This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e392e302f32342d3234203d3e20323132323338.roa File: 39342e3134302e392e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: qhonk26btbkbKDz8hJQGUnAKl7khjT2Jxv5K+OUyLTo= Subject key identifier: AD:98:8D:5B:72:3C:D2:4B:05:A6:94:34:C0:5B:43:F9:C0:BB:B1:D2 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 0F39703CA67A410AA08172C4FF72E7DA9439CB62 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e392e302f32342d3234203d3e20323132323338.roa Signing time: Tue 21 Oct 2025 13:22:41 +0000 ROA not before: Tue 21 Oct 2025 13:17:41 +0000 ROA not after: Tue 20 Oct 2026 13:22:41 +0000 asID: 212238 IP address blocks: 94.140.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Dec 2025 22:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:39:70:3c:a6:7a:41:0a:a0:81:72:c4:ff:72:e7:da:94:39:cb:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Oct 21 13:17:41 2025 GMT Not After : Oct 20 13:22:41 2026 GMT Subject: CN=AD988D5B723CD24B05A69434C05B43F9C0BBB1D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:06:59:e4:37:24:c6:a7:2f:09:9b:46:f3:43: e9:53:87:fb:3a:5f:dc:63:8e:fd:8c:b3:20:5c:1e: b5:e2:b2:d6:ed:45:c7:e1:f9:c5:a8:d7:2e:b6:b4: d3:10:ec:a6:d1:95:39:c8:e7:41:19:57:1f:49:1f: 4c:1a:89:b8:14:b4:2a:ba:6d:e3:7b:f5:4a:27:70: 09:43:4b:a7:7b:6e:57:ee:89:ef:1f:72:cb:79:1d: ec:e4:9f:0c:15:b3:21:5f:ce:5c:81:82:54:26:6b: 3c:30:58:78:5b:63:d5:b4:61:8c:67:d2:8a:8c:f7: ae:45:e9:f4:b1:41:7f:29:80:8e:e6:b4:3f:fe:f9: 0b:2f:be:9e:ef:7f:f7:13:49:05:da:9d:61:cc:03: 51:c0:40:dd:6a:ac:f6:95:06:7c:4d:cb:14:47:a8: 7c:33:8b:1f:77:d9:9e:46:21:58:d3:11:90:ec:1c: 8b:ec:ed:36:3f:68:eb:35:b7:f4:1f:dd:cc:af:f3: de:e1:a5:1d:31:29:7e:f6:77:01:0f:31:30:fd:b7: 5c:b9:4b:83:44:dd:b5:21:2d:d0:24:14:6a:2a:d4: b4:98:b8:e7:72:d0:4e:90:97:57:aa:96:dd:e6:60: 68:ba:d6:a0:55:7f:f3:da:75:2f:56:5e:2a:5a:3b: 61:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:98:8D:5B:72:3C:D2:4B:05:A6:94:34:C0:5B:43:F9:C0:BB:B1:D2 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e392e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.140.9.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:63:93:e9:db:67:35:87:96:b5:95:cb:c5:b7:cf:a5:3c:94: e7:2b:da:88:6f:68:e5:92:a8:13:3a:0a:42:df:7f:e4:cd:44: 22:1f:df:75:40:9b:64:00:69:6e:cd:f1:3e:35:02:bc:96:f7: 8a:3a:03:71:44:6b:0c:8d:c5:09:ee:8a:e1:c4:76:c9:2e:5b: 82:90:7f:8c:e7:a5:91:37:e8:a9:5f:ba:ae:1f:cb:76:fd:9f: c3:6b:48:92:18:36:2f:f2:cb:b7:31:c0:f4:64:47:4f:1b:01: 82:ed:55:d3:40:42:ce:34:d6:7b:3f:16:87:eb:87:3e:12:58: e7:c5:ad:6a:f3:bc:b8:92:fa:0a:e7:ce:b9:d4:da:2b:c3:2e: b2:a4:9b:a5:89:ec:e8:22:3d:db:a8:f6:65:29:e5:45:e2:2c: e2:90:a2:11:d4:be:85:84:7e:9b:dd:19:d6:ee:ae:5d:c1:52: d2:1e:9d:2c:6d:80:42:48:2f:d9:d7:e0:dc:31:9d:5b:08:98: 47:89:59:cb:5d:d0:91:0d:a8:c1:1c:c3:50:80:19:0e:f5:34: ac:17:f4:45:b8:58:21:b3:d6:a9:4c:f0:b3:ea:23:6b:5a:a8: 61:aa:b1:26:d5:34:98:92:a0:0e:9f:f4:ae:0b:4b:35:f8:33: 60:a5:45:63 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUDzlwPKZ6QQqggXLE/3Ln2pQ5y2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEwMjExMzE3NDFaFw0yNjEwMjAxMzIyNDFaMDMxMTAvBgNV BAMTKEFEOTg4RDVCNzIzQ0QyNEIwNUE2OTQzNEMwNUI0M0Y5QzBCQkIxRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0BlnkNyTGpy8Jm0bzQ+lTh/s6 X9xjjv2MsyBcHrXistbtRcfh+cWo1y62tNMQ7KbRlTnI50EZVx9JH0waibgUtCq6 beN79UoncAlDS6d7blfuie8fcst5HezknwwVsyFfzlyBglQmazwwWHhbY9W0YYxn 0oqM965F6fSxQX8pgI7mtD/++Qsvvp7vf/cTSQXanWHMA1HAQN1qrPaVBnxNyxRH qHwzix932Z5GIVjTEZDsHIvs7TY/aOs1t/Qf3cyv897hpR0xKX72dwEPMTD9t1y5 S4NE3bUhLdAkFGoq1LSYuOdy0E6Ql1eqlt3mYGi61qBVf/PadS9WXipaO2E3AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUrZiNW3I80ksFppQ0wFtD+cC7sdIwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzNDJlMzEzNDMwMmUzOTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMyMzMzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF6M CTANBgkqhkiG9w0BAQsFAAOCAQEAbmOT6dtnNYeWtZXLxbfPpTyU5yvaiG9o5ZKo EzoKQt9/5M1EIh/fdUCbZABpbs3xPjUCvJb3ijoDcURrDI3FCe6K4cR2yS5bgpB/ jOelkTfoqV+6rh/Ldv2fw2tIkhg2L/LLtzHA9GRHTxsBgu1V00BCzjTWez8Wh+uH PhJY58WtavO8uJL6CufOudTaK8MusqSbpYns6CI926j2ZSnlReIs4pCiEdS+hYR+ m90Z1u6uXcFS0h6dLG2AQkgv2dfg3DGdWwiYR4lZy13QkQ2owRzDUIAZDvU0rBf0 RbhYIbPWqUzws+oja1qoYaqxJtU0mJKgDp/0rgtLNfgzYKVFYw== -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:08 2025 by rpki-client