This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e38392e302f32342d3234203d3e20313337343039.roa File: 3139342e3139352e38392e302f32342d3234203d3e20313337343039.roa (raw, json) Hash identifier: mFAotNahIwd+Ob7aAgSSu96lbRG05v0fbG8/fHWkRc0= Subject key identifier: AD:2A:0C:78:05:DF:F5:4D:2B:2E:E8:4E:86:A9:6E:A1:6A:29:49:1D Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 509C8670E556932CD5C7E090C61CB24D81B434B8 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e38392e302f32342d3234203d3e20313337343039.roa Signing time: Mon 29 Dec 2025 09:50:50 +0000 ROA not before: Mon 29 Dec 2025 09:45:50 +0000 ROA not after: Mon 28 Dec 2026 09:50:50 +0000 asID: 137409 IP address blocks: 194.195.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:9c:86:70:e5:56:93:2c:d5:c7:e0:90:c6:1c:b2:4d:81:b4:34:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:50 2025 GMT Not After : Dec 28 09:50:50 2026 GMT Subject: CN=AD2A0C7805DFF54D2B2EE84E86A96EA16A29491D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7a:9b:48:27:9c:a8:49:91:9a:5e:38:c4:3d: b4:ff:64:45:19:2c:d0:1a:1b:06:7c:26:eb:3a:5b: d1:bd:55:d9:70:b6:03:a5:67:f7:e8:42:26:3f:eb: 69:9f:b9:a1:e5:00:a5:39:c3:c8:79:9f:bc:eb:40: cb:e9:aa:9c:7e:a0:4c:c1:d6:6f:a9:04:46:dd:3d: f7:82:81:1d:4a:0b:3f:d1:8f:da:7c:a8:e9:23:87: 32:7c:e6:3e:7d:6c:24:75:e4:30:ca:81:a0:fb:78: 77:d3:46:f5:bb:b8:1f:45:a5:0a:82:41:1b:f2:31: 02:b6:64:cd:0d:06:cc:71:21:fb:55:5f:04:e6:16: 03:8b:1d:54:23:06:aa:e2:05:ca:17:a3:20:d8:5d: 5d:a8:f7:5e:87:98:fe:6c:47:a3:d5:a5:a5:ce:4c: 77:f6:87:73:d3:1f:19:91:f6:ed:e6:f5:38:1a:0b: 7f:db:d0:15:42:c8:87:5f:76:60:5c:ed:19:6d:87: a2:5f:b8:86:ad:90:3d:02:79:a3:68:ac:0b:3a:25: 6f:86:30:ec:7b:43:9b:6c:5a:30:56:9f:00:16:e1: 5c:22:87:37:bc:9c:40:46:c7:d7:33:39:24:df:15: 9b:2f:c8:51:87:53:dc:a2:ed:48:1a:57:63:24:5d: 06:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2A:0C:78:05:DF:F5:4D:2B:2E:E8:4E:86:A9:6E:A1:6A:29:49:1D X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e38392e302f32342d3234203d3e20313337343039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.195.89.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:69:09:ac:88:15:87:de:97:cc:5e:e7:14:ae:12:6b:68:42: 71:1f:64:88:34:b6:56:d6:d2:62:f3:79:01:7c:c4:70:b2:18: 05:dd:36:c3:db:81:93:88:b6:c0:2b:2a:85:5d:2e:71:8f:aa: 65:4f:a2:f7:3f:18:91:c3:67:6f:3f:c1:cb:ad:ac:ed:05:dc: eb:9f:fd:92:47:5a:0e:81:b6:86:cf:6c:da:e3:a0:97:49:15: a4:f7:7e:80:b0:a1:6a:2a:22:29:d3:54:f7:f0:e6:fd:c7:ea: b2:63:af:ca:43:a8:0d:fd:c2:6a:c0:db:c8:38:f4:53:02:f2: ea:c7:ec:f3:2f:cf:d3:9f:91:4e:f8:46:a2:39:7d:61:9c:b3: c4:2c:7c:9b:7d:45:d9:4d:c9:0e:58:63:a8:7e:a0:2b:d9:c6: 58:fc:ce:e3:3f:a9:d0:e1:2c:78:98:21:7a:62:ec:fa:9d:e8: 6b:87:bd:bb:97:3a:78:b0:37:ed:75:60:51:49:1b:97:15:12: a7:be:d8:82:54:f2:04:89:c4:3b:b7:0d:b8:e5:b9:23:52:b3: da:71:67:b3:f8:67:ca:fa:13:2a:82:03:cc:1e:7a:32:3c:10: db:98:9c:8c:c7:b5:96:cc:0b:4e:52:fd:40:81:26:d6:71:44: 87:54:2f:20 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUUJyGcOVWkyzVx+CQxhyyTYG0NLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTBaFw0yNjEyMjgwOTUwNTBaMDMxMTAvBgNV BAMTKEFEMkEwQzc4MDVERkY1NEQyQjJFRTg0RTg2QTk2RUExNkEyOTQ5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzeptIJ5yoSZGaXjjEPbT/ZEUZ LNAaGwZ8Jus6W9G9VdlwtgOlZ/foQiY/62mfuaHlAKU5w8h5n7zrQMvpqpx+oEzB 1m+pBEbdPfeCgR1KCz/Rj9p8qOkjhzJ85j59bCR15DDKgaD7eHfTRvW7uB9FpQqC QRvyMQK2ZM0NBsxxIftVXwTmFgOLHVQjBqriBcoXoyDYXV2o916HmP5sR6PVpaXO THf2h3PTHxmR9u3m9TgaC3/b0BVCyIdfdmBc7Rlth6JfuIatkD0CeaNorAs6JW+G MOx7Q5tsWjBWnwAW4Vwihze8nEBGx9czOSTfFZsvyFGHU9yi7UgaV2MkXQZ1AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUrSoMeAXf9U0rLuhOhqluoWopSR0wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMTM5MzUyZTM4 MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczNDMwMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADCw1kwDQYJKoZIhvcNAQELBQADggEBAIxpCayIFYfel8xe5xSuEmtoQnEfZIg0 tlbW0mLzeQF8xHCyGAXdNsPbgZOItsArKoVdLnGPqmVPovc/GJHDZ28/wcutrO0F 3Ouf/ZJHWg6BtobPbNrjoJdJFaT3foCwoWoqIinTVPfw5v3H6rJjr8pDqA39wmrA 28g49FMC8urH7PMvz9OfkU74RqI5fWGcs8QsfJt9RdlNyQ5YY6h+oCvZxlj8zuM/ qdDhLHiYIXpi7Pqd6GuHvbuXOniwN+11YFFJG5cVEqe+2IJU8gSJxDu3DbjluSNS s9pxZ7P4Z8r6EyqCA8weejI8ENuYnIzHtZbMC05S/UCBJtZxRIdULyA= -----END CERTIFICATE-----Generated at Mon Jan 19 14:27:30 2026 by rpki-client