This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e203239383032.roa File: 38392e34322e3131302e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: Chbmines5hwhR4F+JuY4APAYPbeg1c32lDZMdiR/MqQ= Subject key identifier: 95:DF:8F:57:CA:23:3B:D3:CE:2D:04:3A:D2:4E:89:1F:DA:2A:2E:A7 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 2C9EC1257A136C3F00AAB9F9F003F75F84AB1453 Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e203239383032.roa Signing time: Thu 29 Jan 2026 10:57:32 +0000 ROA not before: Thu 29 Jan 2026 10:52:32 +0000 ROA not after: Thu 28 Jan 2027 10:57:32 +0000 asID: 29802 IP address blocks: 89.42.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:9e:c1:25:7a:13:6c:3f:00:aa:b9:f9:f0:03:f7:5f:84:ab:14:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Jan 29 10:52:32 2026 GMT Not After : Jan 28 10:57:32 2027 GMT Subject: CN=95DF8F57CA233BD3CE2D043AD24E891FDA2A2EA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b4:e4:6d:0f:27:57:1e:9f:c0:1e:24:ad:40: a9:94:fb:68:16:f9:e9:44:3d:76:ad:24:1e:e1:d0: df:00:0d:95:2e:43:f0:27:17:5f:5b:0b:32:af:52: 2f:a5:83:8e:f3:3d:ed:d6:3a:d1:33:fd:90:cf:57: 66:83:fa:e8:a7:ee:1f:31:e9:ed:ae:41:e2:15:ea: d7:de:0a:2f:97:a3:b1:16:9f:0a:0e:3b:e3:d8:d2: 7e:38:1a:b8:c2:0a:7a:8c:04:1a:a9:be:03:5f:96: af:5e:b0:6a:4d:56:97:01:42:78:a6:ce:34:f8:5b: 2b:1c:d1:7a:d9:5a:86:de:e3:ad:46:8b:94:c0:8b: 8d:ad:8f:5b:5b:0e:6c:f9:93:1d:c6:56:38:73:b3: 1f:ca:57:34:89:c7:67:ac:b7:0f:00:0c:7c:56:88: 8c:77:47:e0:88:18:32:11:64:d4:92:81:94:4a:d3: d2:33:61:fd:43:23:c5:88:87:36:fc:2f:29:f5:3d: 0a:b1:18:ce:85:8f:ac:39:b5:47:a2:3a:13:70:8a: 67:33:23:b8:00:73:17:7d:aa:41:8f:02:6c:00:04: 28:ef:95:b8:e8:a6:23:85:dd:85:3f:77:65:37:36: 5c:01:6c:47:cc:18:ef:5c:e3:4f:1a:85:ff:82:e4: 80:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DF:8F:57:CA:23:3B:D3:CE:2D:04:3A:D2:4E:89:1F:DA:2A:2E:A7 X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.42.110.0/24 Signature Algorithm: sha256WithRSAEncryption 11:95:72:a8:c0:9b:a1:32:77:6e:6b:b2:fc:e7:08:0f:5c:1d: a2:f7:e9:ec:b5:22:ec:aa:b4:11:e6:a8:d0:c1:23:70:0c:7e: 2d:4e:4d:9c:05:a4:dc:89:56:49:8e:d8:b5:fb:81:f8:e8:ab: 98:61:55:48:9a:bf:7c:11:9c:52:1f:92:20:2e:0e:e1:e0:19: 50:fa:fe:c5:eb:3a:0a:f8:f3:40:f4:3d:f0:05:15:63:30:34: 53:02:f6:07:19:36:98:d0:1b:a2:e8:08:16:bc:87:b7:c8:4f: 78:81:ff:04:04:92:32:91:ba:3d:a4:06:ef:e5:aa:fe:6b:5a: 15:96:6c:96:f1:b8:37:04:63:12:54:49:69:02:88:bc:c9:fa: 21:84:ec:2f:ac:cd:95:b4:fb:a8:2b:66:a5:51:dc:e9:f0:1c: f9:31:07:d0:0f:c4:09:c0:46:9a:e4:a5:79:21:29:cc:51:7b: 9b:41:79:27:7d:69:dd:42:97:19:a3:bd:f9:9a:9d:5a:42:48: ea:19:c6:0d:30:60:92:40:5f:9c:11:2e:fd:f0:0a:e3:94:a8: 84:26:2c:22:2f:27:5e:c4:dc:fa:dd:0c:de:b6:5c:eb:bc:c4: fe:48:3d:ba:1f:55:00:aa:a8:31:a5:68:d5:6a:ff:32:41:05: c4:97:94:eb -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIULJ7BJXoTbD8Aqrn58AP3X4SrFFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNjAxMjkxMDUyMzJaFw0yNzAxMjgxMDU3MzJaMDMxMTAvBgNV BAMTKDk1REY4RjU3Q0EyMzNCRDNDRTJEMDQzQUQyNEU4OTFGREEyQTJFQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtORtDydXHp/AHiStQKmU+2gW +elEPXatJB7h0N8ADZUuQ/AnF19bCzKvUi+lg47zPe3WOtEz/ZDPV2aD+uin7h8x 6e2uQeIV6tfeCi+Xo7EWnwoOO+PY0n44GrjCCnqMBBqpvgNflq9esGpNVpcBQnim zjT4Wysc0XrZWobe461Gi5TAi42tj1tbDmz5kx3GVjhzsx/KVzSJx2estw8ADHxW iIx3R+CIGDIRZNSSgZRK09IzYf1DI8WIhzb8Lyn1PQqxGM6Fj6w5tUeiOhNwimcz I7gAcxd9qkGPAmwABCjvlbjopiOF3YU/d2U3NlwBbEfMGO9c408ahf+C5IDPAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUld+PV8ojO9POLQQ60k6JH9oqLqcwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWEwZGU5N2Yt N2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQzYzc5LzAvMzgzOTJlMzQzMjJlMzEzMTMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFkq bjANBgkqhkiG9w0BAQsFAAOCAQEAEZVyqMCboTJ3bmuy/OcID1wdovfp7LUi7Kq0 Eeao0MEjcAx+LU5NnAWk3IlWSY7YtfuB+OirmGFVSJq/fBGcUh+SIC4O4eAZUPr+ xes6CvjzQPQ98AUVYzA0UwL2Bxk2mNAbougIFryHt8hPeIH/BASSMpG6PaQG7+Wq /mtaFZZslvG4NwRjElRJaQKIvMn6IYTsL6zNlbT7qCtmpVHc6fAc+TEH0A/ECcBG muSleSEpzFF7m0F5J31p3UKXGaO9+ZqdWkJI6hnGDTBgkkBfnBEu/fAK45SohCYs Ii8nXsTc+t0M3rZc67zE/kg9uh9VAKqoMaVo1Wr/MkEFxJeU6w== -----END CERTIFICATE-----Generated at Thu Jan 29 17:47:36 2026 by rpki-client