This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34322e302e302f32342d3234203d3e20313431303339.roa File: 3139332e34322e302e302f32342d3234203d3e20313431303339.roa (raw, json) Hash identifier: +jVqgkJ6A3ZHcM+xIQOid60su7ATxqIV34JCbwo7rK8= Subject key identifier: 3A:E2:E9:F9:E9:42:B0:A3:39:B5:A1:E2:BC:28:01:1C:74:4B:68:3B Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 5127C1F27478A9A661CA8193785E35CBAD58CDBA Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34322e302e302f32342d3234203d3e20313431303339.roa Signing time: Mon 29 Dec 2025 09:50:40 +0000 ROA not before: Mon 29 Dec 2025 09:45:40 +0000 ROA not after: Mon 28 Dec 2026 09:50:40 +0000 asID: 141039 IP address blocks: 193.42.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:27:c1:f2:74:78:a9:a6:61:ca:81:93:78:5e:35:cb:ad:58:cd:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:40 2025 GMT Not After : Dec 28 09:50:40 2026 GMT Subject: CN=3AE2E9F9E942B0A339B5A1E2BC28011C744B683B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2e:1f:14:63:f4:cc:41:1f:25:b4:70:af:25: 41:0b:56:63:e6:cd:11:d6:be:86:b7:72:b3:34:8d: 26:a9:97:43:50:f1:02:6d:56:f6:69:64:f7:26:5f: 1c:cd:8b:9a:de:6d:a2:b1:23:85:9e:5e:59:5b:43: 1d:6b:fa:0d:21:c0:21:61:12:cb:7c:c8:56:11:7d: 5d:d4:03:63:37:2d:09:eb:06:41:1c:c3:39:0d:63: 44:ab:21:35:06:52:fa:fb:90:fd:4f:e2:52:14:1d: fa:21:5d:38:5e:bc:60:bc:2b:2d:92:6e:d8:ea:97: fa:82:56:ca:24:92:d2:1a:04:02:71:c3:6c:ff:bb: 4d:e9:b0:0e:d6:b7:96:37:7b:92:1f:40:11:f7:42: 0f:75:c4:7b:ef:79:2b:63:ec:db:d2:a5:83:c3:25: 80:42:f8:3f:b0:5c:66:4f:08:24:dc:d6:2f:81:0b: 32:39:70:70:80:16:b3:cd:84:84:33:7a:43:d0:4b: fc:aa:1c:fd:b0:c9:9f:49:5e:d0:b1:3a:1e:55:f6: 91:dd:34:58:87:9d:7e:93:a9:0c:ae:73:ec:5f:fd: 01:c0:d5:ee:ec:33:a9:ea:0a:1f:0a:cf:44:1c:07: 11:f4:99:2f:28:cc:ab:f8:31:bc:95:3f:8a:3b:1b: 86:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E2:E9:F9:E9:42:B0:A3:39:B5:A1:E2:BC:28:01:1C:74:4B:68:3B X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34322e302e302f32342d3234203d3e20313431303339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.42.0.0/24 Signature Algorithm: sha256WithRSAEncryption 33:ef:e6:75:19:f5:28:0f:c1:d1:0b:a6:2c:44:2f:05:09:c1: bd:7e:b3:d3:ff:ec:fa:6a:e5:8f:8c:c7:a0:0d:38:59:cc:10: 01:11:f7:3d:8a:47:63:b7:30:f2:16:bb:dc:1a:a2:41:b3:d5: 80:b0:40:e9:08:49:27:8f:45:66:84:2d:f0:d8:f1:92:69:a1: 68:74:c6:f6:d8:10:a9:91:3b:48:44:c1:81:b8:e2:9b:4f:24: e1:d2:82:95:a4:34:a2:33:b7:8d:ac:9d:76:d8:73:cc:c6:43: b6:26:8a:e7:5b:a1:4e:b9:81:83:da:7e:8f:72:82:a7:0c:1a: c2:85:e9:5d:5c:50:80:22:78:9a:5b:79:f6:0e:78:ee:f7:e1: fc:8c:19:dd:e1:84:21:43:37:ff:80:c6:e6:42:43:01:f8:20: d2:17:ef:47:3b:f0:9c:45:eb:ba:b3:32:66:bf:09:7d:87:0d: 77:0f:13:3a:05:1a:a4:58:55:aa:74:42:87:a5:43:22:cf:71: c5:dd:48:03:d1:1b:90:4f:39:93:a1:1f:69:2d:27:89:99:f3: f0:84:e9:9b:d6:5c:49:fd:24:78:41:2a:86:58:3d:1e:a4:88: 5e:2a:78:4a:0e:ce:39:35:b6:d8:07:0e:43:bb:99:6b:03:f1: 25:a2:0f:1e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUUSfB8nR4qaZhyoGTeF41y61YzbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDBaFw0yNjEyMjgwOTUwNDBaMDMxMTAvBgNV BAMTKDNBRTJFOUY5RTk0MkIwQTMzOUI1QTFFMkJDMjgwMTFDNzQ0QjY4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Lh8UY/TMQR8ltHCvJUELVmPm zRHWvoa3crM0jSapl0NQ8QJtVvZpZPcmXxzNi5rebaKxI4WeXllbQx1r+g0hwCFh Est8yFYRfV3UA2M3LQnrBkEcwzkNY0SrITUGUvr7kP1P4lIUHfohXThevGC8Ky2S btjql/qCVsokktIaBAJxw2z/u03psA7Wt5Y3e5IfQBH3Qg91xHvveStj7NvSpYPD JYBC+D+wXGZPCCTc1i+BCzI5cHCAFrPNhIQzekPQS/yqHP2wyZ9JXtCxOh5V9pHd NFiHnX6TqQyuc+xf/QHA1e7sM6nqCh8Kz0QcBxH0mS8ozKv4MbyVP4o7G4YLAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUOuLp+elCsKM5taHivCgBHHRLaDswHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTMzMmUzNDMyMmUzMDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMTMwMzMzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEq ADANBgkqhkiG9w0BAQsFAAOCAQEAM+/mdRn1KA/B0QumLEQvBQnBvX6z0//s+mrl j4zHoA04WcwQARH3PYpHY7cw8ha73BqiQbPVgLBA6QhJJ49FZoQt8NjxkmmhaHTG 9tgQqZE7SETBgbjim08k4dKClaQ0ojO3jayddthzzMZDtiaK51uhTrmBg9p+j3KC pwwawoXpXVxQgCJ4mlt59g547vfh/IwZ3eGEIUM3/4DG5kJDAfgg0hfvRzvwnEXr urMyZr8JfYcNdw8TOgUapFhVqnRCh6VDIs9xxd1IA9EbkE85k6EfaS0niZnz8ITp m9ZcSf0keEEqhlg9HqSIXip4Sg7OOTW22AcOQ7uZawPxJaIPHg== -----END CERTIFICATE-----Generated at Mon Jan 19 14:24:57 2026 by rpki-client