This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36302e302f32342d3234203d3e203131383738.roa File: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (raw, json) Hash identifier: IVpkKpecJIjzuckRW19RYnHFzcqeOz1CHzHhlqd09/8= Subject key identifier: 46:C6:33:96:5C:82:32:4E:56:9E:F7:0F:19:23:1C:F6:88:E7:46:23 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 633E4EB557B88CC09597C035341ABC6273C97F27 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36302e302f32342d3234203d3e203131383738.roa Signing time: Mon 26 Jan 2026 03:55:35 +0000 ROA not before: Mon 26 Jan 2026 03:50:35 +0000 ROA not after: Mon 25 Jan 2027 03:55:35 +0000 asID: 11878 IP address blocks: 185.130.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:3e:4e:b5:57:b8:8c:c0:95:97:c0:35:34:1a:bc:62:73:c9:7f:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Jan 26 03:50:35 2026 GMT Not After : Jan 25 03:55:35 2027 GMT Subject: CN=46C633965C82324E569EF70F19231CF688E74623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7a:26:25:df:60:4c:28:0a:cd:ff:49:68:7e: 36:ca:d5:90:9f:42:ca:ce:a4:97:a8:82:d4:49:f3: fb:9c:88:79:67:ba:63:bb:b8:21:03:b9:cf:1d:63: 7b:1e:26:42:86:4a:8e:8b:bc:c5:e6:76:41:df:68: d2:3f:ab:93:f6:54:66:e7:8b:b9:4f:e2:a3:b7:dd: 1b:f0:9b:3e:e8:8a:15:9d:4d:be:36:2f:e0:c9:64: 18:85:50:59:85:ea:a0:a0:04:3b:5e:49:9b:f7:51: cd:8b:c5:f2:c7:7a:9e:2b:29:b7:13:4f:38:39:5c: ba:86:4d:9f:7e:9c:7a:b7:18:e4:66:80:b8:b4:70: 79:23:79:38:a6:30:f7:67:7d:4c:4e:71:83:bc:06: e9:b8:7b:8d:66:55:38:61:af:f2:41:bb:4e:61:7d: 4f:11:9f:c8:75:75:f7:21:6f:b9:e3:91:c5:df:e3: 8c:0c:d4:10:a4:8d:b2:9c:15:ee:95:da:56:ca:6e: 3d:56:c9:03:95:85:25:dc:a0:82:67:85:bb:c4:f8: fe:68:3c:5b:54:a4:da:55:c2:74:54:89:49:b5:cc: e0:82:ed:f5:c0:4c:3b:4d:2e:7b:74:32:29:f2:44: 8f:38:06:32:37:97:7f:79:a0:52:bd:27:30:e0:55: 1e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C6:33:96:5C:82:32:4E:56:9E:F7:0F:19:23:1C:F6:88:E7:46:23 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36302e302f32342d3234203d3e203131383738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.60.0/24 Signature Algorithm: sha256WithRSAEncryption d6:41:ce:64:09:a2:04:d1:ef:f5:8a:53:d6:d1:df:0b:49:8c: a1:e7:57:97:44:bb:be:e9:bf:e7:67:8e:92:42:90:c0:18:0d: f6:8c:a0:02:f8:37:66:72:a7:b6:b2:2e:f8:8e:f9:bc:06:8e: 02:9f:97:54:7d:3f:6b:04:9d:5e:69:46:59:f1:21:7a:af:1d: 30:62:de:10:a1:bf:54:51:c7:ef:ae:73:dd:f4:b3:a9:d6:a5: ae:61:87:a0:47:6d:22:7c:8d:c6:2f:b8:96:fa:fc:c6:be:2a: 0e:19:b5:b3:90:cf:18:01:0a:a9:cc:51:05:a4:58:a3:82:df: 79:b4:3c:91:37:a3:a6:31:d8:59:e3:56:a3:9e:51:6d:46:cd: 6f:a4:c4:fb:72:8d:4e:87:d5:ce:99:72:59:e9:76:fc:47:f9: 8f:90:51:04:7e:9f:05:6f:09:ff:4e:a3:3d:9c:cc:c4:b2:ad: 5f:63:40:21:8d:71:7c:17:18:7a:85:52:ee:4a:cb:d3:16:d7: 4c:ff:4c:4c:15:ba:b8:20:7f:5e:20:aa:d7:8f:8b:45:55:54: 5f:0c:a1:1a:2c:52:32:ef:0e:07:5a:00:f2:f0:73:04:76:89: 14:3b:65:9b:97:de:8d:58:3f:94:e4:93:64:7e:51:eb:c8:92: 13:2e:ee:1d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUYz5OtVe4jMCVl8A1NBq8YnPJfycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjAxMjYwMzUwMzVaFw0yNzAxMjUwMzU1MzVaMDMxMTAvBgNV BAMTKDQ2QzYzMzk2NUM4MjMyNEU1NjlFRjcwRjE5MjMxQ0Y2ODhFNzQ2MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+eiYl32BMKArN/0lofjbK1ZCf QsrOpJeogtRJ8/uciHlnumO7uCEDuc8dY3seJkKGSo6LvMXmdkHfaNI/q5P2VGbn i7lP4qO33Rvwmz7oihWdTb42L+DJZBiFUFmF6qCgBDteSZv3Uc2LxfLHep4rKbcT Tzg5XLqGTZ9+nHq3GORmgLi0cHkjeTimMPdnfUxOcYO8Bum4e41mVThhr/JBu05h fU8Rn8h1dfchb7njkcXf44wM1BCkjbKcFe6V2lbKbj1WyQOVhSXcoIJnhbvE+P5o PFtUpNpVwnRUiUm1zOCC7fXATDtNLnt0MinyRI84BjI3l395oFK9JzDgVR79AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQURsYzllyCMk5WnvcPGSMc9ojnRiMwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzEzODM1MmUzMTMzMzAyZTM2 MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMxMzgzNzM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA uYI8MA0GCSqGSIb3DQEBCwUAA4IBAQDWQc5kCaIE0e/1ilPW0d8LSYyh51eXRLu+ 6b/nZ46SQpDAGA32jKAC+Ddmcqe2si74jvm8Bo4Cn5dUfT9rBJ1eaUZZ8SF6rx0w Yt4Qob9UUcfvrnPd9LOp1qWuYYegR20ifI3GL7iW+vzGvioOGbWzkM8YAQqpzFEF pFijgt95tDyRN6OmMdhZ41ajnlFtRs1vpMT7co1Oh9XOmXJZ6Xb8R/mPkFEEfp8F bwn/TqM9nMzEsq1fY0AhjXF8Fxh6hVLuSsvTFtdM/0xMFbq4IH9eIKrXj4tFVVRf DKEaLFIy7w4HWgDy8HMEdokUO2Wbl96NWD+U5JNkflHryJITLu4d -----END CERTIFICATE-----Generated at Tue Jan 27 07:19:45 2026 by rpki-client