This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139352e302f32342d3234203d3e203132383236.roa File: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (raw, json) Hash identifier: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo= Subject key identifier: 97:6E:85:44:32:FF:EC:D8:8E:1F:9B:3A:E3:71:9C:15:F6:E6:57:F3 Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Certificate serial: 4017CA64E09485C53A8C1B3FF7ECE2E2757480D1 Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139352e302f32342d3234203d3e203132383236.roa Signing time: Mon 12 Jan 2026 22:55:33 +0000 ROA not before: Mon 12 Jan 2026 22:50:33 +0000 ROA not after: Mon 11 Jan 2027 22:55:33 +0000 asID: 12826 IP address blocks: 194.31.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:17:ca:64:e0:94:85:c5:3a:8c:1b:3f:f7:ec:e2:e2:75:74:80:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Validity Not Before: Jan 12 22:50:33 2026 GMT Not After : Jan 11 22:55:33 2027 GMT Subject: CN=976E854432FFECD88E1F9B3AE3719C15F6E657F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:59:f0:44:4c:92:da:dd:95:f5:3e:f2:f6:e2: 4f:7c:ec:58:5d:b9:5a:52:14:a6:6d:73:4a:48:ef: 92:bc:49:87:1d:71:41:19:f2:f9:43:9e:f0:51:25: f3:c5:64:ac:0c:ad:5f:c8:93:e8:e7:98:87:af:e7: 67:55:94:21:d6:4a:fa:ea:89:c7:f2:64:47:9c:5a: ec:f9:a9:c7:50:d1:2a:12:36:8a:99:3e:44:9e:c6: 85:08:47:af:35:5f:f4:a0:cd:b4:2a:92:21:fb:18: 00:71:d4:92:d5:d4:ef:d6:5e:9a:67:38:80:5a:d4: 80:31:a5:87:15:42:a4:78:53:bb:09:fc:b0:b1:88: 69:28:f2:14:f4:dc:27:c3:1a:fd:2c:f5:67:3d:bf: c8:69:7b:dc:e1:c7:aa:e4:a3:e2:97:52:66:15:4d: 9b:22:4b:c9:f2:32:d3:b8:e3:05:35:2c:f5:71:06: 32:11:d3:ef:c3:4e:76:f0:7d:03:fb:ed:ef:f1:80: b0:99:58:67:0d:aa:61:45:16:94:cc:63:c8:e8:64: b0:ab:c8:be:67:88:a6:a5:a3:d2:f8:49:ac:9a:de: 31:9f:7e:a5:a9:44:2c:64:78:1f:3c:8a:46:d9:8b: fc:70:3e:f2:54:b8:5c:05:0f:db:e6:f9:4b:8f:b5: b5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6E:85:44:32:FF:EC:D8:8E:1F:9B:3A:E3:71:9C:15:F6:E6:57:F3 X509v3 Authority Key Identifier: keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139352e302f32342d3234203d3e203132383236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.195.0/24 Signature Algorithm: sha256WithRSAEncryption 05:c3:da:d6:67:3c:6d:fa:a0:9f:05:8a:df:33:14:58:1c:8a: 83:41:31:5f:6e:bb:ed:4c:59:4e:db:42:ac:68:84:e5:3b:e4: 99:b7:d5:7a:2a:b1:87:96:f5:2e:b3:f1:e0:f3:70:d3:3a:84: d8:07:93:3a:93:76:88:91:6a:85:4f:a7:bf:2e:20:ba:d2:33: d7:98:ac:d9:ab:62:23:8a:a8:59:f3:e8:be:75:18:a0:7c:69: 44:01:6a:8d:bc:63:29:50:61:fa:82:14:83:47:60:6d:ae:19: 15:8a:2b:3f:90:b5:71:88:ef:24:38:2e:8d:3d:4e:da:90:ec: df:5b:ab:0d:18:f6:4c:7c:b8:fc:cf:d6:41:b4:57:5c:69:8b: 8b:11:ad:09:8a:ab:67:8d:d3:fd:53:ab:b0:f8:4a:e7:46:ce: 13:73:ca:1a:73:63:88:55:b6:28:09:d5:64:0a:23:b9:9b:f0: a1:3d:bc:02:51:07:c8:a2:28:84:87:fe:e2:e5:fb:3b:cc:ef: a4:56:b4:bb:33:a4:76:f1:44:33:60:79:ee:7c:9b:ad:9b:7c: 6b:12:19:88:9f:87:0f:f2:9f:bc:ea:c7:12:7c:55:21:df:81: e4:e5:39:3f:aa:13:47:8d:8c:49:be:73:d1:30:9c:29:fc:5a: 4b:f3:b1:92 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQBfKZOCUhcU6jBs/9+zi4nV0gNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz NTRmNDVjNjAeFw0yNjAxMTIyMjUwMzNaFw0yNzAxMTEyMjU1MzNaMDMxMTAvBgNV BAMTKDk3NkU4NTQ0MzJGRkVDRDg4RTFGOUIzQUUzNzE5QzE1RjZFNjU3RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfWfBETJLa3ZX1PvL24k987Fhd uVpSFKZtc0pI75K8SYcdcUEZ8vlDnvBRJfPFZKwMrV/Ik+jnmIev52dVlCHWSvrq icfyZEecWuz5qcdQ0SoSNoqZPkSexoUIR681X/SgzbQqkiH7GABx1JLV1O/WXppn OIBa1IAxpYcVQqR4U7sJ/LCxiGko8hT03CfDGv0s9Wc9v8hpe9zhx6rko+KXUmYV TZsiS8nyMtO44wU1LPVxBjIR0+/DTnbwfQP77e/xgLCZWGcNqmFFFpTMY8joZLCr yL5niKalo9L4Saya3jGffqWpRCxkeB88ikbZi/xwPvJUuFwFD9vm+UuPtbUTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUl26FRDL/7NiOH5s643GcFfbmV/MwHwYDVR0j BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW UFJjWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzEzOTM0MmUzMzMxMmUzMTM5 MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMyMzgzMjM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA wh/DMA0GCSqGSIb3DQEBCwUAA4IBAQAFw9rWZzxt+qCfBYrfMxRYHIqDQTFfbrvt TFlO20KsaITlO+SZt9V6KrGHlvUus/Hg83DTOoTYB5M6k3aIkWqFT6e/LiC60jPX mKzZq2IjiqhZ8+i+dRigfGlEAWqNvGMpUGH6ghSDR2BtrhkViis/kLVxiO8kOC6N PU7akOzfW6sNGPZMfLj8z9ZBtFdcaYuLEa0JiqtnjdP9U6uw+ErnRs4Tc8oac2OI VbYoCdVkCiO5m/ChPbwCUQfIoiiEh/7i5fs7zO+kVrS7M6R28UQzYHnufJutm3xr EhmIn4cP8p+86scSfFUh34Hk5Tk/qhNHjYxJvnPRMJwp/FpL87GS -----END CERTIFICATE-----Generated at Sun Jan 25 20:13:18 2026 by rpki-client