This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e312e302f32342d3234203d3e203534323532.roa File: 3139342e35302e312e302f32342d3234203d3e203534323532.roa (raw, json) Hash identifier: ruvdsYTXtE0Ab54FYmgOEkBccmfDScUwXgNFAX7lgcQ= Subject key identifier: F6:39:80:15:5A:08:8F:B5:28:E0:1B:D8:45:1C:D0:B4:E2:A8:7A:39 Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 743AECF2B9670021E3DE8FAA54446B2C4AC28012 Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e312e302f32342d3234203d3e203534323532.roa Signing time: Tue 18 Nov 2025 19:01:09 +0000 ROA not before: Tue 18 Nov 2025 18:56:09 +0000 ROA not after: Tue 17 Nov 2026 19:01:09 +0000 asID: 54252 IP address blocks: 194.50.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:3a:ec:f2:b9:67:00:21:e3:de:8f:aa:54:44:6b:2c:4a:c2:80:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 18 18:56:09 2025 GMT Not After : Nov 17 19:01:09 2026 GMT Subject: CN=F63980155A088FB528E01BD8451CD0B4E2A87A39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:09:47:0a:bb:97:e3:06:d9:56:3e:51:9a:d8: fb:f9:35:15:a0:7c:f5:c3:7a:ae:de:ab:ef:3d:3d: 6b:cc:0a:6c:eb:e2:c8:78:f7:92:f8:77:a1:73:1d: bf:2d:b2:ed:31:5b:a8:59:6d:dd:73:0a:d4:1a:23: 8b:24:f2:89:7b:63:71:68:5c:fa:2f:0f:fb:55:9d: 80:e6:d3:5e:47:01:40:43:46:71:a1:d8:38:ae:4a: aa:13:7c:fd:16:b2:c8:5e:74:e8:7e:a4:5f:2d:dd: c3:95:e0:52:69:da:a9:07:34:cb:67:0d:9d:ac:92: c5:f6:37:f3:c9:49:0c:48:b3:85:f7:58:b5:0a:03: 42:5f:40:e2:9b:de:98:ee:b1:e2:fd:17:6b:ba:5a: c7:72:9d:3d:ee:69:e0:02:0e:85:0f:67:ec:be:45: 25:4c:cd:38:ec:01:10:18:c1:35:4f:d4:a0:f9:a2: 6a:6a:df:90:48:21:12:84:2e:62:d9:a4:7e:5d:e6: 1e:d5:b1:31:f6:a3:7d:31:f1:47:17:6e:55:85:eb: 60:69:7f:82:9a:03:14:72:e6:e9:ba:86:2b:84:ef: b8:17:3e:98:7c:a9:f7:1c:b7:53:b9:81:06:c4:e2: a3:65:de:99:0c:24:87:c3:72:7a:32:23:86:c2:85: e2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:39:80:15:5A:08:8F:B5:28:E0:1B:D8:45:1C:D0:B4:E2:A8:7A:39 X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e312e302f32342d3234203d3e203534323532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.1.0/24 Signature Algorithm: sha256WithRSAEncryption 81:c6:b9:de:ac:5d:b1:99:1e:b6:78:ec:c9:07:95:d1:71:34: 48:24:d2:ae:3f:f8:dd:7f:97:53:78:32:05:65:ce:c1:5b:77: 01:4d:ec:e7:ad:d8:9d:af:3a:d4:d3:b2:0c:46:88:2c:54:5f: 46:63:c1:55:c1:3b:27:6d:12:cb:16:37:e8:e8:6c:a3:5f:89: f4:b3:65:1d:0f:f7:f4:3a:4f:f3:e3:71:1e:49:4a:a8:47:74: 8a:88:37:7a:5d:91:e5:1f:28:db:99:b9:e1:61:cd:31:9a:d8: ab:ab:8a:38:c7:09:68:29:83:bb:ab:73:ff:3f:7a:fc:70:7d: 09:f5:12:f4:ca:59:21:c8:4e:47:f6:f9:2f:25:5e:b8:d4:9e: f9:be:e1:99:3b:0d:91:8b:7e:b4:99:2a:2a:1d:a4:a8:f6:a4: 87:fd:98:85:ed:bb:5d:ea:02:81:5e:0c:d4:3d:ca:b6:7f:fa: a8:fd:86:09:5c:4e:29:ef:b1:14:6d:23:a1:ac:a6:0f:cd:25: e7:41:e7:0b:76:df:64:93:bf:7c:e3:82:18:9b:9c:1a:63:d7: e3:e0:f2:a2:51:1e:3d:9a:2f:95:75:8b:61:0f:c1:3f:7a:e5: 44:64:30:6b:bc:0b:81:48:90:97:d4:a5:4e:22:d7:9e:20:46: 5a:10:74:5b -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUdDrs8rlnACHj3o+qVERrLErCgBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMTgxODU2MDlaFw0yNjExMTcxOTAxMDlaMDMxMTAvBgNV BAMTKEY2Mzk4MDE1NUEwODhGQjUyOEUwMUJEODQ1MUNEMEI0RTJBODdBMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQCUcKu5fjBtlWPlGa2Pv5NRWg fPXDeq7eq+89PWvMCmzr4sh495L4d6FzHb8tsu0xW6hZbd1zCtQaI4sk8ol7Y3Fo XPovD/tVnYDm015HAUBDRnGh2DiuSqoTfP0WsshedOh+pF8t3cOV4FJp2qkHNMtn DZ2sksX2N/PJSQxIs4X3WLUKA0JfQOKb3pjuseL9F2u6WsdynT3uaeACDoUPZ+y+ RSVMzTjsARAYwTVP1KD5ompq35BIIRKELmLZpH5d5h7VsTH2o30x8UcXblWF62Bp f4KaAxRy5um6hiuE77gXPph8qfcct1O5gQbE4qNl3pkMJIfDcnoyI4bCheJHAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU9jmAFVoIj7Uo4BvYRRzQtOKoejkwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzEzOTM0MmUzNTMwMmUzMTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzQzMjM1MzIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCMgEw DQYJKoZIhvcNAQELBQADggEBAIHGud6sXbGZHrZ47MkHldFxNEgk0q4/+N1/l1N4 MgVlzsFbdwFN7Oet2J2vOtTTsgxGiCxUX0ZjwVXBOydtEssWN+jobKNfifSzZR0P 9/Q6T/PjcR5JSqhHdIqIN3pdkeUfKNuZueFhzTGa2KurijjHCWgpg7urc/8/evxw fQn1EvTKWSHITkf2+S8lXrjUnvm+4Zk7DZGLfrSZKiodpKj2pIf9mIXtu13qAoFe DNQ9yrZ/+qj9hglcTinvsRRtI6Gspg/NJedB5wt232STv3zjghibnBpj1+Pg8qJR Hj2aL5V1i2EPwT965URkMGu8C4FIkJfUpU4i154gRloQdFs= -----END CERTIFICATE-----Generated at Sat Nov 22 22:23:16 2025 by rpki-client