This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139352e34322e3131322e302f32332d3233203d3e203438343335.roa File: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (raw, json) Hash identifier: SO5iYpxppDi067L1otYSj19apV4zwNvimr95590708A= Subject key identifier: 5F:F8:CE:2A:A2:6A:DB:C9:CE:F4:3C:1F:C2:DA:DF:FC:7B:29:3C:A8 Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 0AC0119D6942DE67C41E879F4A94B05C33F4BDC2 Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139352e34322e3131322e302f32332d3233203d3e203438343335.roa Signing time: Tue 20 Jan 2026 17:55:34 +0000 ROA not before: Tue 20 Jan 2026 17:50:34 +0000 ROA not after: Tue 19 Jan 2027 17:55:34 +0000 asID: 48435 IP address blocks: 195.42.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c0:11:9d:69:42:de:67:c4:1e:87:9f:4a:94:b0:5c:33:f4:bd:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Jan 20 17:50:34 2026 GMT Not After : Jan 19 17:55:34 2027 GMT Subject: CN=5FF8CE2AA26ADBC9CEF43C1FC2DADFFC7B293CA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:98:00:72:66:bf:6f:7d:1a:cf:97:8e:74:4a: 83:3c:23:f4:90:5e:3c:d3:ff:e1:06:48:ef:89:a8: e2:e7:5a:e8:e7:f9:4a:98:04:75:09:16:f1:ae:50: c6:bf:51:9f:26:7d:27:cb:dc:60:a2:cb:df:0f:13: fa:4a:c6:8f:49:f8:81:32:78:9a:f1:a8:16:31:96: b0:7d:a4:b3:e8:49:06:59:81:0f:53:0e:49:ed:b6: 9d:b6:73:47:a4:e2:14:5f:7d:37:12:48:43:16:49: 14:9e:e5:99:42:ce:34:bc:32:d7:54:69:61:6d:8f: 34:d7:53:2c:c2:db:f5:0c:ad:26:91:a6:24:64:9d: fa:bd:df:6d:e4:95:53:8d:b8:ad:45:6b:91:02:35: b0:c6:8f:02:95:45:c5:46:2c:b3:96:6a:28:23:f7: 99:91:f4:16:dd:33:8b:fc:40:29:ba:a5:99:9e:81: f8:d7:c2:19:d1:18:a1:ea:83:08:44:dd:5f:c3:21: 21:d4:c1:d9:72:9b:6d:f3:d3:08:92:cf:69:e8:18: f6:fc:68:62:bd:ca:77:f2:de:a2:fd:51:a4:af:07: 5e:b7:17:a5:45:4c:45:5b:aa:52:57:0c:b9:12:e4: 9e:2f:ca:0a:63:db:0d:20:f8:93:5c:f3:b3:1f:73: 23:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F8:CE:2A:A2:6A:DB:C9:CE:F4:3C:1F:C2:DA:DF:FC:7B:29:3C:A8 X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139352e34322e3131322e302f32332d3233203d3e203438343335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.42.112.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:37:cf:46:33:3d:7c:ac:2c:3b:b1:ef:64:19:79:4b:ef:7f: 75:c6:e0:92:5e:66:16:79:a8:df:d9:8a:8b:ca:59:89:66:b8: b7:a7:a3:f4:72:f6:94:47:20:45:97:dd:a9:df:93:85:22:2b: 25:ef:2e:2a:0e:1e:85:3c:dc:01:15:8c:07:57:3d:0e:8b:b2: c6:68:08:36:be:a4:e4:c3:57:e4:44:5f:58:09:d5:45:c8:47: 37:d5:34:6d:a9:76:57:40:10:de:d4:70:95:2c:f4:8f:e3:5e: a9:bf:ce:88:0d:80:b3:b2:82:8b:05:4e:59:4a:8e:be:8d:22: ae:93:f9:cd:ec:45:53:fb:2e:d9:c0:3f:eb:04:a0:ce:c8:70: 0c:f3:5d:20:d3:7d:76:93:f6:c7:2a:e4:5f:f7:b3:c5:78:67: fe:c1:25:6b:b9:8d:be:ac:52:13:60:bb:81:3f:33:9f:c3:02: 30:3e:9d:58:15:05:96:f7:a1:36:9b:fd:13:3a:a1:07:ea:a8: 4a:4b:5a:d1:59:d5:3c:d7:bd:bd:66:c3:26:ab:77:c7:8f:4e: e0:c5:a3:1b:ed:f0:7a:99:c7:36:f8:f3:44:0c:12:07:0e:2f: a1:8f:f3:1a:a1:a3:83:a6:58:db:33:86:14:46:65:3b:c3:10: ca:95:b7:aa -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUCsARnWlC3mfEHoefSpSwXDP0vcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjAxMjAxNzUwMzRaFw0yNzAxMTkxNzU1MzRaMDMxMTAvBgNV BAMTKDVGRjhDRTJBQTI2QURCQzlDRUY0M0MxRkMyREFERkZDN0IyOTNDQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmmAByZr9vfRrPl450SoM8I/SQ XjzT/+EGSO+JqOLnWujn+UqYBHUJFvGuUMa/UZ8mfSfL3GCiy98PE/pKxo9J+IEy eJrxqBYxlrB9pLPoSQZZgQ9TDknttp22c0ek4hRffTcSSEMWSRSe5ZlCzjS8MtdU aWFtjzTXUyzC2/UMrSaRpiRknfq9323klVONuK1Fa5ECNbDGjwKVRcVGLLOWaigj 95mR9BbdM4v8QCm6pZmegfjXwhnRGKHqgwhE3V/DISHUwdlym23z0wiSz2noGPb8 aGK9ynfy3qL9UaSvB163F6VFTEVbqlJXDLkS5J4vygpj2w0g+JNc87MfcyPTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUX/jOKqJq28nO9Dwfwtrf/HspPKgwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWMxNDMzODct ZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUxZTRhLzAvMzEzOTM1MmUzNDMyMmUzMTMx MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzQzMzM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB wypwMA0GCSqGSIb3DQEBCwUAA4IBAQBON89GMz18rCw7se9kGXlL7391xuCSXmYW eajf2YqLylmJZri3p6P0cvaURyBFl92p35OFIisl7y4qDh6FPNwBFYwHVz0Oi7LG aAg2vqTkw1fkRF9YCdVFyEc31TRtqXZXQBDe1HCVLPSP416pv86IDYCzsoKLBU5Z So6+jSKuk/nN7EVT+y7ZwD/rBKDOyHAM810g0312k/bHKuRf97PFeGf+wSVruY2+ rFITYLuBPzOfwwIwPp1YFQWW96E2m/0TOqEH6qhKS1rRWdU81729ZsMmq3fHj07g xaMb7fB6mcc2+PNEDBIHDi+hj/MaoaODpljbM4YURmU7wxDKlbeq -----END CERTIFICATE-----Generated at Tue Jan 27 08:37:45 2026 by rpki-client