This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34312e302f32342d3234203d3e203136323736.roa File: 3138352e3235302e34312e302f32342d3234203d3e203136323736.roa (raw, json) Hash identifier: e593QIRSwVx3PBIVSSf8HqCfMhSG+94/3uc22EyTMaw= Subject key identifier: 3A:40:74:57:AD:D9:23:09:6A:51:F9:CB:5D:3E:F5:B8:C0:B4:33:FD Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Certificate serial: 107635BEEC0A78CD300DB2055EB9EE40AA3879E8 Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34312e302f32342d3234203d3e203136323736.roa Signing time: Fri 09 Jan 2026 10:30:12 +0000 ROA not before: Fri 09 Jan 2026 10:25:12 +0000 ROA not after: Fri 08 Jan 2027 10:30:12 +0000 asID: 16276 IP address blocks: 185.250.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:76:35:be:ec:0a:78:cd:30:0d:b2:05:5e:b9:ee:40:aa:38:79:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Validity Not Before: Jan 9 10:25:12 2026 GMT Not After : Jan 8 10:30:12 2027 GMT Subject: CN=3A407457ADD923096A51F9CB5D3EF5B8C0B433FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:db:8f:10:c9:ed:ae:03:93:0b:45:67:c4: 31:50:30:90:c8:28:9e:78:34:4b:66:30:cf:79:11: 46:00:08:47:bf:99:df:ae:9c:e4:d7:3e:85:80:c8: 24:53:0e:8b:3d:4c:ab:7b:0e:5e:51:b5:5d:ec:66: d6:84:93:61:f8:30:85:07:e5:25:ae:a1:5c:fb:4c: 82:12:95:26:87:76:7d:b5:41:62:42:32:6a:3f:3d: dc:f1:a6:82:c0:67:2f:95:68:cd:35:6d:ab:93:a1: 85:9e:07:c6:e8:a3:6e:e0:6d:16:7d:e6:30:ab:5d: 55:20:6b:1a:4d:f5:1e:85:88:f8:78:b1:75:3d:d2: 4b:d4:10:8e:91:9b:cb:9d:94:73:24:24:21:91:1e: c2:26:63:61:44:6b:ab:af:c2:45:e8:d9:7f:00:42: bd:9d:1b:f6:5c:f5:13:99:05:78:85:a1:8e:e2:e1: f0:52:37:24:84:88:6b:a6:21:64:60:ff:47:9c:57: 68:25:0d:04:4b:26:da:41:7e:d2:39:cd:61:2d:04: 36:cd:ec:21:38:85:91:cd:13:25:71:34:23:51:34: 47:02:05:59:97:a2:13:a2:53:16:85:81:80:c9:14: 28:57:b4:d2:a2:9b:51:7f:14:2c:76:a3:23:b1:4f: c3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:40:74:57:AD:D9:23:09:6A:51:F9:CB:5D:3E:F5:B8:C0:B4:33:FD X509v3 Authority Key Identifier: keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34312e302f32342d3234203d3e203136323736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.41.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:18:95:09:55:2e:1b:1f:b8:e1:90:bb:b8:0b:d7:09:8b:a3: f8:68:a5:b4:e3:f6:db:7f:22:0e:93:8f:b6:e1:db:2a:98:b1: 4c:14:fa:a6:a9:8b:57:11:e1:24:2c:93:42:e8:1d:4e:5d:43: 3b:61:c8:df:07:60:d4:d0:fd:80:be:7c:24:18:c8:79:65:96: 44:ef:b4:b2:64:58:a0:73:5c:6c:8c:d1:0a:c7:94:39:11:8c: 99:14:7f:3c:b0:1f:84:89:81:ad:65:ba:5f:80:e9:92:61:e2: 6b:f2:4b:b9:f3:50:fd:55:a9:81:d7:3e:be:ff:c6:dc:45:44: f8:58:22:5c:6c:cb:c1:7c:4f:32:49:6f:d1:b8:21:13:68:80: 9c:43:c5:e1:bb:4f:31:3e:58:0d:6b:4b:68:a5:85:26:34:72: ec:fc:3b:53:ae:c9:7e:55:31:20:4e:01:88:13:f7:67:b0:61: 9a:dd:6c:25:ad:9f:33:b9:6e:dd:0f:83:b5:a0:12:02:3b:6c: e4:ce:50:66:67:67:95:eb:ad:81:51:b6:11:48:a0:a5:f9:f4: a0:f7:18:c7:39:76:99:10:e9:f7:30:9b:0b:b4:6d:95:ca:2e: e4:ed:38:db:1a:d5:48:6f:b9:8d:84:1f:26:cc:3f:d5:97:95: ea:c6:04:81 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUEHY1vuwKeM0wDbIFXrnuQKo4eegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi YWFmNjRjZTAeFw0yNjAxMDkxMDI1MTJaFw0yNzAxMDgxMDMwMTJaMDMxMTAvBgNV BAMTKDNBNDA3NDU3QUREOTIzMDk2QTUxRjlDQjVEM0VGNUI4QzBCNDMzRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCHtuPEMntrgOTC0VnxDFQMJDI KJ54NEtmMM95EUYACEe/md+unOTXPoWAyCRTDos9TKt7Dl5RtV3sZtaEk2H4MIUH 5SWuoVz7TIISlSaHdn21QWJCMmo/PdzxpoLAZy+VaM01bauToYWeB8boo27gbRZ9 5jCrXVUgaxpN9R6FiPh4sXU90kvUEI6Rm8udlHMkJCGRHsImY2FEa6uvwkXo2X8A Qr2dG/Zc9ROZBXiFoY7i4fBSNySEiGumIWRg/0ecV2glDQRLJtpBftI5zWEtBDbN 7CE4hZHNEyVxNCNRNEcCBVmXohOiUxaFgYDJFChXtNKim1F/FCx2oyOxT8MBAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUOkB0V63ZIwlqUfnLXT71uMC0M/0wHwYDVR0j BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx dlpNNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzEzODM1MmUzMjM1MzAyZTM0 MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM2MzIzNzM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA ufopMA0GCSqGSIb3DQEBCwUAA4IBAQBNGJUJVS4bH7jhkLu4C9cJi6P4aKW04/bb fyIOk4+24dsqmLFMFPqmqYtXEeEkLJNC6B1OXUM7YcjfB2DU0P2AvnwkGMh5ZZZE 77SyZFigc1xsjNEKx5Q5EYyZFH88sB+EiYGtZbpfgOmSYeJr8ku581D9VamB1z6+ /8bcRUT4WCJcbMvBfE8ySW/RuCETaICcQ8Xhu08xPlgNa0topYUmNHLs/DtTrsl+ VTEgTgGIE/dnsGGa3WwlrZ8zuW7dD4O1oBICO2zkzlBmZ2eV662BUbYRSKCl+fSg 9xjHOXaZEOn3MJsLtG2Vyi7k7TjbGtVIb7mNhB8mzD/Vl5XqxgSB -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:40 2026 by rpki-client