This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139362e302f32342d3234203d3e203230333236.roa File: 3139332e3130392e3139362e302f32342d3234203d3e203230333236.roa (raw, json) Hash identifier: /0Nl8vJiRWPtfIxpC0V4O3yRVdHGhT75doGDUNaKkh8= Subject key identifier: 5A:0D:B5:48:0E:E9:B4:D8:0B:D7:63:29:11:18:07:C0:F4:73:42:FE Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 4A5D0C2314A8CA47C8F66D5D6E11A92415EA1396 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139362e302f32342d3234203d3e203230333236.roa Signing time: Sat 13 Dec 2025 09:11:29 +0000 ROA not before: Sat 13 Dec 2025 09:06:29 +0000 ROA not after: Sat 12 Dec 2026 09:11:29 +0000 asID: 20326 IP address blocks: 193.109.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:5d:0c:23:14:a8:ca:47:c8:f6:6d:5d:6e:11:a9:24:15:ea:13:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:29 2025 GMT Not After : Dec 12 09:11:29 2026 GMT Subject: CN=5A0DB5480EE9B4D80BD76329111807C0F47342FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:08:66:7f:12:bb:fb:86:51:e0:82:99:62:25: 57:0b:60:b5:54:08:26:64:59:8c:ac:ac:cb:84:31: d2:55:f3:a4:d3:00:9d:fa:1b:2e:1f:c9:2d:23:a2: 7d:17:9b:35:c8:b7:88:de:18:55:15:12:c2:64:ff: a4:fc:ab:e4:14:5c:50:83:c9:4b:32:f0:d2:f7:7a: 9c:b9:71:27:4e:93:f1:d3:ff:94:bd:6a:b1:f7:0f: 11:92:f2:8c:47:53:68:f4:45:91:7b:a9:08:17:92: 92:ac:72:a4:fd:4c:a8:d6:45:cb:51:63:ad:50:ed: 7d:e5:ae:8f:1e:9f:a1:0f:69:e0:b5:ce:df:08:b5: c8:d9:05:07:9e:4b:f8:0a:6c:ba:20:b8:82:1d:ce: b4:9a:7a:13:5f:29:9f:84:53:d6:c4:42:62:a9:d8: 7e:4c:6f:90:f2:3a:1a:f7:aa:18:22:a2:2e:07:6c: 84:88:fb:82:d8:72:4e:34:3b:2c:ce:78:97:b7:ab: e3:82:f5:6b:52:99:b4:92:03:e8:06:9a:83:b8:14: 5e:f3:d5:80:31:22:9c:4a:fd:ca:b7:6c:79:24:4c: 29:f7:e9:c5:b7:08:15:ab:86:43:a6:c4:16:2e:d7: c6:ec:b3:f8:fb:1a:0d:b5:35:6f:b8:e2:5e:0c:a6: dd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0D:B5:48:0E:E9:B4:D8:0B:D7:63:29:11:18:07:C0:F4:73:42:FE X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139362e302f32342d3234203d3e203230333236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.196.0/24 Signature Algorithm: sha256WithRSAEncryption 97:4f:d6:aa:e3:bc:5e:fe:2c:f1:45:15:05:56:b8:4a:5b:8e: ef:bf:e0:6c:cb:2c:b9:bf:4e:c9:b9:74:8d:b4:4c:c0:82:08: ce:0f:a4:59:6a:ce:57:88:24:13:c6:12:68:b7:2e:f8:11:b1: 2a:97:72:c6:92:a8:8d:9f:1b:45:67:c0:dd:ae:4e:0b:93:e1: 60:93:39:e1:da:ee:d3:93:95:35:e0:62:98:91:68:46:1d:ae: 32:e1:95:d1:53:59:e5:5d:37:1c:d2:e8:3a:b2:36:60:e6:c7: 33:52:8a:bf:0e:b7:d6:03:c3:ae:02:cc:25:75:e2:1f:60:c9: fd:b4:1c:e0:dd:5f:98:14:b5:94:e0:06:0b:ff:3f:f8:fa:0f: 98:ea:ea:8e:dc:c6:2d:84:ce:7b:9e:7e:a7:7c:ec:05:96:f0: b4:c2:93:87:41:4a:80:29:06:dd:1c:bf:f0:05:70:63:e7:56: b0:0f:e4:4a:17:74:e7:6e:7e:87:e2:c5:4b:eb:55:6c:17:d1: ed:be:9f:22:01:e2:c6:dd:f7:91:34:8b:21:1e:dd:ab:5b:e1: 72:c4:e5:62:4c:33:44:d0:a8:e4:86:17:89:47:26:56:58:7c: fe:ad:e5:4b:ee:c8:8e:51:42:20:5e:93:f8:93:fa:11:77:58: 9c:4c:02:5a -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUSl0MIxSoykfI9m1dbhGpJBXqE5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MjlaFw0yNjEyMTIwOTExMjlaMDMxMTAvBgNV BAMTKDVBMERCNTQ4MEVFOUI0RDgwQkQ3NjMyOTExMTgwN0MwRjQ3MzQyRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgCGZ/Erv7hlHggpliJVcLYLVU CCZkWYysrMuEMdJV86TTAJ36Gy4fyS0jon0XmzXIt4jeGFUVEsJk/6T8q+QUXFCD yUsy8NL3epy5cSdOk/HT/5S9arH3DxGS8oxHU2j0RZF7qQgXkpKscqT9TKjWRctR Y61Q7X3lro8en6EPaeC1zt8ItcjZBQeeS/gKbLoguIIdzrSaehNfKZ+EU9bEQmKp 2H5Mb5DyOhr3qhgioi4HbISI+4LYck40OyzOeJe3q+OC9WtSmbSSA+gGmoO4FF7z 1YAxIpxK/cq3bHkkTCn36cW3CBWrhkOmxBYu18bss/j7Gg21NW+44l4Mpt37AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUWg21SA7ptNgL12MpERgHwPRzQv4wHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzOTMzMmUzMTMwMzkyZTMx MzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMzMyMzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADBbcQwDQYJKoZIhvcNAQELBQADggEBAJdP1qrjvF7+LPFFFQVWuEpbju+/4GzL LLm/Tsm5dI20TMCCCM4PpFlqzleIJBPGEmi3LvgRsSqXcsaSqI2fG0VnwN2uTguT 4WCTOeHa7tOTlTXgYpiRaEYdrjLhldFTWeVdNxzS6DqyNmDmxzNSir8Ot9YDw64C zCV14h9gyf20HODdX5gUtZTgBgv/P/j6D5jq6o7cxi2Eznuefqd87AWW8LTCk4dB SoApBt0cv/AFcGPnVrAP5EoXdOdufofixUvrVWwX0e2+nyIB4sbd95E0iyEe3atb 4XLE5WJMM0TQqOSGF4lHJlZYfP6t5UvuyI5RQiBek/iT+hF3WJxMAlo= -----END CERTIFICATE-----Generated at Tue Dec 16 16:21:00 2025 by rpki-client