This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/3139322e37352e3139362e302f32332d3234203d3e203539393933.roa File: 3139322e37352e3139362e302f32332d3234203d3e203539393933.roa (raw, json) Hash identifier: KNSz4GsVtYNwvMtBZ3CvI93UcAzzIm+CEBGOCv59Ibc= Subject key identifier: 09:C8:CF:7F:82:C2:90:F9:9D:DF:BD:27:C1:D7:F9:CE:D9:37:8F:01 Certificate issuer: /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Certificate serial: 228C1E7390BCCF211B358891B431DB8452605CDE Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/3139322e37352e3139362e302f32332d3234203d3e203539393933.roa Signing time: Tue 13 Jan 2026 19:03:13 +0000 ROA not before: Tue 13 Jan 2026 18:58:13 +0000 ROA not after: Tue 12 Jan 2027 19:03:13 +0000 asID: 59993 IP address blocks: 192.75.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 15:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:8c:1e:73:90:bc:cf:21:1b:35:88:91:b4:31:db:84:52:60:5c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c Validity Not Before: Jan 13 18:58:13 2026 GMT Not After : Jan 12 19:03:13 2027 GMT Subject: CN=09C8CF7F82C290F99DDFBD27C1D7F9CED9378F01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e2:33:de:a1:0f:43:15:87:43:13:c0:42:07: 5f:8a:7a:3b:f1:fd:8c:80:05:74:43:0a:3f:4b:93: d0:be:20:41:95:d6:6f:f4:36:cf:d4:b7:4c:87:08: df:f3:e0:d5:04:d2:a9:5a:62:e4:be:db:3c:74:53: eb:52:b5:9c:9c:d0:55:ee:6f:9c:5b:8b:c4:71:eb: e8:0d:38:ad:17:3d:a9:5b:70:95:c2:cc:f6:4e:e4: 71:7b:a8:1b:52:7d:9a:18:4c:30:3f:4d:b2:13:b7: c9:3c:fe:9b:6f:05:90:08:f9:05:c5:16:c5:2a:c0: ac:2f:67:6e:a5:73:c1:c1:4a:3e:2d:a7:c4:17:ea: 58:bd:ed:98:01:95:3a:26:ba:15:8f:43:aa:8b:3a: 45:d4:91:f5:ab:f8:b8:40:f2:d8:5c:2d:c0:cc:91: 3d:5b:0e:cb:d1:58:c7:96:94:84:69:73:45:44:59: a7:0f:ed:20:4a:64:6f:82:e5:02:22:24:03:c5:36: 8d:87:c9:3f:5c:78:8b:ef:46:c2:92:06:73:32:79: b5:f6:04:d1:e1:0c:64:02:4f:fd:9f:4a:f7:98:4e: 26:17:ac:77:19:0d:3e:70:0e:54:12:99:86:d1:c6: 9f:fa:72:e8:87:e5:b9:35:8d:d7:9e:f3:e0:65:d3: fe:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C8:CF:7F:82:C2:90:F9:9D:DF:BD:27:C1:D7:F9:CE:D9:37:8F:01 X509v3 Authority Key Identifier: keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/3139322e37352e3139362e302f32332d3234203d3e203539393933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.75.196.0/23 Signature Algorithm: sha256WithRSAEncryption a8:8a:3b:bc:49:6e:a2:a8:69:5f:c7:0e:03:9b:33:f9:91:69: 3f:30:ff:d1:cb:27:a4:e0:34:3b:4d:3c:0f:40:fc:c5:2b:d9: