This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38332e302f32342d3234203d3e20383334.roa File: 3139322e3134352e38332e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: QqhV+QR4AxCfB0Bh0oLgKS1+ZTh98S+67nDmU2WvKK0= Subject key identifier: 27:A5:AD:85:C9:07:11:20:E1:A5:DA:4C:2E:A0:7F:60:4D:07:B1:AB Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 2DA875878B82FB82F93CB3DB343CD7547B965B6D Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38332e302f32342d3234203d3e20383334.roa Signing time: Thu 05 Feb 2026 19:30:32 +0000 ROA not before: Thu 05 Feb 2026 19:25:32 +0000 ROA not after: Thu 04 Feb 2027 19:30:32 +0000 asID: 834 IP address blocks: 192.145.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a8:75:87:8b:82:fb:82:f9:3c:b3:db:34:3c:d7:54:7b:96:5b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Feb 5 19:25:32 2026 GMT Not After : Feb 4 19:30:32 2027 GMT Subject: CN=27A5AD85C9071120E1A5DA4C2EA07F604D07B1AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f3:9c:c7:27:8a:b3:51:a3:18:84:7a:41:fd: 8c:01:a1:15:08:19:1d:82:d6:11:77:10:4d:09:8c: 81:2e:f5:fb:54:e4:8e:a7:60:b9:7c:22:fd:c4:74: 3e:a3:92:a3:37:72:3a:86:7d:48:50:64:55:bc:c2: 43:56:da:79:fa:83:2d:42:12:df:7b:75:a9:92:06: 37:65:4c:e9:1f:9e:06:05:1a:ce:7e:c0:a2:ac:76: 4f:1d:4f:2d:f9:66:ea:59:e2:eb:23:67:e0:bf:b1: 8c:4f:ca:d3:ef:28:8f:8a:de:e9:14:e1:41:ce:94: 42:05:53:89:78:d0:6c:e0:7d:7e:24:dd:d3:82:c5: 70:e5:59:b1:a6:09:4e:a7:51:e5:e2:01:a0:7b:49: 9a:89:20:62:91:45:3c:8d:f7:0c:c1:88:2c:da:1f: d9:1b:ad:f7:a6:1a:83:fc:78:9b:50:aa:96:49:35: 67:ac:26:af:a4:a5:21:89:ca:06:6d:e9:39:f6:c6: 62:cd:9b:86:b3:1f:9a:02:bb:3e:31:a5:c4:18:59: ef:83:ec:4d:bc:cb:c3:78:00:d3:35:93:9f:4c:96: e9:a7:99:62:ea:0e:77:d2:ea:3c:af:b3:78:bc:55: c1:60:97:06:7f:4b:98:16:2e:c1:52:b7:c8:84:36: 3d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A5:AD:85:C9:07:11:20:E1:A5:DA:4C:2E:A0:7F:60:4D:07:B1:AB X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38332e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.145.83.0/24 Signature Algorithm: sha256WithRSAEncryption 30:3f:18:27:c8:e2:55:10:b3:d4:48:5a:ca:35:e0:69:49:5a: 52:04:c1:82:ba:a9:9a:6c:94:0d:b4:17:8c:d0:d3:11:a1:c9: 89:07:4a:08:84:b5:9d:d5:54:e6:b2:2a:da:1e:0e:d4:77:16: 34:38:68:dc:34:6c:bb:01:fb:13:71:64:76:c0:aa:0a:7d:d1: 3f:14:47:ad:60:3d:8a:7b:26:6c:55:a3:2c:91:9a:b8:ac:de: 77:04:b5:ee:39:da:6a:d0:89:15:be:e8:74:1a:9a:5b:2b:3c: 04:a0:e6:86:39:c7:80:29:ae:f8:80:4c:af:56:b7:f3:55:80: c5:40:d0:42:7c:5a:5d:57:21:4d:f5:ae:93:af:79:55:17:b8: 6a:ab:79:f2:cf:3b:19:95:c0:7c:5e:2c:39:67:eb:c7:9f:94: 09:64:e3:bf:99:89:20:a8:0f:8b:ee:cc:68:18:71:c4:38:1d: 1c:f1:43:e1:3f:ec:0e:b6:e8:15:df:a7:8e:05:43:98:36:ec: 78:b2:3b:29:ac:7c:02:d1:ab:db:b4:df:04:70:5e:bb:11:6a: b6:6d:b0:fd:a7:9d:bf:33:bb:1b:aa:f7:41:c5:75:b5:b9:a7: b0:31:b4:39:99:56:eb:3f:27:21:71:b2:30:c5:c8:83:f9:f9: 9a:31:bb:5f -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIULah1h4uC+4L5PLPbNDzXVHuWW20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAyMDUxOTI1MzJaFw0yNzAyMDQxOTMwMzJaMDMxMTAvBgNV BAMTKDI3QTVBRDg1QzkwNzExMjBFMUE1REE0QzJFQTA3RjYwNEQwN0IxQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt85zHJ4qzUaMYhHpB/YwBoRUI GR2C1hF3EE0JjIEu9ftU5I6nYLl8Iv3EdD6jkqM3cjqGfUhQZFW8wkNW2nn6gy1C Et97damSBjdlTOkfngYFGs5+wKKsdk8dTy35ZupZ4usjZ+C/sYxPytPvKI+K3ukU 4UHOlEIFU4l40GzgfX4k3dOCxXDlWbGmCU6nUeXiAaB7SZqJIGKRRTyN9wzBiCza H9kbrfemGoP8eJtQqpZJNWesJq+kpSGJygZt6Tn2xmLNm4azH5oCuz4xpcQYWe+D 7E28y8N4ANM1k59MlumnmWLqDnfS6jyvs3i8VcFglwZ/S5gWLsFSt8iENj3tAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUJ6WthckHESDhpdpMLqB/YE0HsaswHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTMyMmUzMTM0MzUyZTM4 MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAkVMw DQYJKoZIhvcNAQELBQADggEBADA/GCfI4lUQs9RIWso14GlJWlIEwYK6qZpslA20 F4zQ0xGhyYkHSgiEtZ3VVOayKtoeDtR3FjQ4aNw0bLsB+xNxZHbAqgp90T8UR61g PYp7JmxVoyyRmris3ncEte452mrQiRW+6HQamlsrPASg5oY5x4AprviATK9Wt/NV gMVA0EJ8Wl1XIU31rpOveVUXuGqrefLPOxmVwHxeLDln68eflAlk47+ZiSCoD4vu zGgYccQ4HRzxQ+E/7A626BXfp44FQ5g27HiyOymsfALRq9u03wRwXrsRarZtsP2n nb8zuxuq90HFdbW5p7AxtDmZVus/JyFxsjDFyIP5+Zoxu18= -----END CERTIFICATE-----Generated at Sat Feb 14 17:23:56 2026 by rpki-client