This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e20383334.roa File: 3231332e3133392e36392e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: 4avklCjVMylCEeeI60KDAm2gKF0wrDefWHJR4YHtwEk= Subject key identifier: 62:4F:DA:51:5C:BF:39:B9:AA:27:B8:31:35:FD:87:3C:34:83:B7:8B Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e Certificate serial: 012DB6CF8822795F751E647F5D27B3145EE73AEA Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e20383334.roa Signing time: Thu 01 Jan 2026 00:11:20 +0000 ROA not before: Thu 01 Jan 2026 00:06:20 +0000 ROA not after: Thu 31 Dec 2026 00:11:20 +0000 asID: 834 IP address blocks: 213.139.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 06:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:2d:b6:cf:88:22:79:5f:75:1e:64:7f:5d:27:b3:14:5e:e7:3a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e Validity Not Before: Jan 1 00:06:20 2026 GMT Not After : Dec 31 00:11:20 2026 GMT Subject: CN=624FDA515CBF39B9AA27B83135FD873C3483B78B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:94:2d:22:a0:39:3e:20:87:aa:71:62:81:76: f9:d1:fb:65:f8:05:41:d7:eb:f7:8e:0d:b7:f0:9f: 42:48:f7:1d:15:8c:88:24:c2:e4:fe:e2:20:31:2b: f8:01:93:68:c4:74:c4:c9:1a:e2:d7:65:c7:60:bf: f2:f7:67:39:96:b8:21:1a:68:fb:74:5a:db:37:b4: a9:9f:54:80:2b:73:43:61:48:d0:de:9d:7d:c7:42: bb:5c:01:53:21:8e:ab:e7:13:fb:06:61:a8:e8:e2: 95:8c:81:93:02:22:9f:ff:3c:ce:90:92:0e:ec:57: b8:9d:2c:04:b6:64:9a:e0:3f:63:65:8d:06:7d:93: 7b:33:72:bc:e6:8a:e5:a9:fd:0b:02:0f:48:c0:4f: cb:30:ee:50:60:69:6c:07:1e:d8:27:c5:bb:05:c4: 42:0a:aa:f6:59:81:da:c5:08:cd:ec:c6:c8:9e:b0: bf:96:d2:9b:58:69:0e:56:40:d5:3f:84:8b:6b:10: 8f:56:0f:41:1a:ba:7b:20:ee:c5:36:f9:e3:0b:6a: d2:20:f0:f0:dd:73:3a:ea:c7:fb:73:81:87:52:80: 51:cc:4c:cf:b3:6a:17:20:c5:5a:39:3e:4b:e5:47: ce:fb:7f:cc:09:67:a8:e3:b6:4f:ee:99:ad:26:9f: c8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4F:DA:51:5C:BF:39:B9:AA:27:B8:31:35:FD:87:3C:34:83:B7:8B X509v3 Authority Key Identifier: keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.139.69.0/24 Signature Algorithm: sha256WithRSAEncryption 13:00:8a:49:40:c3:54:7d:fe:9f:ab:0b:5c:5c:39:e3:03:82: 7a:05:27:2d:0a:8e:b8:42:fe:ce:a3:a1:bc:80:47:36:d1:66: 35:78:ff:9d:1b:c2:90:6e:37:a8:4c:16:04:2e:37:3d:68:0a: ff:5e:e3:61:67:34:72:11:6d:be:5e:8c:91:3c:62:94:d9:50: 22:7f:67:3c:ec:09:b9:ec:2c:ec:91:5b:9d:21:d6:48:78:43: 1f:86:49:1e:a7:55:95:20:a0:39:91:2a:b6:73:2f:19:b4:25: b4:b0:15:e8:b5:ab:16:39:35:ec:00:89:0c:e2:bf:85:50:37: 90:d0:0f:ed:48:d2:19:c8:1f:5f:ee:16:13:c2:0d:90:db:70: 9c:3f:3d:58:5d:57:85:70:a7:8b:d0:2e:61:34:29:ed:33:e6: e0:10:df:35:e3:21:07:6b:f6:a6:f8:b8:41:42:25:bc:ad:12: 4e:9b:45:e8:d8:0d:4b:8d:7b:fd:a1:19:1a:68:21:1a:49:38: 72:c6:1a:03:88:c2:f4:33:e8:ee:51:2a:82:a7:f4:13:89:ad: a7:9c:d8:39:21:f4:24:51:44:ed:0d:d7:76:36:0c:82:fa:e3: 46:0a:9f:06:2f:ed:2f:43:4a:33:be:30:43:f8:92:38:14:e2: 73:86:ef:74 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUAS22z4gieV91HmR/XSezFF7nOuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk NDhjN2QzZTAeFw0yNjAxMDEwMDA2MjBaFw0yNjEyMzEwMDExMjBaMDMxMTAvBgNV BAMTKDYyNEZEQTUxNUNCRjM5QjlBQTI3QjgzMTM1RkQ4NzNDMzQ4M0I3OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCklC0ioDk+IIeqcWKBdvnR+2X4 BUHX6/eODbfwn0JI9x0VjIgkwuT+4iAxK/gBk2jEdMTJGuLXZcdgv/L3ZzmWuCEa aPt0Wts3tKmfVIArc0NhSNDenX3HQrtcAVMhjqvnE/sGYajo4pWMgZMCIp//PM6Q kg7sV7idLAS2ZJrgP2NljQZ9k3szcrzmiuWp/QsCD0jAT8sw7lBgaWwHHtgnxbsF xEIKqvZZgdrFCM3sxsiesL+W0ptYaQ5WQNU/hItrEI9WD0Eaunsg7sU2+eMLatIg 8PDdczrqx/tzgYdSgFHMTM+zahcgxVo5PkvlR877f8wJZ6jjtk/uma0mn8i1AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUYk/aUVy/ObmqJ7gxNf2HPDSDt4swHwYDVR0j BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT TWZUNC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM2 MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADVi0Uw DQYJKoZIhvcNAQELBQADggEBABMAiklAw1R9/p+rC1xcOeMDgnoFJy0KjrhC/s6j obyARzbRZjV4/50bwpBuN6hMFgQuNz1oCv9e42FnNHIRbb5ejJE8YpTZUCJ/Zzzs CbnsLOyRW50h1kh4Qx+GSR6nVZUgoDmRKrZzLxm0JbSwFei1qxY5NewAiQziv4VQ N5DQD+1I0hnIH1/uFhPCDZDbcJw/PVhdV4Vwp4vQLmE0Ke0z5uAQ3zXjIQdr9qb4 uEFCJbytEk6bRejYDUuNe/2hGRpoIRpJOHLGGgOIwvQz6O5RKoKn9BOJraec2Dkh 9CRRRO0N13Y2DIL640YKnwYv7S9DSjO+MEP4kjgU4nOG73Q= -----END CERTIFICATE-----Generated at Tue Jan 20 15:21:46 2026 by rpki-client