This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e382e302f32342d3332203d3e20313336373837.roa File: 39342e3134302e382e302f32342d3332203d3e20313336373837.roa (raw, json) Hash identifier: cdyd/l4+Z8RK7qR/K7tuZ61QAYviHBF7LZmNOcbIJkg= Subject key identifier: BA:AC:A7:C7:1C:56:89:5D:20:D6:92:F3:3A:25:F8:E7:F2:1B:7E:AF Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 2E1C4DB49F34BC705823692FA90CA5D193122ABE Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e382e302f32342d3332203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:50:35 +0000 ROA not before: Mon 29 Dec 2025 09:45:35 +0000 ROA not after: Mon 28 Dec 2026 09:50:35 +0000 asID: 136787 IP address blocks: 94.140.8.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:1c:4d:b4:9f:34:bc:70:58:23:69:2f:a9:0c:a5:d1:93:12:2a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:35 2025 GMT Not After : Dec 28 09:50:35 2026 GMT Subject: CN=BAACA7C71C56895D20D692F33A25F8E7F21B7EAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6c:11:59:7b:65:c3:9d:05:00:da:e9:b3:b1: 23:3e:e5:1b:d2:26:51:5e:05:1b:68:89:d2:d8:4b: f1:47:0b:db:d8:15:40:d9:90:eb:6c:0e:9d:c3:19: ea:18:8b:34:a2:88:de:ac:34:04:fb:d4:ba:6b:2f: 28:b3:fa:f8:4d:c3:dc:1a:88:99:fd:0a:f3:f7:e9: cd:48:da:4e:67:93:67:f5:b2:c6:5d:32:ec:65:74: 57:bb:37:c1:e6:14:76:9e:a8:a2:61:cb:6e:64:b7: f9:0a:6c:47:e0:de:f4:3a:97:a2:cf:4e:16:e5:38: 2c:3e:a4:cb:2c:d0:52:58:51:bb:f8:e3:d9:ee:8d: 34:15:52:b5:c4:a1:af:b2:4b:75:5c:59:f1:32:87: 66:93:7f:8b:9c:2a:72:21:56:31:2f:45:77:04:d6: 72:5f:52:76:ed:a1:f4:e9:b3:f4:e4:fa:4f:86:95: 5d:55:2e:50:82:4e:d2:5d:3f:4b:13:c7:19:34:90: 26:0b:c2:e5:1e:44:26:78:7a:14:e1:5b:d8:d1:32: 2c:e0:c0:7f:1f:20:a8:94:c0:14:c0:69:53:f4:50: cd:54:6e:e1:f0:5c:9d:c5:7f:6a:18:a7:5a:b7:e0: c9:bb:e9:c0:d9:09:6a:89:b1:05:11:2e:41:33:b2: ba:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AC:A7:C7:1C:56:89:5D:20:D6:92:F3:3A:25:F8:E7:F2:1B:7E:AF X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e382e302f32342d3332203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.140.8.0/24 Signature Algorithm: sha256WithRSAEncryption 36:35:f8:d4:0f:05:ff:2b:3b:ee:2b:13:da:13:3a:3c:53:99: 13:19:82:cf:12:27:81:f6:77:e9:a5:7a:6c:ba:97:34:cd:b8: 41:60:4d:a1:b6:0c:d9:c6:b3:63:40:00:9b:0a:e7:39:e0:e7: 67:0f:05:80:be:2d:52:9e:a9:42:35:b8:c4:d8:7c:7f:6b:5f: 49:e7:f6:09:1b:7d:a7:10:3c:e9:50:24:92:48:9f:a2:17:2e: c7:bb:75:ee:50:59:64:b1:e1:a7:9b:a0:84:2b:b4:c0:fa:e1: 97:8c:a3:0e:e6:13:3b:ba:67:76:c9:5d:ba:de:27:55:86:62: e8:d3:33:51:2c:88:24:ad:5d:08:f5:ca:7c:ce:c5:62:82:f8: 04:da:fb:d4:5a:b1:03:97:da:1d:ca:bc:ff:5a:92:10:43:a5: 2d:0d:3a:99:e9:7a:ec:b5:52:0b:84:0e:f7:64:d7:3a:a9:c4: 81:bd:b8:2c:5e:d1:ac:80:b7:1f:fd:f4:4b:04:7d:b4:a6:35: 36:0b:41:95:e8:d6:50:4c:ac:2e:a7:c3:75:b0:c4:22:1a:cc: fb:fd:4c:2d:47:15:bd:47:bc:3d:72:1f:ce:bd:d6:1c:9c:1f: 13:51:eb:09:ae:00:1b:58:8e:42:a9:47:88:65:da:17:7f:d2: 66:d8:16:34 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIULhxNtJ80vHBYI2kvqQyl0ZMSKr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1MzVaFw0yNjEyMjgwOTUwMzVaMDMxMTAvBgNV BAMTKEJBQUNBN0M3MUM1Njg5NUQyMEQ2OTJGMzNBMjVGOEU3RjIxQjdFQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqbBFZe2XDnQUA2umzsSM+5RvS JlFeBRtoidLYS/FHC9vYFUDZkOtsDp3DGeoYizSiiN6sNAT71LprLyiz+vhNw9wa iJn9CvP36c1I2k5nk2f1ssZdMuxldFe7N8HmFHaeqKJhy25kt/kKbEfg3vQ6l6LP ThblOCw+pMss0FJYUbv449nujTQVUrXEoa+yS3VcWfEyh2aTf4ucKnIhVjEvRXcE 1nJfUnbtofTps/Tk+k+GlV1VLlCCTtJdP0sTxxk0kCYLwuUeRCZ4ehThW9jRMizg wH8fIKiUwBTAaVP0UM1UbuHwXJ3Ff2oYp1q34Mm76cDZCWqJsQURLkEzsronAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUuqynxxxWiV0g1pLzOiX45/Ibfq8wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzNDJlMzEzNDMwMmUzODJl MzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF6M CDANBgkqhkiG9w0BAQsFAAOCAQEANjX41A8F/ys77isT2hM6PFOZExmCzxIngfZ3 6aV6bLqXNM24QWBNobYM2cazY0AAmwrnOeDnZw8FgL4tUp6pQjW4xNh8f2tfSef2 CRt9pxA86VAkkkifohcux7t17lBZZLHhp5ughCu0wPrhl4yjDuYTO7pndsldut4n VYZi6NMzUSyIJK1dCPXKfM7FYoL4BNr71FqxA5faHcq8/1qSEEOlLQ06mel67LVS C4QO92TXOqnEgb24LF7RrIC3H/30SwR9tKY1NgtBlejWUEysLqfDdbDEIhrM+/1M LUcVvUe8PXIfzr3WHJwfE1HrCa4AG1iOQqlHiGXaF3/SZtgWNA== -----END CERTIFICATE-----Generated at Mon Jan 19 14:25:24 2026 by rpki-client