This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135322e302f32342d3234203d3e203239383032.roa File: 3138382e3136342e3135322e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: Qe4ns3gvGnmElzBpEYlzzVLzaJYEnnsSaDByU3+R0EU= Subject key identifier: 9E:8B:1E:BA:72:56:16:A2:94:98:07:D1:CB:E1:D0:30:84:4B:2D:4B Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Certificate serial: 1AADA7CE7593E967660B019574510238E5622CDF Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135322e302f32342d3234203d3e203239383032.roa Signing time: Thu 29 Jan 2026 10:57:37 +0000 ROA not before: Thu 29 Jan 2026 10:52:37 +0000 ROA not after: Thu 28 Jan 2027 10:57:37 +0000 asID: 29802 IP address blocks: 188.164.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ad:a7:ce:75:93:e9:67:66:0b:01:95:74:51:02:38:e5:62:2c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Validity Not Before: Jan 29 10:52:37 2026 GMT Not After : Jan 28 10:57:37 2027 GMT Subject: CN=9E8B1EBA725616A2949807D1CBE1D030844B2D4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:30:b2:28:66:b2:2d:a5:b4:54:e2:1d:c3:6b: ef:d1:e8:09:e1:4b:ca:ca:65:b7:2b:c4:6e:1b:5b: 8f:a3:c1:bc:c2:fa:69:7c:ef:e6:2c:6f:fe:15:74: c8:b1:ec:2b:24:74:0c:c2:2f:62:de:30:9d:25:a7: 32:2a:98:47:14:4b:d6:b3:fc:f1:85:05:d7:14:6c: b5:ac:68:3a:2f:d6:d9:6b:94:dc:6d:27:5b:d6:67: 79:d5:60:d4:4e:66:a1:f4:75:40:0d:58:63:36:7e: 36:e7:6a:8e:ce:09:90:ba:06:08:af:96:f1:ee:6a: 84:04:d1:52:f2:e4:ea:78:e5:21:91:02:27:84:35: 21:1a:e1:72:e6:28:e8:6f:04:ae:d4:00:a8:9a:66: 62:a3:f4:8e:7b:54:eb:a6:6b:c5:3b:6c:90:2c:e8: e8:90:ac:99:25:65:00:ed:e1:f2:fd:b5:4b:2d:86: 2d:51:ed:0b:ab:5b:74:e5:f4:5e:c7:41:94:a6:a9: d7:e5:65:87:e7:86:a4:32:fd:85:80:2a:59:41:3a: ba:5a:7f:dd:72:1c:19:db:7a:e9:60:55:ba:2e:e1: 71:e0:84:99:fe:90:56:0c:a2:9d:f5:0f:e8:ca:f1: a3:e9:32:a6:75:aa:38:54:ab:08:8e:31:07:5c:96: b0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8B:1E:BA:72:56:16:A2:94:98:07:D1:CB:E1:D0:30:84:4B:2D:4B X509v3 Authority Key Identifier: keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135322e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.164.152.0/24 Signature Algorithm: sha256WithRSAEncryption ad:6b:21:80:3e:de:c4:07:07:49:51:61:e7:e6:08:8a:44:1e: 85:c3:f7:20:08:56:28:a2:b9:83:aa:c3:32:4d:47:54:b2:85: d2:56:3f:96:ab:5b:6a:00:4b:58:6d:01:5c:87:3b:13:5d:a5: c3:7e:bf:a8:31:38:58:74:eb:da:86:8b:8c:5c:39:64:b4:90: 1a:08:c0:f9:45:1b:89:08:cc:e6:bf:d3:e4:48:26:0c:22:8e: 5d:dd:7e:5b:41:ce:7c:fe:ad:94:3e:37:35:bc:a8:d1:81:8d: bc:91:52:48:c8:8e:92:c2:0d:ec:59:e1:c4:86:53:a6:1e:87: e7:ef:7c:c2:76:40:76:3c:1d:52:9a:b9:70:ec:63:6d:b5:b2: 97:a6:db:ab:16:c3:a9:85:f9:3a:ea:d3:a9:76:ef:55:df:0e: 2e:dc:f2:80:ec:0c:3b:7f:7f:7f:19:a6:54:5d:8f:49:91:36: ad:90:05:ca:2d:ee:eb:ac:88:ee:cb:06:dc:a6:c3:91:79:f9: 0c:fc:0b:3d:5c:80:fc:3f:ed:6e:e6:1a:81:46:ff:52:4b:f0: 7c:1e:82:de:bd:ec:1e:ee:71:ed:da:55:6f:6a:04:7e:bf:1a: 60:8e:5b:fc:dd:c5:a5:2f:b7:e8:57:4f:5b:12:af:27:86:cc: a4:2c:a7:aa -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUGq2nznWT6WdmCwGVdFECOOViLN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz MGY3YzRjYTAeFw0yNjAxMjkxMDUyMzdaFw0yNzAxMjgxMDU3MzdaMDMxMTAvBgNV BAMTKDlFOEIxRUJBNzI1NjE2QTI5NDk4MDdEMUNCRTFEMDMwODQ0QjJENEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMLIoZrItpbRU4h3Da+/R6Anh S8rKZbcrxG4bW4+jwbzC+ml87+Ysb/4VdMix7CskdAzCL2LeMJ0lpzIqmEcUS9az /PGFBdcUbLWsaDov1tlrlNxtJ1vWZ3nVYNROZqH0dUANWGM2fjbnao7OCZC6Bgiv lvHuaoQE0VLy5Op45SGRAieENSEa4XLmKOhvBK7UAKiaZmKj9I57VOuma8U7bJAs 6OiQrJklZQDt4fL9tUsthi1R7QurW3Tl9F7HQZSmqdflZYfnhqQy/YWAKllBOrpa f91yHBnbeulgVbou4XHghJn+kFYMop31D+jK8aPpMqZ1qjhUqwiOMQdclrDHAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUnoseunJWFqKUmAfRy+HQMIRLLUswHwYDVR0j BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE M3hNby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAt ZjZlMC00MTBjLWJjOTktYWYwOTIxZDFjM2E0LzAvMzEzODM4MmUzMTM2MzQyZTMx MzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzkzODMwMzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC8pJgwDQYJKoZIhvcNAQELBQADggEBAK1rIYA+3sQHB0lRYefmCIpEHoXD9yAI ViiiuYOqwzJNR1SyhdJWP5arW2oAS1htAVyHOxNdpcN+v6gxOFh069qGi4xcOWS0 kBoIwPlFG4kIzOa/0+RIJgwijl3dfltBznz+rZQ+NzW8qNGBjbyRUkjIjpLCDexZ 4cSGU6Yeh+fvfMJ2QHY8HVKauXDsY221spem26sWw6mF+Trq06l271XfDi7c8oDs DDt/f38ZplRdj0mRNq2QBcot7uusiO7LBtymw5F5+Qz8Cz1cgPw/7W7mGoFG/1JL 8Hwegt697B7uce3aVW9qBH6/GmCOW/zdxaUvt+hXT1sSryeGzKQsp6o= -----END CERTIFICATE-----Generated at Thu Jan 29 17:49:30 2026 by rpki-client