This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234362e33362e302f32342d3234203d3e20323035383836.roa File: 3139342e3234362e33362e302f32342d3234203d3e20323035383836.roa (raw, json) Hash identifier: ddb+xsyabWT4R1Xj/pgaVmKy1W6jPXhuktKqX52CP3A= Subject key identifier: F4:15:B2:F0:B5:02:CF:15:04:8A:D5:7F:01:C5:8C:AE:F6:7B:CB:05 Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 44A5A8F744DDFD23351C65017F5EFB804EBC533E Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234362e33362e302f32342d3234203d3e20323035383836.roa Signing time: Tue 18 Nov 2025 19:01:09 +0000 ROA not before: Tue 18 Nov 2025 18:56:09 +0000 ROA not after: Tue 17 Nov 2026 19:01:09 +0000 asID: 205886 IP address blocks: 194.246.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a5:a8:f7:44:dd:fd:23:35:1c:65:01:7f:5e:fb:80:4e:bc:53:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 18 18:56:09 2025 GMT Not After : Nov 17 19:01:09 2026 GMT Subject: CN=F415B2F0B502CF15048AD57F01C58CAEF67BCB05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d0:be:87:8f:43:b1:96:0d:6e:85:be:69:bd: a1:a4:00:b0:f3:fb:f1:ef:c4:05:d5:05:fd:8f:47: d0:df:67:6a:74:bd:b0:dc:62:4c:56:99:90:9f:ce: d1:3b:55:36:1a:7a:ac:ca:fb:da:47:f2:be:47:97: 32:dc:c6:fe:78:38:ff:af:3b:ce:19:36:3a:56:ab: d7:2f:3b:1a:cc:9a:ce:00:ff:1d:78:c6:85:0f:5e: b9:8e:a7:e0:53:c4:94:ee:1b:aa:56:29:22:b1:5c: 40:ad:15:48:fb:e4:b8:de:35:f1:05:f0:21:aa:13: f0:27:aa:43:35:5c:45:00:82:e1:3b:db:82:d1:d8: c1:b8:a6:4f:ae:7d:52:15:6e:06:cc:9a:8a:af:a1: 54:b2:a3:57:85:70:d0:fe:cf:9c:26:a4:03:ce:4a: 35:a9:ec:65:da:7e:31:54:4a:04:24:92:7a:99:f4: ee:e6:d6:12:5c:73:75:c2:dd:4a:4f:8c:a7:e6:e0: cb:e0:7d:0c:7f:9e:b9:7e:a4:5a:a4:12:2f:c1:d6: 47:1f:da:45:f1:f0:8e:37:56:ed:4d:4c:c8:6e:91: 91:83:bb:63:9b:fe:f8:00:39:7e:b3:54:d4:3a:cf: ec:00:1f:27:32:af:0d:c2:02:e6:b3:5a:cf:9b:da: a5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:15:B2:F0:B5:02:CF:15:04:8A:D5:7F:01:C5:8C:AE:F6:7B:CB:05 X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234362e33362e302f32342d3234203d3e20323035383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.246.36.0/24 Signature Algorithm: sha256WithRSAEncryption 35:cc:5f:7f:d4:c1:29:df:74:6b:cc:01:42:9c:37:81:dd:66: 30:ac:35:11:45:ac:b2:2a:8f:9b:69:96:84:64:c3:b2:9e:18: f1:42:96:c2:86:a5:0d:a1:81:e1:1f:2f:24:79:38:1a:81:9c: 90:8b:c4:a3:22:eb:7b:0b:ca:f0:32:69:c3:c3:f2:41:a4:5f: e5:76:c5:ca:8a:f9:7e:c0:0e:9a:2e:47:3f:6e:c3:a2:da:a7: 48:0b:cd:be:2b:00:af:01:9d:f7:d6:b9:7f:5e:5a:50:24:de: 95:57:9b:43:b4:5a:51:10:d3:fa:b4:fd:05:f7:b4:7d:bb:d7: f9:14:48:2e:0c:16:db:31:d7:e1:bc:8c:65:44:d1:42:ef:30: 28:33:8a:76:7f:a3:46:8e:55:f7:1a:5f:62:6a:04:68:33:f8: 40:d5:0a:fc:f1:20:5c:ad:db:79:cf:9d:ca:f5:73:89:f1:dd: b2:35:ea:ee:55:97:1d:29:ac:7e:7b:7b:42:a6:b8:64:46:d8: 50:6e:7e:f3:94:3c:ee:db:0d:27:92:c1:b5:11:b3:65:0c:87: a7:6c:ac:87:01:76:09:ea:17:87:78:85:0b:d3:27:ab:c5:af: 37:0f:4a:5a:ef:24:30:3f:3a:bf:3e:d3:87:62:6a:59:a4:ed: 17:17:b2:18 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIURKWo90Td/SM1HGUBf177gE68Uz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMTgxODU2MDlaFw0yNjExMTcxOTAxMDlaMDMxMTAvBgNV BAMTKEY0MTVCMkYwQjUwMkNGMTUwNDhBRDU3RjAxQzU4Q0FFRjY3QkNCMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD0L6Hj0Oxlg1uhb5pvaGkALDz +/HvxAXVBf2PR9DfZ2p0vbDcYkxWmZCfztE7VTYaeqzK+9pH8r5HlzLcxv54OP+v O84ZNjpWq9cvOxrMms4A/x14xoUPXrmOp+BTxJTuG6pWKSKxXECtFUj75LjeNfEF 8CGqE/AnqkM1XEUAguE724LR2MG4pk+ufVIVbgbMmoqvoVSyo1eFcND+z5wmpAPO SjWp7GXafjFUSgQkknqZ9O7m1hJcc3XC3UpPjKfm4MvgfQx/nrl+pFqkEi/B1kcf 2kXx8I43Vu1NTMhukZGDu2Ob/vgAOX6zVNQ6z+wAHycyrw3CAuazWs+b2qUrAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU9BWy8LUCzxUEitV/AcWMrvZ7ywUwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzEzOTM0MmUzMjM0MzYyZTMz MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzUzODM4MzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADC9iQwDQYJKoZIhvcNAQELBQADggEBADXMX3/UwSnfdGvMAUKcN4HdZjCsNRFF rLIqj5tploRkw7KeGPFClsKGpQ2hgeEfLyR5OBqBnJCLxKMi63sLyvAyacPD8kGk X+V2xcqK+X7ADpouRz9uw6Lap0gLzb4rAK8BnffWuX9eWlAk3pVXm0O0WlEQ0/q0 /QX3tH271/kUSC4MFtsx1+G8jGVE0ULvMCgzinZ/o0aOVfcaX2JqBGgz+EDVCvzx IFyt23nPncr1c4nx3bI16u5Vlx0prH57e0KmuGRG2FBufvOUPO7bDSeSwbURs2UM h6dsrIcBdgnqF4d4hQvTJ6vFrzcPSlrvJDA/Or8+04dialmk7RcXshg= -----END CERTIFICATE-----Generated at Sat Nov 22 22:21:33 2025 by rpki-client