmJkZS00M2UwLWIwZDUtZmMyNDRhNjMwM2QwLzAvMzkzNTJlMzIzMTM0MmUzMTM3 MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABf1q0w DQYJKoZIhvcNAQELBQADggEBAD22WR9GRmrkEh/yZkt1wZCnTwSjMLSHQewSAcgs gQ5RJG77FbEcmzk1r8QWsAI6jRCscThsy7v+CvD/QK2mRb39qUovhj1jDNkOot/m /l6vSemoyyqDToaL7HZAkkK0+8E3Ol1pWoZdEjuPdjmfIxFIkEYE9c9SN7NAWjra WFa/Hwc4tM2LsB8jlU5L/h6JEFGUjznDcvZr1AdGVta65wlbwKL4phUL6LwQGNPe 0sqF6Kr+ggtl0bpXElxDOtIztlaLl7Of2+XxIOTxUtqnDPYSTGkjBGs+Q07M9ayK ocXdXLI+7rBdXmmZPaNZr70zNu6dVAyt82VINmVPtyvZKfA= -----END CERTIFICATE-----Generated at Sat Feb 14 17:27:15 2026 by rpki-client