This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa File: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (raw, json) Hash identifier: LFoy9nvq32ZdqPmOf9YSI6suXdwdYoUwrv21WI7Aj/Y= Subject key identifier: 89:EF:E6:B6:27:F7:7C:24:F5:38:CA:07:DA:73:7F:06:CB:7C:54:CF Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Certificate serial: 7EAE53FE3F4AFC3799C3A30CC9FC1244CFF2122C Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa Signing time: Mon 12 Jan 2026 13:55:33 +0000 ROA not before: Mon 12 Jan 2026 13:50:33 +0000 ROA not after: Mon 11 Jan 2027 13:55:33 +0000 asID: 44213 IP address blocks: 109.234.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ae:53:fe:3f:4a:fc:37:99:c3:a3:0c:c9:fc:12:44:cf:f2:12:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Validity Not Before: Jan 12 13:50:33 2026 GMT Not After : Jan 11 13:55:33 2027 GMT Subject: CN=89EFE6B627F77C24F538CA07DA737F06CB7C54CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:02:ca:7e:1e:ee:5b:84:29:0a:b2:99:2b:4d: eb:e7:0b:03:27:26:95:17:6d:79:3c:04:8a:c9:0a: f4:6a:d1:79:47:be:90:df:ab:c7:81:01:25:0b:6d: fd:02:04:89:d5:33:8e:d3:91:fe:5f:69:ba:80:9e: 8b:0a:d2:0c:c8:dc:fe:09:d4:94:e2:49:f5:af:ff: d5:62:c4:b3:d8:e3:2e:50:10:d7:c4:22:27:2f:67: 07:e3:4d:52:d0:be:40:49:ef:68:de:35:8e:c2:dd: f6:ee:bb:02:e6:50:1f:25:d5:1c:53:ab:db:14:e6: 4d:da:d0:28:35:db:ae:10:18:2c:83:b2:6c:ca:2e: df:e4:2d:d8:89:c9:71:fc:40:c3:60:f3:8b:35:65: 20:08:04:f0:c6:90:4c:8b:87:f8:e6:64:0c:90:ec: 17:6d:ab:1f:de:c5:54:06:d4:82:67:ff:87:51:12: e0:73:9d:78:d7:c5:5b:9f:e9:33:bc:d4:0d:de:d2: 86:3d:03:af:8f:7d:85:53:91:bc:62:3d:8e:30:85: 8f:98:f3:c4:8d:ed:bb:45:7c:ff:e6:2c:a1:18:a8: cd:94:af:2e:75:f3:f0:cc:d0:8e:6d:bc:e3:bf:17: 87:5d:10:46:5f:9e:44:f1:84:3e:4c:85:48:0c:28: 5d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EF:E6:B6:27:F7:7C:24:F5:38:CA:07:DA:73:7F:06:CB:7C:54:CF X509v3 Authority Key Identifier: keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.234.213.0/24 Signature Algorithm: sha256WithRSAEncryption 40:d8:f9:6b:b8:f5:ab:af:2c:23:1f:a2:07:b2:15:ce:c3:ca: c5:78:73:1f:ae:1d:03:0e:a1:d3:c7:75:91:64:63:6d:30:55: ea:37:ec:2f:23:54:1f:1d:cf:ee:a5:69:47:87:cc:6e:38:f4: 92:11:2c:ba:0c:64:d4:f0:6d:4d:28:c1:45:e3:68:d6:31:0b: b8:68:05:ba:2d:c9:08:f3:2a:de:be:3b:22:bd:7f:5f:79:09: bb:f4:03:4c:d4:b8:e9:f3:7a:a1:4b:63:3b:d4:1e:c2:b1:94: 67:a7:7f:eb:44:6e:d8:4a:f7:d3:2d:6e:a0:d2:5c:97:5e:f0: 1a:e3:04:00:28:c9:b2:bd:62:88:4e:55:d2:b2:76:61:0c:3e: 65:e6:04:9f:34:b1:3b:0c:ba:0c:46:33:43:62:6a:e7:b0:e6: 74:ec:82:61:6a:92:d0:9b:0d:da:84:d8:d3:a6:5f:9f:5e:50: 78:c6:1f:6d:91:af:5a:32:0d:bc:ba:d7:64:9c:8c:30:02:04: 7e:a3:a6:1e:b4:71:6e:fa:52:4a:24:11:9b:70:e6:52:51:80: 7e:8e:ed:65:f9:56:e9:dc:22:04:cb:46:c6:68:08:68:9e:3d: 2a:9a:93:2a:b8:d8:66:ad:54:d9:09:13:5f:c3:1c:47:fa:c8: a6:7f:9c:94 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUfq5T/j9K/DeZw6MMyfwSRM/yEiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk MTZjZWVkMzAeFw0yNjAxMTIxMzUwMzNaFw0yNzAxMTExMzU1MzNaMDMxMTAvBgNV BAMTKDg5RUZFNkI2MjdGNzdDMjRGNTM4Q0EwN0RBNzM3RjA2Q0I3QzU0Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDAsp+Hu5bhCkKspkrTevnCwMn JpUXbXk8BIrJCvRq0XlHvpDfq8eBASULbf0CBInVM47Tkf5fabqAnosK0gzI3P4J 1JTiSfWv/9VixLPY4y5QENfEIicvZwfjTVLQvkBJ72jeNY7C3fbuuwLmUB8l1RxT q9sU5k3a0Cg1264QGCyDsmzKLt/kLdiJyXH8QMNg84s1ZSAIBPDGkEyLh/jmZAyQ 7Bdtqx/exVQG1IJn/4dREuBznXjXxVuf6TO81A3e0oY9A6+PfYVTkbxiPY4whY+Y 88SN7btFfP/mLKEYqM2Ury518/DM0I5tvOO/F4ddEEZfnkTxhD5MhUgMKF3DAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUie/mtif3fCT1OMoH2nN/Bst8VM8wHwYDVR0j BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0 NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G czd0TS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzEzMDM5MmUzMjMzMzQyZTMy MzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzQzMjMxMzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABt6tUwDQYJKoZIhvcNAQELBQADggEBAEDY+Wu49auvLCMfogeyFc7DysV4cx+u HQMOodPHdZFkY20wVeo37C8jVB8dz+6laUeHzG449JIRLLoMZNTwbU0owUXjaNYx C7hoBbotyQjzKt6+OyK9f195Cbv0A0zUuOnzeqFLYzvUHsKxlGenf+tEbthK99Mt bqDSXJde8BrjBAAoybK9YohOVdKydmEMPmXmBJ80sTsMugxGM0Niauew5nTsgmFq ktCbDdqE2NOmX59eUHjGH22Rr1oyDby612ScjDACBH6jph60cW76UkokEZtw5lJR gH6O7WX5VuncIgTLRsZoCGiePSqakyq42GatVNkJE1/DHEf6yKZ/nJQ= -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:42 2026 by rpki-client