This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235322e302f32342d3234203d3e203439353831.roa File: 3139342e33342e3235322e302f32342d3234203d3e203439353831.roa (raw, json) Hash identifier: CdOWg7XQ7TdzzLDF2E3vbhyf4TDBRs7VuKir2QIc0i4= Subject key identifier: 69:AD:BC:87:EB:B7:63:5D:53:CE:99:47:CE:6D:47:4C:5C:A0:F0:69 Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 79634573E3054D3120ACCC17D1EFC6BAF42F0F19 Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235322e302f32342d3234203d3e203439353831.roa Signing time: Wed 19 Nov 2025 08:40:39 +0000 ROA not before: Wed 19 Nov 2025 08:35:39 +0000 ROA not after: Wed 18 Nov 2026 08:40:39 +0000 asID: 49581 IP address blocks: 194.34.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:63:45:73:e3:05:4d:31:20:ac:cc:17:d1:ef:c6:ba:f4:2f:0f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Nov 19 08:35:39 2025 GMT Not After : Nov 18 08:40:39 2026 GMT Subject: CN=69ADBC87EBB7635D53CE9947CE6D474C5CA0F069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:43:fa:b9:3a:8e:24:e7:53:3e:2f:a8:24:ea: 34:84:51:a0:ba:d9:30:0b:38:43:6b:e6:78:27:a4: 44:1f:77:11:2c:cb:80:0e:b6:6a:8c:79:49:0f:08: c1:9e:14:76:a3:bb:3e:ff:ac:60:44:3f:53:f1:41: 0b:f2:57:70:4c:c6:99:b1:39:6e:95:9c:ff:1e:42: 40:a8:81:19:49:f2:19:2e:ac:c9:3a:db:66:b7:a8: 83:aa:65:08:5c:07:22:c5:bb:f5:60:d8:6f:1a:e1: 2b:11:5b:72:67:76:2a:40:21:4f:96:8b:dc:4b:56: c3:f8:7e:8d:1b:d6:5e:db:70:da:35:e9:12:6a:e4: f9:fc:29:04:92:e0:90:1e:3f:1c:99:71:59:49:b8: ca:ef:2b:b5:b0:6d:38:29:45:c9:d9:4b:02:57:33: 4c:72:78:de:0e:4c:d4:e4:f6:f9:aa:fd:89:36:ba: 55:71:2f:d4:58:ae:66:b5:0e:fc:8b:7b:22:a0:4b: e7:bd:90:a8:57:b0:06:8d:45:89:3d:d4:94:62:1a: 17:e8:94:26:d9:95:df:fd:e5:a3:9e:51:44:bc:54: 63:6b:76:b0:62:ef:06:d9:1e:3e:99:d5:9c:42:ee: c6:8a:1e:2a:55:45:82:5d:cf:2b:cc:40:1d:34:08: 15:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AD:BC:87:EB:B7:63:5D:53:CE:99:47:CE:6D:47:4C:5C:A0:F0:69 X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235322e302f32342d3234203d3e203439353831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.34.252.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:7a:e4:4d:ec:67:77:ca:4f:30:78:62:3b:91:f2:b3:e9:e8: d7:d0:f4:9d:cf:ca:26:0f:b7:af:0d:d4:de:2d:e6:47:a9:a5: bc:32:26:7e:0d:6a:57:f9:d0:91:c8:a2:e1:ea:29:13:c5:0b: ca:f7:44:98:15:4b:45:86:6b:05:bb:a5:17:5a:a4:48:b2:55: 31:38:7a:9e:54:11:0b:e7:78:61:fa:f4:ba:08:63:25:9b:78: 95:79:3c:33:a8:c6:76:5f:00:99:a3:88:8a:94:8a:8b:83:f1: f1:5a:29:96:a6:39:07:05:d7:85:15:47:51:d7:68:59:12:6c: a1:28:5e:28:86:f7:72:5d:6d:2d:84:10:00:0d:8f:e3:e9:9d: e4:b9:f7:3f:2e:5a:14:47:59:c6:7f:98:81:ef:0f:94:03:4b: 5f:c8:54:fe:1c:cf:ab:2a:9a:77:1e:35:d5:83:8d:8f:49:fa: 95:ed:33:4e:9e:dd:97:6e:fc:39:da:61:94:b7:c1:4d:56:fa: 70:a6:1b:38:75:fa:fb:06:7d:36:3d:0d:15:6e:40:d9:09:69: 1b:b4:60:2c:2b:eb:86:d9:10:76:e2:87:33:61:84:8b:db:ea: bb:60:69:66:ff:50:12:3e:62:57:c0:27:06:8f:c7:3f:b0:50: fd:89:26:d2 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUeWNFc+MFTTEgrMwX0e/GuvQvDxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNTExMTkwODM1MzlaFw0yNjExMTgwODQwMzlaMDMxMTAvBgNV BAMTKDY5QURCQzg3RUJCNzYzNUQ1M0NFOTk0N0NFNkQ0NzRDNUNBMEYwNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Q/q5Oo4k51M+L6gk6jSEUaC6 2TALOENr5ngnpEQfdxEsy4AOtmqMeUkPCMGeFHajuz7/rGBEP1PxQQvyV3BMxpmx OW6VnP8eQkCogRlJ8hkurMk622a3qIOqZQhcByLFu/Vg2G8a4SsRW3JndipAIU+W i9xLVsP4fo0b1l7bcNo16RJq5Pn8KQSS4JAePxyZcVlJuMrvK7WwbTgpRcnZSwJX M0xyeN4OTNTk9vmq/Yk2ulVxL9RYrma1DvyLeyKgS+e9kKhXsAaNRYk91JRiGhfo lCbZld/95aOeUUS8VGNrdrBi7wbZHj6Z1ZxC7saKHipVRYJdzyvMQB00CBUzAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUaa28h+u3Y11TzplHzm1HTFyg8GkwHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzOTM0MmUzMzM0MmUzMjM1 MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM5MzUzODMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA wiL8MA0GCSqGSIb3DQEBCwUAA4IBAQA8euRN7Gd3yk8weGI7kfKz6ejX0PSdz8om D7evDdTeLeZHqaW8MiZ+DWpX+dCRyKLh6ikTxQvK90SYFUtFhmsFu6UXWqRIslUx OHqeVBEL53hh+vS6CGMlm3iVeTwzqMZ2XwCZo4iKlIqLg/HxWimWpjkHBdeFFUdR 12hZEmyhKF4ohvdyXW0thBAADY/j6Z3kufc/LloUR1nGf5iB7w+UA0tfyFT+HM+r Kpp3HjXVg42PSfqV7TNOnt2Xbvw52mGUt8FNVvpwphs4dfr7Bn02PQ0VbkDZCWkb tGAsK+uG2RB24oczYYSL2+q7YGlm/1ASPmJXwCcGj8c/sFD9iSbS -----END CERTIFICATE-----Generated at Sun Dec 7 01:06:04 2025 by rpki-client