This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135332e302f32342d3234203d3e203239383032.roa File: 3138382e3136342e3135332e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: ia+NITVi4TUUQ8aJwqEkG+eTtnKwb4aVPgoigR9o66k= Subject key identifier: 9D:6E:98:CB:40:EA:43:13:34:33:12:DB:0D:28:8A:88:6C:C3:F0:96 Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Certificate serial: 16EBE215E23DDCB01AC5285ECCBC4D7AC53657EE Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135332e302f32342d3234203d3e203239383032.roa Signing time: Thu 29 Jan 2026 10:57:38 +0000 ROA not before: Thu 29 Jan 2026 10:52:38 +0000 ROA not after: Thu 28 Jan 2027 10:57:38 +0000 asID: 29802 IP address blocks: 188.164.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:eb:e2:15:e2:3d:dc:b0:1a:c5:28:5e:cc:bc:4d:7a:c5:36:57:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Validity Not Before: Jan 29 10:52:38 2026 GMT Not After : Jan 28 10:57:38 2027 GMT Subject: CN=9D6E98CB40EA4313343312DB0D288A886CC3F096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:56:da:66:aa:d2:36:3f:ff:94:47:0d:0a:73: a5:f8:7b:60:76:61:6d:de:8c:91:43:0a:19:93:ac: 1a:02:d9:2f:1d:2f:26:5a:48:14:08:b7:94:b7:e8: cf:d9:3b:f8:ad:6b:a1:8c:e6:93:cb:a6:1a:82:10: 09:b2:e1:6e:5c:46:09:a1:e8:65:c5:6f:1f:88:4e: 06:c7:1e:d8:09:b8:3b:53:ab:ec:19:34:7f:8c:fb: d3:f7:f2:10:55:91:4f:44:d6:a1:cb:c5:ad:5b:76: ea:17:c0:5e:ba:9f:71:be:d8:49:7c:33:ca:52:09: 11:49:5f:db:32:7c:8c:6d:3a:29:cf:60:1b:50:e9: cc:42:6b:03:af:29:67:97:a0:3b:92:6a:13:a9:31: 23:6e:0a:a5:75:4f:18:aa:98:97:9b:68:d9:4b:82: 4e:e5:d7:da:c6:1d:a7:b0:2e:46:2c:c1:bc:0e:be: b4:e9:cb:45:02:66:04:45:eb:67:06:96:1e:e1:ad: 20:cb:61:96:0e:d2:c9:a0:8c:88:08:e4:5d:d9:4e: 57:97:91:fb:05:da:38:07:88:23:77:12:56:fa:a4: 69:de:be:6a:a9:39:3b:59:7b:19:60:b6:3a:01:95: d8:77:a4:22:60:02:33:58:79:42:9f:ad:15:d1:3b: 0c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6E:98:CB:40:EA:43:13:34:33:12:DB:0D:28:8A:88:6C:C3:F0:96 X509v3 Authority Key Identifier: keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135332e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.164.153.0/24 Signature Algorithm: sha256WithRSAEncryption 14:64:67:56:69:f3:2d:4b:c8:75:be:b7:8e:33:c3:e5:dd:38: e2:60:09:e3:3a:b6:06:08:71:42:c4:46:d7:41:94:ad:d2:b1: ad:42:f8:e3:d8:d4:c4:7f:95:48:2e:a5:c3:94:e3:76:46:b9: cc:5f:7b:23:62:20:7d:24:0c:45:7a:c0:b0:8e:a1:85:09:b3: ec:fd:11:a3:5b:e0:2a:85:85:54:73:96:e0:1e:33:76:48:52: 33:b5:c3:99:ed:f2:3a:35:a7:d4:ae:e6:10:36:c0:00:51:db: 3f:d3:0f:2f:44:2f:81:49:df:7b:da:44:62:1d:fa:dd:85:f2: 5b:70:9d:ba:81:82:e0:49:e5:60:51:87:82:c0:3f:6e:b9:7f: 3e:9d:0e:8e:fb:05:8a:78:92:6c:dc:3a:d1:9d:1c:56:b5:33: e0:17:bd:b0:95:0c:b5:22:45:a8:a1:d2:f0:45:83:fb:93:63: 5d:d3:c8:e4:d9:d4:44:80:c1:79:2a:d2:6b:0b:e5:78:18:b3: 83:ff:53:fb:17:98:16:6f:7c:2e:a9:91:e9:d4:50:ba:37:fa: 8f:28:66:50:ac:c7:78:98:e7:d0:2a:d7:56:25:a0:03:70:a0: 37:fa:e6:41:36:82:64:a0:57:4c:ca:b4:27:73:96:ba:51:6a: b2:13:1c:df -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUFuviFeI93LAaxShezLxNesU2V+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz MGY3YzRjYTAeFw0yNjAxMjkxMDUyMzhaFw0yNzAxMjgxMDU3MzhaMDMxMTAvBgNV BAMTKDlENkU5OENCNDBFQTQzMTMzNDMzMTJEQjBEMjg4QTg4NkNDM0YwOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAVtpmqtI2P/+URw0Kc6X4e2B2 YW3ejJFDChmTrBoC2S8dLyZaSBQIt5S36M/ZO/ita6GM5pPLphqCEAmy4W5cRgmh 6GXFbx+ITgbHHtgJuDtTq+wZNH+M+9P38hBVkU9E1qHLxa1bduoXwF66n3G+2El8 M8pSCRFJX9syfIxtOinPYBtQ6cxCawOvKWeXoDuSahOpMSNuCqV1TxiqmJebaNlL gk7l19rGHaewLkYswbwOvrTpy0UCZgRF62cGlh7hrSDLYZYO0smgjIgI5F3ZTleX kfsF2jgHiCN3Elb6pGnevmqpOTtZexlgtjoBldh3pCJgAjNYeUKfrRXROwx3AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUnW6Yy0DqQxM0MxLbDSiKiGzD8JYwHwYDVR0j BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE M3hNby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAt ZjZlMC00MTBjLWJjOTktYWYwOTIxZDFjM2E0LzAvMzEzODM4MmUzMTM2MzQyZTMx MzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzkzODMwMzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC8pJkwDQYJKoZIhvcNAQELBQADggEBABRkZ1Zp8y1LyHW+t44zw+XdOOJgCeM6 tgYIcULERtdBlK3Ssa1C+OPY1MR/lUgupcOU43ZGucxfeyNiIH0kDEV6wLCOoYUJ s+z9EaNb4CqFhVRzluAeM3ZIUjO1w5nt8jo1p9Su5hA2wABR2z/TDy9EL4FJ33va RGId+t2F8ltwnbqBguBJ5WBRh4LAP265fz6dDo77BYp4kmzcOtGdHFa1M+AXvbCV DLUiRaih0vBFg/uTY13TyOTZ1ESAwXkq0msL5XgYs4P/U/sXmBZvfC6pkenUULo3 +o8oZlCsx3iY59Aq11YloANwoDf65kE2gmSgV0zKtCdzlrpRarITHN8= -----END CERTIFICATE-----Generated at Thu Jan 29 17:49:29 2026 by rpki-client