This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31322e302f32342d3234203d3e203235313938.roa File: 39322e3131392e31322e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: WXWL27LYd7IyMfGLbW4SG66T/J3atyoQzTJEzluA2Y4= Subject key identifier: 98:47:AF:05:9F:3B:36:EF:33:42:E8:C4:CA:0D:88:C1:86:F5:2C:A4 Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 3C35D505C012CBF4CBACAE91436C869F7F20A4CE Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31322e302f32342d3234203d3e203235313938.roa Signing time: Wed 31 Dec 2025 05:29:13 +0000 ROA not before: Wed 31 Dec 2025 05:24:13 +0000 ROA not after: Wed 30 Dec 2026 05:29:13 +0000 asID: 25198 IP address blocks: 92.119.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 03:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:35:d5:05:c0:12:cb:f4:cb:ac:ae:91:43:6c:86:9f:7f:20:a4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Dec 31 05:24:13 2025 GMT Not After : Dec 30 05:29:13 2026 GMT Subject: CN=9847AF059F3B36EF3342E8C4CA0D88C186F52CA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b0:f6:fa:ba:71:1b:0b:49:ba:3f:c2:83:61: 6b:7f:7e:6d:7e:84:98:ca:a4:4e:8d:43:0e:91:18: d1:99:d1:8d:17:df:ea:a6:19:27:1c:a7:90:8d:ec: 0d:13:1d:9c:28:78:05:75:82:9e:18:f6:f1:3e:a0: 9c:db:14:23:1f:74:cd:7e:40:32:d7:a3:c7:b1:ee: 28:00:e7:5c:72:87:bb:11:ac:75:f0:b6:26:8b:7c: 11:77:1d:56:42:ff:ab:0e:38:2f:cc:a2:8b:b5:36: 48:1b:89:5c:db:ab:86:48:f0:1d:c5:e0:9f:9a:47: 04:f4:c5:92:7c:e5:c0:69:5a:25:1f:42:4f:2e:e8: 46:d5:e9:d0:c9:64:e6:4e:b3:49:5e:7a:16:39:2f: 51:aa:43:32:a4:f8:4d:02:de:2d:8d:5c:d9:71:fc: f2:68:54:9e:60:f2:07:fd:a7:55:c6:11:77:bb:49: e6:d7:f3:67:ad:30:12:ad:f3:72:b3:33:3c:79:86: 41:1d:6f:25:cd:e2:1d:e5:57:b6:f7:92:a8:26:3c: 34:3b:05:b9:b3:79:89:c7:e9:a3:ad:d3:64:66:87: c1:31:e1:e7:07:2a:b4:04:ec:67:04:68:ec:5a:57: 35:b9:6f:91:3d:d1:8a:10:e9:77:fa:71:85:f7:67: 2e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:47:AF:05:9F:3B:36:EF:33:42:E8:C4:CA:0D:88:C1:86:F5:2C:A4 X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31322e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.12.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:ef:e8:33:42:7e:13:1b:43:25:c2:b9:fc:97:a8:ea:95:58: 6f:f1:2c:b4:39:fb:2b:c4:51:b5:0a:19:21:cd:54:c9:ab:e5: 37:1f:20:b4:4e:69:b7:08:c7:15:df:11:63:02:04:6d:b6:68: 67:ec:ef:1f:6a:1d:54:53:df:cc:9e:83:b4:a1:2e:82:d7:8f: 15:84:49:25:6a:00:50:d4:bd:13:72:3e:de:7a:dc:69:7d:cc: f8:b8:0f:d7:9f:fa:7e:fd:0e:6e:03:0a:c4:6f:c1:b5:a6:75: 1d:72:25:cb:29:83:fb:95:87:4c:34:94:a9:a6:d0:0a:f2:32: d0:d0:43:2e:a8:e4:37:22:ac:d7:c7:a1:bc:54:03:bb:12:3d: b2:a3:0d:f2:a6:87:07:f6:98:af:07:cb:dc:54:55:a5:a7:11: d5:13:2f:b6:a7:13:98:db:f7:ae:a1:91:a0:67:e1:4b:d6:f1: be:47:bd:74:cc:dc:3b:d0:16:05:89:6c:6f:37:18:56:c3:3f: 33:14:22:8c:b3:2f:e3:d2:aa:70:9d:78:a9:c1:72:fd:bf:c1: 35:fa:d7:95:23:67:a9:7c:1a:e1:b5:51:a3:4b:b0:c8:6d:04: 11:c6:5e:9f:bd:4b:47:6f:2e:d8:63:f9:46:ea:73:36:8c:43: 81:85:76:1a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUPDXVBcASy/TLrK6RQ2yGn38gpM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNTEyMzEwNTI0MTNaFw0yNjEyMzAwNTI5MTNaMDMxMTAvBgNV BAMTKDk4NDdBRjA1OUYzQjM2RUYzMzQyRThDNENBMEQ4OEMxODZGNTJDQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEsPb6unEbC0m6P8KDYWt/fm1+ hJjKpE6NQw6RGNGZ0Y0X3+qmGSccp5CN7A0THZwoeAV1gp4Y9vE+oJzbFCMfdM1+ QDLXo8ex7igA51xyh7sRrHXwtiaLfBF3HVZC/6sOOC/Moou1NkgbiVzbq4ZI8B3F 4J+aRwT0xZJ85cBpWiUfQk8u6EbV6dDJZOZOs0leehY5L1GqQzKk+E0C3i2NXNlx /PJoVJ5g8gf9p1XGEXe7SebX82etMBKt83KzMzx5hkEdbyXN4h3lV7b3kqgmPDQ7 BbmzeYnH6aOt02Rmh8Ex4ecHKrQE7GcEaOxaVzW5b5E90YoQ6Xf6cYX3Zy5/AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUmEevBZ87Nu8zQujEyg2IwYb1LKQwHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzkzMjJlMzEzMTM5MmUzMTMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNTMxMzkzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFx3 DDANBgkqhkiG9w0BAQsFAAOCAQEAH+/oM0J+ExtDJcK5/Jeo6pVYb/EstDn7K8RR tQoZIc1UyavlNx8gtE5ptwjHFd8RYwIEbbZoZ+zvH2odVFPfzJ6DtKEugtePFYRJ JWoAUNS9E3I+3nrcaX3M+LgP15/6fv0ObgMKxG/BtaZ1HXIlyymD+5WHTDSUqabQ CvIy0NBDLqjkNyKs18ehvFQDuxI9sqMN8qaHB/aYrwfL3FRVpacR1RMvtqcTmNv3 rqGRoGfhS9bxvke9dMzcO9AWBYlsbzcYVsM/MxQijLMv49KqcJ14qcFy/b/BNfrX lSNnqXwa4bVRo0uwyG0EEcZen71LR28u2GP5RupzNoxDgYV2Gg== -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:30 2026 by rpki-client