This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa File: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (raw, json) Hash identifier: rxGzTHw2ETBLYdKcURKX80/JYXYHlHWFPETTk7njjlE= Subject key identifier: A2:78:85:4D:33:2E:A3:86:81:72:1B:A9:BB:DF:6A:53:6E:52:1D:30 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 047A205F73F4B6B9324A91C24C3E2AD96096FA5A Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa Signing time: Tue 13 Jan 2026 01:55:33 +0000 ROA not before: Tue 13 Jan 2026 01:50:33 +0000 ROA not after: Tue 12 Jan 2027 01:55:33 +0000 asID: 22427 IP address blocks: 185.213.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:7a:20:5f:73:f4:b6:b9:32:4a:91:c2:4c:3e:2a:d9:60:96:fa:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Jan 13 01:50:33 2026 GMT Not After : Jan 12 01:55:33 2027 GMT Subject: CN=A278854D332EA38681721BA9BBDF6A536E521D30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d9:fa:03:4f:d0:79:92:5a:97:35:4c:11:b3: e6:25:22:a8:ff:75:8b:d7:58:d3:cb:7f:27:26:d5: ab:55:33:5f:12:ac:95:ce:63:3f:42:76:c0:a7:6d: 5d:c9:64:2c:17:f2:64:ad:76:d3:b1:12:f5:b5:34: 86:d4:fa:55:dc:5c:c0:dc:6c:b5:e0:39:d2:23:00: 84:5e:f4:83:9f:3c:5b:ca:a0:7a:28:41:ad:11:59: 79:ce:df:f9:09:8f:af:0b:c7:74:89:bf:82:07:3b: aa:a0:1d:bc:9e:e1:79:5c:a4:c0:c1:86:0d:1d:ad: 5b:63:da:97:af:14:0b:82:a1:6f:7c:3d:6f:b6:60: c5:f1:00:37:dc:e5:b3:f9:07:29:24:bc:14:80:50: d7:e3:6a:14:1e:4f:97:63:15:9e:19:ad:e7:91:5b: e3:ad:0e:ba:d3:48:9f:f4:7d:8c:63:cd:8b:a1:79: c3:05:5e:13:48:a1:85:a4:54:d0:50:20:e8:9a:39: 95:12:5b:94:5d:ac:66:f7:5c:83:3e:d6:80:e5:55: bb:6a:7e:2e:83:61:5d:07:8f:c9:0c:fa:c7:26:1d: 13:1a:67:61:51:f2:3b:60:cf:6f:02:1a:56:85:5b: 07:50:8f:d2:41:43:07:12:e9:ad:e0:80:9c:a0:3e: 46:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:78:85:4D:33:2E:A3:86:81:72:1B:A9:BB:DF:6A:53:6E:52:1D:30 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.242.0/24 Signature Algorithm: sha256WithRSAEncryption 86:d2:7d:17:df:8f:95:81:1b:78:8a:21:48:75:cb:49:d9:b5: eb:23:48:ad:37:3b:1a:2f:45:5c:bd:86:f1:86:1d:2e:81:94: ce:62:38:0e:7e:b0:76:c6:a7:e8:ec:2c:7a:9e:05:5d:b7:04: 87:3e:58:dd:ce:06:05:ed:86:70:a3:8c:28:2c:3f:38:47:25: e4:04:71:eb:3d:44:2b:0a:1c:cc:52:1e:90:2e:68:82:1b:48: b7:40:84:15:50:b3:6e:54:fd:ce:c6:30:14:0b:f5:e4:0e:3d: 5b:84:81:59:a2:d8:a6:b6:35:ed:60:92:58:2c:e6:a5:c8:ef: e8:9a:88:b6:0d:1e:2d:3e:d2:75:19:a1:cc:0f:5c:d8:bd:98: 95:d8:c1:83:f4:4c:6f:90:fb:2d:55:7b:8f:70:94:8d:16:28: 17:d7:43:12:16:66:80:58:93:16:7c:6b:61:a2:22:b5:6d:ca: c4:8f:60:f1:a2:cc:bc:f0:0a:df:b9:71:8f:fb:84:43:30:46: fd:c4:eb:57:92:69:24:18:bb:c6:26:16:34:7a:bf:84:2c:24: c2:63:85:8a:1e:03:2c:72:24:19:16:81:0a:c2:88:df:db:3a: 44:fb:fa:5f:b5:b0:61:77:76:8d:f5:76:14:e1:54:c5:eb:ee: 8c:bb:8f:ef -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUBHogX3P0trkySpHCTD4q2WCW+lowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjAxMTMwMTUwMzNaFw0yNzAxMTIwMTU1MzNaMDMxMTAvBgNV BAMTKEEyNzg4NTREMzMyRUEzODY4MTcyMUJBOUJCREY2QTUzNkU1MjFEMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa2foDT9B5klqXNUwRs+YlIqj/ dYvXWNPLfycm1atVM18SrJXOYz9CdsCnbV3JZCwX8mStdtOxEvW1NIbU+lXcXMDc bLXgOdIjAIRe9IOfPFvKoHooQa0RWXnO3/kJj68Lx3SJv4IHO6qgHbye4XlcpMDB hg0drVtj2pevFAuCoW98PW+2YMXxADfc5bP5BykkvBSAUNfjahQeT5djFZ4ZreeR W+OtDrrTSJ/0fYxjzYuhecMFXhNIoYWkVNBQIOiaOZUSW5RdrGb3XIM+1oDlVbtq fi6DYV0Hj8kM+scmHRMaZ2FR8jtgz28CGlaFWwdQj9JBQwcS6a3ggJygPkYxAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUoniFTTMuo4aBchupu99qU25SHTAwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzEzODM1MmUzMjMxMzMyZTMy MzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzIzNDMyMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC51fIwDQYJKoZIhvcNAQELBQADggEBAIbSfRffj5WBG3iKIUh1y0nZtesjSK03 OxovRVy9hvGGHS6BlM5iOA5+sHbGp+jsLHqeBV23BIc+WN3OBgXthnCjjCgsPzhH JeQEces9RCsKHMxSHpAuaIIbSLdAhBVQs25U/c7GMBQL9eQOPVuEgVmi2Ka2Ne1g klgs5qXI7+iaiLYNHi0+0nUZocwPXNi9mJXYwYP0TG+Q+y1Ve49wlI0WKBfXQxIW ZoBYkxZ8a2GiIrVtysSPYPGizLzwCt+5cY/7hEMwRv3E61eSaSQYu8YmFjR6v4Qs JMJjhYoeAyxyJBkWgQrCiN/bOkT7+l+1sGF3do31dhThVMXr7oy7j+8= -----END CERTIFICATE-----Generated at Tue Jan 27 07:19:55 2026 by rpki-client