This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/3139322e3130392e31302e302f32342d3234203d3e203239383032.roa File: 3139322e3130392e31302e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: CCWx5/mnzUAvPW2QXDisPqaJoMOmAAYfjlJp2z2VVX8= Subject key identifier: CE:33:91:76:24:C6:78:E5:D3:E3:DB:BA:CA:17:3B:8C:81:22:E1:D0 Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818 Certificate serial: 0AA5F9768A4E926CEE1CFDFDF0914B5255F0EC5F Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/3139322e3130392e31302e302f32342d3234203d3e203239383032.roa Signing time: Fri 02 Jan 2026 13:55:33 +0000 ROA not before: Fri 02 Jan 2026 13:50:33 +0000 ROA not after: Fri 01 Jan 2027 13:55:33 +0000 asID: 29802 IP address blocks: 192.109.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a5:f9:76:8a:4e:92:6c:ee:1c:fd:fd:f0:91:4b:52:55:f0:ec:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818 Validity Not Before: Jan 2 13:50:33 2026 GMT Not After : Jan 1 13:55:33 2027 GMT Subject: CN=CE33917624C678E5D3E3DBBACA173B8C8122E1D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8e:22:00:40:80:0b:2d:bb:7f:aa:31:73:66: ae:ae:4b:2f:ca:00:0c:a1:7f:82:7a:29:d5:24:07: a1:0e:da:0d:f1:07:43:25:1c:12:a9:25:a3:d0:28: b8:8b:0d:d9:79:e7:58:85:0b:24:33:99:b4:21:c0: f9:c6:9e:2f:b0:11:89:6a:f0:8c:b5:d1:dd:fc:e0: c2:40:1a:73:85:84:72:cd:8e:90:20:05:e4:a8:46: c8:3e:95:7a:fb:bb:59:c9:eb:01:0b:71:74:55:e5: f0:60:c1:1f:e9:c1:41:90:a8:2a:ca:66:be:cc:09: f2:b7:74:d2:8a:15:93:00:f5:e4:79:dd:34:bd:28: ed:30:e3:02:98:26:c7:77:73:bb:db:74:1e:30:8d: 9c:f6:c2:d3:7c:f1:2c:0b:3e:53:06:ee:ee:a6:ec: e8:94:34:89:e5:ba:76:a7:87:1f:df:61:d5:97:a0: eb:6c:33:d0:0a:56:ed:61:7d:18:99:ef:d1:67:94: 63:9a:a5:7f:52:93:27:83:da:59:ef:8e:60:7c:e6: 13:dd:a2:f0:79:ba:b2:fc:a3:c1:6d:79:23:02:de: 4d:d1:ef:39:63:a3:e4:fd:fc:c3:6a:d3:7c:ea:90: 3c:4a:f4:51:8d:a0:9d:46:7d:8d:17:10:6e:1b:74: e8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:33:91:76:24:C6:78:E5:D3:E3:DB:BA:CA:17:3B:8C:81:22:E1:D0 X509v3 Authority Key Identifier: keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/3139322e3130392e31302e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.10.0/24 Signature Algorithm: sha256WithRSAEncryption 08:4c:65:3f:d0:52:8a:93:02:bd:3b:05:a7:9b:59:20:98:82: af:7e:1f:6c:ee:8e:21:16:db:2d:d3:d9:d2:bf:80:b8:91:68: 14:bf:21:3c:7b:19:8f:22:f1:f9:5c:ee:85:af:5e:80:75:a6: 