This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20393834.roa File: 3138352e32392e3136342e302f32342d3234203d3e20393834.roa (raw, json) Hash identifier: ekAjE+g0Rkt+zCNphcusuGTd79hfHe71/Q56WdHp5l8= Subject key identifier: CC:64:25:06:F2:35:B8:8C:3F:AD:40:21:6F:44:5D:C7:B0:7C:02:56 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 32186394AE90B927709A40F4B33BFF1F7618687A Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20393834.roa Signing time: Sat 24 Jan 2026 07:31:04 +0000 ROA not before: Sat 24 Jan 2026 07:26:04 +0000 ROA not after: Sat 23 Jan 2027 07:31:04 +0000 asID: 984 IP address blocks: 185.29.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:18:63:94:ae:90:b9:27:70:9a:40:f4:b3:3b:ff:1f:76:18:68:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Jan 24 07:26:04 2026 GMT Not After : Jan 23 07:31:04 2027 GMT Subject: CN=CC642506F235B88C3FAD40216F445DC7B07C0256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1e:ee:9d:0c:95:3f:62:91:b4:99:b8:18:5e: 4d:79:d9:1b:6f:86:51:a7:7d:2e:35:d8:0d:d8:95: 7e:fe:21:d5:ce:42:94:09:bc:fc:3e:4e:00:62:a9: 5f:28:0d:5a:59:d5:cd:63:57:91:52:96:46:9f:60: 25:8c:e3:25:60:29:e7:a6:a5:3a:63:15:8b:d6:e6: 08:4e:c2:01:c0:53:72:7c:9b:8e:7b:fa:1d:68:ca: 71:67:03:d1:32:a2:d7:4c:f7:75:42:05:48:ab:8c: 79:08:eb:9d:49:f8:08:e0:25:80:94:55:6a:3d:82: 29:65:04:23:96:3a:59:ab:26:40:19:d8:2e:a6:1b: f9:bb:9f:e3:b7:33:de:f6:12:dd:fc:8b:40:f3:91: 54:3d:ee:16:9e:f8:63:1e:86:9a:ea:dd:56:4c:8e: 9b:06:24:8a:4c:2f:af:34:3e:b6:af:60:80:b5:99: 9a:08:41:75:41:17:13:81:84:a2:74:31:2d:b5:16: 4d:21:65:a1:ee:ef:ac:b8:25:e6:3c:72:01:c9:50: 8b:6f:32:e5:5d:10:d8:32:45:ef:ff:21:3e:ae:d3: 93:07:ee:96:6c:1f:28:6a:83:f4:6d:5e:b6:73:ba: d0:29:48:df:69:6b:ef:46:ec:dd:72:87:4e:46:3c: 8d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:64:25:06:F2:35:B8:8C:3F:AD:40:21:6F:44:5D:C7:B0:7C:02:56 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20393834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.164.0/24 Signature Algorithm: sha256WithRSAEncryption 61:b9:bc:c5:7d:15:c2:28:e4:0e:d8:1a:89:18:15:18:b7:7c: ca:23:c9:9b:48:58:97:61:f2:c1:cb:10:c7:4f:ee:aa:91:56: dc:83:f6:b8:f2:6c:44:0a:10:a3:96:8f:4f:f2:54:27:36:00: f6:ae:ae:73:19:79:3c:4b:89:2c:5c:8e:34:28:57:1b:c9:7e: aa:02:f9:d1:68:fe:15:57:9e:55:75:ba:8b:9d:9e:55:9f:50: ef:19:e8:2d:63:23:38:45:2d:7b:f0:c5:37:78:f1:b6:b6:f4: 2c:27:a0:2d:48:10:f8:03:12:6d:23:5a:0c:52:db:6c:f2:e0: 55:12:69:43:76:00:c9:de:62:21:ab:35:9a:90:e9:8d:d1:58: 58:34:84:90:d8:27:bb:f6:7e:0b:5d:b3:cb:a0:58:e3:a5:d6: 70:1c:fa:aa:b5:59:1a:e3:b0:f1:c0:68:86:07:61:ea:f6:af: b2:5f:17:7b:15:f2:63:7d:51:8e:5c:16:a6:71:55:43:f7:6f: 38:3b:29:83:61:a6:dc:f2:b5:47:53:f8:02:ec:26:21:a3:3c: f2:da:14:58:29:5e:7c:8c:b8:ee:41:4e:74:79:0c:d8:4a:e6: 39:b5:46:4d:9f:8c:6d:a5:2d:1f:33:f3:79:6a:23:bf:db:72: fe:5b:15:06 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUMhhjlK6QuSdwmkD0szv/H3YYaHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNjAxMjQwNzI2MDRaFw0yNzAxMjMwNzMxMDRaMDMxMTAvBgNV BAMTKENDNjQyNTA2RjIzNUI4OEMzRkFENDAyMTZGNDQ1REM3QjA3QzAyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpHu6dDJU/YpG0mbgYXk152Rtv hlGnfS412A3YlX7+IdXOQpQJvPw+TgBiqV8oDVpZ1c1jV5FSlkafYCWM4yVgKeem pTpjFYvW5ghOwgHAU3J8m457+h1oynFnA9EyotdM93VCBUirjHkI651J+AjgJYCU VWo9gillBCOWOlmrJkAZ2C6mG/m7n+O3M972Et38i0DzkVQ97hae+GMehprq3VZM jpsGJIpML680PravYIC1mZoIQXVBFxOBhKJ0MS21Fk0hZaHu76y4JeY8cgHJUItv MuVdENgyRe//IT6u05MH7pZsHyhqg/RtXrZzutApSN9pa+9G7N1yh05GPI0ZAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUzGQlBvI1uIw/rUAhb0Rdx7B8AlYwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzODM1MmUzMjM5MmUzMTM2 MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTM4MzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5HaQw DQYJKoZIhvcNAQELBQADggEBAGG5vMV9FcIo5A7YGokYFRi3fMojyZtIWJdh8sHL EMdP7qqRVtyD9rjybEQKEKOWj0/yVCc2APaurnMZeTxLiSxcjjQoVxvJfqoC+dFo /hVXnlV1uoudnlWfUO8Z6C1jIzhFLXvwxTd48ba29CwnoC1IEPgDEm0jWgxS22zy 4FUSaUN2AMneYiGrNZqQ6Y3RWFg0hJDYJ7v2fgtds8ugWOOl1nAc+qq1WRrjsPHA aIYHYer2r7JfF3sV8mN9UY5cFqZxVUP3bzg7KYNhptzytUdT+ALsJiGjPPLaFFgp XnyMuO5BTnR5DNhK5jm1Rk2fjG2lLR8z83lqI7/bcv5bFQY= -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:42 2026 by rpki-client