This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136302e302f32342d3234203d3e20323033313436.roa
File: 3139332e3234362e3136302e302f32342d3234203d3e20323033313436.roa (raw, json)
Hash identifier: 5SHSpXtEFM/Y+Ngiratwj+nPdyvRt0NJIoU6OcxftrM=
Subject key identifier: 31:22:9A:46:F7:29:63:87:5F:D7:AC:70:F7:EA:91:B0:71:C2:C5:C1
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 29834CF9073D7BFA22DB29A7A45CB6D04C7A2BBD
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136302e302f32342d3234203d3e20323033313436.roa
Signing time: Tue 13 Jan 2026 11:01:04 +0000
ROA not before: Tue 13 Jan 2026 10:56:04 +0000
ROA not after: Tue 12 Jan 2027 11:01:04 +0000
asID: 203146
IP address blocks: 193.246.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 08:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:83:4c:f9:07:3d:7b:fa:22:db:29:a7:a4:5c:b6:d0:4c:7a:2b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jan 13 10:56:04 2026 GMT
Not After : Jan 12 11:01:04 2027 GMT
Subject: CN=31229A46F72963875FD7AC70F7EA91B071C2C5C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:ff:0b:df:f2:08:87:33:7a:b2:c3:ab:6a:
aa:83:45:77:fb:a1:b5:a5:51:87:7b:24:8f:b6:89:
c3:c4:34:c5:f5:01:3e:b2:47:31:16:9f:0b:95:9b:
7d:ce:e7:9f:1b:b1:ff:14:d3:de:d7:2c:68:00:08:
b5:c2:93:8e:0b:24:1b:53:a9:aa:e7:79:c2:1c:1f:
7d:60:f1:a2:d7:69:ed:f9:7c:2c:44:3b:45:8b:30:
63:bd:24:46:4f:e4:62:23:41:1a:a1:34:a2:c3:9e:
42:82:ae:ab:1f:21:76:b8:f3:c8:57:6b:82:5a:08:
ff:96:f0:10:2b:6f:47:63:27:ac:cb:34:56:36:8d:
de:e1:38:27:68:61:57:ad:b8:be:cf:c7:4e:24:e2:
c4:64:60:5e:bf:64:66:97:f6:0b:28:79:05:16:e1:
8a:98:87:09:2e:f7:52:94:ed:44:88:9a:28:34:35:
63:a7:9a:03:03:cc:c4:49:31:dd:18:98:c4:30:6a:
7e:50:e6:9a:b6:ee:f6:d4:0e:87:c9:79:34:a9:0a:
4a:76:40:4c:19:8f:34:ce:95:ac:c8:f4:bb:53:2c:
b0:6c:51:dd:b3:da:dd:6d:e0:c9:ae:bd:2f:f1:e2:
62:a4:6f:3c:11:b8:d6:6f:5a:5f:8f:63:99:22:41:
0d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:22:9A:46:F7:29:63:87:5F:D7:AC:70:F7:EA:91:B0:71:C2:C5:C1
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136302e302f32342d3234203d3e20323033313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.160.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:4a:f3:a8:d0:02:a7:c3:9e:a8:0c:1e:7d:01:b5:0e:95:56:
83:be:8f:be:75:87:19:13:7f:48:fc:3f:aa:f2:ab:89:8f:24:
d6:3b:4f:fc:9c:f8:86:e2:53:00:a4:37:63:11:17:86:31:fe:
10:91:cc:05:b7:6c:45:01:53:58:2e:5f:e2:f8:e4:0e:e6:a9:
14:96:de:f6:40:38:d6:3c:5f:69:5a:65:ab:1a:ef:8c:a3:57:
fc:13:a2:3d:37:e2:35:3e:20:da:c0:62:fd:e0:60:d4:86:98:
be:af:c8:92:bc:de:ad:2f:43:05:59:82:0f:1c:ba:9a:23:82:
7d:98:b2:1f:e6:e0:1a:32:98:05:99:5c:19:bc:6d:05:8f:af:
98:98:16:4a:bd:91:43:79:a2:b5:6d:ef:f9:5f:af:c0:bf:96:
99:c7:5d:ef:cf:bb:91:d5:c5:64:41:b8:2e:51:37:ee:e3:78:
d6:c2:29:3d:d4:c0:b9:6d:d7:c8:c6:73:75:c8:31:ce:e8:10:
3f:3c:f0:d5:48:eb:8d:3e:14:9e:99:26:35:0d:52:da:08:e7:
3f:7d:84:df:2e:62:2a:e3:eb:aa:b6:a7:c9:b1:7f:09:13:39:
38:7c:86:00:ef:76:7d:38:96:7a:71:b7:ea:94:bc:25:53:25:
15:8e:a6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 14:04:38 2026 by rpki-client