This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3134392e3131322e3131372e302f32342d3234203d3e2030.roa File: 3134392e3131322e3131372e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: wNF04zTzM01ZsoUyNOrqB+433Orn6dMaQ3nxpWytFbE= Subject key identifier: 8C:42:15:BB:F6:D9:52:A1:04:A2:1B:BD:A7:1A:E6:EF:D7:5A:0E:F4 Certificate issuer: /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8 Certificate serial: 0865CC462B840CB832AEFA48D2E8E39CF3A5EA9C Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3134392e3131322e3131372e302f32342d3234203d3e2030.roa Signing time: Sat 17 Jan 2026 20:58:50 +0000 ROA not before: Sat 17 Jan 2026 20:53:50 +0000 ROA not after: Sat 16 Jan 2027 20:58:50 +0000 asID: 0 IP address blocks: 149.112.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 11:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:65:cc:46:2b:84:0c:b8:32:ae:fa:48:d2:e8:e3:9c:f3:a5:ea:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8 Validity Not Before: Jan 17 20:53:50 2026 GMT Not After : Jan 16 20:58:50 2027 GMT Subject: CN=8C4215BBF6D952A104A21BBDA71AE6EFD75A0EF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e6:e3:21:f9:8a:8e:8c:cc:51:8e:d1:98:df: f0:5e:2c:9b:b2:a9:02:fc:fa:f3:fe:1f:cf:89:fb: ca:58:d3:75:9f:b1:bf:1d:bf:52:e9:b8:ec:ee:78: e3:41:7c:f3:db:50:d1:00:27:47:fa:b0:69:93:13: e2:c8:51:82:d6:dd:dc:18:fb:61:f7:38:49:75:6c: 67:b4:69:5a:b0:92:e3:42:ed:ba:00:73:0a:b0:aa: d8:63:51:db:99:58:af:1a:69:3e:d6:d7:3d:f3:af: ad:83:71:09:06:82:77:cd:9f:24:15:d6:d7:d0:4b: 49:aa:ac:ac:3a:ec:01:84:3d:eb:72:7a:a6:a9:03: c5:c6:a4:a6:74:e1:a8:52:6c:da:d1:aa:7f:20:48: a7:87:a7:3e:2a:17:7d:75:b8:89:8f:12:c7:6d:0f: b3:1c:f6:f6:59:ce:67:1a:91:0d:43:c2:f2:73:cd: 96:c0:a3:59:78:22:a1:59:3b:26:b8:47:28:d3:00: 28:85:1c:dd:45:62:28:0c:38:8d:0e:d4:c7:11:65: fc:b7:9e:fe:74:4a:a7:5a:61:de:43:3c:f8:4b:f4: f9:2a:2d:8a:3d:5e:d5:3b:6a:0c:ad:bb:d1:7a:c7: 6c:a2:3d:7a:86:0f:94:fd:42:db:b6:35:c4:5c:60: 84:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:42:15:BB:F6:D9:52:A1:04:A2:1B:BD:A7:1A:E6:EF:D7:5A:0E:F4 X509v3 Authority Key Identifier: keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3134392e3131322e3131372e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.112.117.0/24 Signature Algorithm: sha256WithRSAEncryption 98:fe:b7:78:35:8e:fe:84:50:b5:58:ad:cd:1b:cf:c2:0f:76: cf:1a:fd:5a:0e:2d:9f:0c:12:58:4a:1b:7a:4f:9c:ca:bc:a4: 