This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136312e302f32342d3234203d3e20383334.roa File: 3130392e3131302e3136312e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: SXF76ZKz+ZVv9XfWfdra+CfJsUwy+in5g8rHe599Lcg= Subject key identifier: 85:19:5D:D4:7D:A0:30:CB:20:37:C4:5E:AB:E6:EE:1C:2B:50:A3:E0 Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Certificate serial: 49337CD36855A5E9DB998C660D21C78FB7A3B8EB Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136312e302f32342d3234203d3e20383334.roa Signing time: Sun 25 Jan 2026 03:12:14 +0000 ROA not before: Sun 25 Jan 2026 03:07:14 +0000 ROA not after: Sun 24 Jan 2027 03:12:14 +0000 asID: 834 IP address blocks: 109.110.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:33:7c:d3:68:55:a5:e9:db:99:8c:66:0d:21:c7:8f:b7:a3:b8:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Validity Not Before: Jan 25 03:07:14 2026 GMT Not After : Jan 24 03:12:14 2027 GMT Subject: CN=85195DD47DA030CB2037C45EABE6EE1C2B50A3E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:04:dc:bb:d6:3b:d3:70:a8:be:0d:07:b1:07: e9:c0:88:71:be:cd:f2:93:96:3f:88:f5:b4:6f:ba: 99:3a:f7:7f:ae:98:67:6e:26:fc:5d:07:b5:e1:ca: 86:14:36:4c:73:42:44:2f:d8:2e:0e:f7:ee:73:3f: 5b:19:4c:91:37:3e:f4:26:c3:44:f5:15:03:6b:04: dd:a9:88:41:5b:25:b2:17:f6:f1:0a:eb:d7:29:d0: d8:4e:ee:73:33:3b:65:b7:ce:c5:04:6d:8a:5b:46: 46:e1:ca:20:32:da:8f:68:79:69:fd:73:9d:af:12: 0d:55:05:8f:cd:0f:4d:1e:90:2c:d3:8b:d3:e9:29: e8:82:91:3b:f5:5f:e6:f3:4c:d5:6f:52:1b:4b:32: 31:f3:b9:22:bb:9f:c0:3d:7d:38:f9:d3:60:a9:b8: f8:29:86:1b:82:97:80:69:b2:ee:b6:e5:3a:69:97: 38:1c:dc:66:97:71:31:a4:b8:f8:1b:d5:ab:ba:80: f1:ba:2f:44:65:62:ca:12:df:32:a7:26:9f:8d:14: 09:28:dc:f1:5d:73:b4:da:52:6b:0a:11:17:51:6f: 5e:c7:30:f3:11:c5:91:86:1a:6e:ff:ad:2c:f1:6e: f7:e0:b1:b1:1e:21:1a:8a:6d:87:d4:f6:84:8c:64: 90:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:19:5D:D4:7D:A0:30:CB:20:37:C4:5E:AB:E6:EE:1C:2B:50:A3:E0 X509v3 Authority Key Identifier: keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136312e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.110.161.0/24 Signature Algorithm: sha256WithRSAEncryption 99:4f:82:b5:88:4e:ea:b6:3d:38:66:0f:a5:b3:50:96:90:17: c4:79:ef:56:f4:1a:92:1b:b3:73:5d:22:51:69:c9:2f:24:df: 28:9c:b0:8c:fc:cd:1a:24:95:1a:bd:1c:84:80:82:1f:ef:9f: 40:57:d0:51:23:d8:83:7b:be:5b:ec:94:d3:b5:19:1f:39:9b: cb:77:09:65:12:d6:5d:8d:f6:4f:dc:a6:96:9f:3d:d8:37:04: 2e:96:34:43:df:26:be:38:3b:5c:79:db:51:a7:f8:5f:2a:bb: 5d:c7:12:6d:9b:b7:ee:0f:06:18:17:79:02:ff:df:20:fb:03: 06:92:87:87:b9:b0:4a:7a:aa:f4:4e:9f:d8:a2:16:d8:b3:fe: 48:b4:d0:5b:05:5a:59:b3:e6:16:9f:8c:85:17:3b:64:9c:15: a8:29:0e:89:c1:6c:a1:29:29:06:48:c4:a9:2b:43:ed:ef:c6: ac:37:20:1a:75:67:77:87:74:54:1f:4d:e0:df:03:ce:e5:de: 7e:e0:bb:3c:a7:1b:6d:69:1b:6e:55:6c:af:f9:c6:6e:52:01: 8e:9e:c1:c0:58:cf:61:1a:0d:be:99:76:dc:6c:2e:29:36:aa: ef:a4:a2:4f:96:07:56:bc:59:33:78:3b:a1:ec:27:f7:ac:f6: 27:ab:63:27 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUSTN802hVpenbmYxmDSHHj7ejuOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl ODZlMGVmYzAeFw0yNjAxMjUwMzA3MTRaFw0yNzAxMjQwMzEyMTRaMDMxMTAvBgNV BAMTKDg1MTk1REQ0N0RBMDMwQ0IyMDM3QzQ1RUFCRTZFRTFDMkI1MEEzRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaBNy71jvTcKi+DQexB+nAiHG+ zfKTlj+I9bRvupk693+umGduJvxdB7XhyoYUNkxzQkQv2C4O9+5zP1sZTJE3PvQm w0T1FQNrBN2piEFbJbIX9vEK69cp0NhO7nMzO2W3zsUEbYpbRkbhyiAy2o9oeWn9 c52vEg1VBY/ND00ekCzTi9PpKeiCkTv1X+bzTNVvUhtLMjHzuSK7n8A9fTj502Cp uPgphhuCl4Bpsu625Tpplzgc3GaXcTGkuPgb1au6gPG6L0RlYsoS3zKnJp+NFAko 3PFdc7TaUmsKERdRb17HMPMRxZGGGm7/rSzxbvfgsbEeIRqKbYfU9oSMZJDvAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUhRld1H2gMMsgN8Req+buHCtQo+AwHwYDVR0j BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo dUR2dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx MzYzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1u oTANBgkqhkiG9w0BAQsFAAOCAQEAmU+CtYhO6rY9OGYPpbNQlpAXxHnvVvQakhuz c10iUWnJLyTfKJywjPzNGiSVGr0chICCH++fQFfQUSPYg3u+W+yU07UZHzmby3cJ ZRLWXY32T9ymlp892DcELpY0Q98mvjg7XHnbUaf4Xyq7XccSbZu37g8GGBd5Av/f IPsDBpKHh7mwSnqq9E6f2KIW2LP+SLTQWwVaWbPmFp+MhRc7ZJwVqCkOicFsoSkp BkjEqStD7e/GrDcgGnVnd4d0VB9N4N8DzuXefuC7PKcbbWkbblVsr/nGblIBjp7B wFjPYRoNvpl23GwuKTaq76SiT5YHVrxZM3g7oewn96z2J6tjJw== -----END CERTIFICATE-----Generated at Sat Feb 14 17:26:38 2026 by rpki-client