This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235342e302f32342d3234203d3e203231383539.roa File: 3139342e33342e3235342e302f32342d3234203d3e203231383539.roa (raw, json) Hash identifier: oRJ6rz+Ka3hQ2WzKZBHZ2DPnxmRlyUWLsU5w15SE0A0= Subject key identifier: 1C:1D:B4:DC:92:FC:0E:51:3A:AE:BB:08:F2:FC:B8:80:43:47:66:D5 Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 67F1F05D0DB34D74CC1E3E942C76BCFC2194D49E Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235342e302f32342d3234203d3e203231383539.roa Signing time: Mon 01 Dec 2025 09:48:23 +0000 ROA not before: Mon 01 Dec 2025 09:43:23 +0000 ROA not after: Mon 30 Nov 2026 09:48:23 +0000 asID: 21859 IP address blocks: 194.34.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f1:f0:5d:0d:b3:4d:74:cc:1e:3e:94:2c:76:bc:fc:21:94:d4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Dec 1 09:43:23 2025 GMT Not After : Nov 30 09:48:23 2026 GMT Subject: CN=1C1DB4DC92FC0E513AAEBB08F2FCB880434766D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4d:ca:b4:06:c2:f1:bc:89:43:ad:cd:9b:ef: 34:b4:3b:dd:34:f9:9e:25:e2:b4:44:d4:80:8c:e5: 90:23:e6:00:7d:26:e8:69:d7:1f:4b:4e:b0:35:e4: 1c:4e:16:6b:bb:8b:2e:02:e4:e3:aa:56:90:54:b7: 69:91:5f:a4:34:62:7a:b2:cb:5c:78:b5:ce:36:3d: 2b:09:ca:69:eb:6e:b0:ce:97:a0:d3:c4:e9:7c:0a: 7a:35:27:ef:1e:94:40:ce:aa:07:d5:9a:54:18:56: fc:1d:32:71:9e:e2:50:8e:dd:99:13:d4:55:ce:40: e0:1c:f0:b4:34:51:7e:96:db:52:bd:c0:40:a1:be: a1:0a:f3:f7:d2:1e:ed:6e:0c:46:21:dc:80:11:3d: ee:20:83:76:47:d0:99:e7:5a:e9:46:60:00:94:d8: a4:f9:7b:0c:f6:3a:42:d3:3c:69:82:ea:87:9b:94: f4:51:e8:9a:96:8d:7b:f2:8b:38:09:3e:ff:2e:99: a6:81:6b:41:21:40:c2:fa:71:72:39:a6:f4:a4:71: 02:90:86:8e:8b:7e:9f:a2:f1:e4:94:e2:d5:25:d4: d6:8f:7a:2c:e6:37:af:ff:14:27:08:1e:f6:ea:1d: ab:54:9c:e1:0b:31:af:25:4f:85:78:52:6f:43:68: 39:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1D:B4:DC:92:FC:0E:51:3A:AE:BB:08:F2:FC:B8:80:43:47:66:D5 X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235342e302f32342d3234203d3e203231383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.34.254.0/24 Signature Algorithm: sha256WithRSAEncryption 90:b8:db:6c:be:73:33:2b:9c:80:bf:a8:ec:ec:ea:e3:19:bb: 13:71:88:9d:72:ae:3e:26:d3:4e:e0:d1:57:56:9e:32:ed:3e: ef:8f:b7:84:8d:be:7d:c3:c3:a3:7b:31:80:c6:90:af:91:27: be:1e:47:9e:67:f4:19:9d:08:fa:ea:7d:71:37:ca:d9:af:10: 3d:f7:94:65:78:38:c9:aa:f0:40:37:7b:6e:76:0b:5c:55:3c: c1:6f:35:43:c2:64:f1:14:41:34:35:7c:c0:ac:6e:97:d4:0d: 30:5f:fe:f3:4d:09:16:8c:ce:f5:74:bd:fa:d9:82:a9:53:a5: 15:0d:00:cc:89:cc:9c:51:f7:35:91:09:d8:bf:32:3e:7e:3d: ee:fc:18:87:3d:52:9e:6d:d2:d0:97:1d:85:52:5b:50:6f:4c: 74:3c:c6:47:35:e9:9b:29:42:68:cf:7e:c2:46:9a:f9:e5:54: 7c:71:2e:9e:cf:75:98:f4:f6:6d:8c:ae:71:02:f6:86:0c:bf: e8:18:d6:10:4d:73:46:ae:24:ae:01:80:e8:40:b9:51:ce:79: ea:eb:b3:0d:ca:bd:c9:7a:86:ee:bd:d8:a0:d0:82:ae:b6:47: 08:ef:9d:1f:38:f7:b9:b6:9d:b1:93:95:ae:77:d8:90:18:50: 1c:db:cc:d2 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUZ/HwXQ2zTXTMHj6ULHa8/CGU1J4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNTEyMDEwOTQzMjNaFw0yNjExMzAwOTQ4MjNaMDMxMTAvBgNV BAMTKDFDMURCNERDOTJGQzBFNTEzQUFFQkIwOEYyRkNCODgwNDM0NzY2RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRTcq0BsLxvIlDrc2b7zS0O900 +Z4l4rRE1ICM5ZAj5gB9Juhp1x9LTrA15BxOFmu7iy4C5OOqVpBUt2mRX6Q0Ynqy y1x4tc42PSsJymnrbrDOl6DTxOl8Cno1J+8elEDOqgfVmlQYVvwdMnGe4lCO3ZkT 1FXOQOAc8LQ0UX6W21K9wEChvqEK8/fSHu1uDEYh3IARPe4gg3ZH0JnnWulGYACU 2KT5ewz2OkLTPGmC6oeblPRR6JqWjXvyizgJPv8umaaBa0EhQML6cXI5pvSkcQKQ ho6Lfp+i8eSU4tUl1NaPeizmN6//FCcIHvbqHatUnOELMa8lT4V4Um9DaDk3AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUHB203JL8DlE6rrsI8vy4gENHZtUwHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzOTM0MmUzMzM0MmUzMjM1 MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzgzNTM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA wiL+MA0GCSqGSIb3DQEBCwUAA4IBAQCQuNtsvnMzK5yAv6js7OrjGbsTcYidcq4+ JtNO4NFXVp4y7T7vj7eEjb59w8OjezGAxpCvkSe+HkeeZ/QZnQj66n1xN8rZrxA9 95RleDjJqvBAN3tudgtcVTzBbzVDwmTxFEE0NXzArG6X1A0wX/7zTQkWjM71dL36 2YKpU6UVDQDMicycUfc1kQnYvzI+fj3u/BiHPVKebdLQlx2FUltQb0x0PMZHNemb KUJoz37CRpr55VR8cS6ez3WY9PZtjK5xAvaGDL/oGNYQTXNGriSuAYDoQLlRznnq 67MNyr3Jeobuvdig0IKutkcI750fOPe5tp2xk5Wud9iQGFAc28zS -----END CERTIFICATE-----Generated at Sat Dec 6 13:11:38 2025 by rpki-client