This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20323134303235.roa File: 3138352e32392e3136342e302f32342d3234203d3e20323134303235.roa (raw, json) Hash identifier: F0MSQmS7d85Ia1CC50Q2SRzU7sd9LnQFUKLqUVOC5go= Subject key identifier: 4C:14:AB:10:9E:19:1B:6D:F1:6A:8B:B7:8C:96:BA:DC:39:A2:38:80 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 06956F422C10EF5A9D36F849209A05A049986705 Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20323134303235.roa Signing time: Wed 07 Jan 2026 04:42:00 +0000 ROA not before: Wed 07 Jan 2026 04:37:00 +0000 ROA not after: Wed 06 Jan 2027 04:42:00 +0000 asID: 214025 IP address blocks: 185.29.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:95:6f:42:2c:10:ef:5a:9d:36:f8:49:20:9a:05:a0:49:98:67:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Jan 7 04:37:00 2026 GMT Not After : Jan 6 04:42:00 2027 GMT Subject: CN=4C14AB109E191B6DF16A8BB78C96BADC39A23880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d5:37:11:8a:23:45:d8:7c:be:65:36:b3:bd: 4d:94:0b:ac:e4:41:16:61:cc:23:b9:67:7e:be:c6: df:c7:5e:21:b3:26:7c:b3:7c:96:fe:ab:32:47:17: c0:a0:7c:b7:84:e2:23:97:e3:92:20:c6:a5:5a:e4: 6e:63:41:98:53:d5:32:f5:86:61:c5:33:50:98:df: 34:49:62:34:cf:47:10:0d:cf:00:cc:0c:0d:ee:a0: c9:b3:39:2e:b8:34:a4:3b:06:c5:0a:3a:78:75:fb: a9:69:e2:08:6d:0a:de:b7:ef:c3:a0:57:7b:cf:7d: b3:c7:c0:4e:ca:41:2b:7e:f0:5e:58:2f:f6:1d:50: 43:aa:59:d8:89:a4:04:e7:0e:53:f9:a6:a4:4f:2b: d6:81:72:53:b4:2a:87:bf:e3:eb:08:82:2a:e7:56: 1c:ff:72:41:fc:2f:45:6b:85:50:e1:4c:68:b7:35: d3:92:c0:36:c7:fd:ff:0e:d7:ed:7f:0b:b8:cf:f0: ba:96:e4:aa:4f:bc:c7:b1:3c:81:62:07:56:f7:21: 5b:65:db:f3:28:ff:e9:7b:76:a4:34:dd:3f:2a:4c: 6b:13:98:0d:67:1c:b2:6b:3d:19:5e:0b:21:39:ad: a2:26:ed:41:1f:e6:c0:95:ca:8b:4d:91:df:92:91: 50:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:14:AB:10:9E:19:1B:6D:F1:6A:8B:B7:8C:96:BA:DC:39:A2:38:80 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20323134303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.164.0/24 Signature Algorithm: sha256WithRSAEncryption 59:12:9d:ef:25:68:2e:43:e2:14:09:00:f0:79:cc:4f:4d:fd: 20:be:c4:d5:05:eb:04:01:2d:e5:f4:f2:bb:93:b1:b0:26:09: 94:7f:17:9a:47:e6:68:66:b0:2f:cd:bd:28:8a:aa:15:e2:d6: d9:3d:27:bd:b7:a5:16:26:a6:6b:47:b3:3b:a9:24:d1:23:09: fc:f9:20:f8:9b:88:fd:26:4c:a3:81:2e:93:e3:12:87:78:ac: 9c:8d:8e:f6:ff:5b:98:41:68:b2:26:79:b8:3b:73:86:35:d4: 4f:87:6b:3f:28:57:5f:10:f7:00:c3:5d:71:a1:92:67:48:39: ea:4b:fc:9f:f6:96:db:27:d3:22:5b:f5:43:c5:1e:8a:b7:74: 4c:27:04:bf:47:9f:b4:07:51:34:67:bc:61:5c:11:41:85:e7: 29:f1:f8:c0:43:90:51:93:c5:1f:b2:83:be:3c:ef:2a:6d:ed: 84:e6:27:e8:1b:91:0c:af:b0:62:30:6f:c9:04:2e:30:8b:05: 1b:62:81:41:78:6e:8e:7c:b4:56:d4:86:e5:37:86:d6:ce:10: e0:0d:80:80:bd:81:b8:d2:76:39:33:7f:de:fd:13:bc:e5:25: 8f:ce:54:e1:e2:10:1c:46:69:7b:f2:66:fb:e3:cd:8c:45:d5: a7:3b:91:c2 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUBpVvQiwQ71qdNvhJIJoFoEmYZwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNjAxMDcwNDM3MDBaFw0yNzAxMDYwNDQyMDBaMDMxMTAvBgNV BAMTKDRDMTRBQjEwOUUxOTFCNkRGMTZBOEJCNzhDOTZCQURDMzlBMjM4ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk1TcRiiNF2Hy+ZTazvU2UC6zk QRZhzCO5Z36+xt/HXiGzJnyzfJb+qzJHF8CgfLeE4iOX45IgxqVa5G5jQZhT1TL1 hmHFM1CY3zRJYjTPRxANzwDMDA3uoMmzOS64NKQ7BsUKOnh1+6lp4ghtCt6378Og V3vPfbPHwE7KQSt+8F5YL/YdUEOqWdiJpATnDlP5pqRPK9aBclO0Koe/4+sIgirn Vhz/ckH8L0VrhVDhTGi3NdOSwDbH/f8O1+1/C7jP8LqW5KpPvMexPIFiB1b3IVtl 2/Mo/+l7dqQ03T8qTGsTmA1nHLJrPRleCyE5raIm7UEf5sCVyotNkd+SkVCbAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUTBSrEJ4ZG23xaou3jJa63DmiOIAwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzODM1MmUzMjM5MmUzMTM2 MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzQzMDMyMzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5HaQwDQYJKoZIhvcNAQELBQADggEBAFkSne8laC5D4hQJAPB5zE9N/SC+xNUF 6wQBLeX08ruTsbAmCZR/F5pH5mhmsC/NvSiKqhXi1tk9J723pRYmpmtHszupJNEj Cfz5IPibiP0mTKOBLpPjEod4rJyNjvb/W5hBaLImebg7c4Y11E+Haz8oV18Q9wDD XXGhkmdIOepL/J/2ltsn0yJb9UPFHoq3dEwnBL9Hn7QHUTRnvGFcEUGF5ynx+MBD kFGTxR+yg7487ypt7YTmJ+gbkQyvsGIwb8kELjCLBRtigUF4bo58tFbUhuU3htbO EOANgIC9gbjSdjkzf979E7zlJY/OVOHiEBxGaXvyZvvjzYxF1ac7kcI= -----END CERTIFICATE-----Generated at Mon Jan 19 05:24:22 2026 by rpki-client