This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32322e3134342e302f32332d3234203d3e20323034313730.roa File: 3139332e32322e3134342e302f32332d3234203d3e20323034313730.roa (raw, json) Hash identifier: 1hhgUuNQxhn/AYbM6q0KMGXWBtCCSjUL5xIuu+dERWc= Subject key identifier: A6:C7:FC:65:E6:0A:E3:F5:6C:3E:CD:3C:4A:F5:AE:7C:B8:1F:9F:FB Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 791AC4F9BB4F9FA304E41C74E94B9C476A0066F7 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32322e3134342e302f32332d3234203d3e20323034313730.roa Signing time: Mon 29 Dec 2025 09:50:29 +0000 ROA not before: Mon 29 Dec 2025 09:45:29 +0000 ROA not after: Mon 28 Dec 2026 09:50:29 +0000 asID: 204170 IP address blocks: 193.22.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1a:c4:f9:bb:4f:9f:a3:04:e4:1c:74:e9:4b:9c:47:6a:00:66:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 29 09:45:29 2025 GMT Not After : Dec 28 09:50:29 2026 GMT Subject: CN=A6C7FC65E60AE3F56C3ECD3C4AF5AE7CB81F9FFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:94:f6:7e:c9:e8:b9:f6:4a:03:da:ab:eb:65: 98:18:68:d4:29:d6:99:4e:fc:61:13:25:4e:1e:3f: 3c:2a:bc:6e:5e:6c:08:69:49:fa:60:a3:de:e5:aa: 26:b5:4c:ce:dc:94:d5:51:19:5c:1c:8d:ba:28:54: 25:af:e4:e1:90:a3:28:d2:2e:c8:e0:23:81:6a:d9: 94:ca:a2:ed:0c:e4:94:a1:18:ba:81:d6:80:af:ba: c2:e4:fb:1c:e9:0a:9a:d1:e0:cb:32:d4:fa:67:74: 18:12:c6:03:67:4f:d6:c8:2b:14:24:0d:15:42:66: 9e:1a:be:17:d8:0e:a1:1c:57:5f:b2:e0:ba:d4:42: e2:bc:df:83:df:86:93:ba:b3:d2:2f:37:63:19:6b: 01:ee:99:8f:a6:b3:8d:ac:d2:4a:b8:b7:03:37:94: bc:bc:49:7c:be:07:5f:bb:70:96:61:de:56:8e:51: 58:cc:94:f2:11:3a:1c:5f:b6:68:c9:af:aa:1f:da: 5f:c9:5c:88:95:41:f8:ef:44:65:42:2f:d6:02:9a: 79:d5:ba:e7:e9:fa:bd:ca:a6:ae:ca:54:75:71:c4: e2:39:6d:d4:fe:dc:80:ec:74:8a:f7:1d:cb:e1:07: 02:97:b4:a4:d8:2d:76:81:bb:ae:10:32:76:1b:41: b4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C7:FC:65:E6:0A:E3:F5:6C:3E:CD:3C:4A:F5:AE:7C:B8:1F:9F:FB X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32322e3134342e302f32332d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.144.0/23 Signature Algorithm: sha256WithRSAEncryption 03:ee:6a:cf:d1:7d:a0:83:73:69:27:c2:3f:ae:8d:ed:81:c4: 50:9d:47:51:69:cc:bf:01:11:38:99:27:38:26:1d:15:e9:f3: b5:8a:2c:b2:98:52:ca:ec:a5:b3:96:9e:76:4f:88:6d:1e:04: 1b:74:9d:ca:12:a4:c9:07:70:20:d7:29:41:7d:92:9f:78:96: 05:31:57:cd:f1:0a:f7:ca:2e:22:d2:aa:eb:39:e1:1e:5d:bd: 1d:2a:8b:d0:88:ec:69:e4:91:e9:d1:1b:ac:2e:b1:fd:1f:42: 43:93:cc:55:b4:0f:8e:66:df:a4:8c:12:a1:ff:4b:c6:6a:8f: 87:db:f6:3c:ff:50:1b:34:12:df:4b:9b:b1:58:25:2c:ae:3b: 63:40:f9:08:56:b2:fe:ac:a5:20:8c:ef:46:4a:1d:36:23:df: 50:81:dc:cf:76:29:f3:e3:27:94:0d:9d:fb:06:dc:50:89:e6: d3:98:48:96:ab:e3:c5:a4:c9:09:93:17:8b:7c:24:2e:e4:4d: c5:d3:eb:2d:26:0c:0e:15:2f:79:52:5b:44:86:0a:8a:8b:26: 71:e6:a1:27:c3:64:ad:1c:bb:a8:bd:61:4e:a2:16:d3:52:ba: 1d:f8:e1:3b:22:d5:be:65:bf:f8:65:5b:2c:8f:0e:9d:97:63: 4c:5d:ea:9d -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUeRrE+btPn6ME5Bx06UucR2oAZvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMjkwOTQ1MjlaFw0yNjEyMjgwOTUwMjlaMDMxMTAvBgNV BAMTKEE2QzdGQzY1RTYwQUUzRjU2QzNFQ0QzQzRBRjVBRTdDQjgxRjlGRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQlPZ+yei59koD2qvrZZgYaNQp 1plO/GETJU4ePzwqvG5ebAhpSfpgo97lqia1TM7clNVRGVwcjbooVCWv5OGQoyjS LsjgI4Fq2ZTKou0M5JShGLqB1oCvusLk+xzpCprR4Msy1PpndBgSxgNnT9bIKxQk DRVCZp4avhfYDqEcV1+y4LrUQuK834PfhpO6s9IvN2MZawHumY+ms42s0kq4twM3 lLy8SXy+B1+7cJZh3laOUVjMlPIROhxftmjJr6of2l/JXIiVQfjvRGVCL9YCmnnV uufp+r3Kpq7KVHVxxOI5bdT+3IDsdIr3HcvhBwKXtKTYLXaBu64QMnYbQbR3AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUpsf8ZeYK4/VsPs08SvWufLgfn/swHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzOTMzMmUzMjMyMmUzMTM0 MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjMwMzQzMTM3MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHBFpAwDQYJKoZIhvcNAQELBQADggEBAAPuas/RfaCDc2knwj+uje2BxFCdR1Fp zL8BETiZJzgmHRXp87WKLLKYUsrspbOWnnZPiG0eBBt0ncoSpMkHcCDXKUF9kp94 lgUxV83xCvfKLiLSqus54R5dvR0qi9CI7GnkkenRG6wusf0fQkOTzFW0D45m36SM EqH/S8Zqj4fb9jz/UBs0Et9Lm7FYJSyuO2NA+QhWsv6spSCM70ZKHTYj31CB3M92 KfPjJ5QNnfsG3FCJ5tOYSJar48WkyQmTF4t8JC7kTcXT6y0mDA4VL3lSW0SGCoqL JnHmoSfDZK0cu6i9YU6iFtNSuh344Tsi1b5lv/hlWyyPDp2XY0xd6p0= -----END CERTIFICATE-----Generated at Mon Jan 19 20:02:36 2026 by rpki-client