This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e3130302e302f32342d3234203d3e20313337343039.roa File: 3139342e3233332e3130302e302f32342d3234203d3e20313337343039.roa (raw, json) Hash identifier: 5iOeDCrO4+bqQHRcfojO87jdxjXJArxIo/fnGJPqgxM= Subject key identifier: C7:9A:00:89:C7:8F:8A:E2:78:A3:36:39:65:C1:CB:C1:2C:F3:06:E5 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 673A4C082A604701C2B8A4965D84368F47C787F4 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e3130302e302f32342d3234203d3e20313337343039.roa Signing time: Thu 01 Jan 2026 19:51:09 +0000 ROA not before: Thu 01 Jan 2026 19:46:09 +0000 ROA not after: Thu 31 Dec 2026 19:51:09 +0000 asID: 137409 IP address blocks: 194.233.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:3a:4c:08:2a:60:47:01:c2:b8:a4:96:5d:84:36:8f:47:c7:87:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 1 19:46:09 2026 GMT Not After : Dec 31 19:51:09 2026 GMT Subject: CN=C79A0089C78F8AE278A3363965C1CBC12CF306E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f4:71:f3:fc:02:8b:99:72:25:a5:c3:c1:4e: c1:ee:bb:77:e3:26:32:1e:f0:61:3e:a6:cd:83:38: fc:4c:d9:de:15:d1:b5:14:a2:a4:3c:3a:86:9c:5a: d7:64:d0:8b:53:6e:67:c9:5d:b5:9b:91:14:73:0d: 2b:c2:df:b0:7a:92:e9:47:4f:46:3b:50:13:4c:c9: 4c:64:a7:dd:8d:b2:82:54:fc:60:62:dd:69:b5:e7: fb:6f:06:74:64:19:6d:64:54:23:d1:a1:7f:4f:38: 33:89:ed:fc:1f:ae:69:98:c7:d4:74:30:a9:1c:f4: 6d:ed:24:5a:93:e1:75:0a:15:d7:17:c2:25:e5:97: fd:7a:97:6a:ec:31:bf:66:c2:65:bd:37:d7:2d:81: 0b:f2:7a:12:1a:78:c0:e8:c9:23:89:16:b4:de:ca: 3a:1e:b3:f1:e4:76:54:40:ef:f8:c6:73:70:b6:9c: f9:dd:89:14:cb:79:bf:70:05:4d:45:d8:14:2d:ce: 0e:43:69:1d:2c:ce:25:c0:3b:de:7b:a6:ec:3c:08: f8:cd:c7:43:19:09:bd:91:8b:62:cd:4a:59:79:f0: 4e:11:ad:04:6f:e7:6b:a2:a9:cf:72:ee:c5:56:b2: 7b:ef:26:38:a2:8d:62:d7:e7:51:7d:ef:8f:1a:cd: 9c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9A:00:89:C7:8F:8A:E2:78:A3:36:39:65:C1:CB:C1:2C:F3:06:E5 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e3130302e302f32342d3234203d3e20313337343039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.233.100.0/24 Signature Algorithm: sha256WithRSAEncryption 79:33:4d:46:b0:eb:e7:36:53:c7:91:b4:7b:11:df:72:e3:ef: e9:71:f7:83:a2:80:75:1d:18:9b:5d:e3:2a:41:bd:14:37:01: f3:db:4c:bd:ca:ae:67:34:c5:c6:47:ba:0f:d7:62:df:5d:c4: 57:39:6c:27:9c:7b:fd:c2:41:1c:67:d3:4a:56:e8:21:1f:58: 18:7b:38:1c:c1:23:77:f2:b9:4e:a0:a7:c0:bb:69:c6:f8:ee: 40:ca:f4:57:86:bc:4c:fa:66:a8:93:eb:21:dc:7f:03:ca:15: 26:0a:3f:75:8d:ce:27:13:55:86:57:2c:5f:83:1e:8e:56:cf: dc:16:93:40:56:85:f7:1f:61:8a:88:6c:2c:d2:0c:87:87:e2: 06:91:bb:b0:3d:e3:af:48:25:77:da:c4:b5:2c:0d:c5:fa:ef: a8:6c:4d:ee:5a:44:97:81:63:f7:a6:a7:c2:70:6a:b2:0e:93: 2e:6e:76:ca:0f:16:0e:bd:7f:d2:2d:7f:1e:8f:f2:37:3c:bb: 3b:d6:01:d9:6b:24:c8:4c:27:82:e3:dd:fd:65:a2:88:6a:a4: ed:81:c9:de:7d:f9:af:f8:a1:84:c9:78:8c:00:9a:4b:c4:13: fe:6a:fa:d3:e8:d4:41:2a:7b:a2:ae:21:b4:86:94:1a:19:ed: 4a:db:05:02 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUZzpMCCpgRwHCuKSWXYQ2j0fHh/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMDExOTQ2MDlaFw0yNjEyMzExOTUxMDlaMDMxMTAvBgNV BAMTKEM3OUEwMDg5Qzc4RjhBRTI3OEEzMzYzOTY1QzFDQkMxMkNGMzA2RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ9HHz/AKLmXIlpcPBTsHuu3fj JjIe8GE+ps2DOPxM2d4V0bUUoqQ8OoacWtdk0ItTbmfJXbWbkRRzDSvC37B6kulH T0Y7UBNMyUxkp92NsoJU/GBi3Wm15/tvBnRkGW1kVCPRoX9PODOJ7fwfrmmYx9R0 MKkc9G3tJFqT4XUKFdcXwiXll/16l2rsMb9mwmW9N9ctgQvyehIaeMDoySOJFrTe yjoes/HkdlRA7/jGc3C2nPndiRTLeb9wBU1F2BQtzg5DaR0sziXAO957puw8CPjN x0MZCb2Ri2LNSll58E4RrQRv52uiqc9y7sVWsnvvJjiijWLX51F9748azZzVAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUx5oAicePiuJ4ozY5ZcHLwSzzBuUwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMjMzMzMyZTMx MzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM0MzAzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMLpZDANBgkqhkiG9w0BAQsFAAOCAQEAeTNNRrDr5zZTx5G0exHfcuPv6XH3 g6KAdR0Ym13jKkG9FDcB89tMvcquZzTFxke6D9di313EVzlsJ5x7/cJBHGfTSlbo IR9YGHs4HMEjd/K5TqCnwLtpxvjuQMr0V4a8TPpmqJPrIdx/A8oVJgo/dY3OJxNV hlcsX4MejlbP3BaTQFaF9x9hiohsLNIMh4fiBpG7sD3jr0gld9rEtSwNxfrvqGxN 7lpEl4Fj96anwnBqsg6TLm52yg8WDr1/0i1/Ho/yNzy7O9YB2WskyEwnguPd/WWi iGqk7YHJ3n35r/ihhMl4jACaS8QT/mr60+jUQSp7oq4htIaUGhntStsFAg== -----END CERTIFICATE-----Generated at Mon Jan 19 14:28:07 2026 by rpki-client