This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135362e302f32342d3234203d3e20383334.roa File: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: 8mF+PQeUzaqKEgfJbIXSTk7hxbEJf0BXKYW39kTGsrg= Subject key identifier: B7:C6:3D:E5:D3:CA:E8:17:98:2E:0D:26:0A:7F:20:6E:8A:2B:EF:A0 Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Certificate serial: 0ED46C4FB0AEB52705285ADA3E8C1778D82E6C46 Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135362e302f32342d3234203d3e20383334.roa Signing time: Sun 04 Jan 2026 00:55:33 +0000 ROA not before: Sun 04 Jan 2026 00:50:33 +0000 ROA not after: Sun 03 Jan 2027 00:55:33 +0000 asID: 834 IP address blocks: 188.164.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d4:6c:4f:b0:ae:b5:27:05:28:5a:da:3e:8c:17:78:d8:2e:6c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Validity Not Before: Jan 4 00:50:33 2026 GMT Not After : Jan 3 00:55:33 2027 GMT Subject: CN=B7C63DE5D3CAE817982E0D260A7F206E8A2BEFA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:19:06:6d:28:b2:14:63:16:c6:a4:7d:d7:f4: 66:a9:17:c9:6b:89:d5:8e:56:31:d9:95:b8:26:68: 5e:79:59:47:be:c6:42:fd:0f:a7:be:6a:6b:3a:4e: 12:09:c0:8b:2c:a2:0b:63:2e:3b:8a:f6:b3:98:c5: 91:e1:6d:94:e8:ed:57:f6:9f:7d:fd:5c:4b:82:47: 85:81:4b:22:ea:b6:d2:78:0a:3e:32:ef:27:4a:ef: ee:45:fb:b2:86:31:da:14:43:45:ee:4e:ab:33:a1: 7d:9c:7a:14:23:ac:9a:18:6e:12:9a:8f:24:14:44: 10:7d:47:72:b3:5c:22:50:ee:00:51:7c:75:2c:25: 8d:da:ba:34:c6:76:f8:9c:c3:97:ab:1b:8e:39:27: 5f:23:1b:36:24:4e:f5:67:55:f2:bb:d5:52:ce:fa: 6e:df:e6:1f:55:28:e4:c1:45:aa:4c:b5:12:e8:93: 47:6f:96:f8:d0:b4:54:6b:e2:82:6e:f9:4d:93:24: b7:9a:f2:69:a2:69:3c:dd:8e:ce:82:39:9a:65:4f: a9:cd:a8:cd:4f:44:02:f3:33:6b:ad:b3:db:64:80: 92:eb:8b:b5:a2:e3:d4:d5:c2:a5:2a:2c:d6:d5:52: fe:5e:ef:12:ae:c5:f8:11:a8:56:bc:e8:36:50:e4: 2b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C6:3D:E5:D3:CA:E8:17:98:2E:0D:26:0A:7F:20:6E:8A:2B:EF:A0 X509v3 Authority Key Identifier: keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135362e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.164.156.0/24 Signature Algorithm: sha256WithRSAEncryption ad:0b:5d:39:fc:a2:af:2e:57:78:0f:df:13:33:c7:7e:00:8f: b5:f3:f0:a4:c1:e5:d9:0f:ee:2e:7b:14:6a:90:eb:02:61:a3: e5:ab:96:d3:52:bf:d6:b2:a6:ef:18:1f:67:e9:61:28:92:97: 9f:be:63:50:d2:b5:9c:76:ad:a9:f3:4a:ee:63:a0:ea:61:63: 03:62:26:60:5c:59:86:6f:e2:1c:c6:85:1e:29:ea:4a:d4:ef: 3b:a4:14:73:6e:d4:1c:23:e5:04:f1:31:d4:bc:35:a7:ac:b1: 94:f3:1b:eb:76:bb:86:91:6a:04:b6:b4:39:61:68:85:15:c2: 20:ad:e9:41:d8:9b:87:08:cf:b4:cc:5a:5a:e1:f4:6f:fb:e4: 7d:47:66:12:ef:ac:84:41:62:14:94:e7:82:77:da:f2:a2:b1: 64:46:19:11:b5:13:ce:93:f6:4d:1c:7c:28:79:85:28:f3:0b: 31:b4:4d:43:ea:dc:87:05:f6:d6:17:2e:ef:a9:17:c3:f1:5c: 23:2f:fb:9a:94:02:d0:ad:e0:d7:ad:51:c2:48:5d:01:be:bd: cd:6f:3b:ce:46:95:60:02:37:29:5d:0f:c2:30:a8:d3:35:12: 68:b5:c9:37:52:b5:90:53:b7:54:99:73:d1:98:02:db:03:82: 71:e2:d0:e4 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUDtRsT7CutScFKFraPowXeNgubEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz MGY3YzRjYTAeFw0yNjAxMDQwMDUwMzNaFw0yNzAxMDMwMDU1MzNaMDMxMTAvBgNV BAMTKEI3QzYzREU1RDNDQUU4MTc5ODJFMEQyNjBBN0YyMDZFOEEyQkVGQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSGQZtKLIUYxbGpH3X9GapF8lr idWOVjHZlbgmaF55WUe+xkL9D6e+ams6ThIJwIssogtjLjuK9rOYxZHhbZTo7Vf2 n339XEuCR4WBSyLqttJ4Cj4y7ydK7+5F+7KGMdoUQ0XuTqszoX2cehQjrJoYbhKa jyQURBB9R3KzXCJQ7gBRfHUsJY3aujTGdvicw5erG445J18jGzYkTvVnVfK71VLO +m7f5h9VKOTBRapMtRLok0dvlvjQtFRr4oJu+U2TJLea8mmiaTzdjs6COZplT6nN qM1PRALzM2uts9tkgJLri7Wi49TVwqUqLNbVUv5e7xKuxfgRqFa86DZQ5CvTAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUt8Y95dPK6BeYLg0mCn8gboor76AwHwYDVR0j BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE M3hNby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAt ZjZlMC00MTBjLWJjOTktYWYwOTIxZDFjM2E0LzAvMzEzODM4MmUzMTM2MzQyZTMx MzUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALyk nDANBgkqhkiG9w0BAQsFAAOCAQEArQtdOfyiry5XeA/fEzPHfgCPtfPwpMHl2Q/u LnsUapDrAmGj5auW01K/1rKm7xgfZ+lhKJKXn75jUNK1nHatqfNK7mOg6mFjA2Im YFxZhm/iHMaFHinqStTvO6QUc27UHCPlBPEx1Lw1p6yxlPMb63a7hpFqBLa0OWFo hRXCIK3pQdibhwjPtMxaWuH0b/vkfUdmEu+shEFiFJTngnfa8qKxZEYZEbUTzpP2 TRx8KHmFKPMLMbRNQ+rchwX21hcu76kXw/FcIy/7mpQC0K3g161RwkhdAb69zW87 zkaVYAI3KV0PwjCo0zUSaLXJN1K1kFO3VJlz0ZgC2wOCceLQ5A== -----END CERTIFICATE-----Generated at Sun Jan 25 19:44:29 2026 by rpki-client