This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32312e302f32342d3234203d3e2035363530.roa File: 3139342e32362e32312e302f32342d3234203d3e2035363530.roa (raw, json) Hash identifier: p78KH8kgcBRXXFcw1mzLGQ6wEbtzI8eA56dk/vajAYc= Subject key identifier: A7:B6:07:8A:C2:5B:62:66:43:AA:5B:32:36:E2:44:EE:BE:F6:46:4E Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Certificate serial: 681B3F7983CC629B8F2CC37B93F827D171D4DBF3 Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32312e302f32342d3234203d3e2035363530.roa Signing time: Tue 06 Jan 2026 08:37:18 +0000 ROA not before: Tue 06 Jan 2026 08:32:18 +0000 ROA not after: Tue 05 Jan 2027 08:37:18 +0000 asID: 5650 IP address blocks: 194.26.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 18:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:1b:3f:79:83:cc:62:9b:8f:2c:c3:7b:93:f8:27:d1:71:d4:db:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Validity Not Before: Jan 6 08:32:18 2026 GMT Not After : Jan 5 08:37:18 2027 GMT Subject: CN=A7B6078AC25B626643AA5B3236E244EEBEF6464E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:7d:02:22:f9:03:64:67:39:78:83:6d:24: 30:91:5c:d5:88:13:83:d7:41:7c:bb:7a:69:9e:a2: 00:2a:bc:43:32:08:cf:6c:42:ca:54:30:c5:81:ad: 4f:59:5c:a8:17:cf:8f:1c:ca:59:c8:0b:11:1d:c1: e0:a7:e7:85:21:73:74:9b:03:87:7e:91:17:f9:5f: d8:5f:84:70:73:68:1a:db:7f:36:10:b6:d8:57:65: ac:c0:69:49:03:5f:ec:31:ae:53:24:f2:9b:f6:0c: 98:66:16:41:64:e6:45:18:8f:0f:2d:d1:ac:b0:d3: 27:79:ba:50:67:93:25:e7:b5:ec:5d:b9:79:c9:7e: f2:b6:b2:55:0c:3b:fe:ef:33:b2:8c:59:9f:12:7d: 34:30:d6:68:0e:32:13:44:e9:8b:38:8e:1e:9f:00: 13:50:08:69:b9:b1:40:ec:ff:eb:32:2b:88:cf:d2: 66:45:78:68:57:96:15:0d:62:49:c2:a7:f0:34:d7: ac:d6:c2:23:df:e4:8f:30:0c:70:8c:4b:64:42:ee: c0:1c:de:d1:39:7d:c9:0f:b7:6a:e9:59:05:b2:06: b4:5c:1a:42:79:a3:d0:92:cf:65:94:fd:0d:4e:a2: 36:85:10:38:f9:6d:78:a1:26:ce:fe:0a:e8:60:9b: 9f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B6:07:8A:C2:5B:62:66:43:AA:5B:32:36:E2:44:EE:BE:F6:46:4E X509v3 Authority Key Identifier: keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3139342e32362e32312e302f32342d3234203d3e2035363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.26.21.0/24 Signature Algorithm: sha256WithRSAEncryption 42:63:27:a0:de:87:51:9f:b3:26:6a:c6:28:4c:67:1e:ab:9c: 42:25:e8:5d:4f:b7:8b:48:84:29:1e:d2:54:4e:e6:e5:9d:e2: 16:0e:57:7c:57:70:ae:d0:9f:f5:ef:77:b9:09:f7:fe:68:eb: ab:5a:61:ac:39:09:58:af:a8:83:1a:bc:28:5c:b6:18:6d:02: b6:3b:e7:57:b5:34:9b:9f:c5:df:af:ad:be:31:32:cd:b6:91: 5e:c0:99:41:ee:05:d8:60:76:c3:d6:34:ad:7a:72:e8:4b:00: 9e:dc:18:4d:e3:42:7a:92:18:33:7f:e7:66:1c:ab:d7:23:1b: 85:ab:ec:7a:16:61:70:07:9a:18:f0:e4:b7:aa:6f:fa:cb:10: da:d0:6a:b1:73:3d:d8:dd:66:2f:c1:c5:a4:eb:a1:29:34:19: f2:e1:15:ae:8d:25:c6:63:11:32:ad:0b:84:8a:74:ac:09:fb: 11:b0:c0:3d:43:ed:d9:5d:00:47:19:bd:b5:09:a6:c0:00:6a: af:74:71:0e:de:09:fb:fc:1c:8b:e7:fb:14:9f:e7:c7:c2:69: 8e:08:2a:86:c3:58:da:b9:8b:59:9e:68:06:4c:0d:d7:b2:14: d0:10:7d:f7:25:c3:99:5c:d2:e1:fe:23:e4:e5:3a:eb:de:5e: c3:36:ff:28 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUaBs/eYPMYpuPLMN7k/gn0XHU2/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0 ZTQzYWUxYjAeFw0yNjAxMDYwODMyMThaFw0yNzAxMDUwODM3MThaMDMxMTAvBgNV BAMTKEE3QjYwNzhBQzI1QjYyNjY0M0FBNUIzMjM2RTI0NEVFQkVGNjQ2NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBIn0CIvkDZGc5eINtJDCRXNWI E4PXQXy7emmeogAqvEMyCM9sQspUMMWBrU9ZXKgXz48cylnICxEdweCn54Uhc3Sb A4d+kRf5X9hfhHBzaBrbfzYQtthXZazAaUkDX+wxrlMk8pv2DJhmFkFk5kUYjw8t 0ayw0yd5ulBnkyXntexduXnJfvK2slUMO/7vM7KMWZ8SfTQw1mgOMhNE6Ys4jh6f ABNQCGm5sUDs/+syK4jP0mZFeGhXlhUNYknCp/A016zWwiPf5I8wDHCMS2RC7sAc 3tE5fckPt2rpWQWyBrRcGkJ5o9CSz2WU/Q1OojaFEDj5bXihJs7+Cuhgm5+HAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUp7YHisJbYmZDqlsyNuJE7r72Rk4wHwYDVR0j BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1 RHJocy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTMzYjJmZDct MzFjMS00NTFjLTgyODgtYzFhYTBhYTEyNzUwLzAvMzEzOTM0MmUzMjM2MmUzMjMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCGhUw DQYJKoZIhvcNAQELBQADggEBAEJjJ6Deh1GfsyZqxihMZx6rnEIl6F1Pt4tIhCke 0lRO5uWd4hYOV3xXcK7Qn/Xvd7kJ9/5o66taYaw5CVivqIMavChcthhtArY751e1 NJufxd+vrb4xMs22kV7AmUHuBdhgdsPWNK16cuhLAJ7cGE3jQnqSGDN/52Ycq9cj G4Wr7HoWYXAHmhjw5Leqb/rLENrQarFzPdjdZi/BxaTroSk0GfLhFa6NJcZjETKt C4SKdKwJ+xGwwD1D7dldAEcZvbUJpsAAaq90cQ7eCfv8HIvn+xSf58fCaY4IKobD WNq5i1meaAZMDdeyFNAQffclw5lc0uH+I+TlOuveXsM2/yg= -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:31 2026 by rpki-client