This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3139342e33312e3136352e302f32342d3234203d3e203235313938.roa
File: 3139342e33312e3136352e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: 1XT5eK0onCHcuEXsori5RDmzilEugz+LQ7l81zuXthY=
Subject key identifier: 36:D5:12:6F:47:87:3F:CC:51:1F:2B:AE:A4:49:7A:D8:26:8F:32:69
Certificate issuer: /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Certificate serial: 36B256050D42CFF883CEB7CF4347A6A26F41B469
Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3139342e33312e3136352e302f32342d3234203d3e203235313938.roa
Signing time: Wed 04 Feb 2026 13:44:09 +0000
ROA not before: Wed 04 Feb 2026 13:39:09 +0000
ROA not after: Wed 03 Feb 2027 13:44:09 +0000
asID: 25198
IP address blocks: 194.31.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b2:56:05:0d:42:cf:f8:83:ce:b7:cf:43:47:a6:a2:6f:41:b4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Validity
Not Before: Feb 4 13:39:09 2026 GMT
Not After : Feb 3 13:44:09 2027 GMT
Subject: CN=36D5126F47873FCC511F2BAEA4497AD8268F3269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:22:cc:a5:cd:3d:70:f3:7c:0b:b1:70:81:fc:
3c:58:d0:52:8b:b8:d8:83:39:7f:69:9b:49:eb:a4:
19:c5:54:a4:d4:8c:d8:36:68:a1:9b:21:bd:6a:a4:
1e:10:3b:cf:d2:ab:cf:fb:56:54:70:51:64:70:e0:
b5:06:62:40:27:42:ea:33:35:5d:68:8f:4c:ad:42:
f0:ea:a4:ac:cc:a9:7b:29:0a:0a:f3:49:94:21:e5:
18:bd:3f:23:02:db:cc:6b:fa:b4:fa:07:dd:57:cb:
fd:c0:57:1c:03:54:56:56:9f:44:e9:ff:77:af:49:
8f:4d:6b:f5:6f:b2:71:8a:bf:9f:44:75:71:3f:01:
cd:44:1b:8e:f8:c9:3c:f7:09:12:85:f1:a3:ec:29:
cd:cd:19:78:3d:9e:79:c5:7f:de:15:ce:23:58:fd:
a3:d9:a3:7f:30:59:b0:d9:05:5b:19:4d:d3:63:6a:
c1:25:5e:ac:b4:3a:64:cb:b7:2a:e3:24:3c:51:fd:
f8:87:20:d5:c8:03:ca:07:43:3f:3d:48:64:b2:79:
0d:02:b9:09:7b:97:07:94:0d:a4:7b:30:e0:13:2d:
88:e2:01:ff:9c:f6:2f:7a:ed:b6:30:7a:2a:ce:b5:
6d:61:c6:bf:c4:68:c7:27:e2:0d:33:03:9e:2e:2f:
a1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D5:12:6F:47:87:3F:CC:51:1F:2B:AE:A4:49:7A:D8:26:8F:32:69
X509v3 Authority Key Identifier:
keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3139342e33312e3136352e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.165.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:99:ce:fe:11:f3:74:c6:0c:69:40:8c:11:9e:85:4c:c4:7f:
21:51:52:f1:a8:49:f6:31:3f:81:34:8b:73:21:a4:9e:7a:e3:
ad:db:ff:9f:5e:83:79:24:88:55:97:64:0c:c3:75:97:06:4c:
ae:52:62:68:19:46:9b:b5:d0:84:26:5d:89:a4:8b:61:c3:87:
d1:eb:75:b9:ac:b7:4d:d6:7a:36:56:c7:83:f0:4d:b0:05:a3:
4c:6a:ad:c7:7b:c9:3d:bc:a7:f0:6f:41:ed:f2:43:91:dd:fc:
12:86:2f:5c:0c:c4:bf:24:ee:d3:fc:a8:f8:f7:bd:e0:fd:d4:
86:a8:4f:6b:e7:b6:08:0b:ec:66:fa:0c:c9:24:80:23:9d:66:
a1:37:47:07:43:c8:d2:b9:9c:ca:f8:66:30:c7:36:09:4c:ce:
06:49:d0:74:87:5d:5e:f1:58:81:4a:2f:eb:ee:66:f6:47:ff:
af:4f:de:90:b7:05:52:b4:9d:5a:ae:5e:bf:f8:54:d1:75:b8:
e0:15:4f:41:c4:fb:65:de:88:61:ac:66:19:f1:29:3b:a1:83:
fd:9b:02:b1:60:77:86:af:68:c1:45:86:9d:92:48:09:8c:9f:
ac:4f:44:03:af:1f:a6:1a:e9:ae:70:a6:7c:26:6d:8e:49:94:
67:ff:78:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:51:56 2026 by rpki-client