This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39332e302f32342d3234203d3e20323132323338.roa File: 3139342e3139352e39332e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: B8BYQc7rmgI9uNt/hofu3GzHva9WcsMslIVSvS/xCWY= Subject key identifier: F2:CF:5C:DA:E7:AC:CE:15:2B:40:83:D1:F9:34:77:91:5D:15:71:03 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 7807573654136184C46A56209BA634CE1609ED08 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39332e302f32342d3234203d3e20323132323338.roa Signing time: Tue 21 Oct 2025 13:22:42 +0000 ROA not before: Tue 21 Oct 2025 13:17:42 +0000 ROA not after: Tue 20 Oct 2026 13:22:42 +0000 asID: 212238 IP address blocks: 194.195.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Dec 2025 22:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:07:57:36:54:13:61:84:c4:6a:56:20:9b:a6:34:ce:16:09:ed:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Oct 21 13:17:42 2025 GMT Not After : Oct 20 13:22:42 2026 GMT Subject: CN=F2CF5CDAE7ACCE152B4083D1F93477915D157103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b7:c7:11:60:d4:93:af:3a:40:4a:24:20:64: 5b:ff:0b:2a:f5:6d:8b:6f:2b:0e:94:94:5a:dd:bf: d9:4f:e5:6e:90:34:10:75:20:00:32:5e:79:3c:0a: 92:b1:67:9f:bb:f6:5b:d3:1b:dc:1e:4d:85:05:f8: 03:13:19:15:0b:51:db:b3:88:00:cd:24:6e:d6:e8: 49:8d:e4:2a:e0:0e:64:93:1f:4f:1d:81:dc:5e:ed: 93:ea:f6:97:76:58:71:33:9d:a1:36:86:c2:a1:fa: 40:19:d2:33:fa:37:b4:c8:70:e6:70:3b:22:7b:6d: 66:d8:f8:a1:cd:23:23:54:9c:fe:0f:f5:1c:42:9c: c0:ef:b3:c9:ca:50:e7:48:ea:d4:c4:88:97:06:99: 11:bc:5a:87:45:94:a0:e8:79:c0:3c:58:42:d3:91: d8:4f:a9:43:a0:4b:5c:08:63:b6:d7:21:60:9b:3a: c5:a5:01:9e:03:be:c9:91:a8:9d:62:1b:a6:1a:0a: fb:46:c7:1f:bd:3b:9c:c2:b5:e0:88:ab:30:61:6e: 9e:93:cd:d3:ff:57:0e:28:27:b3:70:f9:d1:c4:f0: 59:2f:1d:5f:76:ab:d2:99:99:41:e0:f2:b0:7c:77: dd:2c:12:c3:0b:75:17:a0:61:a5:6e:99:34:bc:53: cc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CF:5C:DA:E7:AC:CE:15:2B:40:83:D1:F9:34:77:91:5D:15:71:03 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39332e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.195.93.0/24 Signature Algorithm: sha256WithRSAEncryption 73:18:da:c3:b5:20:f7:7b:36:98:ea:70:fb:38:2c:4f:c0:87: 78:84:2b:bd:48:34:ee:93:aa:36:0d:19:88:d9:b0:af:15:8d: 05:90:96:e7:75:8e:fa:47:3f:f7:b9:1a:19:3b:33:8e:75:15: 6f:8d:50:92:87:40:4f:8b:7b:0d:08:ef:a6:39:cb:f3:af:f4: 37:9b:f0:fd:a2:63:1d:08:b1:6e:ea:91:45:49:3a:01:78:b7: 17:1f:2e:bf:25:0a:bd:13:65:da:05:70:27:32:b6:c5:d3:4f: 87:37:45:fd:db:a2:77:4d:3a:fd:eb:19:24:e6:99:87:82:b9: 22:2d:d7:73:cd:45:9f:a0:b3:f5:8d:08:7f:1a:93:24:d5:b2: a7:a4:a8:2a:c9:bb:8e:09:3c:fe:4a:7c:8f:92:f9:7b:f8:b6: 73:74:c5:f7:4b:dc:8d:01:0b:ed:e0:5d:2f:49:d3:7c:f2:e5: 7e:00:f9:ee:d9:50:92:2c:b0:e9:60:ba:2a:a0:51:62:de:b6: 3a:9f:4d:fd:20:15:6f:38:b9:b8:47:ed:4c:56:08:11:94:bf: f4:db:71:de:ed:76:5f:72:f6:65:28:39:cf:57:b0:8e:e3:a5: 2b:43:71:58:48:5f:20:7e:0c:9e:67:22:90:7c:dd:2a:48:78: 01:0e:0d:d8 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUeAdXNlQTYYTEalYgm6Y0zhYJ7QgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEwMjExMzE3NDJaFw0yNjEwMjAxMzIyNDJaMDMxMTAvBgNV BAMTKEYyQ0Y1Q0RBRTdBQ0NFMTUyQjQwODNEMUY5MzQ3NzkxNUQxNTcxMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnt8cRYNSTrzpASiQgZFv/Cyr1 bYtvKw6UlFrdv9lP5W6QNBB1IAAyXnk8CpKxZ5+79lvTG9weTYUF+AMTGRULUduz iADNJG7W6EmN5CrgDmSTH08dgdxe7ZPq9pd2WHEznaE2hsKh+kAZ0jP6N7TIcOZw OyJ7bWbY+KHNIyNUnP4P9RxCnMDvs8nKUOdI6tTEiJcGmRG8WodFlKDoecA8WELT kdhPqUOgS1wIY7bXIWCbOsWlAZ4DvsmRqJ1iG6YaCvtGxx+9O5zCteCIqzBhbp6T zdP/Vw4oJ7Nw+dHE8FkvHV92q9KZmUHg8rB8d90sEsMLdRegYaVumTS8U8zPAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU8s9c2ueszhUrQIPR+TR3kV0VcQMwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMTM5MzUyZTM5 MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMjMzMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADCw10wDQYJKoZIhvcNAQELBQADggEBAHMY2sO1IPd7NpjqcPs4LE/Ah3iEK71I NO6TqjYNGYjZsK8VjQWQlud1jvpHP/e5Ghk7M451FW+NUJKHQE+Lew0I76Y5y/Ov 9Deb8P2iYx0IsW7qkUVJOgF4txcfLr8lCr0TZdoFcCcytsXTT4c3Rf3bondNOv3r GSTmmYeCuSIt13PNRZ+gs/WNCH8akyTVsqekqCrJu44JPP5KfI+S+Xv4tnN0xfdL 3I0BC+3gXS9J03zy5X4A+e7ZUJIssOlguiqgUWLetjqfTf0gFW84ubhH7UxWCBGU v/Tbcd7tdl9y9mUoOc9XsI7jpStDcVhIXyB+DJ5nIpB83SpIeAEODdg= -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:05 2025 by rpki-client