This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e203633313939.roa File: 3135322e38392e3132362e302f32342d3234203d3e203633313939.roa (raw, json) Hash identifier: hUF1QoKdwbZIpr42DZBlHucq2kDyCrdeGCUOyxAnKTY= Subject key identifier: CC:8A:47:AA:A7:6E:9A:31:2A:AF:B9:05:EA:2C:96:55:69:4A:6E:EF Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 4F521BCCBDC591CEFB4F9AD5DEB1FE6A9113A0CE Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e203633313939.roa Signing time: Fri 19 Dec 2025 21:27:31 +0000 ROA not before: Fri 19 Dec 2025 21:22:31 +0000 ROA not after: Fri 18 Dec 2026 21:27:31 +0000 asID: 63199 IP address blocks: 152.89.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:52:1b:cc:bd:c5:91:ce:fb:4f:9a:d5:de:b1:fe:6a:91:13:a0:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 19 21:22:31 2025 GMT Not After : Dec 18 21:27:31 2026 GMT Subject: CN=CC8A47AAA76E9A312AAFB905EA2C9655694A6EEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:87:a8:87:53:0e:9e:29:eb:7f:b1:ae:b1: 71:b5:0d:7f:67:0e:af:3c:df:94:70:bc:71:f8:78: ae:70:38:42:24:ee:42:06:9a:02:ec:8a:7b:0b:53: 88:f7:19:35:39:3a:67:9c:df:eb:a6:fc:da:32:48: e1:ce:f7:55:b5:f8:8a:37:5d:a6:62:31:7d:14:1e: ab:b8:81:29:0d:6f:e8:0f:52:b7:d9:90:d8:ab:ae: 3e:d1:4c:6a:18:2f:d7:ed:a3:0c:2d:14:a7:61:91: d5:9e:d0:76:32:db:23:99:27:d2:6e:82:60:f2:f8: 5e:ed:0d:02:4d:1c:4f:55:dc:bf:43:ce:d6:6d:47: 3e:7e:4c:21:5c:90:98:07:59:a6:49:8b:ff:f7:21: aa:5c:44:3c:3d:71:1a:46:ca:e6:f7:3f:51:17:3d: 13:09:92:41:33:07:7c:a1:12:32:d2:78:76:7b:17: 18:bb:90:c6:5a:77:a7:12:ab:cf:ea:10:6b:7d:8c: 75:08:fb:52:85:4e:c4:ba:dd:ac:a8:92:b5:f2:cc: 03:f4:3c:dc:aa:7d:52:20:9b:9a:13:f3:f9:89:a7: 3c:45:65:b0:4b:1d:74:14:a4:48:d2:5a:22:2b:41: da:f1:89:7c:b6:a4:63:28:18:19:8e:8b:f8:c1:4b: 07:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8A:47:AA:A7:6E:9A:31:2A:AF:B9:05:EA:2C:96:55:69:4A:6E:EF X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e203633313939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.126.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:0d:d3:25:98:e2:36:14:1f:46:45:df:c2:24:b1:24:9d:1f: a0:ee:8c:e6:4c:05:b4:19:27:f5:93:ce:4e:3a:fe:67:21:1f: a8:3f:85:b5:85:22:3d:16:5a:72:88:7f:df:1c:2b:46:6b:68: dc:b4:be:a7:1c:87:92:72:f0:55:10:a5:fd:f4:aa:50:09:38: 23:06:c7:0f:20:77:49:3f:0c:cd:d4:45:5c:90:eb:e2:43:51: a7:d4:01:dd:54:0e:a9:c3:9e:9e:bc:3b:6a:ff:86:2a:0b:59: 50:da:d2:f2:a5:d5:75:29:9f:7e:e9:64:e0:d8:0e:4d:c9:5a: bb:27:32:bc:19:72:3b:7e:c6:ec:5e:6b:5b:c1:6f:96:df:5a: 7a:06:b3:d3:7c:2f:7c:ea:d5:6d:52:1d:b3:53:3c:0d:b3:c3: ef:5a:4b:58:6b:dc:08:79:22:2d:56:bd:aa:b0:6a:88:78:1f: 15:54:63:80:5d:ee:16:91:0a:67:77:fe:71:c0:80:88:11:91: 22:14:86:b9:6e:13:d0:c6:a9:9d:03:2e:eb:36:2e:85:27:0d: 68:01:12:08:24:84:f7:f2:98:0e:d6:5b:bc:0c:69:5e:32:6d: 3d:cb:d7:f4:64:cb:dd:42:2e:75:81:e2:71:81:11:1a:09:2c: 65:a0:4c:85 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUT1IbzL3Fkc77T5rV3rH+apEToM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMTkyMTIyMzFaFw0yNjEyMTgyMTI3MzFaMDMxMTAvBgNV BAMTKENDOEE0N0FBQTc2RTlBMzEyQUFGQjkwNUVBMkM5NjU1Njk0QTZFRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5o4eoh1MOninrf7GusXG1DX9n Dq8835RwvHH4eK5wOEIk7kIGmgLsinsLU4j3GTU5Omec3+um/NoySOHO91W1+Io3 XaZiMX0UHqu4gSkNb+gPUrfZkNirrj7RTGoYL9ftowwtFKdhkdWe0HYy2yOZJ9Ju gmDy+F7tDQJNHE9V3L9DztZtRz5+TCFckJgHWaZJi//3IapcRDw9cRpGyub3P1EX PRMJkkEzB3yhEjLSeHZ7Fxi7kMZad6cSq8/qEGt9jHUI+1KFTsS63ayokrXyzAP0 PNyqfVIgm5oT8/mJpzxFZbBLHXQUpEjSWiIrQdrxiXy2pGMoGBmOi/jBSwcPAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUzIpHqqdumjEqr7kF6iyWVWlKbu8wHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzNTMyMmUzODM5MmUzMTMy MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzEzOTM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA mFl+MA0GCSqGSIb3DQEBCwUAA4IBAQArDdMlmOI2FB9GRd/CJLEknR+g7ozmTAW0 GSf1k85OOv5nIR+oP4W1hSI9FlpyiH/fHCtGa2jctL6nHIeScvBVEKX99KpQCTgj BscPIHdJPwzN1EVckOviQ1Gn1AHdVA6pw56evDtq/4YqC1lQ2tLypdV1KZ9+6WTg 2A5NyVq7JzK8GXI7fsbsXmtbwW+W31p6BrPTfC986tVtUh2zUzwNs8PvWktYa9wI eSItVr2qsGqIeB8VVGOAXe4WkQpnd/5xwICIEZEiFIa5bhPQxqmdAy7rNi6FJw1o ARIIJIT38pgO1lu8DGleMm09y9f0ZMvdQi51geJxgREaCSxloEyF -----END CERTIFICATE-----Generated at Mon Jan 19 17:10:29 2026 by rpki-client