This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139382e302f32342d3234203d3e203136353039.roa File: 3139332e3130392e3139382e302f32342d3234203d3e203136353039.roa (raw, json) Hash identifier: l1t41e/cLnDtlPT198EDfaZzdgWf88RCjRjRRL+mJAw= Subject key identifier: 09:7C:BA:28:00:42:7A:27:29:75:65:56:BB:D9:2D:C3:6F:8A:54:43 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 4A5E500EF382A2FF35CCD276618FF76879DA968E Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139382e302f32342d3234203d3e203136353039.roa Signing time: Sat 13 Dec 2025 09:11:32 +0000 ROA not before: Sat 13 Dec 2025 09:06:32 +0000 ROA not after: Sat 12 Dec 2026 09:11:32 +0000 asID: 16509 IP address blocks: 193.109.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:5e:50:0e:f3:82:a2:ff:35:cc:d2:76:61:8f:f7:68:79:da:96:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:32 2025 GMT Not After : Dec 12 09:11:32 2026 GMT Subject: CN=097CBA2800427A2729756556BBD92DC36F8A5443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:24:7c:56:bb:9e:95:08:13:eb:07:a7:d8:fc: 66:05:76:7b:f6:93:26:df:65:8f:e9:7e:22:e7:96: da:c7:8d:69:92:f0:6e:fe:16:b9:1e:98:b5:37:44: 19:70:6c:a3:1d:72:1e:03:2d:28:3a:fd:b9:07:9b: fa:08:e9:9e:dd:35:2b:df:ad:22:8d:88:8c:b5:2b: 68:34:1b:32:51:98:26:6f:51:6f:42:f5:66:c8:5a: c1:22:74:7c:c5:45:4d:b8:65:eb:c6:2e:c6:8d:bd: da:90:05:fb:a2:00:1e:04:e5:44:a3:65:d3:92:42: d6:25:c1:d7:8c:50:16:af:39:1d:33:31:2f:9a:b7: 67:1a:14:53:b6:e1:5a:14:c5:a0:db:a1:ca:ca:07: 15:4b:85:09:10:c2:74:1f:d0:05:de:09:81:74:ac: d0:92:fc:9b:b7:52:94:e2:c9:36:e4:a4:e0:87:4f: 29:0c:68:75:8f:1b:10:5e:8c:95:13:c3:83:6b:93: 42:86:17:72:cf:02:1a:4b:92:2e:ad:ae:bb:31:37: 02:66:a5:07:fb:86:6d:d6:82:10:71:a2:73:4f:b6: 34:3e:90:aa:c1:c7:42:7c:4c:1e:9c:5f:f8:63:74: b9:07:a0:69:b9:73:1e:2c:9f:04:a9:d8:e6:69:db: e2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7C:BA:28:00:42:7A:27:29:75:65:56:BB:D9:2D:C3:6F:8A:54:43 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139382e302f32342d3234203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.198.0/24 Signature Algorithm: sha256WithRSAEncryption 94:4d:56:fe:e6:a9:c2:37:4d:73:3d:b4:a1:da:71:59:5c:11: 9f:dc:4c:24:f0:f2:9f:e1:13:df:dd:04:37:f9:a6:c5:62:10: 30:e5:a4:d7:93:3f:18:fe:83:bd:26:8f:d6:81:1e:78:e4:53: 65:19:5d:5c:ea:5b:96:66:8d:5e:59:c4:db:56:46:44:6e:4d: f3:24:e8:bf:cf:8f:6d:40:85:ec:61:14:86:76:02:af:f1:54: 96:ab:c0:4c:a8:2e:2a:ac:dc:c2:7c:d6:01:9b:8e:d5:2a:d9: 83:e3:7d:30:75:96:d7:48:e9:7e:e4:b6:9c:ce:e2:a3:fd:95: 55:17:a6:fb:1d:7d:c4:18:7f:c5:2c:cc:a7:84:34:9d:20:b4: 75:d2:a2:97:a8:70:31:a2:37:ad:04:03:1a:0a:74:6d:99:2b: 88:ae:10:54:b2:5d:ac:ff:a1:3c:42:40:6c:bc:ef:a8:7d:5a: e4:88:7a:9a:58:e2:8d:d5:d7:56:ba:1d:ec:82:fc:a5:33:71: 44:12:5e:f8:9e:f2:7a:63:48:83:cf:17:71:e8:66:e5:12:7f: 8f:f0:a3:a8:62:38:84:ad:a8:7e:5c:a2:84:15:40:92:ce:01: 17:1a:b2:bf:e2:bf:81:8c:fb:d7:a6:ac:06:62:04:3b:a5:b4: bd:01:8e:a2 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUSl5QDvOCov81zNJ2YY/3aHnalo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzJaFw0yNjEyMTIwOTExMzJaMDMxMTAvBgNV BAMTKDA5N0NCQTI4MDA0MjdBMjcyOTc1NjU1NkJCRDkyREMzNkY4QTU0NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPJHxWu56VCBPrB6fY/GYFdnv2 kybfZY/pfiLnltrHjWmS8G7+FrkemLU3RBlwbKMdch4DLSg6/bkHm/oI6Z7dNSvf rSKNiIy1K2g0GzJRmCZvUW9C9WbIWsEidHzFRU24ZevGLsaNvdqQBfuiAB4E5USj ZdOSQtYlwdeMUBavOR0zMS+at2caFFO24VoUxaDbocrKBxVLhQkQwnQf0AXeCYF0 rNCS/Ju3UpTiyTbkpOCHTykMaHWPGxBejJUTw4Nrk0KGF3LPAhpLki6trrsxNwJm pQf7hm3WghBxonNPtjQ+kKrBx0J8TB6cX/hjdLkHoGm5cx4snwSp2OZp2+KTAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUCXy6KABCeicpdWVWu9ktw2+KVEMwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzOTMzMmUzMTMwMzkyZTMx MzkzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzYzNTMwMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADBbcYwDQYJKoZIhvcNAQELBQADggEBAJRNVv7mqcI3TXM9tKHacVlcEZ/cTCTw 8p/hE9/dBDf5psViEDDlpNeTPxj+g70mj9aBHnjkU2UZXVzqW5ZmjV5ZxNtWRkRu TfMk6L/Pj21AhexhFIZ2Aq/xVJarwEyoLiqs3MJ81gGbjtUq2YPjfTB1ltdI6X7k tpzO4qP9lVUXpvsdfcQYf8UszKeENJ0gtHXSopeocDGiN60EAxoKdG2ZK4iuEFSy Xaz/oTxCQGy876h9WuSIeppY4o3V11a6HeyC/KUzcUQSXvie8npjSIPPF3HoZuUS f4/wo6hiOIStqH5cooQVQJLOARcasr/iv4GM+9emrAZiBDultL0BjqI= -----END CERTIFICATE-----Generated at Tue Dec 16 16:19:38 2025 by rpki-client