This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20313338333634.roa File: 3130332e34392e3133312e302f32342d3234203d3e20313338333634.roa (raw, json) Hash identifier: PCBT1S5SsQNvPExnIxpGrOJnC4Zxkw3ilANCZAM8stA= Subject key identifier: BB:B1:EB:53:7C:BF:A3:25:4A:C9:49:FA:0D:8E:CC:56:C2:A8:3E:24 Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 679F77A3675DA74BF6936412A46A56AA8FBB5161 Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20313338333634.roa Signing time: Fri 16 Jan 2026 17:53:42 +0000 ROA not before: Fri 16 Jan 2026 17:48:42 +0000 ROA not after: Fri 15 Jan 2027 17:53:42 +0000 asID: 138364 IP address blocks: 103.49.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:9f:77:a3:67:5d:a7:4b:f6:93:64:12:a4:6a:56:aa:8f:bb:51:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Jan 16 17:48:42 2026 GMT Not After : Jan 15 17:53:42 2027 GMT Subject: CN=BBB1EB537CBFA3254AC949FA0D8ECC56C2A83E24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ac:1e:8f:89:8c:ec:97:35:1b:2e:52:26:18: 64:8e:4c:45:16:44:3b:b0:0a:f4:4b:39:44:c5:3a: a1:aa:03:f7:31:5a:7c:68:6c:77:5b:64:19:1e:51: c8:b1:98:34:9a:71:c9:f3:5f:39:61:56:be:c2:01: 1e:00:7f:65:7c:eb:1c:85:ff:e2:e1:b7:c7:01:ab: 44:be:f4:60:67:a0:35:9d:53:b2:77:d7:ef:7c:8f: 79:cd:d1:4c:b7:e6:ec:57:4e:61:49:40:b0:c6:3a: 4a:94:93:2d:7f:31:e6:1f:b1:ca:e5:1d:4a:73:e1: 4a:fc:e4:e5:8e:15:be:42:53:71:1f:f0:e3:57:b5: 39:c3:18:f7:5f:30:d5:5c:9f:e1:70:92:2a:0a:78: f6:a9:bc:ab:47:af:42:66:2e:6f:68:32:87:9f:14: e5:42:1a:c1:5a:ae:6e:f8:c1:5b:d7:87:8e:1c:49: c0:fb:b9:2b:82:3e:e8:89:66:33:78:46:eb:29:4b: 61:36:f5:45:a6:23:19:20:80:08:bd:ce:03:8d:6c: 96:28:20:e7:35:5f:1f:ae:3e:d1:8c:88:45:27:f0: 87:51:e8:f3:ca:02:11:fe:12:67:a3:96:58:e9:cb: ee:dd:fa:83:57:1d:d2:71:7d:3e:9e:52:57:fa:92: 9e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B1:EB:53:7C:BF:A3:25:4A:C9:49:FA:0D:8E:CC:56:C2:A8:3E:24 X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20313338333634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.49.131.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:88:8d:ee:84:b3:dc:3d:2a:17:b6:f2:66:e2:23:a0:f8:0e: a8:ae:d7:1a:b4:6b:dc:19:f9:ab:f2:1c:00:3d:4d:05:66:71: 4c:b9:d9:42:86:f5:e6:86:c8:c1:a4:3c:49:81:56:42:8e:d0: 53:bf:3c:92:40:06:4d:8d:1d:b0:61:6c:a0:11:5f:94:ee:ee: 3e:7f:93:fc:08:f1:7d:55:b0:9b:e8:91:b0:13:9c:75:29:5c: e4:7e:57:d5:0a:df:fc:11:d3:78:1d:3a:55:2e:53:0f:be:c6: 29:1b:ec:03:f3:1c:13:59:48:26:82:27:dc:f0:1e:7f:57:cf: 0e:44:f1:23:2f:4a:9e:b3:44:db:bc:05:96:71:08:37:4b:80: e1:45:fa:7b:22:6a:af:1a:0a:b8:e0:c3:1a:a2:ef:74:62:2a: 1b:a9:e2:de:ab:bf:ef:1a:32:d6:20:e1:1a:30:82:03:02:83: ea:13:7b:c0:1c:77:4f:15:c1:dc:fe:fc:05:4e:d5:28:80:e4: c1:79:9c:a8:c1:9a:f8:e2:7f:53:c3:27:bf:d3:98:fc:25:b2: fa:fc:70:1d:5a:0b:ba:3a:9f:5d:35:4e:26:7f:df:c2:bd:5f: 9a:b4:19:d2:19:92:f5:55:1d:00:11:6b:f1:01:de:46:f4:bc: ff:ee:e8:d7 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUZ593o2ddp0v2k2QSpGpWqo+7UWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNjAxMTYxNzQ4NDJaFw0yNzAxMTUxNzUzNDJaMDMxMTAvBgNV BAMTKEJCQjFFQjUzN0NCRkEzMjU0QUM5NDlGQTBEOEVDQzU2QzJBODNFMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkrB6PiYzslzUbLlImGGSOTEUW RDuwCvRLOUTFOqGqA/cxWnxobHdbZBkeUcixmDSaccnzXzlhVr7CAR4Af2V86xyF /+Lht8cBq0S+9GBnoDWdU7J31+98j3nN0Uy35uxXTmFJQLDGOkqUky1/MeYfscrl HUpz4Ur85OWOFb5CU3Ef8ONXtTnDGPdfMNVcn+FwkioKePapvKtHr0JmLm9oMoef FOVCGsFarm74wVvXh44cScD7uSuCPuiJZjN4RuspS2E29UWmIxkggAi9zgONbJYo IOc1Xx+uPtGMiEUn8IdR6PPKAhH+Emejlljpy+7d+oNXHdJxfT6eUlf6kp4TAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUu7HrU3y/oyVKyUn6DY7MVsKoPiQwHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQt NmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2NjIwLzAvMzEzMDMzMmUzNDM5MmUzMTMz MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMzM2MzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnMYMwDQYJKoZIhvcNAQELBQADggEBAA+Ije6Es9w9Khe28mbiI6D4Dqiu1xq0 a9wZ+avyHAA9TQVmcUy52UKG9eaGyMGkPEmBVkKO0FO/PJJABk2NHbBhbKARX5Tu 7j5/k/wI8X1VsJvokbATnHUpXOR+V9UK3/wR03gdOlUuUw++xikb7APzHBNZSCaC J9zwHn9Xzw5E8SMvSp6zRNu8BZZxCDdLgOFF+nsiaq8aCrjgwxqi73RiKhup4t6r v+8aMtYg4RowggMCg+oTe8Acd08Vwdz+/AVO1SiA5MF5nKjBmvjif1PDJ7/TmPwl svr8cB1aC7o6n101TiZ/38K9X5q0GdIZkvVVHQARa/EB3kb0vP/u6Nc= -----END CERTIFICATE-----Generated at Mon Jan 19 20:15:55 2026 by rpki-client