This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e31312e302f32342d3234203d3e20323132323338.roa File: 39342e3134302e31312e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: vm5tYrXOcZKHiqywe2EFRQFd2Hc+cbiyQ4eqMPHy/x8= Subject key identifier: F8:5E:D7:14:A6:06:90:78:50:2C:A4:EB:6A:59:EE:E2:3B:A4:C3:FD Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 1CD04164135169F53F5C1183CA05FF5218808DCD Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e31312e302f32342d3234203d3e20323132323338.roa Signing time: Tue 21 Oct 2025 13:22:39 +0000 ROA not before: Tue 21 Oct 2025 13:17:39 +0000 ROA not after: Tue 20 Oct 2026 13:22:39 +0000 asID: 212238 IP address blocks: 94.140.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Dec 2025 22:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d0:41:64:13:51:69:f5:3f:5c:11:83:ca:05:ff:52:18:80:8d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Oct 21 13:17:39 2025 GMT Not After : Oct 20 13:22:39 2026 GMT Subject: CN=F85ED714A6069078502CA4EB6A59EEE23BA4C3FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9d:ae:65:8c:b1:16:f1:63:5d:7f:fa:94:05: d8:f4:75:61:4f:4d:93:aa:6f:34:24:a1:c1:db:38: df:86:56:46:9e:4c:8f:97:9e:8f:22:ce:f3:05:85: fb:57:46:2a:1c:07:e0:14:09:ec:c9:63:2a:db:15: 16:a2:d7:2a:68:9b:09:c3:d6:c6:8b:11:29:87:28: 6b:cf:7a:c8:45:2c:91:40:ca:50:75:f3:0d:a4:f1: 0c:22:14:d5:c2:98:9f:1c:bc:e4:2c:f3:a2:36:9e: f0:2c:08:b4:54:30:b1:99:5a:b1:02:8c:4b:b6:07: 5a:c0:b4:47:58:4d:2d:d9:a3:cb:f6:d2:a2:45:83: a2:3d:10:11:16:31:5b:d1:98:0c:4a:56:cb:b2:8f: ea:4d:6e:ee:df:13:03:13:fd:4d:61:a5:c6:b0:0b: 37:83:91:c1:15:35:aa:cf:46:58:7a:73:c5:04:8e: 66:39:52:47:0d:fa:87:72:4c:22:d1:e3:9b:24:7c: 8e:a6:58:c4:d1:3f:df:b5:43:7e:bc:a9:83:91:81: 71:bc:95:52:99:00:c2:7a:cc:0e:24:c2:90:37:b0: c0:d1:02:09:fe:4f:01:46:30:7e:7c:c7:c8:77:7a: 64:20:7c:74:86:01:18:73:81:31:87:44:b6:47:1d: e7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5E:D7:14:A6:06:90:78:50:2C:A4:EB:6A:59:EE:E2:3B:A4:C3:FD X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e31312e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.140.11.0/24 Signature Algorithm: sha256WithRSAEncryption 02:a2:32:0a:c3:a8:81:eb:c8:95:e0:35:b5:a3:14:50:48:37: 4d:07:d9:e8:3d:77:4a:28:dd:d8:ea:25:77:f6:b8:3e:1e:46: d3:41:ed:01:44:23:77:fb:02:51:e7:48:d7:6f:ad:17:45:a8: d2:3b:5f:ff:e7:64:6f:d8:42:87:ad:68:81:0b:dd:8d:eb:ff: 27:0a:66:2c:b5:3c:46:11:8d:1d:91:5f:6a:0e:47:84:89:16: 03:44:67:43:60:6c:93:98:21:9a:91:5e:84:a9:48:aa:ba:b6: 33:6e:b2:43:76:e3:6e:30:4a:97:03:84:23:ab:66:9c:ec:0c: 6a:21:0c:7b:51:4c:d8:16:df:df:5c:02:4b:42:0a:c4:e9:c6: 56:8f:18:fb:4a:bd:0b:42:96:03:af:47:af:07:9c:32:99:e0: 0e:ff:63:8a:94:97:2a:02:a2:a2:ba:b1:fa:53:06:91:dc:f0: 8f:57:2d:4a:3b:34:77:03:bc:6a:3e:41:ee:9c:78:0f:ee:af: 95:e1:5c:59:a5:41:c8:6a:ed:34:6c:73:6b:e6:b8:fc:96:2e: a0:de:54:77:d5:8b:41:13:3a:2a:36:06:14:02:89:b8:91:c6: f0:c6:bd:28:90:c6:16:c1:0a:75:bc:9f:a6:a7:59:bc:b4:70: 3b:29:d0:e1 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUHNBBZBNRafU/XBGDygX/UhiAjc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEwMjExMzE3MzlaFw0yNjEwMjAxMzIyMzlaMDMxMTAvBgNV BAMTKEY4NUVENzE0QTYwNjkwNzg1MDJDQTRFQjZBNTlFRUUyM0JBNEMzRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQna5ljLEW8WNdf/qUBdj0dWFP TZOqbzQkocHbON+GVkaeTI+Xno8izvMFhftXRiocB+AUCezJYyrbFRai1ypomwnD 1saLESmHKGvPeshFLJFAylB18w2k8QwiFNXCmJ8cvOQs86I2nvAsCLRUMLGZWrEC jEu2B1rAtEdYTS3Zo8v20qJFg6I9EBEWMVvRmAxKVsuyj+pNbu7fEwMT/U1hpcaw CzeDkcEVNarPRlh6c8UEjmY5UkcN+odyTCLR45skfI6mWMTRP9+1Q368qYORgXG8 lVKZAMJ6zA4kwpA3sMDRAgn+TwFGMH58x8h3emQgfHSGARhzgTGHRLZHHecLAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU+F7XFKYGkHhQLKTralnu4jukw/0wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzNDJlMzEzNDMwMmUzMTMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA XowLMA0GCSqGSIb3DQEBCwUAA4IBAQACojIKw6iB68iV4DW1oxRQSDdNB9noPXdK KN3Y6iV39rg+HkbTQe0BRCN3+wJR50jXb60XRajSO1//52Rv2EKHrWiBC92N6/8n CmYstTxGEY0dkV9qDkeEiRYDRGdDYGyTmCGakV6EqUiqurYzbrJDduNuMEqXA4Qj q2ac7AxqIQx7UUzYFt/fXAJLQgrE6cZWjxj7Sr0LQpYDr0evB5wymeAO/2OKlJcq AqKiurH6UwaR3PCPVy1KOzR3A7xqPkHunHgP7q+V4VxZpUHIau00bHNr5rj8li6g 3lR31YtBEzoqNgYUAom4kcbwxr0okMYWwQp1vJ+mp1m8tHA7KdDh -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:08 2025 by rpki-client