This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e312e302f32342d3234203d3e20333937363330.roa File: 3139342e35302e312e302f32342d3234203d3e20333937363330.roa (raw, json) Hash identifier: TeUJtf1ikY7LLYRPrAz/E+BsfW9QE1+7cNe6Ilv12VI= Subject key identifier: 1D:29:D5:A5:D6:F8:B4:6A:DB:2C:7D:B1:E7:98:EF:A2:84:9F:50:5F Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 48B0FB301F3B2B026C3243819EA20E4DDDAB9D99 Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e312e302f32342d3234203d3e20333937363330.roa Signing time: Tue 18 Nov 2025 19:01:08 +0000 ROA not before: Tue 18 Nov 2025 18:56:08 +0000 ROA not after: Tue 17 Nov 2026 19:01:08 +0000 asID: 397630 IP address blocks: 194.50.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b0:fb:30:1f:3b:2b:02:6c:32:43:81:9e:a2:0e:4d:dd:ab:9d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 18 18:56:08 2025 GMT Not After : Nov 17 19:01:08 2026 GMT Subject: CN=1D29D5A5D6F8B46ADB2C7DB1E798EFA2849F505F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:32:61:b9:6e:da:93:cd:6f:23:eb:5e:97:37: 93:27:54:fc:05:cb:94:8d:2f:ef:39:23:07:89:9b: 25:37:71:ed:4f:bb:83:73:3b:42:d5:b9:44:86:60: d6:f0:30:c1:00:72:56:a3:46:37:e5:8b:a3:dd:35: ce:7e:17:52:4f:a9:25:5f:33:e2:67:4b:c2:a6:ad: 06:07:24:8c:5b:12:d8:5f:8d:35:f1:98:9b:bc:f9: ec:cd:bf:8c:c7:83:80:e4:6b:06:94:93:cf:f7:af: ac:cd:0e:ac:6e:9f:50:60:e2:5b:ab:69:00:72:e9: ba:ed:a7:94:61:e8:6b:db:b2:da:ea:b3:73:ef:b1: 94:de:a7:d4:cf:46:5e:1b:16:63:d5:e2:ff:d1:16: e2:dc:5d:d5:c6:90:30:77:0c:39:e1:1f:0a:a6:9f: f8:0c:d7:90:f9:a0:b7:b1:01:24:b9:ad:2d:16:20: b4:1d:a2:e7:62:90:6c:d2:8e:86:b6:68:4f:1a:43: d8:96:da:2e:7c:a9:57:d9:ed:a4:4f:67:5b:2a:30: a2:e4:fe:1b:bd:f6:e1:02:39:d9:be:b8:06:a5:8f: 36:9b:41:cf:ca:7e:c2:06:89:67:a4:dd:99:92:36: 8f:ec:7b:36:30:ed:e2:6d:7d:a2:da:bc:dc:34:10: be:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:29:D5:A5:D6:F8:B4:6A:DB:2C:7D:B1:E7:98:EF:A2:84:9F:50:5F X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e312e302f32342d3234203d3e20333937363330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.1.0/24 Signature Algorithm: sha256WithRSAEncryption 79:11:17:ee:a7:2c:59:9a:b7:f5:81:a9:23:91:69:e1:5b:2c: 11:a8:68:3c:b1:40:9d:03:cf:6e:86:7b:4f:1c:f1:f2:08:1c: 98:b3:e9:63:17:a8:ff:b6:8a:15:a3:cd:7e:a8:7a:91:15:b1: 50:1f:f8:52:40:75:89:f7:4d:4f:35:95:9a:e4:2d:ca:af:33: c0:77:cd:73:8a:b7:87:a9:f8:b8:6c:7d:81:4f:c6:b5:03:d5: e8:e8:63:8c:d6:da:4e:ef:c4:20:76:74:a3:63:fe:20:5e:62: 85:b8:79:f7:3f:47:8d:f0:59:5e:29:92:3c:d2:e0:8e:7a:2b: 36:f3:54:c8:ad:f6:bb:0c:df:35:fc:a2:39:8c:75:55:be:36: 86:1f:a1:26:4f:87:54:78:19:a0:85:bf:b2:a0:6c:0f:26:4e: a3:18:ba:8f:47:0d:4f:1d:05:9e:b2:7f:e4:d7:21:5d:03:c7: 2b:34:74:85:f6:1c:7f:52:cd:a0:a7:52:02:18:d6:a7:5a:78: 63:c2:ef:4b:64:69:65:4f:6b:68:73:17:df:18:50:5f:d6:e3: 83:c5:9b:74:d9:62:8b:cb:02:1d:bb:f9:43:48:e4:d8:da:b0: e4:4f:24:82:d9:17:41:79:4a:0e:63:81:75:0f:bf:09:2c:9a: 51:82:6c:b7 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUSLD7MB87KwJsMkOBnqIOTd2rnZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMTgxODU2MDhaFw0yNjExMTcxOTAxMDhaMDMxMTAvBgNV BAMTKDFEMjlENUE1RDZGOEI0NkFEQjJDN0RCMUU3OThFRkEyODQ5RjUwNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsMmG5btqTzW8j616XN5MnVPwF y5SNL+85IweJmyU3ce1Pu4NzO0LVuUSGYNbwMMEAclajRjfli6PdNc5+F1JPqSVf M+JnS8KmrQYHJIxbEthfjTXxmJu8+ezNv4zHg4DkawaUk8/3r6zNDqxun1Bg4lur aQBy6brtp5Rh6Gvbstrqs3PvsZTep9TPRl4bFmPV4v/RFuLcXdXGkDB3DDnhHwqm n/gM15D5oLexASS5rS0WILQdoudikGzSjoa2aE8aQ9iW2i58qVfZ7aRPZ1sqMKLk /hu99uECOdm+uAaljzabQc/KfsIGiWek3ZmSNo/sezYw7eJtfaLavNw0EL5PAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUHSnVpdb4tGrbLH2x55jvooSfUF8wHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzEzOTM0MmUzNTMwMmUzMTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzNzM2MzMzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIy ATANBgkqhkiG9w0BAQsFAAOCAQEAeREX7qcsWZq39YGpI5Fp4VssEahoPLFAnQPP boZ7Txzx8ggcmLPpYxeo/7aKFaPNfqh6kRWxUB/4UkB1ifdNTzWVmuQtyq8zwHfN c4q3h6n4uGx9gU/GtQPV6OhjjNbaTu/EIHZ0o2P+IF5ihbh59z9HjfBZXimSPNLg jnorNvNUyK32uwzfNfyiOYx1Vb42hh+hJk+HVHgZoIW/sqBsDyZOoxi6j0cNTx0F nrJ/5NchXQPHKzR0hfYcf1LNoKdSAhjWp1p4Y8LvS2RpZU9raHMX3xhQX9bjg8Wb dNlii8sCHbv5Q0jk2Nqw5E8kgtkXQXlKDmOBdQ+/CSyaUYJstw== -----END CERTIFICATE-----Generated at Sat Nov 22 22:21:34 2025 by rpki-client