This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e2035353131.roa File: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (raw, json) Hash identifier: j6AST7eH5dTOFWE32Sd37BgdQFtqd4Au0z4GNSD60G0= Subject key identifier: 2E:5A:64:CD:62:D1:EE:AD:62:14:1C:F4:A9:E9:EE:9A:D3:15:29:38 Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4 Certificate serial: 312CFB14AFFC2C9FF1188117156D6C07492CBBEB Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e2035353131.roa Signing time: Thu 25 Dec 2025 15:55:32 +0000 ROA not before: Thu 25 Dec 2025 15:50:32 +0000 ROA not after: Thu 24 Dec 2026 15:55:32 +0000 asID: 5511 IP address blocks: 130.193.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 07:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:2c:fb:14:af:fc:2c:9f:f1:18:81:17:15:6d:6c:07:49:2c:bb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4 Validity Not Before: Dec 25 15:50:32 2025 GMT Not After : Dec 24 15:55:32 2026 GMT Subject: CN=2E5A64CD62D1EEAD62141CF4A9E9EE9AD3152938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:18:1c:82:91:7d:42:8f:97:fc:f6:f3:19:40: 0c:50:a7:49:69:4c:60:36:e5:ed:1e:1d:cb:cb:ef: 27:ba:aa:3c:10:63:42:95:eb:75:c1:f3:d3:c4:83: 23:88:70:92:32:2e:87:6b:1f:e5:33:4b:dc:1c:e1: ca:25:14:d0:3a:30:7a:69:94:12:62:c1:5a:ee:fa: 1c:6e:80:0c:52:94:7c:c1:88:6f:c3:df:2f:e7:9f: 06:91:bf:6b:1e:83:ef:5c:13:77:48:f4:26:a2:41: 34:71:e6:e2:f8:14:a6:53:a2:45:90:6e:71:d2:6b: c0:ed:f4:ee:cd:d4:c0:d6:0a:fa:52:f9:fd:c3:73: d8:02:35:41:63:16:2a:d8:91:c3:0f:aa:62:c7:2d: 7d:dd:a3:e0:25:03:21:57:fb:14:9b:74:2d:0c:94: 1b:91:4c:42:95:e7:b4:b3:72:b0:6a:c9:80:e7:77: 0b:37:81:1b:17:7b:b0:f5:d6:9b:60:18:50:b4:c0: 0b:47:9b:16:9c:95:76:a8:41:ad:67:2d:e2:09:41: 80:9b:a3:d7:24:94:5e:20:48:00:73:70:e3:6b:b8: fa:e4:93:c7:28:64:aa:8c:7c:63:d3:fc:77:5c:79: 7e:41:bd:2c:a4:55:31:9d:6a:ed:1e:ee:d0:99:64: 3d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5A:64:CD:62:D1:EE:AD:62:14:1C:F4:A9:E9:EE:9A:D3:15:29:38 X509v3 Authority Key Identifier: keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e2035353131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.193.75.0/24 Signature Algorithm: sha256WithRSAEncryption 82:41:fc:32:1f:bf:d9:a7:fa:dd:9e:ae:22:ab:5e:a8:04:80: 08:77:2e:08:26:0d:ec:e2:ae:ae:cc:79:81:0e:a0:21:c0:39: 31:dc:8c:a2:76:11:b3:86:95:48:5a:7f:ff:e5:77:19:26:a0: 05:5d:45:9c:f1:ea:32:38:ac:63:7b:7b:f0:f5:fa:d3:82:62: 4e:f0:cc:c8:39:02:81:cb:1b:44:a9:cb:78:91:d9:8b:54:9b: 73:71:7b:37:25:08:54:1c:90:40:88:c4:c4:6c:e2:02:72:9d: 7d:6f:1b:f7:ea:6a:69:b6:ce:c5:9c:56:00:49:c5:1c:42:8c: 8f:c3:8a:22:24:fd:70:bf:00:d9:c4:cf:38:c9:10:e9:39:29: 67:eb:46:fc:1c:3b:63:34:fb:9c:c4:d8:a0:30:df:9a:54:d3: 81:5f:b0:17:74:56:70:b2:eb:09:ec:15:35:a6:c1:f7:ee:40: 7d:15:c5:c9:22:ca:41:49:f4:7e:5b:f8:f1:a1:9b:8b:4a:4e: 01:74:17:24:0c:8c:83:d8:17:a8:a6:af:e4:15:0e:15:53:70: 11:84:47:96:6b:c8:f2:6d:55:d8:3b:61:06:1a:02:73:c9:0c: 7c:07:36:f7:de:b1:bd:63:3f:a0:cb:56:44:f8:0a:3e:50:07: 5f:59:c3:87 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUMSz7FK/8LJ/xGIEXFW1sB0ksu+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm NTg3M2RjNDAeFw0yNTEyMjUxNTUwMzJaFw0yNjEyMjQxNTU1MzJaMDMxMTAvBgNV BAMTKDJFNUE2NENENjJEMUVFQUQ2MjE0MUNGNEE5RTlFRTlBRDMxNTI5MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLGByCkX1Cj5f89vMZQAxQp0lp TGA25e0eHcvL7ye6qjwQY0KV63XB89PEgyOIcJIyLodrH+UzS9wc4colFNA6MHpp lBJiwVru+hxugAxSlHzBiG/D3y/nnwaRv2seg+9cE3dI9CaiQTRx5uL4FKZTokWQ bnHSa8Dt9O7N1MDWCvpS+f3Dc9gCNUFjFirYkcMPqmLHLX3do+AlAyFX+xSbdC0M lBuRTEKV57SzcrBqyYDndws3gRsXe7D11ptgGFC0wAtHmxaclXaoQa1nLeIJQYCb o9cklF4gSABzcONruPrkk8coZKqMfGPT/HdceX5BvSykVTGdau0e7tCZZD0TAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQULlpkzWLR7q1iFBz0qenumtMVKTgwHwYDVR0j BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX SFBjUS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzEzMzMwMmUzMTM5MzMyZTM3 MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM1MzEzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAILB SzANBgkqhkiG9w0BAQsFAAOCAQEAgkH8Mh+/2af63Z6uIqteqASACHcuCCYN7OKu rsx5gQ6gIcA5MdyMonYRs4aVSFp//+V3GSagBV1FnPHqMjisY3t78PX604JiTvDM yDkCgcsbRKnLeJHZi1Sbc3F7NyUIVByQQIjExGziAnKdfW8b9+pqabbOxZxWAEnF HEKMj8OKIiT9cL8A2cTPOMkQ6TkpZ+tG/Bw7YzT7nMTYoDDfmlTTgV+wF3RWcLLr CewVNabB9+5AfRXFySLKQUn0flv48aGbi0pOAXQXJAyMg9gXqKav5BUOFVNwEYRH lmvI8m1V2DthBhoCc8kMfAc2996xvWM/oMtWRPgKPlAHX1nDhw== -----END CERTIFICATE-----Generated at Thu Jan 22 12:31:19 2026 by rpki-client