This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa File: 3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa (raw, json) Hash identifier: rPMAE/Emhe8ab0enxKSEB8g0vJLbwLIQWJGIysDgBSk= Subject key identifier: 1F:8D:C4:B8:D4:B0:0A:73:0C:E3:28:E6:13:39:DF:B8:0A:4E:9F:DF Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4 Certificate serial: 088A3DE436EBC908D071DE05ABCBF6F89A1EDA5F Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa Signing time: Wed 24 Dec 2025 20:55:32 +0000 ROA not before: Wed 24 Dec 2025 20:50:32 +0000 ROA not after: Wed 23 Dec 2026 20:55:32 +0000 asID: 206216 IP address blocks: 146.19.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:8a:3d:e4:36:eb:c9:08:d0:71:de:05:ab:cb:f6:f8:9a:1e:da:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4 Validity Not Before: Dec 24 20:50:32 2025 GMT Not After : Dec 23 20:55:32 2026 GMT Subject: CN=1F8DC4B8D4B00A730CE328E61339DFB80A4E9FDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c8:87:cb:0b:22:85:47:44:a9:00:7f:c5:18: af:a2:af:df:c7:26:4f:a9:12:af:d7:f1:17:60:53: a7:4f:0e:75:7b:eb:a0:39:c8:81:32:8f:02:69:f4: 1b:eb:81:80:68:20:a2:0b:8d:81:c4:92:a1:b3:6b: f8:8e:54:de:0b:91:42:f3:c9:c2:a2:30:2b:49:df: 47:e8:aa:ea:d4:d5:4b:d7:a3:b6:0a:b2:d6:5e:bd: fa:0a:88:26:a2:5e:66:42:d5:fb:05:6d:b7:d1:00: 24:35:40:15:56:af:81:13:aa:4e:83:2a:81:b3:5a: 98:f8:23:fc:51:a1:29:23:26:c8:3a:ba:5f:a6:87: ce:63:de:df:4a:47:7f:d2:5d:d7:0a:48:cb:b0:aa: 40:3d:96:5b:98:9f:95:bd:d7:db:b1:d4:34:0d:c5: 5b:74:29:23:fe:de:41:5e:71:f1:41:21:28:0b:cf: 30:73:cc:2f:df:fc:96:37:83:cf:55:00:ad:e2:ab: 7d:fe:49:a4:e9:74:93:02:71:01:cd:7d:2d:66:35: 93:3d:f0:75:d8:21:44:f0:f9:98:29:a1:7e:93:0a: 23:2c:ea:98:12:37:0e:01:38:65:65:92:6f:2f:f4: 7d:8f:f1:fd:84:cd:74:4d:4e:73:43:c9:3d:03:72: ef:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8D:C4:B8:D4:B0:0A:73:0C:E3:28:E6:13:39:DF:B8:0A:4E:9F:DF X509v3 Authority Key Identifier: keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.215.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:f6:48:d4:0e:4c:e7:69:78:75:43:8a:43:23:b8:be:be:eb: 68:62:d7:c5:1a:b7:49:64:09:a7:84:8f:f8:be:49:e4:bd:d5: 2a:ad:66:0a:fe:e1:3d:f2:fe:01:0c:29:1e:2f:15:b2:ec:ba: 05:1f:ca:59:6e:26:94:24:c8:02:8d:41:c8:9b:57:aa:be:48: b9:19:cb:e0:e6:18:a9:52:bf:37:00:c1:c8:7a:5a:36:7d:68: 58:3b:9d:62:03:0e:f8:bc:38:a0:ab:ad:aa:5b:91:0b:8f:5c: c7:42:ed:c3:34:d4:a4:b3:5a:5d:f8:23:2d:68:6c:c1:69:e7: 05:9f:03:91:a4:58:cb:2b:58:12:7b:f3:e7:19:dc:08:9c:97: 99:9e:49:c6:6b:f3:a8:be:31:3f:8d:cd:d3:1d:24:0c:b5:81: 3b:e1:b0:76:e0:af:78:ad:62:6b:00:50:1d:f0:3b:5d:a9:e8: 2a:7e:f0:51:0d:46:36:e9:29:f9:e5:90:86:34:1b:9d:c7:fd: c3:e6:f6:23:85:88:98:eb:69:c4:96:4a:e6:a0:c3:36:3f:7f: f1:2d:b6:4a:0f:7b:57:06:8f:ef:7f:fa:85:82:16:c0:7e:ae: 1a:37:51:b1:63:f9:2c:31:7c:ec:b9:45:00:c8:63:ba:d3:83: 0c:43:b5:d3 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUCIo95DbryQjQcd4Fq8v2+Joe2l8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm NTg3M2RjNDAeFw0yNTEyMjQyMDUwMzJaFw0yNjEyMjMyMDU1MzJaMDMxMTAvBgNV BAMTKDFGOERDNEI4RDRCMDBBNzMwQ0UzMjhFNjEzMzlERkI4MEE0RTlGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClyIfLCyKFR0SpAH/FGK+ir9/H Jk+pEq/X8RdgU6dPDnV766A5yIEyjwJp9BvrgYBoIKILjYHEkqGza/iOVN4LkULz ycKiMCtJ30foqurU1UvXo7YKstZevfoKiCaiXmZC1fsFbbfRACQ1QBVWr4ETqk6D KoGzWpj4I/xRoSkjJsg6ul+mh85j3t9KR3/SXdcKSMuwqkA9lluYn5W919ux1DQN xVt0KSP+3kFecfFBISgLzzBzzC/f/JY3g89VAK3iq33+SaTpdJMCcQHNfS1mNZM9 8HXYIUTw+ZgpoX6TCiMs6pgSNw4BOGVlkm8v9H2P8f2EzXRNTnNDyT0Dcu99AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUH43EuNSwCnMM4yjmEznfuApOn98wHwYDVR0j BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX SFBjUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzEzNDM2MmUzMTM5MmUzMjMx MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzYzMjMxMzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACSE9cwDQYJKoZIhvcNAQELBQADggEBADv2SNQOTOdpeHVDikMjuL6+62hi18Ua t0lkCaeEj/i+SeS91SqtZgr+4T3y/gEMKR4vFbLsugUfylluJpQkyAKNQcibV6q+ SLkZy+DmGKlSvzcAwch6WjZ9aFg7nWIDDvi8OKCrrapbkQuPXMdC7cM01KSzWl34 Iy1obMFp5wWfA5GkWMsrWBJ78+cZ3Aicl5meScZr86i+MT+NzdMdJAy1gTvhsHbg r3itYmsAUB3wO12p6Cp+8FENRjbpKfnlkIY0G53H/cPm9iOFiJjracSWSuagwzY/ f/EttkoPe1cGj+9/+oWCFsB+rho3UbFj+SwxfOy5RQDIY7rTgwxDtdM= -----END CERTIFICATE-----Generated at Sun Jan 25 17:23:19 2026 by rpki-client