This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132312e302f32342d3234203d3e20323134303235.roa File: 3231332e3135372e3132312e302f32342d3234203d3e20323134303235.roa (raw, json) Hash identifier: RPUL02BBqfEuAeIXoMzKuNRghBYAEq7hSrl5xqQtZ9Y= Subject key identifier: 01:A1:9C:13:B5:87:D7:8D:1D:8B:79:25:85:79:50:E5:BC:CF:D1:0B Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 44A7E905A67B40034C67BF7A8510E033471DF3C9 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132312e302f32342d3234203d3e20323134303235.roa Signing time: Sun 18 Jan 2026 06:15:23 +0000 ROA not before: Sun 18 Jan 2026 06:10:23 +0000 ROA not after: Sun 17 Jan 2027 06:15:23 +0000 asID: 214025 IP address blocks: 213.157.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a7:e9:05:a6:7b:40:03:4c:67:bf:7a:85:10:e0:33:47:1d:f3:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Jan 18 06:10:23 2026 GMT Not After : Jan 17 06:15:23 2027 GMT Subject: CN=01A19C13B587D78D1D8B7925857950E5BCCFD10B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ee:b3:94:8b:93:b3:62:b6:ec:91:56:b7:de: 14:1f:67:66:0e:b2:3f:c0:3b:b2:be:3b:88:3a:34: e9:70:23:f6:c6:25:98:0a:f4:e2:62:ae:74:d8:05: 9b:25:23:22:68:c3:76:21:c8:8e:a0:76:76:49:90: ff:0e:82:26:06:ee:79:a8:77:ca:e8:b3:be:5a:22: ea:1c:9a:1a:2f:31:54:93:27:12:7c:27:62:0e:0f: b6:ac:a3:f3:f0:37:e1:9d:2b:93:df:d0:16:66:64: c4:52:68:c6:5a:31:55:bf:aa:69:ef:5f:0d:f4:dc: 79:2f:61:77:2f:c0:77:8f:c1:22:f6:d0:b7:6c:85: 76:f7:f8:74:7b:45:cd:f5:fc:ba:68:9b:94:4a:76: 8f:25:e9:d2:cb:1c:64:92:7f:0f:b3:d3:15:4f:c7: c7:bd:95:48:79:8f:63:0e:34:30:6f:1b:77:94:31: d0:e0:ec:01:6e:66:33:fe:7b:96:09:39:06:44:20: fa:92:20:45:6f:2a:10:2e:4c:8b:e8:3e:62:f9:36: 95:7f:4e:d2:20:01:f2:2d:2d:83:5c:7a:56:4d:e6: 91:d8:74:00:db:b8:ac:cd:ca:ae:c4:43:d9:60:98: a4:2d:21:dd:c3:79:f2:80:f0:d0:4b:bf:c6:f3:ef: 81:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A1:9C:13:B5:87:D7:8D:1D:8B:79:25:85:79:50:E5:BC:CF:D1:0B X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132312e302f32342d3234203d3e20323134303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.157.121.0/24 Signature Algorithm: sha256WithRSAEncryption 05:84:e0:89:74:1d:65:54:aa:d4:47:57:d6:82:34:94:d9:85: 49:f6:4e:43:fb:9a:94:a0:b5:58:27:28:86:50:bc:f9:a6:80: 8d:a7:24:75:8b:1d:e2:b7:53:83:dd:10:e7:a3:5b:f8:4d:81: c9:3c:46:33:0e:e4:6d:9c:8c:b3:cf:42:74:6b:90:7e:36:b8: 57:ef:e5:4f:f0:b2:d4:e5:8f:8d:96:00:14:84:b1:8a:62:91: 6d:2b:47:6a:e9:47:07:97:fa:9d:cb:7b:cf:d6:47:85:89:ee: 17:de:7f:60:fe:6b:09:ef:0d:b6:14:f0:70:de:0f:38:fb:07: da:d8:5d:55:b6:a6:ab:14:7c:e7:c9:d4:a1:a3:ff:9e:ed:99: 3e:0c:d5:89:78:c3:7d:4b:2a:91:59:35:c6:e7:49:16:da:e8: 0f:f2:2a:4d:13:89:31:e7:69:d9:f8:5f:54:86:7b:bd:c1:74: b4:71:9d:8e:1b:d7:52:26:1e:3c:75:f4:ca:93:1c:56:ae:09: 88:47:e9:da:27:00:ea:36:20:9b:53:c4:f3:34:9b:68:0a:de: f7:a9:38:66:f4:b0:7f:80:40:a3:67:4d:99:ff:75:d0:cd:cf: ab:cf:1e:c8:48:1e:10:2a:d0:e0:70:36:b2:21:cd:4b:2b:74: ba:02:22:a8 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIURKfpBaZ7QANMZ796hRDgM0cd88kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNjAxMTgwNjEwMjNaFw0yNzAxMTcwNjE1MjNaMDMxMTAvBgNV BAMTKDAxQTE5QzEzQjU4N0Q3OEQxRDhCNzkyNTg1Nzk1MEU1QkNDRkQxMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi7rOUi5OzYrbskVa33hQfZ2YO sj/AO7K+O4g6NOlwI/bGJZgK9OJirnTYBZslIyJow3YhyI6gdnZJkP8OgiYG7nmo d8ros75aIuocmhovMVSTJxJ8J2IOD7aso/PwN+GdK5Pf0BZmZMRSaMZaMVW/qmnv Xw303HkvYXcvwHePwSL20LdshXb3+HR7Rc31/Lpom5RKdo8l6dLLHGSSfw+z0xVP x8e9lUh5j2MONDBvG3eUMdDg7AFuZjP+e5YJOQZEIPqSIEVvKhAuTIvoPmL5NpV/ TtIgAfItLYNcelZN5pHYdADbuKzNyq7EQ9lgmKQtId3DefKA8NBLv8bz74EXAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUAaGcE7WH140di3klhXlQ5bzP0QswHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUt MGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJiZTI1LzAvMzIzMTMzMmUzMTM1MzcyZTMx MzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDMwMzIzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANWdeTANBgkqhkiG9w0BAQsFAAOCAQEABYTgiXQdZVSq1EdX1oI0lNmFSfZO Q/ualKC1WCcohlC8+aaAjackdYsd4rdTg90Q56Nb+E2ByTxGMw7kbZyMs89CdGuQ fja4V+/lT/Cy1OWPjZYAFISximKRbStHaulHB5f6nct7z9ZHhYnuF95/YP5rCe8N thTwcN4POPsH2thdVbamqxR858nUoaP/nu2ZPgzViXjDfUsqkVk1xudJFtroD/Iq TROJMedp2fhfVIZ7vcF0tHGdjhvXUiYePHX0ypMcVq4JiEfp2icA6jYgm1PE8zSb aAre96k4ZvSwf4BAo2dNmf910M3Pq88eyEgeECrQ4HA2siHNSyt0ugIiqA== -----END CERTIFICATE-----Generated at Mon Jan 19 05:21:49 2026 by rpki-client