This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e352e302f32342d3234203d3e203239383032.roa File: 39322e3131342e352e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: rd0Okun09SrmxDlwt39WDyG8IjHWTRiQb15ihRsza7c= Subject key identifier: 14:EC:76:01:84:D3:2B:58:CC:20:CF:B1:8B:C6:35:17:0A:E8:CE:11 Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a Certificate serial: 152274CF7E4D046D7C4BFC7A9ED7BBF25AC1EE28 Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e352e302f32342d3234203d3e203239383032.roa Signing time: Mon 26 Jan 2026 18:03:46 +0000 ROA not before: Mon 26 Jan 2026 17:58:46 +0000 ROA not after: Mon 25 Jan 2027 18:03:46 +0000 asID: 29802 IP address blocks: 92.114.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:22:74:cf:7e:4d:04:6d:7c:4b:fc:7a:9e:d7:bb:f2:5a:c1:ee:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a Validity Not Before: Jan 26 17:58:46 2026 GMT Not After : Jan 25 18:03:46 2027 GMT Subject: CN=14EC760184D32B58CC20CFB18BC635170AE8CE11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9c:a0:55:52:13:32:a1:87:af:f0:47:13:3c: 9a:74:f4:f2:e2:f5:04:08:fc:70:b1:6a:e2:9f:f9: ef:58:19:62:c0:db:a9:cf:d3:78:82:d4:18:66:db: d3:ed:4b:11:84:51:72:25:fc:1e:43:58:d7:94:fe: e4:71:f1:a7:a2:c4:a2:0e:88:1f:dd:06:b5:9c:23: 6a:a4:a7:3d:ee:2f:ca:f6:59:8b:3d:32:2e:4f:fe: 15:98:80:1b:d0:a2:3a:18:d9:7f:f0:48:fc:79:d9: 26:9c:19:e4:72:8e:bb:63:d0:ca:e7:32:66:84:76: 7f:7e:31:29:d6:4b:68:90:41:5e:01:00:54:ef:d7: 65:31:5f:bb:99:dd:75:6a:43:92:c4:7a:33:82:50: 88:90:d3:82:55:9b:f4:c5:2e:36:00:a9:34:7a:75: 90:25:99:fe:f4:fd:e4:3e:61:91:ff:73:1d:22:41: af:49:e6:ad:8d:25:b3:3a:0d:dd:2e:62:a3:c8:7c: eb:49:4b:c2:72:d9:cc:10:f7:2d:61:86:aa:2d:e2: 4b:3b:88:a7:fc:ce:32:d2:4b:5a:18:df:7e:1b:65: 11:4c:cb:ca:3a:53:4c:be:45:fe:3c:c8:0b:82:bf: 76:f5:fa:29:32:67:ee:f4:91:fb:43:89:ea:05:62: e1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EC:76:01:84:D3:2B:58:CC:20:CF:B1:8B:C6:35:17:0A:E8:CE:11 X509v3 Authority Key Identifier: keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e352e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.114.5.0/24 Signature Algorithm: sha256WithRSAEncryption 97:0f:1b:d0:92:49:26:22:7e:82:c5:82:ac:4a:68:18:77:df: 33:ad:e1:03:a4:68:68:43:ea:70:b2:33:47:ff:62:0f:5d:d4: 34:f0:c9:44:87:d5:cf:3a:22:3e:3e:cc:a3:77:bc:44:ad:6c: 75:09:ea:6f:61:03:9d:17:e9:e5:25:b1:a1:2e:89:6f:41:85: 03:0a:27:00:a8:c0:52:77:df:15:94:8a:30:b8:27:86:b2:ca: d2:7b:d7:e8:98:3f:fa:44:f6:a2:21:db:b0:d2:f9:54:7d:fe: 19:0f:e7:2e:59:fb:7b:6f:cd:fe:2c:05:9b:f0:14:76:9a:20: db:e1:f0:dc:7c:71:ea:6a:04:ec:a5:a0:39:4d:cd:1f:da:d0: 06:57:47:0b:a9:f9:92:2c:3d:6d:a1:67:08:d1:94:2b:5c:3d: 74:3d:f6:5d:f3:cc:e5:3b:f8:7a:29:36:96:0b:32:96:d2:c4: a8:6f:a5:25:1d:f2:14:6f:2f:81:a7:47:6a:e1:21:9d:dc:74: 2a:2b:3a:ab:7e:cb:a1:75:3d:61:81:39:32:7d:d5:7c:a6:5f: 6d:f3:f9:5f:00:59:44:03:6b:84:34:37:10:97:57:ed:d0:5c: 49:8e:c8:d1:e6:53:a0:cf:d6:27:5c:44:c5:8a:18:ef:20:e3: 05:ad:2b:28 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUFSJ0z35NBG18S/x6nte78lrB7igwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3 ZTMwNTY0YTAeFw0yNjAxMjYxNzU4NDZaFw0yNzAxMjUxODAzNDZaMDMxMTAvBgNV BAMTKDE0RUM3NjAxODREMzJCNThDQzIwQ0ZCMThCQzYzNTE3MEFFOENFMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwnKBVUhMyoYev8EcTPJp09PLi 9QQI/HCxauKf+e9YGWLA26nP03iC1Bhm29PtSxGEUXIl/B5DWNeU/uRx8aeixKIO iB/dBrWcI2qkpz3uL8r2WYs9Mi5P/hWYgBvQojoY2X/wSPx52SacGeRyjrtj0Mrn MmaEdn9+MSnWS2iQQV4BAFTv12UxX7uZ3XVqQ5LEejOCUIiQ04JVm/TFLjYAqTR6 dZAlmf70/eQ+YZH/cx0iQa9J5q2NJbM6Dd0uYqPIfOtJS8Jy2cwQ9y1hhqot4ks7 iKf8zjLSS1oY334bZRFMy8o6U0y+Rf48yAuCv3b1+ikyZ+70kftDieoFYuEJAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUFOx2AYTTK1jMIM+xi8Y1FwrozhEwHwYDVR0j BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5 ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0 d1Zrby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzkzMjJlMzEzMTM0MmUzNTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzkzODMwMzIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABccgUw DQYJKoZIhvcNAQELBQADggEBAJcPG9CSSSYifoLFgqxKaBh33zOt4QOkaGhD6nCy M0f/Yg9d1DTwyUSH1c86Ij4+zKN3vEStbHUJ6m9hA50X6eUlsaEuiW9BhQMKJwCo wFJ33xWUijC4J4ayytJ71+iYP/pE9qIh27DS+VR9/hkP5y5Z+3tvzf4sBZvwFHaa INvh8Nx8cepqBOyloDlNzR/a0AZXRwup+ZIsPW2hZwjRlCtcPXQ99l3zzOU7+Hop NpYLMpbSxKhvpSUd8hRvL4GnR2rhIZ3cdCorOqt+y6F1PWGBOTJ91XymX23z+V8A WUQDa4Q0NxCXV+3QXEmOyNHmU6DP1idcRMWKGO8g4wWtKyg= -----END CERTIFICATE-----Generated at Thu Jan 29 17:48:59 2026 by rpki-client