This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132372e302f32342d3234203d3e203335373933.roa File: 3135322e38392e3132372e302f32342d3234203d3e203335373933.roa (raw, json) Hash identifier: KJX21YbUxLsQliPTRLg42sGpQBxQZjKrxd0abclohBk= Subject key identifier: A7:54:4F:93:C8:FE:3F:7C:6E:F1:6E:8D:6F:8D:B3:8A:F3:1B:57:7C Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 4ABC3AA4FD26FDBDFDC725A4B5721561B6CF29C9 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132372e302f32342d3234203d3e203335373933.roa Signing time: Mon 05 Jan 2026 15:16:13 +0000 ROA not before: Mon 05 Jan 2026 15:11:13 +0000 ROA not after: Mon 04 Jan 2027 15:16:13 +0000 asID: 35793 IP address blocks: 152.89.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:bc:3a:a4:fd:26:fd:bd:fd:c7:25:a4:b5:72:15:61:b6:cf:29:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Jan 5 15:11:13 2026 GMT Not After : Jan 4 15:16:13 2027 GMT Subject: CN=A7544F93C8FE3F7C6EF16E8D6F8DB38AF31B577C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:94:9b:16:98:64:62:00:80:d2:97:72:7d:83: 22:64:cf:65:7b:06:6f:b2:ce:78:4b:f8:31:db:ad: 6b:82:80:fe:d5:c8:78:16:c0:61:5e:58:30:47:d9: 8e:4f:d6:03:5b:e2:65:cc:33:91:6c:7a:2c:8c:2c: da:34:33:34:1f:d9:89:49:dc:91:c6:00:42:31:26: f1:71:71:eb:a7:cf:12:4f:88:64:e0:3d:94:00:c2: 94:2b:8c:ea:9c:55:04:bc:20:3c:80:eb:6f:cb:d3: 2f:56:4a:11:b0:51:b4:91:1b:ea:24:32:ba:f1:2c: f0:9a:f7:e7:1b:90:6f:b5:65:e5:d8:10:bb:46:d1: 75:cb:9a:91:98:9c:51:46:56:9d:94:2e:fd:34:46: b9:76:8b:17:ee:0e:ef:d2:a6:06:ba:02:ec:9f:30: 25:e7:26:fa:0d:c3:36:9e:f4:45:cd:4f:db:57:c7: dd:ff:94:ee:76:96:87:78:aa:e3:79:98:74:35:01: 79:89:92:64:6b:a2:77:a6:cc:33:15:9e:c2:4e:eb: 36:b7:f3:d4:d9:be:5f:22:6f:f8:65:ec:5a:81:7f: 1d:d2:e2:80:ec:29:f6:b7:11:92:51:c7:bb:f0:11: c9:0e:2d:fc:84:b9:4a:6c:89:11:08:66:f3:5e:f0: 2c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:54:4F:93:C8:FE:3F:7C:6E:F1:6E:8D:6F:8D:B3:8A:F3:1B:57:7C X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132372e302f32342d3234203d3e203335373933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.127.0/24 Signature Algorithm: sha256WithRSAEncryption 57:55:aa:07:ef:e0:15:2e:c9:2a:56:60:77:c5:f4:df:2a:0b: 12:a6:54:65:62:64:45:1c:e3:b4:5a:bc:8a:3a:c5:93:6b:45: 2f:bc:aa:bd:b0:97:5e:ec:e6:39:83:56:37:c2:cc:44:aa:8f: ab:b5:f5:e9:79:18:fc:4c:99:bd:9c:99:18:7d:bf:b9:ee:01: 99:4f:0a:ff:c1:b1:77:0a:49:5b:3c:b6:a7:fe:50:9e:e1:61: 40:bd:37:ba:4a:c2:66:63:6f:76:af:5b:67:1b:57:61:cd:f7: 58:64:3d:02:15:9c:9a:e0:41:40:e8:83:4f:d3:3f:b0:aa:e6: bc:96:ed:2b:04:a1:35:03:fe:56:c8:ce:99:4b:8f:85:a8:d0: 6f:85:95:49:cf:07:01:75:cb:61:35:e1:bd:2c:e5:ea:e3:ed: 85:a5:1c:5c:46:79:07:95:47:54:12:01:69:34:f3:f7:1e:13: e9:1b:96:3a:5b:ed:01:1b:96:91:23:bf:53:ba:8c:fa:95:80: ef:0e:d2:52:96:5c:b0:ee:0f:ef:dc:be:4a:67:41:9a:71:29: c3:25:68:03:9d:1f:97:91:45:c1:a7:c3:53:0c:93:95:c8:b5: 4d:95:9d:2c:84:de:be:a1:0e:c0:7b:eb:7b:6e:08:a1:45:81: 8b:86:bf:45 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUSrw6pP0m/b39xyWktXIVYbbPKckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNjAxMDUxNTExMTNaFw0yNzAxMDQxNTE2MTNaMDMxMTAvBgNV BAMTKEE3NTQ0RjkzQzhGRTNGN0M2RUYxNkU4RDZGOERCMzhBRjMxQjU3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQlJsWmGRiAIDSl3J9gyJkz2V7 Bm+yznhL+DHbrWuCgP7VyHgWwGFeWDBH2Y5P1gNb4mXMM5FseiyMLNo0MzQf2YlJ 3JHGAEIxJvFxceunzxJPiGTgPZQAwpQrjOqcVQS8IDyA62/L0y9WShGwUbSRG+ok MrrxLPCa9+cbkG+1ZeXYELtG0XXLmpGYnFFGVp2ULv00Rrl2ixfuDu/Spga6Auyf MCXnJvoNwzae9EXNT9tXx93/lO52lod4quN5mHQ1AXmJkmRronemzDMVnsJO6za3 89TZvl8ib/hl7FqBfx3S4oDsKfa3EZJRx7vwEckOLfyEuUpsiREIZvNe8CzzAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUp1RPk8j+P3xu8W6Nb42zivMbV3wwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzNTMyMmUzODM5MmUzMTMy MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM1MzczOTMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA mFl/MA0GCSqGSIb3DQEBCwUAA4IBAQBXVaoH7+AVLskqVmB3xfTfKgsSplRlYmRF HOO0WryKOsWTa0UvvKq9sJde7OY5g1Y3wsxEqo+rtfXpeRj8TJm9nJkYfb+57gGZ Twr/wbF3CklbPLan/lCe4WFAvTe6SsJmY292r1tnG1dhzfdYZD0CFZya4EFA6INP 0z+wqua8lu0rBKE1A/5WyM6ZS4+FqNBvhZVJzwcBdcthNeG9LOXq4+2FpRxcRnkH lUdUEgFpNPP3HhPpG5Y6W+0BG5aRI79Tuoz6lYDvDtJSllyw7g/v3L5KZ0GacSnD JWgDnR+XkUXBp8NTDJOVyLVNlZ0shN6+oQ7Ae+t7bgihRYGLhr9F -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:29 2026 by rpki-client