e6:ab:aa:9d:61:92:65:24:dd:5b:77:e1:44:0f:79:f9:95:7b: e3:a3:10:0c:15:70:e5:bc:d4:91:86:21:fe:15:9c:c7:40:df: 55:d9:af:2d:ca:a5:42:ac:9a:73:56:e1:fb:98:56:aa:7d:5e: 56:86:71:5b:72:cf:3e:45:15:a8:f6:21:17:78:1b:f8:8b:dd: cf:6b:6e:e4:2b:67:b4:50:0b:e5:5e:09:3e:e9:3e:4c:93:65: a5:30:89:2d:77:f1:43:fb:6a:d7:b5:33:f8:98:7a:66:72:cd: 47:ac:a0:0e:ed:78:63:9f:16:92:af:d4:63:a9:34:da:c2:a0: 71:92:72:0b:df:74:d3:1c:d8:ec:48:2c:05:7e:7c:00:43:80: 75:32:e9:44:63:4b:cd:b9:f4:28:82:73:e9:72:5f:be:07:dc: 1c:34:48:c1:dd:92:66:49:2c:69:f7:9e:e3:58:73:47:6c:d5: 82:14:27:81:59:68:76:8e:9e:ee:c4:e0:2a:03:b7:1a:9e:eb: d6:5c:b0:3c:7f:d0:3d:6c:41:8b:bb:98:30:96:bf:6b:18:90: 1c:ad:fa:10 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIUIowec5C8zyEbNYiRtDHbhFJgXN4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZm OTQ1ZTA3MzNmYzQ5YzJlNGMwHhcNMjYwMTEzMTg1ODEzWhcNMjcwMTEyMTkwMzEz WjAzMTEwLwYDVQQDEygwOUM4Q0Y3RjgyQzI5MEY5OURERkJEMjdDMUQ3RjlDRUQ5 Mzc4RjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOIz3qEPQxWH QxPAQgdfino78f2MgAV0Qwo/S5PQviBBldZv9DbP1LdMhwjf8+DVBNKpWmLkvts8 dFPrUrWcnNBV7m+cW4vEcevoDTitFz2pW3CVwsz2TuRxe6gbUn2aGEwwP02yE7fJ PP6bbwWQCPkFxRbFKsCsL2dupXPBwUo+LafEF+pYve2YAZU6JroVj0OqizpF1JH1 q/i4QPLYXC3AzJE9Ww7L0VjHlpSEaXNFRFmnD+0gSmRvguUCIiQDxTaNh8k/XHiL 70bCkgZzMnm19gTR4QxkAk/9n0r3mE4mF6x3GQ0+cA5UEpmG0caf+nLoh+W5NY3X nvPgZdP+YwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFAnIz3+CwpD5nd+9J8HX+c7Z N48BMB8GA1UdIwQYMBaAFNdJg8H6ugzBVm8GAa/hFCPhG1FxMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5 LTRmYWVhNGIxYmMxMi83L0Q3NDk4M0MxRkFCQTBDQzE1NjZGMDYwMUFGRTExNDIz RTExQjUxNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTUwZTk4ZC04MGU5LTQ1ZjYtYmM2My02 YjQwYTNkNTllOWMvNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZmOTQ1 ZTA3MzNmYzQ5YzJlNGMuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIxYmMxMi83LzMxMzkzMjJl MzczNTJlMzEzOTM2MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzOTM5MzkzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAcBLxDANBgkqhkiG9w0BAQsFAAOCAQEAqIo7vEluoqhpX8cOA5sz +ZFpPzD/0csnpOA0O008D0D8xSvZ5quqnWGSZSTdW3fhRA95+ZV746MQDBVw5bzU kYYh/hWcx0DfVdmvLcqlQqyac1bh+5hWqn1eVoZxW3LPPkUVqPYhF3gb+Ivdz2tu 5CtntFAL5V4JPuk+TJNlpTCJLXfxQ/tq17Uz+Jh6ZnLNR6ygDu14Y58Wkq/UY6k0 2sKgcZJyC9900xzY7EgsBX58AEOAdTLpRGNLzbn0KIJz6XJfvgfcHDRIwd2SZkks afee41hzR2zVghQngVlodo6e7sTgKgO3Gp7r1lywPH/QPWxBi7uYMJa/axiQHK36 EA== -----END CERTIFICATE-----Generated at Wed Jan 21 20:35:07 2026 by rpki-client