This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139392e302f32342d3234203d3e20323132323338.roa File: 3139332e3130392e3139392e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: SWw6O0E7PBA7ny94Tat3mQ5OG/KNHvpcTKdh/O3KKis= Subject key identifier: 9D:B7:45:E6:7D:95:79:F5:29:2B:09:AB:23:67:D8:A0:1C:58:23:3E Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 4CF034B347B90FB6DD57515E531E6994B4C82460 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139392e302f32342d3234203d3e20323132323338.roa Signing time: Sat 13 Dec 2025 09:11:32 +0000 ROA not before: Sat 13 Dec 2025 09:06:32 +0000 ROA not after: Sat 12 Dec 2026 09:11:32 +0000 asID: 212238 IP address blocks: 193.109.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f0:34:b3:47:b9:0f:b6:dd:57:51:5e:53:1e:69:94:b4:c8:24:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:32 2025 GMT Not After : Dec 12 09:11:32 2026 GMT Subject: CN=9DB745E67D9579F5292B09AB2367D8A01C58233E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:90:e1:11:7e:d0:40:e0:05:f0:73:7e:cf:36: d8:0c:af:4c:e0:24:11:7a:cf:d1:55:65:92:80:44: b9:f7:9f:bf:17:cb:d2:d9:16:8b:03:1c:a1:2d:a3: d0:58:ed:9a:a6:7a:aa:2d:c6:ee:1e:87:1c:97:f0: 9f:90:18:ae:7c:17:ea:1a:00:d0:9f:2c:f8:3c:6d: ee:31:e6:00:2c:e8:c2:2b:54:1b:e9:c7:30:82:69: 62:3a:3f:26:ad:4c:67:c7:12:9a:ec:dd:fc:c9:ef: db:52:96:86:4a:a7:a3:76:63:95:b0:bf:08:7b:7b: ae:d3:7e:46:57:58:6d:8b:be:a8:92:7e:d8:55:fb: bc:ff:6f:68:c5:57:48:5b:db:b2:dc:73:0d:b9:39: ba:5d:43:20:e7:b7:de:f5:16:3e:be:bf:2e:3a:ca: 30:e0:2c:b1:bc:25:b3:8f:26:4e:7b:55:a2:45:40: 03:6c:3d:da:0f:48:30:b9:8a:1f:32:a6:c3:d1:28: 60:be:74:16:24:47:cd:bc:f1:2a:eb:53:49:13:ec: 6f:26:2a:44:f5:ce:60:40:27:46:ed:2b:2d:dd:c7: 37:5c:36:84:bb:56:f6:1a:c1:cc:10:a7:ab:ed:86: ec:66:75:8a:4b:f5:54:30:a6:d7:58:04:a1:2a:6c: 5d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B7:45:E6:7D:95:79:F5:29:2B:09:AB:23:67:D8:A0:1C:58:23:3E X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139392e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.199.0/24 Signature Algorithm: sha256WithRSAEncryption 73:16:f6:23:d3:bd:6e:06:67:03:31:4f:6f:af:d2:d8:8e:b9: 25:cf:74:fb:0e:e9:ad:2f:98:4f:a9:a3:29:b7:62:6b:0c:25: 4e:95:3a:e0:7a:e1:c7:c3:ca:7b:66:f7:3c:52:05:73:40:9b: 9a:2e:ac:c4:2d:0d:a1:34:78:aa:b0:c1:1a:76:38:15:47:7b: 04:38:d9:15:06:92:bb:2b:8b:0e:89:86:7d:3d:d7:b3:11:a9: 3b:98:2e:f1:b5:f1:13:9e:a2:d6:8a:a7:39:c6:f8:0e:38:39: 23:97:10:29:54:92:78:27:9e:24:fc:56:9f:58:03:60:98:20: f7:20:46:95:d9:b2:66:74:19:f6:f7:95:84:4f:e7:a3:10:af: d4:72:18:6f:2b:01:72:a6:c8:5f:38:9a:48:d8:d6:c1:53:83: eb:3c:ad:05:d9:5b:fd:5c:e3:68:73:91:be:14:10:76:8f:d7: 97:9e:a3:fa:f5:ea:80:89:00:71:77:19:83:9c:ce:88:bc:db: c7:4d:e5:bc:72:67:5b:11:ad:4d:23:2c:ad:43:c3:f9:c5:f7: 83:f3:b2:3c:03:4d:a2:4d:84:0f:5c:26:43:37:c8:71:be:ea: c5:db:87:6e:89:82:ee:03:66:bf:e5:d6:22:ef:da:54:7c:2a: 4e:ac:10:dd -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUTPA0s0e5D7bdV1FeUx5plLTIJGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzJaFw0yNjEyMTIwOTExMzJaMDMxMTAvBgNV BAMTKDlEQjc0NUU2N0Q5NTc5RjUyOTJCMDlBQjIzNjdEOEEwMUM1ODIzM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMkOERftBA4AXwc37PNtgMr0zg JBF6z9FVZZKARLn3n78Xy9LZFosDHKEto9BY7Zqmeqotxu4ehxyX8J+QGK58F+oa ANCfLPg8be4x5gAs6MIrVBvpxzCCaWI6PyatTGfHEprs3fzJ79tSloZKp6N2Y5Ww vwh7e67TfkZXWG2LvqiSfthV+7z/b2jFV0hb27Lccw25ObpdQyDnt971Fj6+vy46 yjDgLLG8JbOPJk57VaJFQANsPdoPSDC5ih8ypsPRKGC+dBYkR8288SrrU0kT7G8m KkT1zmBAJ0btKy3dxzdcNoS7VvYawcwQp6vthuxmdYpL9VQwptdYBKEqbF0/AgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUnbdF5n2VefUpKwmrI2fYoBxYIz4wHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzOTMzMmUzMTMwMzkyZTMx MzkzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMyMzMzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMFtxzANBgkqhkiG9w0BAQsFAAOCAQEAcxb2I9O9bgZnAzFPb6/S2I65Jc90 +w7prS+YT6mjKbdiawwlTpU64Hrhx8PKe2b3PFIFc0Cbmi6sxC0NoTR4qrDBGnY4 FUd7BDjZFQaSuyuLDomGfT3XsxGpO5gu8bXxE56i1oqnOcb4Djg5I5cQKVSSeCee JPxWn1gDYJgg9yBGldmyZnQZ9veVhE/noxCv1HIYbysBcqbIXziaSNjWwVOD6zyt Bdlb/VzjaHORvhQQdo/Xl56j+vXqgIkAcXcZg5zOiLzbx03lvHJnWxGtTSMsrUPD +cX3g/OyPANNok2ED1wmQzfIcb7qxduHbomC7gNmv+XWIu/aVHwqTqwQ3Q== -----END CERTIFICATE-----Generated at Tue Dec 16 16:19:46 2025 by rpki-client