This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231312e302f32342d3234203d3e203630373532.roa File: 3139342e3135302e3231312e302f32342d3234203d3e203630373532.roa (raw, json) Hash identifier: 6yl6mmQHX9JRwHaNA+EixvXVkEfk55xDr3iAP7rq1mc= Subject key identifier: 11:0D:2D:56:FF:6A:02:76:DC:C2:D5:49:EF:09:3B:51:57:38:48:1B Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d Certificate serial: 6AAF96C482D390B7D32A257EA5F8177066BD2FF7 Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231312e302f32342d3234203d3e203630373532.roa Signing time: Mon 01 Dec 2025 15:55:12 +0000 ROA not before: Mon 01 Dec 2025 15:50:12 +0000 ROA not after: Mon 30 Nov 2026 15:55:12 +0000 asID: 60752 IP address blocks: 194.150.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:af:96:c4:82:d3:90:b7:d3:2a:25:7e:a5:f8:17:70:66:bd:2f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d Validity Not Before: Dec 1 15:50:12 2025 GMT Not After : Nov 30 15:55:12 2026 GMT Subject: CN=110D2D56FF6A0276DCC2D549EF093B515738481B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:da:73:ce:e7:41:f0:87:0a:18:f6:db:55:cc: c6:1b:75:5d:b9:d1:39:7f:e2:be:fb:76:45:0a:ac: c6:c0:66:24:07:9f:94:9e:db:1a:47:1b:34:9d:d5: 34:e8:6b:23:db:0f:63:65:f5:3c:82:8d:9c:32:70: 37:38:09:d7:83:cf:08:83:2b:79:05:76:84:56:28: 4f:ef:76:70:95:7b:0b:7e:ec:c6:d6:84:23:67:45: 54:b8:0b:81:35:0b:0f:89:a5:de:a0:bb:ba:27:6b: 2f:ca:0b:4a:17:7a:8c:32:58:ab:ff:b6:db:19:2d: 90:4b:36:dd:14:0f:1d:8a:e8:d5:45:18:93:5c:4f: 07:b8:bf:a5:71:3e:ae:a4:24:5d:cd:c4:a1:07:ca: 96:7d:eb:f1:d2:9a:7d:f8:b0:03:8d:eb:a2:eb:8e: c5:c1:2b:c8:63:e7:d0:d4:65:04:57:5b:7b:6b:54: 6e:77:f6:0f:0b:5c:80:26:e3:2b:6d:e7:90:82:d2: a3:3c:8e:bc:98:ed:7e:19:87:45:81:31:df:46:43: 0a:e1:42:45:43:8e:1a:2f:68:7e:04:89:b3:b8:75: c7:9d:e7:5d:93:4f:d0:20:29:38:38:48:07:96:bd: 85:1b:66:46:c5:70:18:65:93:ae:17:23:17:5a:9a: c4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0D:2D:56:FF:6A:02:76:DC:C2:D5:49:EF:09:3B:51:57:38:48:1B X509v3 Authority Key Identifier: keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231312e302f32342d3234203d3e203630373532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.150.211.0/24 Signature Algorithm: sha256WithRSAEncryption dd:7b:ac:46:4f:87:ee:df:e6:e3:65:97:11:e9:25:9f:bb:2c: 17:91:25:ae:92:8c:89:8d:b9:24:a3:bf:a2:32:5f:04:e3:20: b5:ff:fc:31:27:b8:52:73:37:69:28:f0:a1:06:8e:8f:2c:14: 91:36:6d:1c:23:2f:28:b1:33:0b:05:c1:97:95:06:d6:8d:c0: 72:62:0a:8c:88:28:f3:af:f4:9d:4b:1c:98:c1:44:19:dd:a6: 93:09:5e:3b:3d:b7:bf:ba:8a:46:34:09:d8:db:7a:6b:2c:c8: 9c:36:dd:ee:dd:20:db:70:ed:cb:16:ad:b5:de:f3:17:fc:8a: 44:3f:0b:4f:1f:10:42:8c:7b:f9:3d:21:ad:83:71:0a:31:df: 49:33:24:2b:4a:3c:49:5c:01:b1:6e:ce:e4:a9:e9:8d:95:90: ff:0a:e1:34:96:f2:76:ea:c0:f9:a3:2b:2a:d0:21:7c:00:b7: 4b:0c:e0:49:47:ad:05:d0:05:aa:41:4a:f6:2d:9c:24:b1:0f: 86:b0:6d:62:61:76:aa:36:ed:45:cd:a2:cf:a8:d9:3f:d2:7a: 58:2b:4a:fe:cc:31:10:79:fb:b1:4c:86:21:09:19:2e:0b:99: cd:a9:d0:74:56:a7:6c:14:de:56:c6:c3:cc:19:f3:6e:d2:f7: e1:4a:73:93 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUaq+WxILTkLfTKiV+pfgXcGa9L/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl OTczMjY2ZDAeFw0yNTEyMDExNTUwMTJaFw0yNjExMzAxNTU1MTJaMDMxMTAvBgNV BAMTKDExMEQyRDU2RkY2QTAyNzZEQ0MyRDU0OUVGMDkzQjUxNTczODQ4MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI2nPO50HwhwoY9ttVzMYbdV25 0Tl/4r77dkUKrMbAZiQHn5Se2xpHGzSd1TToayPbD2Nl9TyCjZwycDc4CdeDzwiD K3kFdoRWKE/vdnCVewt+7MbWhCNnRVS4C4E1Cw+Jpd6gu7onay/KC0oXeowyWKv/ ttsZLZBLNt0UDx2K6NVFGJNcTwe4v6VxPq6kJF3NxKEHypZ96/HSmn34sAON66Lr jsXBK8hj59DUZQRXW3trVG539g8LXIAm4ytt55CC0qM8jryY7X4Zh0WBMd9GQwrh QkVDjhovaH4EibO4dced512TT9AgKTg4SAeWvYUbZkbFcBhlk64XIxdamsSHAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUEQ0tVv9qAnbcwtVJ7wk7UVc4SBswHwYDVR0j BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4 MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s ekptMC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzEzOTM0MmUzMTM1MzAyZTMy MzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzAzNzM1MzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADCltMwDQYJKoZIhvcNAQELBQADggEBAN17rEZPh+7f5uNllxHpJZ+7LBeRJa6S jImNuSSjv6IyXwTjILX//DEnuFJzN2ko8KEGjo8sFJE2bRwjLyixMwsFwZeVBtaN wHJiCoyIKPOv9J1LHJjBRBndppMJXjs9t7+6ikY0CdjbemssyJw23e7dINtw7csW rbXe8xf8ikQ/C08fEEKMe/k9Ia2DcQox30kzJCtKPElcAbFuzuSp6Y2VkP8K4TSW 8nbqwPmjKyrQIXwAt0sM4ElHrQXQBapBSvYtnCSxD4awbWJhdqo27UXNos+o2T/S elgrSv7MMRB5+7FMhiEJGS4Lmc2p0HRWp2wU3lbGw8wZ827S9+FKc5M= -----END CERTIFICATE-----Generated at Fri Dec 19 12:01:45 2025 by rpki-client