This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3138392e3130362e302f32342d3234203d3e20313336373837.roa File: 3139332e3138392e3130362e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: JW1V+bL5oaG1NNrfJEszhowZGyEwDB8oSC6Inn71g0M= Subject key identifier: 53:6F:30:47:32:5E:D4:BA:48:E8:50:FB:07:76:A3:69:E4:E2:A8:F6 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 66C908BCA217AF28CC8A5FF84531008C1CFAC287 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3138392e3130362e302f32342d3234203d3e20313336373837.roa Signing time: Sat 03 Jan 2026 22:51:15 +0000 ROA not before: Sat 03 Jan 2026 22:46:15 +0000 ROA not after: Sat 02 Jan 2027 22:51:15 +0000 asID: 136787 IP address blocks: 193.189.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c9:08:bc:a2:17:af:28:cc:8a:5f:f8:45:31:00:8c:1c:fa:c2:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 3 22:46:15 2026 GMT Not After : Jan 2 22:51:15 2027 GMT Subject: CN=536F3047325ED4BA48E850FB0776A369E4E2A8F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2e:46:b4:34:1e:3a:be:36:23:64:b7:81:d6: 15:85:5a:17:9c:9f:7b:6a:de:24:b9:94:e6:b2:b4: d3:15:6f:5d:bd:60:f7:90:53:38:67:35:b1:ff:ba: 49:a5:14:1a:34:fa:33:c8:25:be:51:1f:0b:70:5d: b4:8e:9e:6f:02:64:06:cb:9c:66:d1:3e:ac:28:1c: ea:5a:5d:7f:c1:59:e6:9b:1e:5e:d4:02:aa:92:04: fb:d3:68:14:ca:91:b7:21:9e:23:c0:e7:9b:57:b2: e3:ac:17:10:9a:08:33:3b:b0:6f:87:ce:ef:8c:8a: 13:12:db:ee:76:79:27:5c:bf:52:c7:65:2a:ac:09: f8:38:f7:12:06:86:ce:65:cb:85:ca:33:33:94:da: 14:a0:7c:70:51:b9:03:61:5f:f2:82:ad:2f:9f:03: 1f:93:f5:46:eb:73:a8:7d:90:10:3f:c2:4b:0f:a0: 92:39:cb:5b:a6:9e:56:f4:e5:d7:01:1b:c4:19:06: 3a:df:3b:68:57:5e:32:14:05:2e:4a:73:e9:b8:73: 09:05:46:9d:b3:0e:35:52:66:0c:ab:bc:8a:e4:50: 4b:7e:f5:be:9c:fb:4d:09:5c:e9:2f:d4:5c:cd:03: f9:88:27:0c:55:61:bf:69:73:3b:7a:88:df:00:97: 21:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6F:30:47:32:5E:D4:BA:48:E8:50:FB:07:76:A3:69:E4:E2:A8:F6 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3138392e3130362e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.189.106.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:79:48:43:2c:0b:df:8e:c8:50:79:4a:83:6f:96:4a:51:7e: 4a:78:56:da:4e:b5:44:74:57:a6:5a:45:5f:c1:36:fe:9b:0f: 71:f9:da:38:00:f2:41:96:bc:ae:79:b4:56:4b:1f:36:a2:f9: e9:c7:93:74:1b:05:3d:79:a2:75:fe:6d:8c:0e:0c:01:43:ae: d8:23:8c:d5:bd:80:ad:36:3e:b7:70:df:e3:fa:7a:2e:ba:f0: cb:31:d4:13:a7:4c:de:23:67:28:8c:31:06:5a:2a:74:99:19: 21:d4:1c:70:b1:12:f7:78:ca:52:66:84:06:68:6a:d8:cf:b5: 11:6b:e2:c0:8b:cb:0b:e9:a3:b1:d1:69:07:0b:33:96:1c:cb: 67:c9:74:41:9f:14:60:32:26:14:30:6f:20:8f:57:f4:09:3e: ae:c1:12:7c:5c:30:b9:d5:e1:d3:02:9d:ad:82:14:31:fc:cf: 83:b6:99:39:88:98:5e:84:b9:da:25:3e:36:7b:bb:1d:d9:02: fc:41:1f:1d:56:85:ee:7c:f8:8d:ac:dd:9d:f7:43:06:7f:99: db:d3:eb:5b:5f:fe:e6:67:f9:89:ef:13:7d:0f:5c:45:36:bd: 83:10:7a:4a:fc:55:4b:66:0a:3e:97:83:a9:e4:8f:c0:99:bf: 5b:4e:82:d8 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUZskIvKIXryjMil/4RTEAjBz6wocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMDMyMjQ2MTVaFw0yNzAxMDIyMjUxMTVaMDMxMTAvBgNV BAMTKDUzNkYzMDQ3MzI1RUQ0QkE0OEU4NTBGQjA3NzZBMzY5RTRFMkE4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQLka0NB46vjYjZLeB1hWFWhec n3tq3iS5lOaytNMVb129YPeQUzhnNbH/ukmlFBo0+jPIJb5RHwtwXbSOnm8CZAbL nGbRPqwoHOpaXX/BWeabHl7UAqqSBPvTaBTKkbchniPA55tXsuOsFxCaCDM7sG+H zu+MihMS2+52eSdcv1LHZSqsCfg49xIGhs5ly4XKMzOU2hSgfHBRuQNhX/KCrS+f Ax+T9Ubrc6h9kBA/wksPoJI5y1umnlb05dcBG8QZBjrfO2hXXjIUBS5Kc+m4cwkF Rp2zDjVSZgyrvIrkUEt+9b6c+00JXOkv1FzNA/mIJwxVYb9pczt6iN8AlyHfAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUU28wRzJe1LpI6FD7B3ajaeTiqPYwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTMzMmUzMTM4MzkyZTMx MzAzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMG9ajANBgkqhkiG9w0BAQsFAAOCAQEAH3lIQywL347IUHlKg2+WSlF+SnhW 2k61RHRXplpFX8E2/psPcfnaOADyQZa8rnm0VksfNqL56ceTdBsFPXmidf5tjA4M AUOu2COM1b2ArTY+t3Df4/p6LrrwyzHUE6dM3iNnKIwxBloqdJkZIdQccLES93jK UmaEBmhq2M+1EWviwIvLC+mjsdFpBwszlhzLZ8l0QZ8UYDImFDBvII9X9Ak+rsES fFwwudXh0wKdrYIUMfzPg7aZOYiYXoS52iU+Nnu7HdkC/EEfHVaF7nz4jazdnfdD Bn+Z29PrW1/+5mf5ie8TfQ9cRTa9gxB6SvxVS2YKPpeDqeSPwJm/W06C2A== -----END CERTIFICATE-----Generated at Mon Jan 19 14:27:26 2026 by rpki-client