This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233342e302f32342d3234203d3e20323135323338.roa File: 3139342e3132342e3233342e302f32342d3234203d3e20323135323338.roa (raw, json) Hash identifier: YqdxBxvtFsmv3SRDqoqxfde+W6U0yY2qSrj/R13SbuM= Subject key identifier: 57:13:07:E5:27:EE:FB:88:F4:B2:E8:8C:E8:80:3C:5C:D0:4C:82:2D Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 5C7567A3F9CC0A25CB7054C649AB92E93F97A6F7 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233342e302f32342d3234203d3e20323135323338.roa Signing time: Sat 20 Dec 2025 13:48:09 +0000 ROA not before: Sat 20 Dec 2025 13:43:09 +0000 ROA not after: Sat 19 Dec 2026 13:48:09 +0000 asID: 215238 IP address blocks: 194.124.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:75:67:a3:f9:cc:0a:25:cb:70:54:c6:49:ab:92:e9:3f:97:a6:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Dec 20 13:43:09 2025 GMT Not After : Dec 19 13:48:09 2026 GMT Subject: CN=571307E527EEFB88F4B2E88CE8803C5CD04C822D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9d:17:a2:eb:82:b6:35:7b:f0:01:d8:fc:aa: 61:cc:d6:b9:c1:21:64:1f:a6:47:de:36:71:5a:61: 85:5e:97:3a:69:41:be:2f:65:18:b3:52:39:75:1e: ab:89:4e:10:b0:df:f2:d8:7f:90:8f:fe:b5:e2:d3: 97:20:16:2d:86:52:f3:cd:7c:3d:27:4a:43:8d:cf: ae:7d:b7:2c:b5:99:4e:c4:d7:88:5a:e7:84:de:3d: c1:fd:c5:b9:ad:7b:b7:a4:38:5b:77:83:38:69:33: 8c:ba:40:fe:b6:ca:5d:14:e9:fd:81:ec:59:53:e0: f5:93:6b:0b:b6:29:e4:8d:a4:76:7a:68:d1:52:8a: 34:45:59:70:c2:b3:9e:41:48:25:72:28:b1:a0:d8: e1:7e:bb:b2:bd:20:90:27:88:a6:53:39:76:f4:7a: 67:44:1d:0c:9c:8e:2c:88:b0:cb:15:c3:9d:f0:d4: bb:9c:11:b2:7c:ec:84:0c:cd:76:ac:70:21:cc:2c: d2:45:51:62:56:ba:2a:93:24:d7:96:19:9d:ca:c7: 70:fc:4d:ed:3c:1d:18:c5:97:9f:9c:36:50:f2:75: 2f:c0:f2:cf:00:90:95:68:29:86:6c:8c:d7:5a:c7: b0:a0:a8:67:57:60:3c:cb:4d:7e:7c:56:b1:f8:dc: 99:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:13:07:E5:27:EE:FB:88:F4:B2:E8:8C:E8:80:3C:5C:D0:4C:82:2D X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233342e302f32342d3234203d3e20323135323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.124.234.0/24 Signature Algorithm: sha256WithRSAEncryption 20:bd:1a:c3:fb:41:43:87:0e:47:a8:1e:b9:ae:21:0c:30:b6: bd:75:12:70:0b:e2:29:6e:9f:41:dd:a8:66:58:d9:40:5e:94: ac:0d:4c:24:c7:2a:28:c5:6b:a0:fb:86:ba:be:14:d3:31:77: 70:4f:c0:c3:22:d7:3e:d9:6c:39:a8:2f:d5:39:ff:8b:a3:74: c0:c7:07:af:9b:a8:b5:4f:5c:d2:79:9f:f3:73:c7:b7:e4:01: 37:91:82:6c:55:79:d8:d9:03:d2:de:ac:0d:7e:5e:e4:29:89: b2:c1:e5:9b:86:9c:0c:37:8d:64:e1:cc:83:56:fc:a7:05:e9: b9:3c:ea:87:e5:af:da:81:89:e2:ec:79:16:8f:98:d5:42:a6: 1d:c4:e5:a4:b5:92:08:f5:36:87:6f:60:28:6f:9e:95:fe:da: 2b:c2:f8:4b:7f:ed:8d:87:89:e8:8a:81:03:37:c1:a4:50:3f: a7:7c:3a:ce:2f:6b:52:38:98:bc:59:18:b8:9f:26:9e:14:68: 99:5b:68:89:9c:3a:b9:3d:40:45:94:d4:11:f4:b8:a9:aa:2c: 17:e9:aa:80:54:d7:76:05:ea:1f:67:aa:c8:90:3a:b8:7c:ce: fe:af:bf:68:a8:6f:88:7c:b3:d7:d0:9f:4b:39:a4:1d:98:90: 02:f4:c7:58 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUXHVno/nMCiXLcFTGSauS6T+XpvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNTEyMjAxMzQzMDlaFw0yNjEyMTkxMzQ4MDlaMDMxMTAvBgNV BAMTKDU3MTMwN0U1MjdFRUZCODhGNEIyRTg4Q0U4ODAzQzVDRDA0QzgyMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZnRei64K2NXvwAdj8qmHM1rnB IWQfpkfeNnFaYYVelzppQb4vZRizUjl1HquJThCw3/LYf5CP/rXi05cgFi2GUvPN fD0nSkONz659tyy1mU7E14ha54TePcH9xbmte7ekOFt3gzhpM4y6QP62yl0U6f2B 7FlT4PWTawu2KeSNpHZ6aNFSijRFWXDCs55BSCVyKLGg2OF+u7K9IJAniKZTOXb0 emdEHQycjiyIsMsVw53w1LucEbJ87IQMzXascCHMLNJFUWJWuiqTJNeWGZ3Kx3D8 Te08HRjFl5+cNlDydS/A8s8AkJVoKYZsjNdax7CgqGdXYDzLTX58VrH43JmLAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUVxMH5Sfu+4j0suiM6IA8XNBMgi0wHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgt N2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhmMDZlLzAvMzEzOTM0MmUzMTMyMzQyZTMy MzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNTMyMzMzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMJ86jANBgkqhkiG9w0BAQsFAAOCAQEAIL0aw/tBQ4cOR6geua4hDDC2vXUS cAviKW6fQd2oZljZQF6UrA1MJMcqKMVroPuGur4U0zF3cE/AwyLXPtlsOagv1Tn/ i6N0wMcHr5uotU9c0nmf83PHt+QBN5GCbFV52NkD0t6sDX5e5CmJssHlm4acDDeN ZOHMg1b8pwXpuTzqh+Wv2oGJ4ux5Fo+Y1UKmHcTlpLWSCPU2h29gKG+elf7aK8L4 S3/tjYeJ6IqBAzfBpFA/p3w6zi9rUjiYvFkYuJ8mnhRomVtoiZw6uT1ARZTUEfS4 qaosF+mqgFTXdgXqH2eqyJA6uHzO/q+/aKhviHyz19CfSzmkHZiQAvTHWA== -----END CERTIFICATE-----Generated at Wed Jan 21 17:16:20 2026 by rpki-client