This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33332e302f32342d3234203d3e20323132323338.roa File: 3139332e392e33332e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: uaU5etRA/rU7OZhyyAQQK+yZEO/z+DGVzI8cW6hXfD8= Subject key identifier: 1A:1F:39:4C:9F:E5:17:3D:E3:D4:53:BE:06:D7:29:C4:84:E6:87:67 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 4A2A2916B97F6D02F111CB3473E399E466A84C1A Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33332e302f32342d3234203d3e20323132323338.roa Signing time: Tue 21 Oct 2025 13:22:49 +0000 ROA not before: Tue 21 Oct 2025 13:17:49 +0000 ROA not after: Tue 20 Oct 2026 13:22:49 +0000 asID: 212238 IP address blocks: 193.9.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Dec 2025 22:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:2a:29:16:b9:7f:6d:02:f1:11:cb:34:73:e3:99:e4:66:a8:4c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Oct 21 13:17:49 2025 GMT Not After : Oct 20 13:22:49 2026 GMT Subject: CN=1A1F394C9FE5173DE3D453BE06D729C484E68767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:59:93:93:89:37:bc:ca:51:f6:1f:0c:3f:41: 3f:b3:c7:6c:5d:0c:73:d0:d5:48:e5:72:45:8b:af: 16:a7:39:7a:e1:5a:45:e7:08:71:e6:cc:ac:79:20: a4:80:54:7c:43:09:e1:0a:e7:79:28:b2:69:87:64: 65:d3:14:27:2c:f5:e0:78:49:12:39:8f:eb:59:c1: d6:15:fd:c8:00:3b:8e:03:d4:5f:a3:a6:3f:b9:d1: e1:b4:23:df:9e:11:8a:0b:18:ef:f4:13:66:b7:4c: d6:a5:62:58:11:63:72:c5:8d:55:08:85:1a:53:c4: 7a:88:94:ea:3a:d6:75:71:d0:8f:eb:76:24:6f:56: 83:0d:38:ee:f5:5f:75:e5:53:4c:66:75:fa:85:09: 49:46:9f:bf:be:75:b0:e2:b9:81:02:25:6f:0e:93: 76:77:06:54:fa:79:42:12:ab:a3:03:7d:dd:4b:e0: 1d:cd:1a:f8:6b:18:b8:4d:ba:36:17:bc:09:61:68: 08:08:d1:c9:aa:1e:58:36:54:62:35:27:9e:16:3f: 84:f9:88:43:d9:df:31:9c:31:60:e8:6c:b4:fa:02: 16:ce:95:3b:64:02:2c:c2:8c:d2:04:03:33:fb:47: c2:68:44:11:5a:b9:46:5f:ea:fc:91:0c:c8:c6:3d: f5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1F:39:4C:9F:E5:17:3D:E3:D4:53:BE:06:D7:29:C4:84:E6:87:67 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33332e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.9.33.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:90:9c:cc:2b:b3:24:85:81:f4:db:bf:8d:18:b2:6a:7b:84: f4:78:eb:0a:14:0b:de:15:1c:f3:3c:14:2f:02:b0:a5:35:dc: 17:af:aa:65:5e:bd:68:03:1a:e7:c8:5e:f4:c2:95:40:48:79: 63:2d:51:e7:6e:ca:bb:d7:61:b4:68:35:1d:c8:1c:87:b0:a6: cf:19:1e:4d:77:68:d1:4c:42:7f:bd:8f:95:f8:7c:ec:eb:eb: 0a:1b:9b:8e:c4:05:7e:d0:4a:01:f4:0e:11:25:95:29:d2:0d: 34:c0:c2:1a:ad:81:99:34:0e:13:0f:08:ff:14:bb:9a:ab:63: 68:93:6b:14:81:92:da:d2:23:c8:5b:5c:8b:88:24:a3:7c:07: de:19:9d:ae:9b:2e:e9:04:8c:2e:71:5e:47:96:57:6b:b9:0a: 16:d8:d4:8a:56:1f:44:93:c2:b4:b4:4d:15:19:54:a1:fc:e9: bf:35:28:58:0e:31:13:05:b9:47:e5:82:7f:65:b3:ff:ee:69: aa:49:25:51:8b:14:0a:89:3d:a8:a6:f6:9d:2e:6c:d8:d6:5b: 7a:6e:02:f1:2c:92:97:c8:8f:0b:64:8b:4a:8d:c7:4c:b9:8a: 2f:1b:14:0b:0c:24:e7:63:51:81:3b:03:47:25:1f:8a:99:00: 76:4d:7c:37 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUSiopFrl/bQLxEcs0c+OZ5GaoTBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEwMjExMzE3NDlaFw0yNjEwMjAxMzIyNDlaMDMxMTAvBgNV BAMTKDFBMUYzOTRDOUZFNTE3M0RFM0Q0NTNCRTA2RDcyOUM0ODRFNjg3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmWZOTiTe8ylH2Hww/QT+zx2xd DHPQ1UjlckWLrxanOXrhWkXnCHHmzKx5IKSAVHxDCeEK53kosmmHZGXTFCcs9eB4 SRI5j+tZwdYV/cgAO44D1F+jpj+50eG0I9+eEYoLGO/0E2a3TNalYlgRY3LFjVUI hRpTxHqIlOo61nVx0I/rdiRvVoMNOO71X3XlU0xmdfqFCUlGn7++dbDiuYECJW8O k3Z3BlT6eUISq6MDfd1L4B3NGvhrGLhNujYXvAlhaAgI0cmqHlg2VGI1J54WP4T5 iEPZ3zGcMWDobLT6AhbOlTtkAizCjNIEAzP7R8JoRBFauUZf6vyRDMjGPfV/AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUGh85TJ/lFz3j1FO+BtcpxITmh2cwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTMzMmUzOTJlMzMzMzJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMyMzMzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEJ ITANBgkqhkiG9w0BAQsFAAOCAQEAX5CczCuzJIWB9Nu/jRiyanuE9HjrChQL3hUc 8zwULwKwpTXcF6+qZV69aAMa58he9MKVQEh5Yy1R527Ku9dhtGg1Hcgch7Cmzxke TXdo0UxCf72Plfh87OvrChubjsQFftBKAfQOESWVKdINNMDCGq2BmTQOEw8I/xS7 mqtjaJNrFIGS2tIjyFtci4gko3wH3hmdrpsu6QSMLnFeR5ZXa7kKFtjUilYfRJPC tLRNFRlUofzpvzUoWA4xEwW5R+WCf2Wz/+5pqkklUYsUCok9qKb2nS5s2NZbem4C 8SySl8iPC2SLSo3HTLmKLxsUCwwk52NRgTsDRyUfipkAdk18Nw== -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:07 2025 by rpki-client