This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31322e302f32342d3234203d3e20323134303235.roa File: 39322e3131392e31322e302f32342d3234203d3e20323134303235.roa (raw, json) Hash identifier: gh471/i5BQnR7b+AUJBmnFSgMD0yho/hF2GYOkoR8kI= Subject key identifier: C4:BA:E5:B9:E4:C8:94:98:2A:61:5E:B4:B4:43:58:76:35:ED:EA:92 Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 161041AAA647A1B1FDAC821EB25C39D0BC20B7C6 Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31322e302f32342d3234203d3e20323134303235.roa Signing time: Sun 18 Jan 2026 06:15:22 +0000 ROA not before: Sun 18 Jan 2026 06:10:22 +0000 ROA not after: Sun 17 Jan 2027 06:15:22 +0000 asID: 214025 IP address blocks: 92.119.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:10:41:aa:a6:47:a1:b1:fd:ac:82:1e:b2:5c:39:d0:bc:20:b7:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Jan 18 06:10:22 2026 GMT Not After : Jan 17 06:15:22 2027 GMT Subject: CN=C4BAE5B9E4C894982A615EB4B443587635EDEA92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:04:90:bc:73:7d:cb:af:6c:e6:5c:f2:b2:ee: dc:d6:72:3e:83:d2:f0:cd:fb:d4:dc:74:ad:0a:7a: 1e:dd:08:d8:c5:2a:e6:0c:a0:a5:65:75:a9:01:30: 11:5f:62:20:98:ef:98:c6:a7:91:57:b9:f4:87:eb: 27:f4:1e:3d:e5:49:6f:a1:72:9d:6f:0e:34:3a:d7: 36:be:6d:5d:70:e8:1d:ff:89:f5:66:61:83:38:7d: 95:3a:2c:44:48:82:fe:24:86:42:71:00:c5:fd:e4: 3a:76:c5:e2:db:ea:3a:5c:e9:8e:8c:ce:4e:4b:f9: eb:af:25:9b:a7:94:d4:ac:89:17:a5:cc:8c:4b:c1: d1:19:03:77:37:48:1c:b2:a1:12:57:43:25:9c:51: a6:9a:77:2d:fc:f0:57:7d:31:3e:54:34:6c:5e:61: 09:19:53:73:0a:d0:dc:95:6b:c6:e3:f7:7a:b1:b1: 54:20:d5:d9:ef:d8:ce:8a:d0:89:41:bd:3e:6c:7d: b0:f7:36:2e:0d:9b:c6:d6:3d:02:f9:a8:02:06:9b: cb:21:0b:fd:51:dc:93:04:0f:9e:50:94:ac:a0:ad: af:05:31:52:00:b9:ab:cb:d9:5a:75:5a:b8:02:d5: 53:95:42:7d:dd:47:69:d7:f3:54:85:4b:c2:94:6b: 86:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BA:E5:B9:E4:C8:94:98:2A:61:5E:B4:B4:43:58:76:35:ED:EA:92 X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31322e302f32342d3234203d3e20323134303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.12.0/24 Signature Algorithm: sha256WithRSAEncryption 95:ae:d4:60:3d:5d:4e:95:13:38:70:30:fc:1a:c7:8e:4d:4a: 9d:5e:d8:a2:b6:9f:aa:d5:1a:ad:0e:ab:e8:2b:3f:e9:9c:cc: f7:42:ce:8f:d0:32:f0:62:c2:1d:8f:5e:b4:8a:df:0b:90:50: 48:2d:26:85:5c:e0:8a:29:4b:35:ec:ef:a2:77:a7:37:04:e9: 68:c2:77:82:fe:20:13:10:eb:dd:eb:0d:a3:cf:de:65:e6:43: 02:7b:13:55:d5:ac:62:c7:07:ce:cb:15:eb:5b:5a:05:73:cb: 2a:95:cc:ad:8c:bb:08:aa:b0:5d:76:93:12:3e:e9:80:25:ae: c0:01:36:7b:09:7f:94:15:da:ec:ee:48:c1:03:4c:4b:38:b1: 34:3a:35:17:fe:60:7b:0d:dc:36:43:0c:2e:12:ea:7a:ca:16: 08:d6:08:36:6f:b3:69:95:39:7f:f2:f9:b9:d4:df:d5:a0:3c: 8e:61:ff:87:bc:a3:d0:46:84:6c:bc:27:ff:39:81:e5:79:35: 81:1a:fb:a2:2e:0a:e0:7f:49:a8:65:0b:e3:da:eb:ff:ba:9d: df:34:4f:a7:87:d2:de:05:6b:35:3f:52:ea:b1:c7:e0:d0:9d: d1:b2:13:9b:a5:79:71:2c:17:03:77:86:ec:c1:88:3f:6d:3f: 6c:66:3c:35 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUFhBBqqZHobH9rIIeslw50Lwgt8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNjAxMTgwNjEwMjJaFw0yNzAxMTcwNjE1MjJaMDMxMTAvBgNV BAMTKEM0QkFFNUI5RTRDODk0OTgyQTYxNUVCNEI0NDM1ODc2MzVFREVBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjBJC8c33Lr2zmXPKy7tzWcj6D 0vDN+9TcdK0Keh7dCNjFKuYMoKVldakBMBFfYiCY75jGp5FXufSH6yf0Hj3lSW+h cp1vDjQ61za+bV1w6B3/ifVmYYM4fZU6LERIgv4khkJxAMX95Dp2xeLb6jpc6Y6M zk5L+euvJZunlNSsiRelzIxLwdEZA3c3SByyoRJXQyWcUaaady388Fd9MT5UNGxe YQkZU3MK0NyVa8bj93qxsVQg1dnv2M6K0IlBvT5sfbD3Ni4Nm8bWPQL5qAIGm8sh C/1R3JMED55QlKygra8FMVIAuavL2Vp1WrgC1VOVQn3dR2nX81SFS8KUa4ZDAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUxLrlueTIlJgqYV60tENYdjXt6pIwHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzkzMjJlMzEzMTM5MmUzMTMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0MzAzMjM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA XHcMMA0GCSqGSIb3DQEBCwUAA4IBAQCVrtRgPV1OlRM4cDD8GseOTUqdXtiitp+q 1RqtDqvoKz/pnMz3Qs6P0DLwYsIdj160it8LkFBILSaFXOCKKUs17O+id6c3BOlo wneC/iATEOvd6w2jz95l5kMCexNV1axixwfOyxXrW1oFc8sqlcytjLsIqrBddpMS PumAJa7AATZ7CX+UFdrs7kjBA0xLOLE0OjUX/mB7Ddw2QwwuEup6yhYI1gg2b7Np lTl/8vm51N/VoDyOYf+HvKPQRoRsvCf/OYHleTWBGvuiLgrgf0moZQvj2uv/up3f NE+nh9LeBWs1P1Lqscfg0J3RshObpXlxLBcDd4bswYg/bT9sZjw1 -----END CERTIFICATE-----Generated at Mon Jan 19 05:23:09 2026 by rpki-client