92:f2:3a:93:e6:61:0e:9a:58:c1:66:6f:e2:0e:15:76:99:5d: 74:94:bf:c8:50:37:78:d2:3a:64:1c:b3:3f:df:28:bd:02:8e: ed:98:41:be:78:2a:87:83:b8:f7:4b:f2:20:c4:62:32:2a:c5: 1c:3e:45:44:07:27:6f:19:41:4e:00:ea:f1:4d:38:23:9f:d1: 25:88:cf:29:68:92:fa:a8:2f:3a:78:61:35:d4:86:15:aa:49: 3e:9d:78:0b:7b:b5:07:6d:98:6c:77:45:c1:08:45:ad:82:38: b2:a8:55:b8:04:1f:9e:70:53:8b:5d:34:7b:2e:28:c6:33:d1: 4b:d4:6d:81:4e:dc:03:7c:59:9c:f6:50:83:c4:81:29:41:f7: 72:51:57:40:91:e5:b6:fd:1b:90:82:e2:f5:1a:15:d8:81:b8: 51:23:86:48:a1:3c:f6:64:1b:d7:66:b7:7d:c1:c9:48:6d:b9: 94:8f:92:1c:8b:1e:f1:8e:07:bf:ca:d7:6e:3a:b2:31:e4:c2: f8:34:7f:34:06:c2:e2:aa:d8:e3:9c:29:6d:fb:4e:14:82:56: 59:4e:d4:8e -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgIUCGXMRiuEDLgyrvpI0ujjnPOl6pwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjA5YjdiNjgwOGUyMTM0YTRmOGJiNmNl ZWYyODUxNDQxZWQ3YzBmZTgwHhcNMjYwMTE3MjA1MzUwWhcNMjcwMTE2MjA1ODUw WjAzMTEwLwYDVQQDEyg4QzQyMTVCQkY2RDk1MkExMDRBMjFCQkRBNzFBRTZFRkQ3 NUEwRUY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqObjIfmKjozM UY7RmN/wXiybsqkC/Prz/h/PifvKWNN1n7G/Hb9S6bjs7njjQXzz21DRACdH+rBp kxPiyFGC1t3cGPth9zhJdWxntGlasJLjQu26AHMKsKrYY1HbmVivGmk+1tc986+t g3EJBoJ3zZ8kFdbX0EtJqqysOuwBhD3rcnqmqQPFxqSmdOGoUmza0ap/IEinh6c+ Khd9dbiJjxLHbQ+zHPb2Wc5nGpENQ8Lyc82WwKNZeCKhWTsmuEco0wAohRzdRWIo DDiNDtTHEWX8t57+dEqnWmHeQzz4S/T5Ki2KPV7VO2oMrbvResdsoj16hg+U/ULb tjXEXGCElQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFIxCFbv22VKhBKIbvaca5u/X Wg70MB8GA1UdIwQYMBaAFGUsAZnmVi+2EZ4lkjAWmCYpwhCNMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzY1MkMwMTk5RTY1NjJGQjYxMTlFMjU5MjMwMTY5ODI2 MjlDMjEwOEQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjA5YjdiNjgwOGUyMTM0YTRmOGJiNmNlZWYy ODUxNDQxZWQ3YzBmZTguY2VyMIGnBggrBgEFBQcBCwSBmjCBlzCBlAYIKwYBBQUH MAuGgYdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMxMzQzOTJl MzEzMTMyMmUzMTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAJVwdTANBgkqhkiG9w0BAQsFAAOCAQEAmP63eDWO/oRQtVitzRvPwg92zxr9 Wg4tnwwSWEobek+cyrykkvI6k+ZhDppYwWZv4g4VdplddJS/yFA3eNI6ZByzP98o vQKO7ZhBvngqh4O490vyIMRiMirFHD5FRAcnbxlBTgDq8U04I5/RJYjPKWiS+qgv OnhhNdSGFapJPp14C3u1B22YbHdFwQhFrYI4sqhVuAQfnnBTi100ey4oxjPRS9Rt gU7cA3xZnPZQg8SBKUH3clFXQJHltv0bkILi9RoV2IG4USOGSKE89mQb12a3fcHJ SG25lI+SHIse8Y4Hv8rXbjqyMeTC+DR/NAbC4qrY45wpbftOFIJWWU7Ujg== -----END CERTIFICATE-----Generated at Sun Jan 18 17:53:39 2026 by rpki-client