This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa File: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (raw, json) Hash identifier: BWn7Fyc71HS3Qx09imcUTYAlGWvzW8ei/YZ4vwsjDbQ= Subject key identifier: E0:C2:BB:67:F7:FE:5A:18:36:86:3C:FB:0B:C7:12:53:F2:CA:3B:2B Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e Certificate serial: 61D83384F460CEE2BA7265EC4D0796C1F0784736 Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa Signing time: Thu 08 Jan 2026 07:55:33 +0000 ROA not before: Thu 08 Jan 2026 07:50:33 +0000 ROA not after: Thu 07 Jan 2027 07:55:33 +0000 asID: 212384 IP address blocks: 213.139.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 18:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d8:33:84:f4:60:ce:e2:ba:72:65:ec:4d:07:96:c1:f0:78:47:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e Validity Not Before: Jan 8 07:50:33 2026 GMT Not After : Jan 7 07:55:33 2027 GMT Subject: CN=E0C2BB67F7FE5A1836863CFB0BC71253F2CA3B2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a2:52:5a:08:a5:af:d3:52:82:14:e1:6f:40: 7a:42:f2:e9:2c:6d:10:1d:d0:b7:02:ba:03:42:fd: 01:31:d7:75:91:a4:1f:6c:0c:26:2a:09:4b:b0:9c: 58:a7:d0:c7:05:72:da:24:33:8f:a7:67:3b:d6:be: 3f:01:14:86:4f:98:47:5c:6b:22:25:32:25:1f:ce: 97:f2:08:97:8e:ee:76:08:45:2c:8e:5a:f5:92:a0: a0:b2:5c:95:6a:2a:1a:d7:74:be:cc:e4:b1:a1:e9: 50:70:68:3f:9e:41:c5:67:a0:56:d9:01:b5:10:76: 03:9e:62:fe:8e:9a:6a:de:35:85:c7:a3:d4:90:4a: 81:65:78:8c:c5:29:b0:23:8c:57:ea:d6:eb:79:c3: fd:29:a5:df:01:94:47:c1:30:8f:90:5a:5c:15:f2: 0a:71:76:72:9d:01:9d:bf:ac:23:4a:8f:b7:ce:d1: 57:99:5f:f5:a6:f5:f0:4a:d9:de:59:7e:f5:00:74: c1:07:72:f8:e0:2d:1a:55:0c:42:de:50:be:cc:de: 6d:b7:84:0e:4a:f1:88:81:ef:e3:81:70:b3:da:16: b5:77:ec:6d:a5:31:17:58:59:7f:75:31:ac:ae:3f: fe:54:62:cd:31:68:94:fd:02:32:4b:8d:67:cf:99: a7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C2:BB:67:F7:FE:5A:18:36:86:3C:FB:0B:C7:12:53:F2:CA:3B:2B X509v3 Authority Key Identifier: keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.139.76.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:97:0d:bf:1b:b2:8b:0c:5b:e9:9c:3d:e7:03:61:54:88:71: a4:40:3c:fa:3c:cc:89:c8:8a:12:aa:7a:54:3f:29:be:bf:1d: 70:c7:a8:07:2b:5f:0e:c6:41:16:1e:49:08:ba:2e:47:8a:e6: 1b:a0:a5:eb:21:de:25:9b:54:9d:76:9b:f2:d8:1e:34:b1:b6: f1:02:41:27:6a:eb:7a:b3:fb:46:06:28:bd:d3:49:87:8f:11: ec:90:05:0e:0a:18:8c:00:71:cf:1d:04:25:fd:fd:44:b8:7a: fe:29:62:0c:89:27:35:bd:8a:f0:4e:d2:69:7a:e2:e3:0f:06: 00:24:ea:ae:2c:a3:33:77:e4:84:6f:a7:64:4f:34:76:f7:a1: a1:bd:ad:c1:8d:b3:c7:66:c0:f7:6c:46:dc:2a:d7:6c:98:f9: 9b:74:bd:72:4f:bb:f1:d2:59:b9:d0:1e:3f:04:dd:dd:9d:3e: 51:4a:3a:bc:84:8d:1e:c3:dc:24:43:c9:34:44:62:c7:28:74: 02:b5:21:47:bb:97:88:a8:4c:22:dd:9a:87:31:12:77:62:0d: 56:52:81:57:07:a0:f4:24:c9:c8:c6:45:c2:f3:3c:e5:f0:55: 39:35:f7:95:60:18:88:6a:88:e7:49:86:13:40:45:32:b4:51: b6:cb:eb:c8 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUYdgzhPRgzuK6cmXsTQeWwfB4RzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk NDhjN2QzZTAeFw0yNjAxMDgwNzUwMzNaFw0yNzAxMDcwNzU1MzNaMDMxMTAvBgNV BAMTKEUwQzJCQjY3RjdGRTVBMTgzNjg2M0NGQjBCQzcxMjUzRjJDQTNCMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDColJaCKWv01KCFOFvQHpC8uks bRAd0LcCugNC/QEx13WRpB9sDCYqCUuwnFin0McFctokM4+nZzvWvj8BFIZPmEdc ayIlMiUfzpfyCJeO7nYIRSyOWvWSoKCyXJVqKhrXdL7M5LGh6VBwaD+eQcVnoFbZ AbUQdgOeYv6OmmreNYXHo9SQSoFleIzFKbAjjFfq1ut5w/0ppd8BlEfBMI+QWlwV 8gpxdnKdAZ2/rCNKj7fO0VeZX/Wm9fBK2d5ZfvUAdMEHcvjgLRpVDELeUL7M3m23 hA5K8YiB7+OBcLPaFrV37G2lMRdYWX91MayuP/5UYs0xaJT9AjJLjWfPmaf7AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU4MK7Z/f+Whg2hjz7C8cSU/LKOyswHwYDVR0j BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT TWZUNC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM3 MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMzM4MzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADVi0wwDQYJKoZIhvcNAQELBQADggEBAAqXDb8bsosMW+mcPecDYVSIcaRAPPo8 zInIihKqelQ/Kb6/HXDHqAcrXw7GQRYeSQi6LkeK5hugpesh3iWbVJ12m/LYHjSx tvECQSdq63qz+0YGKL3TSYePEeyQBQ4KGIwAcc8dBCX9/US4ev4pYgyJJzW9ivBO 0ml64uMPBgAk6q4sozN35IRvp2RPNHb3oaG9rcGNs8dmwPdsRtwq12yY+Zt0vXJP u/HSWbnQHj8E3d2dPlFKOryEjR7D3CRDyTREYscodAK1IUe7l4ioTCLdmocxEndi DVZSgVcHoPQkycjGRcLzPOXwVTk195VgGIhqiOdJhhNARTK0UbbL68g= -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:02 2026 by rpki-client