This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131312e302f32342d3234203d3e203239383032.roa File: 38392e34322e3131312e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: L8E/k5WG1P2zSzdmF8rJ5boiZXvKF22tBofIgUqK42s= Subject key identifier: FA:94:E5:51:99:CC:8B:E9:0A:B9:C8:FA:BE:C2:37:DF:1F:6A:28:37 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 2A3FFBF104063064190E72CA860743B2629A2F1C Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131312e302f32342d3234203d3e203239383032.roa Signing time: Thu 29 Jan 2026 10:57:33 +0000 ROA not before: Thu 29 Jan 2026 10:52:33 +0000 ROA not after: Thu 28 Jan 2027 10:57:33 +0000 asID: 29802 IP address blocks: 89.42.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:3f:fb:f1:04:06:30:64:19:0e:72:ca:86:07:43:b2:62:9a:2f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Jan 29 10:52:33 2026 GMT Not After : Jan 28 10:57:33 2027 GMT Subject: CN=FA94E55199CC8BE90AB9C8FABEC237DF1F6A2837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:f7:c5:8b:45:29:f3:2a:67:99:bf:b4:07:3e: 27:63:9d:12:ff:44:72:60:2c:52:96:30:2b:06:a3: 1f:18:42:b4:66:86:8d:ff:fe:7b:11:7e:c2:a3:7d: cb:14:57:c5:81:6d:48:de:ed:98:89:03:d3:ad:c1: bb:36:b2:1f:08:e1:3f:e0:1b:ee:11:19:8d:67:00: a0:f9:7f:18:d1:00:49:de:37:b8:5b:dd:a9:f2:e0: ee:5b:6d:21:72:8e:23:e8:19:67:12:7a:6c:4c:b2: d0:c7:01:d0:68:c2:1e:97:72:51:e6:06:36:77:10: d5:62:92:d9:74:97:4e:d5:1f:58:44:1f:f2:bf:d8: 50:c5:71:ed:61:03:19:4d:34:6c:25:b3:6f:91:80: c7:86:10:9b:53:71:fe:f4:ec:d2:ce:55:df:72:75: 16:ae:6d:1a:1d:37:1b:d5:e8:2c:ef:fd:02:19:58: b2:ea:54:9b:19:0d:6f:f5:0a:b8:1c:27:2d:cd:40: 92:ff:52:d8:e3:18:e5:14:05:e1:99:1b:14:62:ba: 54:b3:81:8f:24:d3:c8:fb:f1:6b:77:47:4d:c0:c9: 79:06:8c:da:34:22:09:6b:9f:d2:c2:4e:55:11:4d: f6:62:3c:27:b2:2a:92:7e:26:41:18:f3:4c:25:29: 95:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:94:E5:51:99:CC:8B:E9:0A:B9:C8:FA:BE:C2:37:DF:1F:6A:28:37 X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131312e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.42.111.0/24 Signature Algorithm: sha256WithRSAEncryption 49:3e:ce:e2:9d:62:b4:d0:8f:f4:d2:24:49:3e:4d:5e:2f:14: 48:bc:a4:69:76:b7:c9:a4:04:06:c0:c9:0b:67:09:9a:49:87: 5f:2b:0c:22:08:15:eb:cf:37:16:86:43:8f:f8:40:01:0b:09: 94:90:58:c7:e5:ae:72:96:dd:8d:a0:59:18:32:d7:7e:69:cf: af:6b:3d:56:65:3d:7f:a3:02:bc:54:0a:14:a6:ff:8c:99:cc: 20:83:bf:e5:b1:66:1a:40:a2:8c:f7:4c:f7:c9:6b:0b:ec:d9: 82:4a:b7:c5:c4:33:be:bb:f0:e5:49:ae:59:10:00:e0:d2:e9: d6:07:1b:6e:a4:8d:97:ec:ff:8e:bb:c5:d3:76:e7:02:f9:b1: 61:74:36:8a:90:c8:0d:42:9d:ae:64:3f:76:17:e6:a4:e2:68: 45:1d:28:51:02:f3:90:9b:be:f6:bc:b2:57:1c:34:2b:77:eb: 0a:6c:1b:e4:01:59:a7:26:fd:2a:6e:bd:5d:57:11:3b:90:f5: 78:a8:aa:ff:02:31:55:b3:83:1c:8f:eb:76:5d:15:10:cf:ba: 3d:3a:f7:f7:4e:7e:45:aa:5e:c3:9b:5f:99:c6:5a:0d:d7:a5: 7d:68:58:d8:8e:81:38:59:c1:14:0e:b0:b2:4c:b0:ef:76:5c: a4:95:e5:fb -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUKj/78QQGMGQZDnLKhgdDsmKaLxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNjAxMjkxMDUyMzNaFw0yNzAxMjgxMDU3MzNaMDMxMTAvBgNV BAMTKEZBOTRFNTUxOTlDQzhCRTkwQUI5QzhGQUJFQzIzN0RGMUY2QTI4MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+98WLRSnzKmeZv7QHPidjnRL/ RHJgLFKWMCsGox8YQrRmho3//nsRfsKjfcsUV8WBbUje7ZiJA9Otwbs2sh8I4T/g G+4RGY1nAKD5fxjRAEneN7hb3any4O5bbSFyjiPoGWcSemxMstDHAdBowh6XclHm BjZ3ENViktl0l07VH1hEH/K/2FDFce1hAxlNNGwls2+RgMeGEJtTcf707NLOVd9y dRaubRodNxvV6Czv/QIZWLLqVJsZDW/1CrgcJy3NQJL/UtjjGOUUBeGZGxRiulSz gY8k08j78Wt3R03AyXkGjNo0Iglrn9LCTlURTfZiPCeyKpJ+JkEY80wlKZUFAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU+pTlUZnMi+kKucj6vsI33x9qKDcwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWEwZGU5N2Yt N2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQzYzc5LzAvMzgzOTJlMzQzMjJlMzEzMTMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFkq bzANBgkqhkiG9w0BAQsFAAOCAQEAST7O4p1itNCP9NIkST5NXi8USLykaXa3yaQE BsDJC2cJmkmHXysMIggV6883FoZDj/hAAQsJlJBYx+WucpbdjaBZGDLXfmnPr2s9 VmU9f6MCvFQKFKb/jJnMIIO/5bFmGkCijPdM98lrC+zZgkq3xcQzvrvw5UmuWRAA 4NLp1gcbbqSNl+z/jrvF03bnAvmxYXQ2ipDIDUKdrmQ/dhfmpOJoRR0oUQLzkJu+ 9ryyVxw0K3frCmwb5AFZpyb9Km69XVcRO5D1eKiq/wIxVbODHI/rdl0VEM+6PTr3 905+Rapew5tfmcZaDdelfWhY2I6BOFnBFA6wskyw73ZcpJXl+w== -----END CERTIFICATE-----Generated at Thu Jan 29 17:47:36 2026 by rpki-client