This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3135302e302f32342d3234203d3e203437353833.roa File: 3139342e33312e3135302e302f32342d3234203d3e203437353833.roa (raw, json) Hash identifier: KBFnn2fG1UjMpMJXoAh9vZh0QXyTRsAWhTb4iRDiNPI= Subject key identifier: EF:89:A7:4D:DB:06:81:8C:3E:27:F5:FD:6F:86:06:24:E1:0D:19:61 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 68592D1C8CD2395B6B1FE18C6C8773E0DDBAFDC5 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3135302e302f32342d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:24 +0000 ROA not before: Mon 29 Dec 2025 09:45:24 +0000 ROA not after: Mon 28 Dec 2026 09:50:24 +0000 asID: 47583 IP address blocks: 194.31.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:59:2d:1c:8c:d2:39:5b:6b:1f:e1:8c:6c:87:73:e0:dd:ba:fd:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 29 09:45:24 2025 GMT Not After : Dec 28 09:50:24 2026 GMT Subject: CN=EF89A74DDB06818C3E27F5FD6F860624E10D1961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:70:f6:46:05:ee:25:6e:eb:96:57:fb:c4:d8: 1c:66:67:c4:72:d2:82:34:50:b6:75:f6:15:79:6b: ac:20:36:a4:a2:1b:84:4b:de:bc:f7:e6:46:f6:22: 74:28:3a:11:49:63:d2:b4:4e:d8:d9:f7:79:b3:93: 6d:20:89:47:de:a4:9e:44:ad:80:c5:ba:a0:d2:e3: cf:a0:c6:5c:e3:6b:5d:64:36:8f:c4:dc:c3:ad:c8: 32:5a:ba:d1:ea:19:8e:e7:76:71:60:0e:e8:74:a3: e9:d2:1a:51:ba:02:c7:96:3f:70:22:0e:c4:b9:10: 28:43:c5:66:98:b3:f6:84:41:58:1f:63:9c:57:18: 1a:89:c2:fa:ec:e6:43:ab:1d:77:f2:de:d8:e6:30: 6f:f3:93:1c:8b:cc:96:75:2f:32:01:71:bc:35:ea: 5a:c1:e5:ec:31:24:be:c2:b8:8c:44:df:45:db:6b: 82:3c:72:58:f2:e4:d7:90:d1:4b:b6:bc:e6:71:99: 52:b3:b5:77:9a:5c:2c:44:51:a5:13:a6:a1:6f:42: c6:c7:c7:a9:6b:a3:5e:06:27:48:07:42:c3:fb:a2: a4:58:88:b7:61:42:2e:f9:08:7c:95:4e:f1:1e:43: d5:00:5f:d8:d5:c0:24:c8:93:b0:2f:d1:61:be:5f: 47:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:89:A7:4D:DB:06:81:8C:3E:27:F5:FD:6F:86:06:24:E1:0D:19:61 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3135302e302f32342d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.150.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:63:5c:ed:01:c4:c6:1c:19:20:f3:00:c4:fc:2f:0b:36:28: 03:93:23:ec:93:a4:74:c2:0b:cc:b4:a5:55:69:c1:5d:37:04: b1:e5:d9:eb:18:f0:17:07:23:1d:1a:12:10:65:72:fe:16:9b: 30:0a:15:e1:7c:59:3e:e5:1f:b2:f6:a9:ed:fb:2c:e9:7f:83: 2d:14:a3:62:60:cd:22:fd:d5:21:e2:48:90:45:f1:80:bc:cb: c5:24:8a:1f:cd:d7:05:9e:1e:cc:0a:c3:32:f6:b2:77:43:b1: af:da:db:12:fd:8e:81:d7:d4:5b:68:73:e7:2c:a4:88:9a:38: 81:8a:4a:aa:20:60:d2:ca:a2:0c:f3:6e:0a:a0:e0:3b:81:dc: b3:bd:2b:c5:f0:95:de:61:80:ca:53:fb:80:2d:a3:7a:df:87: b8:36:29:be:09:01:d7:78:9f:29:9b:45:70:59:8a:95:f8:7c: b8:0b:54:75:c0:a4:7f:1f:13:78:4b:98:95:d7:4b:2e:34:b5: 36:b1:34:f4:42:10:96:a6:89:60:ed:fb:76:af:13:01:ff:b4: c2:7b:d1:bb:67:0c:9d:09:22:0a:84:d1:e9:97:f6:cc:e4:c3: b2:ed:dc:39:43:05:50:5b:c8:36:1d:9f:30:26:57:ae:d0:ad: b9:d4:85:20 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUaFktHIzSOVtrH+GMbIdz4N26/cUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMjkwOTQ1MjRaFw0yNjEyMjgwOTUwMjRaMDMxMTAvBgNV BAMTKEVGODlBNzREREIwNjgxOEMzRTI3RjVGRDZGODYwNjI0RTEwRDE5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDicPZGBe4lbuuWV/vE2BxmZ8Ry 0oI0ULZ19hV5a6wgNqSiG4RL3rz35kb2InQoOhFJY9K0TtjZ93mzk20giUfepJ5E rYDFuqDS48+gxlzja11kNo/E3MOtyDJautHqGY7ndnFgDuh0o+nSGlG6AseWP3Ai DsS5EChDxWaYs/aEQVgfY5xXGBqJwvrs5kOrHXfy3tjmMG/zkxyLzJZ1LzIBcbw1 6lrB5ewxJL7CuIxE30Xba4I8cljy5NeQ0Uu2vOZxmVKztXeaXCxEUaUTpqFvQsbH x6lro14GJ0gHQsP7oqRYiLdhQi75CHyVTvEeQ9UAX9jVwCTIk7Av0WG+X0eRAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU74mnTdsGgYw+J/X9b4YGJOENGWEwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzOTM0MmUzMzMxMmUzMTM1 MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA wh+WMA0GCSqGSIb3DQEBCwUAA4IBAQCNY1ztAcTGHBkg8wDE/C8LNigDkyPsk6R0 wgvMtKVVacFdNwSx5dnrGPAXByMdGhIQZXL+FpswChXhfFk+5R+y9qnt+yzpf4Mt FKNiYM0i/dUh4kiQRfGAvMvFJIofzdcFnh7MCsMy9rJ3Q7Gv2tsS/Y6B19RbaHPn LKSImjiBikqqIGDSyqIM824KoOA7gdyzvSvF8JXeYYDKU/uALaN634e4Nim+CQHX eJ8pm0VwWYqV+Hy4C1R1wKR/HxN4S5iV10suNLU2sTT0QhCWpolg7ft2rxMB/7TC e9G7ZwydCSIKhNHpl/bM5MOy7dw5QwVQW8g2HZ8wJleu0K251IUg -----END CERTIFICATE-----Generated at Mon Jan 19 20:02:37 2026 by rpki-client