78:fb:e7:63:7e:8c:da:9d:43:45:1d:e5:d9:b6:b2:bd:e4:36: bc:e7:01:99:ee:69:a5:c8:24:4d:2b:3b:7b:42:14:bf:ce:96: ae:66:c4:75:51:6f:a5:1c:c7:5e:91:2d:c2:38:9f:49:53:c9: 31:93:f9:ea:a4:e0:f7:6e:2d:04:a0:b7:9f:9d:7e:5e:1f:24: 25:6f:7c:88:ef:dd:16:77:09:d2:fc:57:0f:7b:3e:a2:95:8d: 8d:ed:6f:f9:6e:f0:f7:00:27:9e:95:c9:94:a5:c5:4d:b6:fa: 68:31:4b:f2:ba:15:8e:a0:39:65:67:12:0a:e7:ca:d5:9f:0a: 5e:99:10:96:2a:e9:50:06:40:f0:ac:5f:a0:8f:d1:8f:9a:ce: d6:8c:ec:5b:0c:ba:22:bc:cf:0d:cd:01:c8:1c:9f:93:f9:c0: bb:00:a6:c1:02:2d:aa:f1:dc:79:1d:b6:e9:7a:f5:4b:c4:c0: 60:7f:9e:0e:32:d7:59:72:50:9a:b9:b2:f8:35:7d:15:fa:46: c2:78:6e:9c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUCqX5dopOkmzuHP398JFLUlXw7F8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWU1MTc5YmIxNzU3MDY4ZDcwMjg1MTBmZWViMTE3N2Fh N2NjODgxODAeFw0yNjAxMDIxMzUwMzNaFw0yNzAxMDExMzU1MzNaMDMxMTAvBgNV BAMTKENFMzM5MTc2MjRDNjc4RTVEM0UzREJCQUNBMTczQjhDODEyMkUxRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjiIAQIALLbt/qjFzZq6uSy/K AAyhf4J6KdUkB6EO2g3xB0MlHBKpJaPQKLiLDdl551iFCyQzmbQhwPnGni+wEYlq 8Iy10d384MJAGnOFhHLNjpAgBeSoRsg+lXr7u1nJ6wELcXRV5fBgwR/pwUGQqCrK Zr7MCfK3dNKKFZMA9eR53TS9KO0w4wKYJsd3c7vbdB4wjZz2wtN88SwLPlMG7u6m 7OiUNInlunanhx/fYdWXoOtsM9AKVu1hfRiZ79FnlGOapX9SkyeD2lnvjmB85hPd ovB5urL8o8FteSMC3k3R7zljo+T9/MNq03zqkDxK9FGNoJ1GfY0XEG4bdOi7AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUzjORdiTGeOXT49u6yhc7jIEi4dAwHwYDVR0j BBgwFoAUXlF5uxdXBo1wKFEP7rEXeqfMiBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODNlNDc1N2YtZDM3Zi00ZmQ2LWE2OWItZDc0YmRkNmI4 N2RjLzAvNUU1MTc5QkIxNzU3MDY4RDcwMjg1MTBGRUVCMTE3N0FBN0NDODgxOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hsRjV1eGRYQm8xd0tGRVA3ckVYZXFm TWlCZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODNlNDc1N2Yt ZDM3Zi00ZmQ2LWE2OWItZDc0YmRkNmI4N2RjLzAvMzEzOTMyMmUzMTMwMzkyZTMx MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzgzMDMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA wG0KMA0GCSqGSIb3DQEBCwUAA4IBAQAITGU/0FKKkwK9OwWnm1kgmIKvfh9s7o4h Ftst09nSv4C4kWgUvyE8exmPIvH5XO6Fr16AdaZ4++djfozanUNFHeXZtrK95Da8 5wGZ7mmlyCRNKzt7QhS/zpauZsR1UW+lHMdekS3COJ9JU8kxk/nqpOD3bi0EoLef nX5eHyQlb3yI790WdwnS/FcPez6ilY2N7W/5bvD3ACeelcmUpcVNtvpoMUvyuhWO oDllZxIK58rVnwpemRCWKulQBkDwrF+gj9GPms7WjOxbDLoivM8NzQHIHJ+T+cC7 AKbBAi2q8dx5HbbpevVLxMBgf54OMtdZclCaubL4NX0V+kbCeG6c -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:58 2026 by rpki-client