This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39302e302f32342d3332203d3e20313431393935.roa File: 3139342e3139352e39302e302f32342d3332203d3e20313431393935.roa (raw, json) Hash identifier: Zk6ftchR9hq7TeQ5DHB8EhobSM2juLQoslt95ovyF2Q= Subject key identifier: DC:70:C9:8B:A4:46:84:40:4A:A5:71:36:42:D1:57:E7:B2:5B:64:49 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 7EE263269694303242137D5FA6AA9459201D1E43 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39302e302f32342d3332203d3e20313431393935.roa Signing time: Mon 29 Dec 2025 09:50:40 +0000 ROA not before: Mon 29 Dec 2025 09:45:40 +0000 ROA not after: Mon 28 Dec 2026 09:50:40 +0000 asID: 141995 IP address blocks: 194.195.90.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e2:63:26:96:94:30:32:42:13:7d:5f:a6:aa:94:59:20:1d:1e:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:40 2025 GMT Not After : Dec 28 09:50:40 2026 GMT Subject: CN=DC70C98BA44684404AA5713642D157E7B25B6449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:83:32:92:fc:70:60:c0:08:ba:c5:68:3a:90: 0e:76:d6:16:76:ac:6b:6e:81:ba:6c:7c:b5:97:d9: aa:aa:22:b1:95:53:85:93:eb:92:f9:19:a1:6b:16: fc:0f:6b:92:cd:5b:e4:a8:ac:02:c8:66:71:f5:03: 63:4b:a0:07:a8:a4:06:b2:e4:28:44:db:87:2b:92: 7a:26:7f:82:20:00:9e:2f:51:8b:c5:fb:49:76:06: 93:e8:98:82:4b:95:6b:12:49:32:fa:96:0f:87:ba: 9a:50:86:df:1d:ba:1f:7e:28:b2:01:ae:ab:0d:f8: bf:6f:4e:a9:e0:38:39:87:dc:3b:9c:79:7c:3a:51: 7a:4e:9f:2e:f8:c0:45:5a:27:ab:1a:37:32:d1:f9: 77:8b:76:8c:7f:b6:85:ac:dc:7d:c8:eb:22:63:ce: 37:10:e6:c8:b8:0c:d3:3a:b2:e6:80:14:3b:69:76: 7d:df:b3:f8:91:83:9a:76:7f:4c:cf:3b:ac:c1:af: 15:1f:1f:bd:ef:55:f3:c5:17:f3:b3:9a:69:1d:fc: 33:f6:0b:56:60:38:35:96:03:21:bb:6c:1b:51:02: 84:b2:bb:c9:22:6a:04:af:f7:10:94:ec:27:e3:4a: b8:bd:a3:9c:68:c8:89:4a:54:63:ab:37:a1:a0:1e: 22:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:70:C9:8B:A4:46:84:40:4A:A5:71:36:42:D1:57:E7:B2:5B:64:49 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39302e302f32342d3332203d3e20313431393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.195.90.0/24 Signature Algorithm: sha256WithRSAEncryption 19:61:61:cb:aa:4f:7c:40:d8:d0:31:0b:0e:0d:5e:b7:b7:2c: d1:f7:a3:a7:43:63:80:9a:b1:93:da:8a:02:9b:78:73:1a:b8: 44:d0:38:3c:51:9b:72:da:1d:49:17:06:5f:14:62:ef:f5:e4: c2:e1:a4:91:19:c7:dd:e3:3a:ee:75:62:26:77:5a:1e:f3:5d: 25:aa:9b:8e:36:e6:be:35:74:64:be:4d:2a:ba:42:5a:30:dc: 25:7e:9a:2d:59:f3:30:02:b5:72:cf:59:1f:c4:96:60:65:b9: 67:2b:ce:7d:a8:e5:f2:4c:77:63:3e:55:a2:a6:a7:c4:dd:85: bf:47:1c:6a:80:48:47:70:68:ba:7f:b5:b2:6d:41:90:be:ad: b6:8c:60:f0:ed:35:45:64:27:90:5e:99:bc:4e:ab:8b:e6:cc: f6:22:ad:0d:fc:83:45:c8:ad:d4:f1:6d:a1:0a:d1:9b:55:21: cc:24:b7:0a:ea:62:27:6c:e5:22:14:43:9d:95:92:f3:f1:43: eb:9f:34:c9:95:3a:ac:e0:54:3c:ab:97:10:be:35:7d:ac:e9: 7f:43:f4:d9:fb:f7:0b:e0:79:ed:62:7f:2c:c9:a1:b1:40:b8: b8:f9:8d:fe:d1:90:b0:30:d1:7f:45:5f:0d:54:54:b3:0f:9e: 04:fb:35:65 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUfuJjJpaUMDJCE31fpqqUWSAdHkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDBaFw0yNjEyMjgwOTUwNDBaMDMxMTAvBgNV BAMTKERDNzBDOThCQTQ0Njg0NDA0QUE1NzEzNjQyRDE1N0U3QjI1QjY0NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCogzKS/HBgwAi6xWg6kA521hZ2 rGtugbpsfLWX2aqqIrGVU4WT65L5GaFrFvwPa5LNW+SorALIZnH1A2NLoAeopAay 5ChE24crknomf4IgAJ4vUYvF+0l2BpPomIJLlWsSSTL6lg+HuppQht8duh9+KLIB rqsN+L9vTqngODmH3DuceXw6UXpOny74wEVaJ6saNzLR+XeLdox/toWs3H3I6yJj zjcQ5si4DNM6suaAFDtpdn3fs/iRg5p2f0zPO6zBrxUfH73vVfPFF/Ozmmkd/DP2 C1ZgODWWAyG7bBtRAoSyu8kiagSv9xCU7CfjSri9o5xoyIlKVGOrN6GgHiKVAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU3HDJi6RGhEBKpXE2QtFX57JbZEkwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMTM5MzUyZTM5 MzAyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMTM0MzEzOTM5MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADCw1owDQYJKoZIhvcNAQELBQADggEBABlhYcuqT3xA2NAxCw4NXre3LNH3o6dD Y4CasZPaigKbeHMauETQODxRm3LaHUkXBl8UYu/15MLhpJEZx93jOu51YiZ3Wh7z XSWqm4425r41dGS+TSq6Qlow3CV+mi1Z8zACtXLPWR/ElmBluWcrzn2o5fJMd2M+ VaKmp8Tdhb9HHGqASEdwaLp/tbJtQZC+rbaMYPDtNUVkJ5BembxOq4vmzPYirQ38 g0XIrdTxbaEK0ZtVIcwktwrqYids5SIUQ52VkvPxQ+ufNMmVOqzgVDyrlxC+NX2s 6X9D9Nn79wvgee1ifyzJobFAuLj5jf7RkLAw0X9FXw1UVLMPngT7NWU= -----END CERTIFICATE-----Generated at Mon Jan 19 14:28:06 2026 by rpki-client