This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e342e302f32342d3234203d3e20343030303339.roa File: 3139342e35302e342e302f32342d3234203d3e20343030303339.roa (raw, json) Hash identifier: 1KQ8U/cyI6RlRLUmJsQ7MnZR4YGCCRfjVSVg2/aEhuA= Subject key identifier: BD:04:4D:87:8C:DB:03:19:47:DB:46:AD:B9:CC:05:BB:B2:00:32:2A Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 762A2A43944E690B732EC8F0BD17685026C91B3E Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e342e302f32342d3234203d3e20343030303339.roa Signing time: Tue 18 Nov 2025 19:01:08 +0000 ROA not before: Tue 18 Nov 2025 18:56:08 +0000 ROA not after: Tue 17 Nov 2026 19:01:08 +0000 asID: 400039 IP address blocks: 194.50.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:2a:2a:43:94:4e:69:0b:73:2e:c8:f0:bd:17:68:50:26:c9:1b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 18 18:56:08 2025 GMT Not After : Nov 17 19:01:08 2026 GMT Subject: CN=BD044D878CDB031947DB46ADB9CC05BBB200322A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:41:63:9e:b6:15:00:3e:89:b2:09:ab:60:fb: 32:98:41:14:77:1b:17:11:68:99:57:58:45:dc:fe: 48:87:27:2b:48:45:9b:0a:0c:e5:37:2b:08:23:79: 88:86:4a:8e:50:0f:a9:d9:aa:cd:72:9f:46:00:69: 52:f4:06:b1:b7:7b:fb:67:f0:50:0f:e3:6a:75:15: 72:9a:14:96:d3:2d:3a:bd:f4:e4:15:c8:b7:88:eb: f0:28:db:94:62:2a:dd:66:9c:10:2b:bf:7d:3c:7c: 3e:0a:df:3e:15:a5:71:6c:dd:74:16:0a:4b:26:7a: e0:c5:cd:79:d6:a5:40:93:00:a7:93:10:49:50:19: c6:00:08:d4:42:3d:12:20:51:eb:63:04:85:37:bc: 13:0d:7d:ae:7d:7c:2b:41:a9:7d:d4:8e:42:78:d9: e9:47:90:03:1f:f3:ac:23:06:08:d3:9f:f4:81:fe: 7c:68:3e:20:84:74:c6:e2:fd:a0:23:be:ec:c7:89: fc:c0:f5:8b:47:44:5e:f0:83:ae:b3:4d:42:a4:7b: 04:26:46:ae:e4:f4:74:eb:14:1f:ce:0a:29:6d:6f: 18:03:b2:4e:b3:31:80:8b:e0:85:20:d9:d6:da:13: 05:b4:4e:85:ad:82:ff:f4:67:fe:6d:7c:25:01:2a: a0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:04:4D:87:8C:DB:03:19:47:DB:46:AD:B9:CC:05:BB:B2:00:32:2A X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e342e302f32342d3234203d3e20343030303339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.4.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:14:eb:30:dc:e2:22:96:75:94:5e:c0:d1:7c:5f:f4:d0:60: ed:c4:af:7d:26:19:7d:d3:57:b3:cd:e0:cc:16:84:cf:cf:be: 77:c5:e2:8c:f8:65:40:74:c9:21:ef:8a:1f:04:45:19:60:35: 7f:a5:c8:9a:03:78:9d:6c:ea:2d:db:04:9f:bf:41:c8:54:bd: 5d:8d:7d:bb:02:b0:a9:2a:5b:ae:6a:68:58:8d:08:de:73:5e: de:81:a3:d4:b8:b4:e3:bb:7b:12:0a:0e:63:05:14:d8:30:6a: f9:85:3c:91:8b:ba:30:01:19:ae:52:3a:95:9d:49:ba:b5:0f: 1a:4c:52:75:7b:d2:22:19:4c:ad:85:5b:02:5c:8c:3e:4f:8d: 32:8f:94:64:f2:48:cd:6d:87:ab:7f:31:df:1c:12:98:da:0d: 9e:62:38:01:e0:55:4d:81:87:4b:66:f0:bc:2e:13:93:c1:15: 3f:c8:4a:d3:ca:33:a2:8f:07:65:67:2d:8e:e4:62:16:72:a3: e2:17:1f:e1:e2:40:8d:d4:fd:ae:8f:5e:d0:f6:58:be:b3:5c: 68:e8:6d:cf:ef:4e:da:11:2f:47:7c:6a:ad:14:74:c6:b0:17: a4:02:21:b0:56:e1:ab:b9:57:fa:88:f9:1e:9a:47:30:9b:17: 32:98:ef:14 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUdioqQ5ROaQtzLsjwvRdoUCbJGz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMTgxODU2MDhaFw0yNjExMTcxOTAxMDhaMDMxMTAvBgNV BAMTKEJEMDQ0RDg3OENEQjAzMTk0N0RCNDZBREI5Q0MwNUJCQjIwMDMyMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgQWOethUAPomyCatg+zKYQRR3 GxcRaJlXWEXc/kiHJytIRZsKDOU3KwgjeYiGSo5QD6nZqs1yn0YAaVL0BrG3e/tn 8FAP42p1FXKaFJbTLTq99OQVyLeI6/Ao25RiKt1mnBArv308fD4K3z4VpXFs3XQW CksmeuDFzXnWpUCTAKeTEElQGcYACNRCPRIgUetjBIU3vBMNfa59fCtBqX3UjkJ4 2elHkAMf86wjBgjTn/SB/nxoPiCEdMbi/aAjvuzHifzA9YtHRF7wg66zTUKkewQm Rq7k9HTrFB/OCiltbxgDsk6zMYCL4IUg2dbaEwW0ToWtgv/0Z/5tfCUBKqBBAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUvQRNh4zbAxlH20atucwFu7IAMiowHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzEzOTM0MmUzNTMwMmUzNDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMDMwMzMzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIy BDANBgkqhkiG9w0BAQsFAAOCAQEAPhTrMNziIpZ1lF7A0Xxf9NBg7cSvfSYZfdNX s83gzBaEz8++d8XijPhlQHTJIe+KHwRFGWA1f6XImgN4nWzqLdsEn79ByFS9XY19 uwKwqSpbrmpoWI0I3nNe3oGj1Li047t7EgoOYwUU2DBq+YU8kYu6MAEZrlI6lZ1J urUPGkxSdXvSIhlMrYVbAlyMPk+NMo+UZPJIzW2Hq38x3xwSmNoNnmI4AeBVTYGH S2bwvC4Tk8EVP8hK08ozoo8HZWctjuRiFnKj4hcf4eJAjdT9ro9e0PZYvrNcaOht z+9O2hEvR3xqrRR0xrAXpAIhsFbhq7lX+oj5HppHMJsXMpjvFA== -----END CERTIFICATE-----Generated at Sat Nov 22 22:21:03 2025 by rpki-client