This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31332e302f32342d3234203d3e203432383331.roa File: 39322e3131392e31332e302f32342d3234203d3e203432383331.roa (raw, json) Hash identifier: c4xunwgy185Skl9IKx/jZy0dg9hAz9mBJklq+cLHCac= Subject key identifier: 93:29:4B:A5:6D:DF:DE:D5:D7:58:3A:A7:76:63:00:0F:6D:5C:92:59 Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 5B97C5DAFBAFDBD283A1A1D80944BBE5533C39EC Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31332e302f32342d3234203d3e203432383331.roa Signing time: Fri 19 Dec 2025 16:10:28 +0000 ROA not before: Fri 19 Dec 2025 16:05:28 +0000 ROA not after: Fri 18 Dec 2026 16:10:28 +0000 asID: 42831 IP address blocks: 92.119.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 03:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:97:c5:da:fb:af:db:d2:83:a1:a1:d8:09:44:bb:e5:53:3c:39:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Dec 19 16:05:28 2025 GMT Not After : Dec 18 16:10:28 2026 GMT Subject: CN=93294BA56DDFDED5D7583AA77663000F6D5C9259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cd:88:97:7d:8b:93:ed:1c:21:a8:ae:aa:8a: 79:7c:11:48:01:5b:52:8f:a2:e0:c0:7b:52:81:67: 3e:45:ce:c9:68:f4:7b:1d:2d:04:d5:6d:41:01:dd: 27:69:44:e2:d6:61:2d:17:f8:0e:fb:a8:ea:7f:91: b4:a5:eb:6f:4a:8e:de:57:e6:ee:53:7f:b9:d2:23: eb:37:28:a9:39:e2:45:78:3b:3b:e8:70:8d:60:a9: ee:44:03:17:fc:1e:4c:b4:50:a2:92:0a:ec:87:79: 64:aa:c0:83:b3:ae:16:f9:f3:ab:d7:5e:19:05:de: 2a:6e:0a:ce:89:b7:3b:d6:ee:90:c6:59:2d:9e:66: 8d:20:c6:b9:0c:d1:1c:4d:b6:c9:c2:81:fb:ab:d9: d4:ed:70:c2:fd:b4:4f:91:86:27:4d:db:c8:82:0a: a8:89:f5:e0:ff:73:92:21:38:ac:98:a7:31:68:1a: 77:a7:19:2b:05:64:90:15:6f:b5:30:8f:31:77:fa: 94:93:04:66:55:f6:c4:d6:6c:cb:cd:5f:e4:f2:84: bb:5f:d8:d8:cb:69:6e:b3:5b:5a:0a:b3:0a:33:b5: 00:4d:7b:ca:aa:d6:38:3a:51:fe:73:c6:1c:80:52: 30:7e:4b:18:a9:c1:26:18:77:60:7d:20:cb:85:8d: 76:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:29:4B:A5:6D:DF:DE:D5:D7:58:3A:A7:76:63:00:0F:6D:5C:92:59 X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31332e302f32342d3234203d3e203432383331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.13.0/24 Signature Algorithm: sha256WithRSAEncryption 85:f5:6b:71:a2:66:ac:f0:18:20:c1:8c:07:0f:04:df:04:e5: 60:58:83:fa:8a:97:28:ad:ca:77:81:d7:5b:c8:b7:a6:ac:01: b3:99:fb:00:9d:23:db:07:55:d2:5c:ec:28:1f:8c:95:01:20: c7:ac:a9:7c:75:78:d9:5f:29:31:28:ac:0c:6d:a2:a3:91:bf: 59:da:d6:80:fb:39:0b:18:2c:46:b0:ce:83:ef:62:1c:7b:9d: 50:58:28:2f:f5:d1:6b:f7:f4:81:69:60:62:cd:1a:8a:fd:c6: 7e:85:4e:e7:23:96:51:8f:9f:1b:c3:a3:8b:0d:21:ba:d6:72: 79:a8:e9:e6:ec:b0:05:8c:c5:a9:67:b3:f5:44:b9:c1:e0:3d: 39:f5:0f:9e:80:8d:47:a9:f9:25:35:a2:4f:de:65:10:7f:ad: fb:86:2b:49:6d:73:e2:0d:9e:0c:67:3e:b4:fe:f6:2d:d5:82: 4b:bb:b9:f1:78:ab:cd:a0:77:5c:8e:86:c5:b7:f5:c1:ba:ef: 0d:0e:f4:66:e0:c7:e9:82:f2:c5:18:b1:fa:cd:a4:49:6d:b4: b2:01:df:cc:c2:e3:47:36:54:20:1f:de:d8:bf:48:7c:27:a8: cd:c8:1b:65:d5:97:fe:82:48:81:37:1a:1e:e9:d5:e0:57:d5: 7f:f1:4e:01 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUW5fF2vuv29KDoaHYCUS75VM8OewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNTEyMTkxNjA1MjhaFw0yNjEyMTgxNjEwMjhaMDMxMTAvBgNV BAMTKDkzMjk0QkE1NkRERkRFRDVENzU4M0FBNzc2NjMwMDBGNkQ1QzkyNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJzYiXfYuT7RwhqK6qinl8EUgB W1KPouDAe1KBZz5Fzslo9HsdLQTVbUEB3SdpROLWYS0X+A77qOp/kbSl629Kjt5X 5u5Tf7nSI+s3KKk54kV4OzvocI1gqe5EAxf8Hky0UKKSCuyHeWSqwIOzrhb586vX XhkF3ipuCs6JtzvW7pDGWS2eZo0gxrkM0RxNtsnCgfur2dTtcML9tE+RhidN28iC CqiJ9eD/c5IhOKyYpzFoGnenGSsFZJAVb7UwjzF3+pSTBGZV9sTWbMvNX+TyhLtf 2NjLaW6zW1oKswoztQBNe8qq1jg6Uf5zxhyAUjB+SxipwSYYd2B9IMuFjXa7AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUkylLpW3f3tXXWDqndmMAD21cklkwHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzkzMjJlMzEzMTM5MmUzMTMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMjM4MzMzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFx3 DTANBgkqhkiG9w0BAQsFAAOCAQEAhfVrcaJmrPAYIMGMBw8E3wTlYFiD+oqXKK3K d4HXW8i3pqwBs5n7AJ0j2wdV0lzsKB+MlQEgx6ypfHV42V8pMSisDG2io5G/WdrW gPs5CxgsRrDOg+9iHHudUFgoL/XRa/f0gWlgYs0aiv3GfoVO5yOWUY+fG8Ojiw0h utZyeajp5uywBYzFqWez9US5weA9OfUPnoCNR6n5JTWiT95lEH+t+4YrSW1z4g2e DGc+tP72LdWCS7u58XirzaB3XI6Gxbf1wbrvDQ70ZuDH6YLyxRix+s2kSW20sgHf zMLjRzZUIB/e2L9IfCeozcgbZdWX/oJIgTcaHunV4FfVf/FOAQ== -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:23 2026 by rpki-client