This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e302e302f32342d3234203d3e203438333134.roa File: 3139342e35302e302e302f32342d3234203d3e203438333134.roa (raw, json) Hash identifier: BtX3QzIneVP4peKGNcyeJeMDG5hgOoQ4i/5PEk0YGmY= Subject key identifier: 43:06:90:97:E3:F1:C8:64:D8:19:0F:DB:CE:AD:D4:B0:91:28:36:20 Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 7E74BEFBA924B91828CFF40052D353CEFE96FFF5 Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e302e302f32342d3234203d3e203438333134.roa Signing time: Thu 25 Dec 2025 17:50:38 +0000 ROA not before: Thu 25 Dec 2025 17:45:38 +0000 ROA not after: Thu 24 Dec 2026 17:50:38 +0000 asID: 48314 IP address blocks: 194.50.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:74:be:fb:a9:24:b9:18:28:cf:f4:00:52:d3:53:ce:fe:96:ff:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Dec 25 17:45:38 2025 GMT Not After : Dec 24 17:50:38 2026 GMT Subject: CN=43069097E3F1C864D8190FDBCEADD4B091283620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0e:b9:cb:55:98:80:fb:86:69:e3:2c:f0:53: 85:4c:c3:62:cf:6b:49:3a:a3:64:47:f7:37:f2:57: 90:d2:1a:c2:d9:a5:f5:ee:6d:dc:2a:07:7f:b3:7d: 9a:84:a9:36:99:a2:94:a4:5c:03:db:ca:8c:20:79: 4b:70:89:77:16:76:fc:5f:7c:b2:d6:d0:44:7d:d0: 9d:05:0c:dc:63:48:a8:bc:54:44:01:cc:7d:f4:ba: b1:42:f8:63:04:29:25:36:f1:f3:f5:af:ba:f5:1c: 7f:fa:93:c0:41:80:67:f1:c4:e4:8f:e5:c0:31:80: 39:a0:34:a7:50:b3:56:19:b3:22:7e:1e:91:84:37: cb:6e:93:c4:b1:11:9b:3e:1d:5d:f6:f8:84:e5:64: 84:fb:a8:37:de:c8:b0:2b:be:94:56:c9:a4:ff:94: fe:5b:09:6f:6a:ec:7e:23:01:5a:3c:0e:d8:ba:62: ba:ed:4f:c8:28:d7:8f:c9:18:57:f8:6f:f4:12:a9: b7:7f:55:eb:42:a0:87:3e:1b:89:8a:f3:24:a5:66: 13:bc:f7:2d:cd:b6:4b:ce:ef:07:4c:f1:51:4d:c9: d3:b5:05:29:c1:76:4c:13:b1:e1:18:45:a1:d7:e2: 22:6a:16:6f:60:da:fb:e2:d5:9e:32:72:25:af:24: 8b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:06:90:97:E3:F1:C8:64:D8:19:0F:DB:CE:AD:D4:B0:91:28:36:20 X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e302e302f32342d3234203d3e203438333134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.0.0/24 Signature Algorithm: sha256WithRSAEncryption 56:e7:15:ab:fa:5a:ad:7c:ac:ad:b3:b4:a6:e5:c3:a2:7e:b9: dd:a1:5a:60:29:7b:f0:e6:86:38:e3:a6:12:3f:f5:a7:55:42: 7e:83:1b:b6:28:dc:bc:dc:b9:8c:19:2a:63:99:62:4f:cf:cc: 64:e2:0f:b2:f8:ac:93:9f:82:8e:ae:69:9b:4f:77:39:84:2f: c0:47:d8:01:f1:91:84:61:68:88:2e:51:ab:40:ce:84:52:f3: 0d:5a:11:16:65:96:61:45:68:7e:7a:fe:dc:e1:0f:0b:72:8c: 2f:b6:8e:20:75:c4:74:a4:10:da:cd:96:87:e3:c4:8f:f8:19: 4e:69:ff:97:05:ea:8a:c5:86:fc:44:f0:c2:53:22:57:45:15: 3f:04:ce:a2:91:c5:57:ce:a6:e2:7e:8a:8d:de:0e:67:e9:b8: 87:b0:b2:c8:25:6d:81:63:b8:99:5a:68:30:d6:21:27:92:01: 0f:15:de:a0:8a:a9:9d:86:6d:32:0d:91:79:b9:fd:be:f9:52: f3:a8:19:53:31:2c:c2:e5:02:62:bd:08:1d:8a:c1:af:42:a3: 66:b6:89:85:db:ee:1f:8b:08:92:de:5f:f3:bb:54:66:d0:c8: 53:21:16:a5:28:86:aa:f0:51:a5:07:33:ae:0e:78:e0:79:c1: 29:b7:e1:b1 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUfnS++6kkuRgoz/QAUtNTzv6W//UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTEyMjUxNzQ1MzhaFw0yNjEyMjQxNzUwMzhaMDMxMTAvBgNV BAMTKDQzMDY5MDk3RTNGMUM4NjREODE5MEZEQkNFQURENEIwOTEyODM2MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcDrnLVZiA+4Zp4yzwU4VMw2LP a0k6o2RH9zfyV5DSGsLZpfXubdwqB3+zfZqEqTaZopSkXAPbyowgeUtwiXcWdvxf fLLW0ER90J0FDNxjSKi8VEQBzH30urFC+GMEKSU28fP1r7r1HH/6k8BBgGfxxOSP 5cAxgDmgNKdQs1YZsyJ+HpGEN8tuk8SxEZs+HV32+ITlZIT7qDfeyLArvpRWyaT/ lP5bCW9q7H4jAVo8Dti6YrrtT8go14/JGFf4b/QSqbd/VetCoIc+G4mK8ySlZhO8 9y3NtkvO7wdM8VFNydO1BSnBdkwTseEYRaHX4iJqFm9g2vvi1Z4yciWvJIsZAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUQwaQl+PxyGTYGQ/bzq3UsJEoNiAwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzEzOTM0MmUzNTMwMmUzMDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzgzMzMxMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCMgAw DQYJKoZIhvcNAQELBQADggEBAFbnFav6Wq18rK2ztKblw6J+ud2hWmApe/Dmhjjj phI/9adVQn6DG7Yo3LzcuYwZKmOZYk/PzGTiD7L4rJOfgo6uaZtPdzmEL8BH2AHx kYRhaIguUatAzoRS8w1aERZllmFFaH56/tzhDwtyjC+2jiB1xHSkENrNlofjxI/4 GU5p/5cF6orFhvxE8MJTIldFFT8EzqKRxVfOpuJ+io3eDmfpuIewssglbYFjuJla aDDWISeSAQ8V3qCKqZ2GbTINkXm5/b75UvOoGVMxLMLlAmK9CB2Kwa9Co2a2iYXb 7h+LCJLeX/O7VGbQyFMhFqUohqrwUaUHM64OeOB5wSm34bE= -----END CERTIFICATE-----Generated at Fri Jan 9 12:51:44 2026 by rpki-client