This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234362e33362e302f32342d3234203d3e203235313938.roa File: 3139342e3234362e33362e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: ozV90cqU2WyvLR/pcrjWwicV/oGcsSjYFMa1yOkQ0NQ= Subject key identifier: 00:87:A9:3E:4B:FA:46:FC:8F:F1:4E:96:7E:72:CB:7E:0B:7F:7C:C7 Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: D39A0D13E25AAFE3F4D0735032FC0627310EA3 Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234362e33362e302f32342d3234203d3e203235313938.roa Signing time: Tue 18 Nov 2025 19:01:09 +0000 ROA not before: Tue 18 Nov 2025 18:56:09 +0000 ROA not after: Tue 17 Nov 2026 19:01:09 +0000 asID: 25198 IP address blocks: 194.246.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d3:9a:0d:13:e2:5a:af:e3:f4:d0:73:50:32:fc:06:27:31:0e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 18 18:56:09 2025 GMT Not After : Nov 17 19:01:09 2026 GMT Subject: CN=0087A93E4BFA46FC8FF14E967E72CB7E0B7F7CC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:15:54:80:a5:a2:3f:33:2c:5a:a4:5b:fd: 7c:1b:78:b5:11:a2:c2:3d:76:3d:51:51:97:51:73: c9:22:bf:db:40:91:f0:4f:1a:8f:95:53:af:d6:f9: 02:18:09:f0:c1:34:44:a5:c3:40:88:49:c2:a9:fe: 5a:34:6b:37:aa:ca:e7:6c:31:6f:a0:77:47:9c:77: 55:06:7f:c8:b3:5c:86:6c:82:4b:a2:f7:1a:3d:22: 65:38:8d:eb:b1:dd:ea:08:c2:76:10:e1:9f:97:7f: 8d:51:d6:6c:61:60:7b:d9:92:3c:1c:72:f8:33:1b: ac:38:bf:b3:17:d2:22:33:26:7b:c7:9d:11:7d:4a: a7:21:fa:9d:62:d8:1c:54:64:44:d2:84:e6:21:41: df:94:49:ee:e8:b6:98:09:e3:1b:2b:f5:3f:6e:e9: 29:93:a0:cd:ad:c1:77:55:fb:48:ad:95:67:bd:8a: ea:9f:5f:80:89:d6:09:6d:40:66:08:d8:04:ff:dc: 54:d0:18:dc:e9:75:be:3d:75:d0:38:e3:a9:f4:a8: 97:0c:81:3e:4f:4c:68:cf:0f:32:87:f2:a1:1e:95: 80:f0:75:f4:dc:b4:a1:fd:0e:6a:1d:6b:eb:7b:d6: 5b:a3:61:f4:a8:c5:a6:29:6c:c9:9f:9b:a3:03:65: 54:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:87:A9:3E:4B:FA:46:FC:8F:F1:4E:96:7E:72:CB:7E:0B:7F:7C:C7 X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234362e33362e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.246.36.0/24 Signature Algorithm: sha256WithRSAEncryption ac:8d:b1:a7:fb:8f:4b:6d:f7:42:2e:02:55:91:60:50:13:21: 06:59:78:e4:75:1c:ec:5a:af:7b:0f:64:89:9d:04:7a:c1:b3: 92:5c:7d:67:c8:f5:a4:66:38:a5:d7:12:f0:1f:54:ec:24:0b: dd:c0:4e:f6:f8:ad:c3:76:85:27:67:bc:a9:b6:96:1e:ea:0c: f5:8b:a1:9c:d4:15:e6:b2:41:c8:06:16:8f:a5:f3:e5:65:2f: c9:b0:9a:52:b6:92:e2:5c:d3:e0:36:5a:f3:d3:ac:30:96:d2: 76:af:35:06:68:be:10:32:79:70:c4:aa:df:06:1e:28:a6:35: b3:14:9c:16:67:1f:80:de:6f:e7:a0:cd:e0:48:c6:48:a2:da: f9:85:37:30:e2:f9:f2:df:24:e0:16:01:85:0e:0f:5e:64:04: 70:e9:c2:bb:bc:66:38:ae:97:bd:99:c9:d4:10:45:87:26:38: d4:34:2d:1e:8b:db:a4:3e:08:16:8e:39:f7:87:28:b0:fe:55: 46:fd:9e:6d:a8:33:90:5a:ec:9e:dc:3b:78:bb:00:35:a5:0c: 42:66:44:a9:17:15:b8:6f:72:ea:3c:e3:24:1c:55:cb:b6:55: bb:37:32:75:9a:a9:0e:29:d8:23:9f:40:ce:a7:b3:e4:26:c4: 06:7d:22:ab -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUANOaDRPiWq/j9NBzUDL8BicxDqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMTgxODU2MDlaFw0yNjExMTcxOTAxMDlaMDMxMTAvBgNV BAMTKDAwODdBOTNFNEJGQTQ2RkM4RkYxNEU5NjdFNzJDQjdFMEI3RjdDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+GxVUgKWiPzMsWqRb/XwbeLUR osI9dj1RUZdRc8kiv9tAkfBPGo+VU6/W+QIYCfDBNESlw0CIScKp/lo0azeqyuds MW+gd0ecd1UGf8izXIZsgkui9xo9ImU4jeux3eoIwnYQ4Z+Xf41R1mxhYHvZkjwc cvgzG6w4v7MX0iIzJnvHnRF9Sqch+p1i2BxUZETShOYhQd+USe7otpgJ4xsr9T9u 6SmToM2twXdV+0itlWe9iuqfX4CJ1gltQGYI2AT/3FTQGNzpdb49ddA446n0qJcM gT5PTGjPDzKH8qEelYDwdfTctKH9Dmoda+t71lujYfSoxaYpbMmfm6MDZVQ3AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUAIepPkv6RvyP8U6WfnLLfgt/fMcwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzEzOTM0MmUzMjM0MzYyZTMz MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM1MzEzOTM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA wvYkMA0GCSqGSIb3DQEBCwUAA4IBAQCsjbGn+49LbfdCLgJVkWBQEyEGWXjkdRzs Wq97D2SJnQR6wbOSXH1nyPWkZjil1xLwH1TsJAvdwE72+K3DdoUnZ7yptpYe6gz1 i6Gc1BXmskHIBhaPpfPlZS/JsJpStpLiXNPgNlrz06wwltJ2rzUGaL4QMnlwxKrf Bh4opjWzFJwWZx+A3m/noM3gSMZIotr5hTcw4vny3yTgFgGFDg9eZARw6cK7vGY4 rpe9mcnUEEWHJjjUNC0ei9ukPggWjjn3hyiw/lVG/Z5tqDOQWuye3Dt4uwA1pQxC ZkSpFxW4b3LqPOMkHFXLtlW7NzJ1mqkOKdgjn0DOp7PkJsQGfSKr -----END CERTIFICATE-----Generated at Sat Nov 22 22:22:03 2025 by rpki-client