This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e38342e302f32342d3234203d3e203437353833.roa File: 3139342e3139352e38342e302f32342d3234203d3e203437353833.roa (raw, json) Hash identifier: K4NW4QA4uZnKMAhy/Fb7ZDy7Usfv9KORe14C1KTP7y0= Subject key identifier: DE:72:15:A3:BF:B3:53:FD:0E:5C:33:EC:B7:5C:4B:D5:0F:92:39:3F Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 15D512B321F900B8374DDFEDD5254B7910E3ED18 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e38342e302f32342d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:58 +0000 ROA not before: Mon 29 Dec 2025 09:45:58 +0000 ROA not after: Mon 28 Dec 2026 09:50:58 +0000 asID: 47583 IP address blocks: 194.195.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d5:12:b3:21:f9:00:b8:37:4d:df:ed:d5:25:4b:79:10:e3:ed:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:58 2025 GMT Not After : Dec 28 09:50:58 2026 GMT Subject: CN=DE7215A3BFB353FD0E5C33ECB75C4BD50F92393F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:96:b8:39:77:cf:d6:46:3d:89:50:57:eb:dd: b3:66:53:f5:e1:0c:19:a2:54:49:18:f2:85:53:f2: 43:94:df:43:4a:5f:18:c1:f6:6b:62:bf:1c:96:af: cb:9a:47:8c:f4:94:e1:78:0e:3e:32:91:a8:5a:26: 97:22:b5:f8:a3:73:62:72:ef:84:1c:9c:ba:3b:d7: 3a:21:1a:df:2d:f1:b4:dd:b7:13:b4:8b:00:fc:df: 69:40:3f:65:4b:9b:55:13:83:68:e3:62:2e:1e:fa: b5:3f:fb:d2:48:f9:91:16:35:d2:89:e9:e9:22:0b: 7f:d1:c9:98:87:c5:39:69:27:9b:99:d3:51:08:6f: 4a:28:6b:bb:cb:28:0a:3a:db:7e:29:89:88:fe:9f: 47:01:15:64:39:c1:c4:67:45:e7:cc:9d:53:a5:79: 5c:59:c6:dd:b8:a2:7c:10:a6:e4:a4:43:56:12:0b: fb:22:96:bb:11:88:84:98:13:c2:23:ff:04:44:03: e7:bc:d6:b0:3e:1e:20:18:41:fc:58:87:48:02:6d: 2c:ae:41:3e:9b:a5:58:53:dd:07:84:88:02:a6:fa: 58:49:dd:24:cc:0c:c0:c5:84:07:bf:20:75:fa:2c: 83:ba:39:ae:33:3b:05:8b:58:ab:6f:83:03:91:e1: ca:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:72:15:A3:BF:B3:53:FD:0E:5C:33:EC:B7:5C:4B:D5:0F:92:39:3F X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e38342e302f32342d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.195.84.0/24 Signature Algorithm: sha256WithRSAEncryption 48:fe:30:ed:a4:50:66:6a:08:32:4f:0b:f3:0a:ab:2e:23:f4: d3:37:c0:5e:7a:1a:c4:15:39:e3:96:be:61:c7:97:33:23:db: 9d:e5:c8:b1:11:7c:c4:27:95:c9:83:2a:b7:af:5f:0a:71:30: b6:52:2a:ed:d3:2c:da:6d:48:8f:bb:9d:22:1a:27:81:2e:58: b8:e8:57:72:0a:75:91:30:ec:69:f7:27:0a:40:6d:40:51:88: ab:65:13:09:79:22:ee:71:b8:7b:40:b0:7e:1d:10:f9:4e:d6: ff:9b:1f:fd:77:cf:90:cb:82:64:10:f8:05:68:92:b7:61:27: 65:40:69:91:47:ac:49:14:40:49:63:50:82:2c:08:2a:91:af: 2f:7c:e0:ae:3d:91:a7:71:a4:87:c7:06:1c:98:c9:ff:f2:bb: 56:90:05:42:cf:df:bd:ee:57:63:47:db:3e:52:f5:b7:14:93: 9f:f1:83:8c:77:9e:c7:27:d2:64:f5:63:3a:8e:c0:c6:53:23: c7:6f:d9:6d:71:7d:1c:66:45:6f:6d:a0:b7:87:72:f1:9d:83: d6:cc:9a:78:cf:83:59:34:d5:c7:12:e4:2d:90:e6:68:5c:1d: ba:f6:33:11:1d:fa:6a:92:8d:94:5e:0d:64:49:f9:f3:29:5b: 28:a1:ad:f1 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUFdUSsyH5ALg3Td/t1SVLeRDj7RgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NThaFw0yNjEyMjgwOTUwNThaMDMxMTAvBgNV BAMTKERFNzIxNUEzQkZCMzUzRkQwRTVDMzNFQ0I3NUM0QkQ1MEY5MjM5M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjlrg5d8/WRj2JUFfr3bNmU/Xh DBmiVEkY8oVT8kOU30NKXxjB9mtivxyWr8uaR4z0lOF4Dj4ykahaJpcitfijc2Jy 74QcnLo71zohGt8t8bTdtxO0iwD832lAP2VLm1UTg2jjYi4e+rU/+9JI+ZEWNdKJ 6ekiC3/RyZiHxTlpJ5uZ01EIb0ooa7vLKAo6234piYj+n0cBFWQ5wcRnRefMnVOl eVxZxt24onwQpuSkQ1YSC/silrsRiISYE8Ij/wREA+e81rA+HiAYQfxYh0gCbSyu QT6bpVhT3QeEiAKm+lhJ3STMDMDFhAe/IHX6LIO6Oa4zOwWLWKtvgwOR4crDAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU3nIVo7+zU/0OXDPst1xL1Q+SOT8wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMTM5MzUyZTM4 MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA wsNUMA0GCSqGSIb3DQEBCwUAA4IBAQBI/jDtpFBmaggyTwvzCqsuI/TTN8BeehrE FTnjlr5hx5czI9ud5cixEXzEJ5XJgyq3r18KcTC2Uirt0yzabUiPu50iGieBLli4 6FdyCnWRMOxp9ycKQG1AUYirZRMJeSLucbh7QLB+HRD5Ttb/mx/9d8+Qy4JkEPgF aJK3YSdlQGmRR6xJFEBJY1CCLAgqka8vfOCuPZGncaSHxwYcmMn/8rtWkAVCz9+9 7ldjR9s+UvW3FJOf8YOMd57HJ9Jk9WM6jsDGUyPHb9ltcX0cZkVvbaC3h3LxnYPW zJp4z4NZNNXHEuQtkOZoXB269jMRHfpqko2UXg1kSfnzKVsooa3x -----END CERTIFICATE-----Generated at Mon Jan 19 14:28:35 2026 by rpki-client