This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e312e302f32342d3234203d3e203634323637.roa File: 3139342e35302e312e302f32342d3234203d3e203634323637.roa (raw, json) Hash identifier: Y111o5heSVgTuvX1afqOIbWwexv6C9e08p+YRNlvpVI= Subject key identifier: B3:36:48:1D:74:B4:3F:8F:3A:54:91:1A:96:7C:34:C2:E4:B4:B7:8F Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 683A2F103EB901429716BBAA6397BDB8D8303DDF Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e312e302f32342d3234203d3e203634323637.roa Signing time: Tue 18 Nov 2025 19:01:09 +0000 ROA not before: Tue 18 Nov 2025 18:56:09 +0000 ROA not after: Tue 17 Nov 2026 19:01:09 +0000 asID: 64267 IP address blocks: 194.50.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:3a:2f:10:3e:b9:01:42:97:16:bb:aa:63:97:bd:b8:d8:30:3d:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 18 18:56:09 2025 GMT Not After : Nov 17 19:01:09 2026 GMT Subject: CN=B336481D74B43F8F3A54911A967C34C2E4B4B78F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c4:52:d9:00:fc:b9:ff:b6:91:1e:4f:93:b7: f0:e7:c0:b8:10:3d:55:14:c8:20:1c:f3:57:19:6b: 43:c2:4c:61:0e:9a:47:f6:17:68:c0:b8:21:f6:53: 1c:de:0a:88:e8:85:40:45:f5:fe:9f:6c:5c:ab:72: 76:00:c3:07:0b:b5:b8:67:e1:4b:ad:ce:55:34:68: 84:f8:af:6d:42:5b:0d:a0:9a:f0:5b:25:3e:82:f8: 89:bf:f9:05:a0:6b:4e:67:41:b9:01:ca:1e:33:3b: a9:de:0a:bb:3a:17:33:85:f2:79:b1:54:86:4b:fa: 48:6c:7b:12:fa:40:4d:8a:af:65:f3:8f:49:bd:02: b2:80:ee:3a:50:14:6d:36:9b:0d:fe:b7:4b:0a:bc: bd:51:de:6f:a1:f1:fd:26:94:35:0d:94:98:0b:5a: b2:b1:e2:3d:e8:68:7e:3b:6c:a1:4b:c6:c6:bf:a0: 3f:6e:59:93:4c:1d:29:cc:4b:78:b0:13:17:69:8e: d4:3b:6c:f9:59:31:2b:f6:ac:74:76:a5:a9:8f:b8: aa:30:b0:73:c0:41:94:ca:61:14:e6:6c:f2:72:ed: 22:bf:42:10:dc:81:25:0d:47:52:cb:94:c0:5c:fe: 3a:0d:cd:a8:97:6c:6f:d8:65:41:68:eb:e5:ad:26: cf:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:36:48:1D:74:B4:3F:8F:3A:54:91:1A:96:7C:34:C2:E4:B4:B7:8F X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e312e302f32342d3234203d3e203634323637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.1.0/24 Signature Algorithm: sha256WithRSAEncryption 79:6d:bd:7d:5f:9e:dd:30:03:02:90:52:9e:1a:a1:67:0c:4c: b6:12:dc:8e:3c:98:79:cd:28:49:47:eb:2e:a4:a4:c8:f8:2c: 40:02:0d:18:8f:3f:b5:f6:a4:94:2f:ac:e8:fb:bf:38:99:fe: 6c:68:ff:bc:88:8d:ba:97:d6:7a:0f:97:61:cf:fd:6b:7f:62: 90:5a:49:08:5f:b7:7a:ba:fe:0b:90:cb:98:ab:6a:91:34:40: e6:ef:8d:ad:97:5a:d7:d8:e7:c6:33:f8:a6:62:09:52:88:30: 70:7e:cf:a9:b3:a3:e6:39:19:ba:fa:eb:a3:1e:e3:88:5d:0a: 32:ff:0f:83:25:60:4f:17:eb:fe:45:3f:0b:1d:cf:d8:4b:99: 36:bd:b4:7b:fb:8d:4c:5f:b1:11:e2:d7:f4:9e:20:67:0a:d8: e1:46:7e:97:43:a9:30:09:e7:b6:4c:61:e4:26:44:89:97:fe: 20:f3:89:77:bb:25:87:6a:1f:24:84:ab:7a:4e:2d:45:f1:bb: 87:4d:ac:6c:6b:7f:12:03:4c:ec:68:3d:d5:fc:ed:bb:7f:21: 42:5a:67:43:ae:09:df:ae:b2:18:53:0c:eb:3b:df:17:20:9b: ec:9f:2a:07:54:57:b5:19:d1:89:0d:ab:ca:2d:31:b2:bf:8a: aa:6e:9d:90 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUaDovED65AUKXFruqY5e9uNgwPd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMTgxODU2MDlaFw0yNjExMTcxOTAxMDlaMDMxMTAvBgNV BAMTKEIzMzY0ODFENzRCNDNGOEYzQTU0OTExQTk2N0MzNEMyRTRCNEI3OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtxFLZAPy5/7aRHk+Tt/DnwLgQ PVUUyCAc81cZa0PCTGEOmkf2F2jAuCH2UxzeCojohUBF9f6fbFyrcnYAwwcLtbhn 4UutzlU0aIT4r21CWw2gmvBbJT6C+Im/+QWga05nQbkByh4zO6neCrs6FzOF8nmx VIZL+khsexL6QE2Kr2Xzj0m9ArKA7jpQFG02mw3+t0sKvL1R3m+h8f0mlDUNlJgL WrKx4j3oaH47bKFLxsa/oD9uWZNMHSnMS3iwExdpjtQ7bPlZMSv2rHR2pamPuKow sHPAQZTKYRTmbPJy7SK/QhDcgSUNR1LLlMBc/joNzaiXbG/YZUFo6+WtJs+JAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUszZIHXS0P486VJEalnw0wuS0t48wHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzEzOTM0MmUzNTMwMmUzMTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzQzMjM2Mzcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCMgEw DQYJKoZIhvcNAQELBQADggEBAHltvX1fnt0wAwKQUp4aoWcMTLYS3I48mHnNKElH 6y6kpMj4LEACDRiPP7X2pJQvrOj7vziZ/mxo/7yIjbqX1noPl2HP/Wt/YpBaSQhf t3q6/guQy5irapE0QObvja2XWtfY58Yz+KZiCVKIMHB+z6mzo+Y5Gbr666Me44hd CjL/D4MlYE8X6/5FPwsdz9hLmTa9tHv7jUxfsRHi1/SeIGcK2OFGfpdDqTAJ57ZM YeQmRImX/iDziXe7JYdqHySEq3pOLUXxu4dNrGxrfxIDTOxoPdX87bt/IUJaZ0Ou Cd+ushhTDOs73xcgm+yfKgdUV7UZ0YkNq8otMbK/iqpunZA= -----END CERTIFICATE-----Generated at Sat Nov 22 22:23:18 2025 by rpki-client