This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37332e302f32342d3234203d3e203239383032.roa File: 3134312e39382e37332e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: gwnYrQgA15W8GFygLMrf5+rqfQdFrOY9bW2on2hjPo0= Subject key identifier: CD:2B:BB:A7:3C:EE:C1:E1:8B:F9:1F:02:66:ED:0A:3D:C7:D1:E0:E9 Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a Certificate serial: 781A34F56469420971603BEF795C20C2319BC207 Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37332e302f32342d3234203d3e203239383032.roa Signing time: Thu 29 Jan 2026 03:24:26 +0000 ROA not before: Thu 29 Jan 2026 03:19:26 +0000 ROA not after: Thu 28 Jan 2027 03:24:26 +0000 asID: 29802 IP address blocks: 141.98.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:1a:34:f5:64:69:42:09:71:60:3b:ef:79:5c:20:c2:31:9b:c2:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a Validity Not Before: Jan 29 03:19:26 2026 GMT Not After : Jan 28 03:24:26 2027 GMT Subject: CN=CD2BBBA73CEEC1E18BF91F0266ED0A3DC7D1E0E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:41:c2:68:47:cc:8e:03:27:ca:ac:fa:78: 4b:bd:bc:54:f8:a5:c7:d5:dd:36:8b:ba:1c:03:ff: 05:b3:5b:b6:cc:11:01:98:23:1a:e1:97:c9:4a:2d: fa:8c:87:b8:44:e7:90:4e:07:4b:c8:c2:6c:a4:35: c4:24:a5:b6:01:93:35:94:01:5c:56:b5:2a:b4:09: f3:dc:5d:32:d9:b6:9f:cc:50:e3:89:35:bd:e0:8d: 61:57:e2:0f:1b:3d:2d:a1:27:22:b9:6b:39:df:83: b2:3b:26:b8:c7:3c:5f:7d:98:55:f5:86:6a:f8:2c: ba:fa:99:2b:e9:6c:41:ab:a2:8a:ad:47:c2:d9:88: e7:7b:54:bf:e0:48:cf:31:61:25:6c:9a:bf:c0:64: b1:ae:7c:12:31:66:11:b5:25:48:b8:29:ae:b4:e6: c6:21:f1:82:8e:b5:e3:72:65:12:8c:64:a0:22:34: 83:3a:64:ed:26:c2:e0:fb:f4:97:29:5d:9b:b2:6b: ac:d7:75:2e:09:d1:e4:ea:3d:99:d6:80:10:1b:0f: bc:4d:a8:48:6d:d3:a8:91:f8:c7:31:2c:86:9e:f7: b0:b7:40:d7:4d:2f:63:8e:66:57:f7:55:c3:04:b2: 5b:5e:69:32:81:5e:4b:69:2e:78:3e:37:6b:a9:52: 2e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2B:BB:A7:3C:EE:C1:E1:8B:F9:1F:02:66:ED:0A:3D:C7:D1:E0:E9 X509v3 Authority Key Identifier: keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37332e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.73.0/24 Signature Algorithm: sha256WithRSAEncryption 36:7e:78:b2:9a:cb:0d:30:57:39:b0:48:f5:26:5c:c5:33:30: 2e:c9:f0:dc:b8:77:2b:26:21:83:4c:9a:33:b9:e2:8f:10:5d: 46:3f:6c:62:79:d8:f0:e4:b3:0b:47:29:a0:4d:2b:8c:3c:90: 68:bc:e0:84:b9:01:e5:07:bb:55:63:03:63:08:85:5a:45:47: 4e:d4:b5:70:33:8d:f0:06:78:18:81:79:22:ce:32:d5:c7:ae: 55:fd:77:c4:4d:23:ba:d5:f5:bf:76:bf:3d:f5:b3:30:26:6f: 08:8c:ce:08:89:e3:e2:cf:57:0e:0f:90:98:32:7d:10:15:1e: 29:81:f8:4b:a5:83:a4:26:fb:46:36:c9:16:01:ef:7a:94:18: 30:54:8c:30:d9:0d:46:d8:0d:7a:46:6c:14:62:c0:2a:7c:0c: 86:13:28:82:d1:7a:74:32:e2:86:48:30:6b:55:86:ee:36:1f: d1:08:68:41:88:f5:c1:08:b7:3c:77:55:22:65:2a:86:70:a1: 26:ad:c7:05:af:1c:bc:c4:81:95:06:5e:5b:5b:9e:11:51:0f: 99:7a:a7:a4:27:60:98:89:df:4d:8f:e8:e1:ef:ee:cc:14:ac: 03:e9:fa:ad:03:ba:54:45:c4:66:82:7f:71:b3:52:8b:07:b2: 99:1a:77:72 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUeBo09WRpQglxYDvveVwgwjGbwgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3 ZTMwNTY0YTAeFw0yNjAxMjkwMzE5MjZaFw0yNzAxMjgwMzI0MjZaMDMxMTAvBgNV BAMTKENEMkJCQkE3M0NFRUMxRTE4QkY5MUYwMjY2RUQwQTNEQzdEMUUwRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAGkHCaEfMjgMnyqz6eEu9vFT4 pcfV3TaLuhwD/wWzW7bMEQGYIxrhl8lKLfqMh7hE55BOB0vIwmykNcQkpbYBkzWU AVxWtSq0CfPcXTLZtp/MUOOJNb3gjWFX4g8bPS2hJyK5aznfg7I7JrjHPF99mFX1 hmr4LLr6mSvpbEGrooqtR8LZiOd7VL/gSM8xYSVsmr/AZLGufBIxZhG1JUi4Ka60 5sYh8YKOteNyZRKMZKAiNIM6ZO0mwuD79JcpXZuya6zXdS4J0eTqPZnWgBAbD7xN qEht06iR+McxLIae97C3QNdNL2OOZlf3VcMEslteaTKBXktpLng+N2upUi6BAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUzSu7pzzuweGL+R8CZu0KPcfR4OkwHwYDVR0j BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5 ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0 d1Zrby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzEzNDMxMmUzOTM4MmUzNzMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI1i STANBgkqhkiG9w0BAQsFAAOCAQEANn54sprLDTBXObBI9SZcxTMwLsnw3Lh3KyYh g0yaM7nijxBdRj9sYnnY8OSzC0cpoE0rjDyQaLzghLkB5Qe7VWMDYwiFWkVHTtS1 cDON8AZ4GIF5Is4y1ceuVf13xE0jutX1v3a/PfWzMCZvCIzOCInj4s9XDg+QmDJ9 EBUeKYH4S6WDpCb7RjbJFgHvepQYMFSMMNkNRtgNekZsFGLAKnwMhhMogtF6dDLi hkgwa1WG7jYf0QhoQYj1wQi3PHdVImUqhnChJq3HBa8cvMSBlQZeW1ueEVEPmXqn pCdgmInfTY/o4e/uzBSsA+n6rQO6VEXEZoJ/cbNSiweymRp3cg== -----END CERTIFICATE-----Generated at Thu Jan 29 17:49:04 2026 by rpki-client