This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/39312e3230392e3137392e302f32342d3234203d3e203633313939.roa File: 39312e3230392e3137392e302f32342d3234203d3e203633313939.roa (raw, json) Hash identifier: 1IBiMmag6CSpx69irZgwAsfgDsUdSpIifeUy5W/Lyog= Subject key identifier: F2:78:38:AB:E9:EA:36:07:21:02:5A:77:F1:AE:0E:11:6C:CF:8D:13 Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Certificate serial: 741807BE1AB738F076966FFD6970AF49AFB3E052 Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/39312e3230392e3137392e302f32342d3234203d3e203633313939.roa Signing time: Thu 25 Dec 2025 03:30:27 +0000 ROA not before: Thu 25 Dec 2025 03:25:27 +0000 ROA not after: Thu 24 Dec 2026 03:30:27 +0000 asID: 63199 IP address blocks: 91.209.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:18:07:be:1a:b7:38:f0:76:96:6f:fd:69:70:af:49:af:b3:e0:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Validity Not Before: Dec 25 03:25:27 2025 GMT Not After : Dec 24 03:30:27 2026 GMT Subject: CN=F27838ABE9EA360721025A77F1AE0E116CCF8D13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8f:62:86:c6:54:c8:0a:23:0e:19:88:b4:cc: 13:cc:8b:3b:7f:b4:67:40:c2:19:4a:2f:f8:c4:45: 8c:2d:ea:cc:1d:60:5f:43:1b:40:6c:2a:38:46:33: f8:41:5a:94:a8:2f:36:40:25:75:e0:ba:0e:96:e4: 95:67:14:99:ff:34:ef:e6:27:63:b0:10:69:d6:e3: da:02:fc:c8:56:fb:05:28:f5:ca:bc:5b:76:c0:9a: 10:77:93:08:d9:d1:fc:29:82:9d:c7:e5:c0:97:88: bc:e4:c1:bb:e8:85:38:73:b5:e5:a7:91:0a:e2:b4: 7d:9b:dd:c8:9e:a4:4c:5f:34:cf:d6:e7:c3:66:de: 6f:99:e9:01:60:67:2e:d0:ef:ec:8a:24:5a:06:6e: 7a:b2:76:e2:38:ad:cd:84:10:f7:0b:1a:6c:31:6c: 4e:dd:1c:57:43:31:b8:62:e8:f9:04:f1:8d:1d:63: 01:54:ce:75:fb:c3:41:9e:8d:2a:43:1e:62:36:3c: 7c:94:a7:45:82:19:7e:54:fa:4e:65:5a:8b:ca:20: 78:69:33:eb:40:d4:96:b4:9d:3f:98:d9:6c:d8:64: 2e:cb:12:82:f8:88:5f:48:16:40:be:45:a1:c9:94: 60:6d:84:8a:83:96:4c:20:de:3f:d5:10:10:b5:63: f4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:78:38:AB:E9:EA:36:07:21:02:5A:77:F1:AE:0E:11:6C:CF:8D:13 X509v3 Authority Key Identifier: keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/39312e3230392e3137392e302f32342d3234203d3e203633313939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.179.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:f2:11:3b:26:cd:ef:a6:b4:a0:2e:e2:5f:be:f8:e2:db:ce: 99:e1:10:4b:34:be:32:1a:7f:63:c1:d0:2e:80:aa:1c:4d:8d: 40:9e:4c:38:8c:de:90:b0:d1:f6:5b:08:fc:f0:53:e2:f0:c1: 8c:9a:cc:cf:46:ad:ad:64:47:89:d7:72:dd:d6:a7:57:a2:fb: ab:17:bb:31:06:74:45:63:11:63:8b:a9:9f:10:63:ea:54:81: a5:56:cb:7d:42:d5:aa:8c:51:98:8c:27:a7:21:78:3a:d1:ac: 75:90:29:98:35:7f:9b:0e:f6:97:b6:85:a5:96:aa:bd:92:4b: 15:9d:55:c2:02:88:ec:92:51:82:bf:db:1a:7d:03:8c:ae:21: cc:f1:7b:f9:c0:c4:64:fc:0c:a3:dd:fb:4a:68:42:be:45:d3: ac:6a:0c:da:8a:26:09:fa:f1:38:39:24:da:34:27:8c:8d:cf: 92:a8:78:f3:1f:75:1f:e9:a4:d6:43:3d:03:f7:92:b2:49:71: 9b:3d:7b:56:35:75:f1:f3:c9:20:a7:7f:23:d8:64:c7:3e:ef: d8:f2:fa:d4:8d:93:3c:7a:c4:d2:45:b6:6d:82:ea:07:c9:19: ef:a4:3f:d7:c0:81:c3:ef:90:bd:bc:d7:21:40:72:ab:99:f1: e8:a5:2e:8c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUdBgHvhq3OPB2lm/9aXCvSa+z4FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0 ZTQzYWUxYjAeFw0yNTEyMjUwMzI1MjdaFw0yNjEyMjQwMzMwMjdaMDMxMTAvBgNV BAMTKEYyNzgzOEFCRTlFQTM2MDcyMTAyNUE3N0YxQUUwRTExNkNDRjhEMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCj2KGxlTICiMOGYi0zBPMizt/ tGdAwhlKL/jERYwt6swdYF9DG0BsKjhGM/hBWpSoLzZAJXXgug6W5JVnFJn/NO/m J2OwEGnW49oC/MhW+wUo9cq8W3bAmhB3kwjZ0fwpgp3H5cCXiLzkwbvohThzteWn kQritH2b3ciepExfNM/W58Nm3m+Z6QFgZy7Q7+yKJFoGbnqyduI4rc2EEPcLGmwx bE7dHFdDMbhi6PkE8Y0dYwFUznX7w0GejSpDHmI2PHyUp0WCGX5U+k5lWovKIHhp M+tA1Ja0nT+Y2WzYZC7LEoL4iF9IFkC+RaHJlGBthIqDlkwg3j/VEBC1Y/TnAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU8ng4q+nqNgchAlp38a4OEWzPjRMwHwYDVR0j BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1 RHJocy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTMzYjJmZDct MzFjMS00NTFjLTgyODgtYzFhYTBhYTEyNzUwLzAvMzkzMTJlMzIzMDM5MmUzMTM3 MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzEzOTM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA W9GzMA0GCSqGSIb3DQEBCwUAA4IBAQCb8hE7Js3vprSgLuJfvvji286Z4RBLNL4y Gn9jwdAugKocTY1Ankw4jN6QsNH2Wwj88FPi8MGMmszPRq2tZEeJ13Ld1qdXovur F7sxBnRFYxFji6mfEGPqVIGlVst9QtWqjFGYjCenIXg60ax1kCmYNX+bDvaXtoWl lqq9kksVnVXCAojsklGCv9safQOMriHM8Xv5wMRk/Ayj3ftKaEK+RdOsagzaiiYJ +vE4OSTaNCeMjc+SqHjzH3Uf6aTWQz0D95KySXGbPXtWNXXx88kgp38j2GTHPu/Y 8vrUjZM8esTSRbZtguoHyRnvpD/XwIHD75C9vNchQHKrmfHopS6M -----END CERTIFICATE-----Generated at Mon Jan 19 17:10:33 2026 by rpki-client