This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139342e3136392e3231372e302f32342d3234203d3e203538303631.roa File: 3139342e3136392e3231372e302f32342d3234203d3e203538303631.roa (raw, json) Hash identifier: fTt0FXeX1ymvT+HmhAHaB0YtY45dNayxLf/QWlJMXLg= Subject key identifier: 96:94:E9:B3:B5:6B:C8:65:DC:0A:89:4C:20:65:AE:C9:7F:AD:CE:5B Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 209D2A634E554BEA8FC707FB92C7C36A8BC29B74 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139342e3136392e3231372e302f32342d3234203d3e203538303631.roa Signing time: Sat 13 Dec 2025 09:11:31 +0000 ROA not before: Sat 13 Dec 2025 09:06:31 +0000 ROA not after: Sat 12 Dec 2026 09:11:31 +0000 asID: 58061 IP address blocks: 194.169.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:9d:2a:63:4e:55:4b:ea:8f:c7:07:fb:92:c7:c3:6a:8b:c2:9b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:31 2025 GMT Not After : Dec 12 09:11:31 2026 GMT Subject: CN=9694E9B3B56BC865DC0A894C2065AEC97FADCE5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:95:7b:a0:bc:a3:3b:73:81:7c:79:17:9c: 01:7b:ff:af:b3:2c:2d:e2:ee:38:dc:28:72:0e:56: a7:dc:28:6a:23:16:1a:16:bd:ed:81:f7:19:a1:29: 4a:05:84:0e:70:e6:76:63:26:f4:92:43:e8:75:58: 60:1b:3d:fd:42:6d:9b:e5:58:26:87:91:c3:1e:49: 69:9b:5b:ae:9c:32:86:08:11:f5:61:80:e0:5e:a9: df:15:42:6a:fa:a9:4c:b5:64:2c:57:03:3f:88:81: 37:39:b6:97:47:2e:c5:31:da:74:16:3f:78:cc:0f: c6:1f:bc:63:29:3d:e3:1e:12:c2:18:37:14:6d:83: 8c:e2:bc:e6:fa:76:71:be:be:f8:1f:3b:02:53:b4: 03:a7:60:37:5c:24:c0:64:1d:b4:11:a0:b6:67:9b: f5:41:64:dd:90:28:20:74:bb:99:7d:60:19:6c:a7: d2:ca:d9:cf:a2:36:38:a7:01:01:c3:82:94:30:e5: ca:18:38:4d:75:21:5b:5a:75:08:fa:d7:74:66:9b: 0e:2c:6d:1c:29:26:9b:14:8f:f4:64:97:f7:ff:6e: 24:6c:41:8f:a6:d2:7a:aa:cc:fe:af:88:9b:f5:c2: a1:fe:e9:ef:0c:96:8d:25:d4:3e:1f:e5:46:6a:7d: 51:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:94:E9:B3:B5:6B:C8:65:DC:0A:89:4C:20:65:AE:C9:7F:AD:CE:5B X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139342e3136392e3231372e302f32342d3234203d3e203538303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.169.217.0/24 Signature Algorithm: sha256WithRSAEncryption 92:9b:12:67:79:1d:fb:99:43:ac:d5:29:da:e4:3b:f9:53:61: 4b:ee:45:45:d9:2d:c3:f2:0d:14:04:29:c1:6c:a3:99:58:ce: 6b:d5:6a:60:0a:cb:0d:12:2d:68:66:32:bf:77:3d:c2:8d:2e: 98:e5:b4:16:47:84:9e:4e:0b:75:36:9e:fe:88:a5:90:f2:b2: 11:22:59:4b:c3:46:f8:1b:31:7a:c5:7d:93:ba:8d:8d:a5:43: ba:5c:d2:86:b0:0b:34:2a:93:df:af:f1:a0:63:1b:da:65:2d: ec:56:8f:2f:c6:b9:15:0e:60:3e:96:51:21:0f:be:7e:be:6d: fc:c9:c2:a4:ae:40:92:ca:35:86:5f:96:bb:0b:d9:67:d2:fc: 0f:55:d0:b2:9c:38:8a:64:8d:a3:81:7e:8f:a1:f9:ac:ba:e1: 4e:2a:f0:5f:35:af:d3:1c:d5:f6:ba:05:94:4e:0b:84:27:bb: 1a:ae:19:9b:96:1c:7b:e6:f9:90:da:91:6e:67:2d:3f:a6:2b: 81:f2:fa:49:9c:ab:74:38:5b:d3:f1:2c:21:a9:90:be:a9:e3: a8:23:99:7a:ba:76:de:4f:a6:9e:6c:0c:8d:cd:93:b8:2e:38: 0a:fb:f1:92:b0:f2:ad:e6:72:46:8e:66:12:9a:db:b7:35:28: ba:80:d3:26 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUIJ0qY05VS+qPxwf7ksfDaovCm3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzFaFw0yNjEyMTIwOTExMzFaMDMxMTAvBgNV BAMTKDk2OTRFOUIzQjU2QkM4NjVEQzBBODk0QzIwNjVBRUM5N0ZBRENFNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCujZV7oLyjO3OBfHkXnAF7/6+z LC3i7jjcKHIOVqfcKGojFhoWve2B9xmhKUoFhA5w5nZjJvSSQ+h1WGAbPf1CbZvl WCaHkcMeSWmbW66cMoYIEfVhgOBeqd8VQmr6qUy1ZCxXAz+IgTc5tpdHLsUx2nQW P3jMD8YfvGMpPeMeEsIYNxRtg4zivOb6dnG+vvgfOwJTtAOnYDdcJMBkHbQRoLZn m/VBZN2QKCB0u5l9YBlsp9LK2c+iNjinAQHDgpQw5coYOE11IVtadQj613Rmmw4s bRwpJpsUj/Rkl/f/biRsQY+m0nqqzP6viJv1wqH+6e8Mlo0l1D4f5UZqfVH/AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUlpTps7VryGXcColMIGWuyX+tzlswHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzOTM0MmUzMTM2MzkyZTMy MzEzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzgzMDM2MzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADCqdkwDQYJKoZIhvcNAQELBQADggEBAJKbEmd5HfuZQ6zVKdrkO/lTYUvuRUXZ LcPyDRQEKcFso5lYzmvVamAKyw0SLWhmMr93PcKNLpjltBZHhJ5OC3U2nv6IpZDy shEiWUvDRvgbMXrFfZO6jY2lQ7pc0oawCzQqk9+v8aBjG9plLexWjy/GuRUOYD6W USEPvn6+bfzJwqSuQJLKNYZflrsL2WfS/A9V0LKcOIpkjaOBfo+h+ay64U4q8F81 r9Mc1fa6BZROC4QnuxquGZuWHHvm+ZDakW5nLT+mK4Hy+kmcq3Q4W9PxLCGpkL6p 46gjmXq6dt5Ppp5sDI3Nk7guOAr78ZKw8q3mckaOZhKa27c1KLqA0yY= -----END CERTIFICATE-----Generated at Tue Dec 16 16:28:53 2025 by rpki-client