This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39322e3234392e34362e302f32332d3234203d3e203437353833.roa File: 39322e3234392e34362e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: IE+tF6xCNpf3OkbGW3qVxKRmG33oiBiESAzuZ8515QE= Subject key identifier: 12:F0:00:50:0D:9F:86:40:73:AE:2B:E1:94:F5:40:B4:8E:D6:E8:97 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 30B7A3FE84A4D78C88A55C329370F5D1E80DA668 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39322e3234392e34362e302f32332d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:29 +0000 ROA not before: Mon 29 Dec 2025 09:45:29 +0000 ROA not after: Mon 28 Dec 2026 09:50:29 +0000 asID: 47583 IP address blocks: 92.249.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b7:a3:fe:84:a4:d7:8c:88:a5:5c:32:93:70:f5:d1:e8:0d:a6:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 29 09:45:29 2025 GMT Not After : Dec 28 09:50:29 2026 GMT Subject: CN=12F000500D9F864073AE2BE194F540B48ED6E897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:80:95:cf:7a:2b:8c:91:d2:5c:9e:86:8b: 7c:f7:bf:52:1f:52:e3:a0:6b:e9:06:18:df:54:5e: fc:e7:96:f8:81:01:18:ac:1d:32:46:65:0d:bb:14: b6:c5:f3:52:ce:1a:81:d4:64:a6:5e:1f:4b:c9:9e: cd:59:41:29:67:ee:05:05:6a:61:49:3c:5c:97:6c: b2:6b:d4:63:73:c1:91:b2:bb:0b:87:cf:71:ce:49: 12:33:bf:5a:d7:d0:35:45:ff:5a:32:24:77:ff:41: 29:8d:b4:00:da:39:aa:38:c5:33:33:2e:79:56:88: f8:ec:41:37:70:a4:ce:11:9c:b6:a6:95:0e:76:5c: b6:ae:31:df:a5:ac:45:61:a1:d1:19:c3:0b:35:cd: e6:7a:6f:86:4a:08:3e:b1:00:e8:16:8f:f1:c8:3d: bf:80:18:53:10:02:4b:1e:b6:19:f8:15:05:fa:21: a5:bb:2b:be:94:d9:a8:79:75:4e:30:62:4d:d7:fc: 4f:40:2c:f8:e2:54:b8:c1:eb:ed:fe:8b:65:51:75: 96:78:3a:59:bb:11:10:24:d6:9c:06:81:c2:a0:58: b4:7d:33:ae:01:6d:cc:1e:a1:28:31:97:e0:39:3d: 88:7f:bd:63:bf:e0:f6:49:79:f6:1a:54:f7:81:24: ad:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F0:00:50:0D:9F:86:40:73:AE:2B:E1:94:F5:40:B4:8E:D6:E8:97 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39322e3234392e34362e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.249.46.0/23 Signature Algorithm: sha256WithRSAEncryption 92:9c:7b:27:67:ea:14:4c:03:a6:c2:57:71:ca:41:a5:52:c9: 09:86:31:2a:2d:47:8b:37:02:d0:8d:5d:38:12:68:38:8c:3b: b4:ba:51:5f:0d:1b:01:fb:7c:b0:12:14:9a:2f:4e:d8:d2:53: 63:e1:c1:34:9c:b8:4f:e2:99:87:2e:a6:4e:dd:fc:4b:b6:3e: 25:e8:46:3b:0a:f2:1c:87:07:d1:f8:83:b6:cf:b6:0f:68:39: a7:eb:d2:63:d8:33:be:9d:b8:32:5b:0b:ac:20:d5:47:c6:eb: 4e:b8:32:32:cd:79:ec:7c:7f:1f:5d:d8:0a:8f:f0:d7:dc:7b: ac:bb:c9:c0:1e:8e:99:51:74:71:99:5c:f1:25:0f:8b:cc:2c: 9b:26:98:19:f4:55:99:f3:1b:69:b0:83:b3:db:54:37:e1:bb: 3f:44:59:08:43:ec:79:25:a0:bd:a0:e1:4c:b3:4e:66:05:1d: bc:78:be:a2:44:21:b6:e1:67:25:6a:0c:77:48:49:d3:33:ed: c1:a5:19:0c:a2:98:d5:6d:e7:7a:b4:06:a3:d7:81:ce:01:11: 59:7e:62:27:4d:35:31:c5:64:9b:73:ef:28:30:97:b8:73:04: e4:78:66:f1:91:97:9d:dc:8a:4c:20:24:bc:a6:12:2b:43:50: 39:12:90:77 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUMLej/oSk14yIpVwyk3D10egNpmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMjkwOTQ1MjlaFw0yNjEyMjgwOTUwMjlaMDMxMTAvBgNV BAMTKDEyRjAwMDUwMEQ5Rjg2NDA3M0FFMkJFMTk0RjU0MEI0OEVENkU4OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+5oCVz3orjJHSXJ6Gi3z3v1If UuOga+kGGN9UXvznlviBARisHTJGZQ27FLbF81LOGoHUZKZeH0vJns1ZQSln7gUF amFJPFyXbLJr1GNzwZGyuwuHz3HOSRIzv1rX0DVF/1oyJHf/QSmNtADaOao4xTMz LnlWiPjsQTdwpM4RnLamlQ52XLauMd+lrEVhodEZwws1zeZ6b4ZKCD6xAOgWj/HI Pb+AGFMQAksethn4FQX6IaW7K76U2ah5dU4wYk3X/E9ALPjiVLjB6+3+i2VRdZZ4 Olm7ERAk1pwGgcKgWLR9M64BbcweoSgxl+A5PYh/vWO/4PZJefYaVPeBJK3LAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUEvAAUA2fhkBzrivhlPVAtI7W6JcwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzkzMjJlMzIzNDM5MmUzNDM2 MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVz5 LjANBgkqhkiG9w0BAQsFAAOCAQEAkpx7J2fqFEwDpsJXccpBpVLJCYYxKi1HizcC 0I1dOBJoOIw7tLpRXw0bAft8sBIUmi9O2NJTY+HBNJy4T+KZhy6mTt38S7Y+JehG OwryHIcH0fiDts+2D2g5p+vSY9gzvp24MlsLrCDVR8brTrgyMs157Hx/H13YCo/w 19x7rLvJwB6OmVF0cZlc8SUPi8wsmyaYGfRVmfMbabCDs9tUN+G7P0RZCEPseSWg vaDhTLNOZgUdvHi+okQhtuFnJWoMd0hJ0zPtwaUZDKKY1W3nerQGo9eBzgERWX5i J001McVkm3PvKDCXuHME5Hhm8ZGXndyKTCAkvKYSK0NQORKQdw== -----END CERTIFICATE-----Generated at Mon Jan 19 20:02:23 2026 by rpki-client