This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e302e3230312e302f32342d3234203d3e203432383331.roa File: 3139342e302e3230312e302f32342d3234203d3e203432383331.roa (raw, json) Hash identifier: ZDpNAeHGVZv/nZOblQVq9oXO7CMnP9gMCCn9ulPFDNY= Subject key identifier: 79:F5:D6:BD:E6:1B:9A:A5:11:12:35:F1:AE:D5:E5:33:20:BA:D9:3D Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 53C92A1EB11465EF5C839323CA789C986B5C6334 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e302e3230312e302f32342d3234203d3e203432383331.roa Signing time: Sat 08 Nov 2025 23:06:49 +0000 ROA not before: Sat 08 Nov 2025 23:01:49 +0000 ROA not after: Sat 07 Nov 2026 23:06:49 +0000 asID: 42831 IP address blocks: 194.0.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c9:2a:1e:b1:14:65:ef:5c:83:93:23:ca:78:9c:98:6b:5c:63:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 8 23:01:49 2025 GMT Not After : Nov 7 23:06:49 2026 GMT Subject: CN=79F5D6BDE61B9AA5111235F1AED5E53320BAD93D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:ec:dc:d7:00:55:23:07:77:d7:d2:6a:85: eb:c3:44:d9:64:f6:43:e8:8f:ab:96:1e:d0:7e:d2: 4a:4c:5a:36:f0:1c:0f:82:a5:1f:1d:c5:1c:9d:47: fa:db:a2:b3:ff:88:41:cc:a2:8f:9f:6d:9d:33:60: 51:43:2c:24:0a:bc:98:dc:9f:10:54:1f:24:4b:f4: 23:f9:4e:ef:f3:e6:04:a9:da:5a:2a:1a:64:59:0c: ec:e2:19:00:4a:10:ca:69:8d:4e:7a:7d:e5:79:29: 7a:cb:35:4c:ed:55:ed:25:d7:33:1c:a9:fd:51:e5: 3b:0a:ab:8b:af:fb:6d:14:73:f5:65:f8:fa:b1:13: 82:26:4a:52:9f:1c:16:b0:08:bd:3a:aa:68:f5:09: 63:b1:7d:59:e0:e5:85:bd:33:84:07:18:0d:28:a2: dc:95:97:1b:31:2a:0e:9a:ba:3d:7a:66:bb:ee:28: 99:6c:a1:f1:3c:54:97:db:c5:a4:6b:f7:40:25:ae: 9e:fd:a6:e6:79:d6:15:f1:60:28:99:eb:bc:c7:ea: b8:87:0c:bf:e5:30:e3:99:fc:fc:15:1c:44:0b:48: 6a:d3:20:52:f1:23:8e:7c:09:80:5f:fd:5e:dc:27: e3:2d:24:81:27:fa:4f:6c:49:98:3d:79:e0:00:6d: e8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F5:D6:BD:E6:1B:9A:A5:11:12:35:F1:AE:D5:E5:33:20:BA:D9:3D X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e302e3230312e302f32342d3234203d3e203432383331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.201.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:f3:27:00:fb:bd:84:46:e8:d7:05:76:4a:f2:c6:5b:a5:ef: 87:92:32:e5:51:24:eb:74:fb:ee:9b:d8:a3:4e:a9:80:cf:30: ce:bb:61:4e:cb:ee:17:ec:98:87:a2:bb:57:ce:96:fd:ae:17: 78:50:61:40:23:c4:44:87:41:1f:46:57:1e:dd:89:f7:76:fb: c7:96:12:a7:7e:f9:37:db:78:8b:96:29:0a:ba:17:26:88:31: 05:3e:19:c1:4b:46:49:7d:6a:3f:06:d3:3c:44:ff:cd:9c:73: 18:64:f8:62:4c:a8:71:f5:8f:8d:e5:70:34:83:5d:b0:c9:33: ea:67:06:89:1d:a7:a5:e8:cd:c6:b2:d6:0b:65:f6:05:ee:b7: 77:65:bb:97:da:fe:41:54:40:b4:d6:b4:bf:2d:19:32:46:71: b2:2a:89:d8:ac:5e:05:e1:38:1a:ab:75:ee:57:b9:af:3d:2c: 77:b7:12:fe:61:1e:a7:a2:55:87:0b:66:53:55:6a:52:a8:8b: 37:12:f6:ca:af:98:9c:a7:ed:14:57:d8:1d:7d:02:d2:b7:0b: f4:32:14:b8:ac:36:ca:ad:e5:a8:08:8b:72:0d:c4:e4:c3:bc: 85:8d:18:e2:de:29:25:c1:68:dd:2d:61:4f:40:27:16:72:9c: 81:44:96:cc -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUU8kqHrEUZe9cg5MjynicmGtcYzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMDgyMzAxNDlaFw0yNjExMDcyMzA2NDlaMDMxMTAvBgNV BAMTKDc5RjVENkJERTYxQjlBQTUxMTEyMzVGMUFFRDVFNTMzMjBCQUQ5M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6quzc1wBVIwd319JqhevDRNlk 9kPoj6uWHtB+0kpMWjbwHA+CpR8dxRydR/rborP/iEHMoo+fbZ0zYFFDLCQKvJjc nxBUHyRL9CP5Tu/z5gSp2loqGmRZDOziGQBKEMppjU56feV5KXrLNUztVe0l1zMc qf1R5TsKq4uv+20Uc/Vl+PqxE4ImSlKfHBawCL06qmj1CWOxfVng5YW9M4QHGA0o otyVlxsxKg6auj16ZrvuKJlsofE8VJfbxaRr90Alrp79puZ51hXxYCiZ67zH6riH DL/lMOOZ/PwVHEQLSGrTIFLxI458CYBf/V7cJ+MtJIEn+k9sSZg9eeAAbejdAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUefXWveYbmqUREjXxrtXlMyC62T0wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMDJlMzIzMDMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMjM4MzMzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIA yTANBgkqhkiG9w0BAQsFAAOCAQEAH/MnAPu9hEbo1wV2SvLGW6Xvh5Iy5VEk63T7 7pvYo06pgM8wzrthTsvuF+yYh6K7V86W/a4XeFBhQCPERIdBH0ZXHt2J93b7x5YS p375N9t4i5YpCroXJogxBT4ZwUtGSX1qPwbTPET/zZxzGGT4YkyocfWPjeVwNINd sMkz6mcGiR2npejNxrLWC2X2Be63d2W7l9r+QVRAtNa0vy0ZMkZxsiqJ2KxeBeE4 Gqt17le5rz0sd7cS/mEep6JVhwtmU1VqUqiLNxL2yq+YnKftFFfYHX0C0rcL9DIU uKw2yq3lqAiLcg3E5MO8hY0Y4t4pJcFo3S1hT0AnFnKcgUSWzA== -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:29 2025 by rpki-client