This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139352e302f32342d3234203d3e203334393933.roa File: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (raw, json) Hash identifier: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY= Subject key identifier: B0:C0:4C:94:C5:F8:71:19:08:B1:28:FD:72:C3:A9:71:4D:F3:54:32 Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Certificate serial: 731FC85978FA07D415287069552FAA6A5B50A7AA Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139352e302f32342d3234203d3e203334393933.roa Signing time: Mon 12 Jan 2026 22:55:33 +0000 ROA not before: Mon 12 Jan 2026 22:50:33 +0000 ROA not after: Mon 11 Jan 2027 22:55:33 +0000 asID: 34993 IP address blocks: 194.31.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:1f:c8:59:78:fa:07:d4:15:28:70:69:55:2f:aa:6a:5b:50:a7:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Validity Not Before: Jan 12 22:50:33 2026 GMT Not After : Jan 11 22:55:33 2027 GMT Subject: CN=B0C04C94C5F8711908B128FD72C3A9714DF35432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b2:e3:e9:33:ee:d5:3c:ae:20:e8:37:cb:df: 9c:ad:52:5e:87:ff:cd:af:62:56:18:9e:72:46:13: 91:ab:70:fa:36:ab:ba:21:a6:16:ad:08:b8:85:1d: af:ed:77:e7:96:50:3c:91:ac:51:a4:1f:31:87:de: 7f:cc:01:f3:38:93:47:cf:99:0d:a5:5a:e3:72:d6: 40:f2:3b:ca:04:45:ac:c5:d3:35:a7:fe:a5:6d:c3: 9f:1a:78:6f:b5:08:d5:2d:46:82:b1:63:ed:a4:4b: 2c:dd:8b:36:97:ec:cf:60:f5:b1:21:e6:d9:72:cc: 4b:26:8f:ac:d1:c3:d4:a6:3d:70:32:f7:0d:3f:8a: e2:55:6e:9a:5a:32:31:d4:11:a2:6e:a9:b7:b9:83: 9b:da:51:68:45:a6:0e:ca:8e:20:cf:a7:1a:3e:d4: 42:ac:5d:78:89:14:33:e1:1c:c9:4a:1d:e6:b4:fc: 69:32:34:7d:98:65:71:29:0d:cb:33:3a:50:44:f9: fe:cf:75:ed:5e:24:e1:54:5c:5c:49:38:df:4f:87: ea:1c:bb:84:1e:4c:a6:a3:2f:7a:e6:e1:3f:2a:e5: 41:ea:55:2a:84:d4:a3:24:76:e9:73:e6:d8:45:db: 62:08:46:24:2e:6a:c9:98:cf:14:97:ad:71:d5:1a: c5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C0:4C:94:C5:F8:71:19:08:B1:28:FD:72:C3:A9:71:4D:F3:54:32 X509v3 Authority Key Identifier: keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139352e302f32342d3234203d3e203334393933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.195.0/24 Signature Algorithm: sha256WithRSAEncryption aa:a5:73:ba:54:d1:25:93:bb:87:66:a1:00:ae:17:80:03:d1: c8:78:f5:17:a0:94:81:d4:c4:26:e0:03:db:92:23:53:87:ef: dd:82:ba:dd:b7:ea:ef:b8:12:54:31:4f:17:f2:62:e9:19:27: a3:a9:85:1b:93:b6:68:1a:d6:09:f3:2d:1c:87:ae:ee:c3:12: 60:6a:71:01:93:1a:ea:33:f7:6a:f4:d3:f1:79:f7:21:ff:c9: a0:fd:bd:76:5f:ba:07:23:75:ec:3b:21:ba:e7:21:90:53:5a: 42:17:c5:02:2e:b0:38:96:64:0b:a8:e3:2f:e0:d6:95:25:8d: 19:2f:4d:ee:4a:cc:34:4d:57:e2:c7:eb:d9:9e:cb:28:44:33: 03:04:91:3c:3b:c3:b1:2e:2d:83:f2:1c:89:e8:a8:9c:a0:22: f9:48:01:e6:eb:32:f1:1e:50:93:d1:15:07:ea:45:7f:d8:6f: e5:85:be:e7:15:12:5e:99:6a:57:e7:f3:3d:5f:50:87:a3:3c: 34:2c:3c:57:71:e8:33:91:a1:4a:12:97:e9:d1:bb:9d:97:8b: f2:f6:4c:85:53:d8:be:3d:08:f3:63:92:76:81:a1:1d:27:b9: a0:e8:48:5a:35:c6:6d:c8:67:a4:49:58:69:42:ee:88:56:bc: 5f:c2:a2:e6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUcx/IWXj6B9QVKHBpVS+qaltQp6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz NTRmNDVjNjAeFw0yNjAxMTIyMjUwMzNaFw0yNzAxMTEyMjU1MzNaMDMxMTAvBgNV BAMTKEIwQzA0Qzk0QzVGODcxMTkwOEIxMjhGRDcyQzNBOTcxNERGMzU0MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmsuPpM+7VPK4g6DfL35ytUl6H /82vYlYYnnJGE5GrcPo2q7ohphatCLiFHa/td+eWUDyRrFGkHzGH3n/MAfM4k0fP mQ2lWuNy1kDyO8oERazF0zWn/qVtw58aeG+1CNUtRoKxY+2kSyzdizaX7M9g9bEh 5tlyzEsmj6zRw9SmPXAy9w0/iuJVbppaMjHUEaJuqbe5g5vaUWhFpg7KjiDPpxo+ 1EKsXXiJFDPhHMlKHea0/GkyNH2YZXEpDcszOlBE+f7Pde1eJOFUXFxJON9Ph+oc u4QeTKajL3rm4T8q5UHqVSqE1KMkdulz5thF22IIRiQuasmYzxSXrXHVGsXhAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUsMBMlMX4cRkIsSj9csOpcU3zVDIwHwYDVR0j BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW UFJjWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzEzOTM0MmUzMzMxMmUzMTM5 MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM0MzkzOTMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA wh/DMA0GCSqGSIb3DQEBCwUAA4IBAQCqpXO6VNElk7uHZqEArheAA9HIePUXoJSB 1MQm4APbkiNTh+/dgrrdt+rvuBJUMU8X8mLpGSejqYUbk7ZoGtYJ8y0ch67uwxJg anEBkxrqM/dq9NPxefch/8mg/b12X7oHI3XsOyG65yGQU1pCF8UCLrA4lmQLqOMv 4NaVJY0ZL03uSsw0TVfix+vZnssoRDMDBJE8O8OxLi2D8hyJ6KicoCL5SAHm6zLx HlCT0RUH6kV/2G/lhb7nFRJemWpX5/M9X1CHozw0LDxXcegzkaFKEpfp0budl4vy 9kyFU9i+PQjzY5J2gaEdJ7mg6EhaNcZtyGekSVhpQu6IVrxfwqLm -----END CERTIFICATE-----Generated at Sun Jan 25 21:48:12 2026 by rpki-client