This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39322e3234392e34342e302f32332d3234203d3e203437353833.roa File: 39322e3234392e34342e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: WCW9r/aZr6fZ2zvueeKeE6jv8M3tFpAFDV1QWOY/tVY= Subject key identifier: 40:00:55:8D:5C:BA:BD:C4:04:7D:F9:02:97:2B:75:DA:56:DE:9C:9F Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 5B382C68860241382C97D7688281DEFF0BC28D5A Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39322e3234392e34342e302f32332d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:29 +0000 ROA not before: Mon 29 Dec 2025 09:45:29 +0000 ROA not after: Mon 28 Dec 2026 09:50:29 +0000 asID: 47583 IP address blocks: 92.249.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:38:2c:68:86:02:41:38:2c:97:d7:68:82:81:de:ff:0b:c2:8d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 29 09:45:29 2025 GMT Not After : Dec 28 09:50:29 2026 GMT Subject: CN=4000558D5CBABDC4047DF902972B75DA56DE9C9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:1f:9b:9f:7d:79:2b:98:c4:15:cf:30:dc:35: 0b:ee:88:62:0e:99:df:f6:da:e1:6c:65:bc:97:90: 46:d1:b4:63:d0:95:9b:36:1d:78:11:fa:7d:4d:03: a0:f7:49:8f:89:26:42:cd:2a:f3:68:9c:b9:34:38: 38:1a:8e:b8:1c:f1:74:49:28:b1:1e:27:c6:73:63: e5:cb:8d:2c:40:3d:93:36:38:c1:27:ac:55:92:c7: 86:d3:7d:69:10:7f:e3:ba:5c:7c:9b:09:5e:b0:dc: ea:8e:a3:fd:fe:78:6c:5c:9d:ed:cd:34:21:06:73: 46:a8:1a:f0:3e:8b:9d:f4:83:df:f0:83:34:2b:fc: 07:a2:82:29:a5:fa:c9:c9:29:f8:cd:7b:40:d3:fd: b9:c7:9f:47:32:a5:e7:89:f8:83:bf:73:7f:d4:a9: 35:f6:29:79:03:c1:d7:72:6e:64:3c:32:0b:4d:33: 5e:bf:49:14:a7:56:77:1b:d8:13:92:03:2a:4d:2e: fc:18:1d:22:58:f3:6b:f9:9f:71:66:d5:02:ff:78: 2a:e1:a1:f9:cb:85:5d:82:eb:c0:6c:3e:63:e5:7c: 4d:ec:9c:be:b0:dd:58:d2:ac:bd:45:5b:2e:5d:76: fb:64:71:09:a6:a9:59:33:06:8a:fa:59:80:00:2e: 3c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:00:55:8D:5C:BA:BD:C4:04:7D:F9:02:97:2B:75:DA:56:DE:9C:9F X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39322e3234392e34342e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.249.44.0/23 Signature Algorithm: sha256WithRSAEncryption 09:d8:87:c7:5a:e5:de:39:e4:48:30:cf:45:0e:74:96:a4:6c: c9:73:bf:b4:29:43:aa:a6:69:cc:81:d7:eb:40:f6:8e:88:e9: c1:5e:15:56:35:e8:93:f8:0f:92:49:ef:bd:8a:cb:72:48:37: 57:8a:b2:76:1f:2f:1c:81:23:04:2f:a3:f0:c3:ac:c2:bc:f8: 31:0e:c5:14:43:2f:a7:e3:ed:84:44:1c:78:4e:91:f9:58:b8: 38:54:5e:ad:97:d5:5f:7f:b8:34:a7:47:b9:25:03:66:9c:6e: 5b:10:7e:a2:85:86:92:fc:6e:bd:c0:bc:36:80:3a:5d:bf:20: 56:27:4b:72:58:3f:e5:1a:26:c1:39:df:e7:ab:d6:0f:84:00: 03:34:02:ad:f0:ba:dc:3a:1c:f6:10:f2:c1:23:13:13:82:43: b1:30:bb:a2:81:9a:09:3b:10:a6:bd:9f:fe:c0:60:62:0f:39: 4a:fe:8d:82:bd:79:3c:d3:19:95:2c:93:8b:23:0b:ac:4d:ab: 75:8f:7f:b2:e3:a4:54:79:9e:fd:1a:2f:7d:95:44:c4:5d:19: 51:8c:d7:73:70:7a:0c:37:f1:ff:01:90:c0:f7:06:ab:00:98: ab:3d:4b:ee:02:d8:d5:50:ef:e7:6f:d9:f4:fd:26:ec:c2:e4: e8:3b:e1:4f -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUWzgsaIYCQTgsl9dogoHe/wvCjVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMjkwOTQ1MjlaFw0yNjEyMjgwOTUwMjlaMDMxMTAvBgNV BAMTKDQwMDA1NThENUNCQUJEQzQwNDdERjkwMjk3MkI3NURBNTZERTlDOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxH5uffXkrmMQVzzDcNQvuiGIO md/22uFsZbyXkEbRtGPQlZs2HXgR+n1NA6D3SY+JJkLNKvNonLk0ODgajrgc8XRJ KLEeJ8ZzY+XLjSxAPZM2OMEnrFWSx4bTfWkQf+O6XHybCV6w3OqOo/3+eGxcne3N NCEGc0aoGvA+i530g9/wgzQr/Aeigiml+snJKfjNe0DT/bnHn0cypeeJ+IO/c3/U qTX2KXkDwddybmQ8MgtNM16/SRSnVncb2BOSAypNLvwYHSJY82v5n3Fm1QL/eCrh ofnLhV2C68BsPmPlfE3snL6w3VjSrL1FWy5ddvtkcQmmqVkzBor6WYAALjzRAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUQABVjVy6vcQEffkClyt12lbenJ8wHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzkzMjJlMzIzNDM5MmUzNDM0 MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVz5 LDANBgkqhkiG9w0BAQsFAAOCAQEACdiHx1rl3jnkSDDPRQ50lqRsyXO/tClDqqZp zIHX60D2jojpwV4VVjXok/gPkknvvYrLckg3V4qydh8vHIEjBC+j8MOswrz4MQ7F FEMvp+PthEQceE6R+Vi4OFRerZfVX3+4NKdHuSUDZpxuWxB+ooWGkvxuvcC8NoA6 Xb8gVidLclg/5RomwTnf56vWD4QAAzQCrfC63Doc9hDywSMTE4JDsTC7ooGaCTsQ pr2f/sBgYg85Sv6Ngr15PNMZlSyTiyMLrE2rdY9/suOkVHme/RovfZVExF0ZUYzX c3B6DDfx/wGQwPcGqwCYqz1L7gLY1VDv52/Z9P0m7MLk6DvhTw== -----END CERTIFICATE-----Generated at Mon Jan 19 20:02:24 2026 by rpki-client