This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139322e302f32342d3234203d3e20343030303339.roa File: 3139332e3130392e3139322e302f32342d3234203d3e20343030303339.roa (raw, json) Hash identifier: 42O0P9Nztb9yOpc/DuQykJMEvRDpsUgb2/RWGNMucpQ= Subject key identifier: F4:AD:E2:69:97:E5:EC:B4:CE:ED:92:0D:1E:99:1C:59:70:10:C0:AF Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 431BEF66D4361D7BD77BF76CBAACA00914B94AEC Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139322e302f32342d3234203d3e20343030303339.roa Signing time: Sat 13 Dec 2025 09:11:30 +0000 ROA not before: Sat 13 Dec 2025 09:06:30 +0000 ROA not after: Sat 12 Dec 2026 09:11:30 +0000 asID: 400039 IP address blocks: 193.109.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 17:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:1b:ef:66:d4:36:1d:7b:d7:7b:f7:6c:ba:ac:a0:09:14:b9:4a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:30 2025 GMT Not After : Dec 12 09:11:30 2026 GMT Subject: CN=F4ADE26997E5ECB4CEED920D1E991C597010C0AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:78:9b:a6:96:bf:b6:b3:e4:be:b0:96:0d:c0: 9f:b2:22:65:74:f3:81:23:c5:dc:b9:9f:a5:22:52: cc:1c:c5:2e:c8:7e:26:af:38:f5:b2:ac:56:0e:4a: a7:75:8c:5f:4d:cd:48:1c:2d:19:63:c5:74:3b:e1: 3b:1a:ab:b3:11:be:39:89:e2:59:e4:4e:76:71:6a: f4:7b:7f:e6:a0:24:c2:52:f0:59:86:c4:f5:f6:a4: 75:11:22:79:81:3e:f0:be:26:85:5a:19:d6:b1:87: fb:29:d5:ac:20:95:72:09:8c:78:82:4b:72:b8:e5: ee:39:d0:e4:03:42:4f:21:8a:17:2b:fb:b2:fb:f6: 3c:b6:49:17:af:5e:52:5e:59:6e:98:bb:a8:e4:90: e9:e1:3d:09:49:15:7b:c2:c1:15:d3:47:b9:8c:f5: 73:ac:71:ad:95:c6:65:3d:a4:61:c2:28:96:98:3e: 71:bb:bc:6e:e6:ae:98:be:f3:89:55:a5:6d:b8:c3: d7:ef:cf:43:d9:02:49:fc:8b:83:91:53:ff:c9:a0: 5c:f9:98:7d:62:33:77:98:64:8a:4e:5a:69:a0:9a: 2e:ad:0d:d8:65:7f:51:65:48:b7:07:ea:2f:5a:fd: a8:82:f2:64:c9:a2:53:04:a7:57:ba:aa:9b:5e:60: 6f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AD:E2:69:97:E5:EC:B4:CE:ED:92:0D:1E:99:1C:59:70:10:C0:AF X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139322e302f32342d3234203d3e20343030303339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.192.0/24 Signature Algorithm: sha256WithRSAEncryption 57:46:9c:03:ac:25:4d:8a:2c:79:7e:d3:95:ea:10:10:3c:4e: 86:47:22:90:b2:a3:5e:a7:19:c8:d3:3d:21:e9:10:ab:14:e9: d3:67:83:fe:1b:d7:f3:9b:a8:61:df:ae:63:22:3f:f5:d9:e8: b7:35:fc:16:12:4d:ee:be:29:f6:c5:c5:3a:4b:bb:02:23:3a: 5d:68:c2:2b:0a:8a:32:61:0e:26:ab:b2:0e:e0:76:ed:31:63: 0d:13:aa:9a:da:2f:ee:6e:26:7e:05:e5:1e:89:d3:d4:19:f9: 3c:99:0c:33:c3:2c:ed:3e:45:80:c4:63:1f:f9:65:81:23:94: fe:bc:55:20:35:51:1b:c3:e2:d6:1d:96:9f:44:7b:42:d1:0c: 1f:19:a7:06:0d:8d:62:00:dc:40:bf:e4:df:38:a6:2a:86:b8: be:df:78:5d:39:f6:f6:40:81:4c:9c:7c:60:2a:59:8e:a6:e3: c3:e6:42:45:10:1f:99:f9:d5:68:1f:71:f0:77:e2:de:a3:2e: 38:d3:f2:4d:44:49:ac:1e:13:03:43:6e:52:9e:84:78:4b:52: 80:4b:5a:7b:03:65:1c:d8:03:d6:58:6c:69:d9:d2:a7:45:7d: 71:0e:bd:0d:38:11:b3:c1:08:5f:96:58:0d:41:a1:54:9e:39: 77:e0:a3:3b -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUQxvvZtQ2HXvXe/dsuqygCRS5SuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzBaFw0yNjEyMTIwOTExMzBaMDMxMTAvBgNV BAMTKEY0QURFMjY5OTdFNUVDQjRDRUVEOTIwRDFFOTkxQzU5NzAxMEMwQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCeJumlr+2s+S+sJYNwJ+yImV0 84Ejxdy5n6UiUswcxS7IfiavOPWyrFYOSqd1jF9NzUgcLRljxXQ74Tsaq7MRvjmJ 4lnkTnZxavR7f+agJMJS8FmGxPX2pHURInmBPvC+JoVaGdaxh/sp1awglXIJjHiC S3K45e450OQDQk8hihcr+7L79jy2SRevXlJeWW6Yu6jkkOnhPQlJFXvCwRXTR7mM 9XOsca2VxmU9pGHCKJaYPnG7vG7mrpi+84lVpW24w9fvz0PZAkn8i4ORU//JoFz5 mH1iM3eYZIpOWmmgmi6tDdhlf1FlSLcH6i9a/aiC8mTJolMEp1e6qpteYG+jAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQU9K3iaZfl7LTO7ZINHpkcWXAQwK8wHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzOTMzMmUzMTMwMzkyZTMx MzkzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMDMwMzMzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMFtwDANBgkqhkiG9w0BAQsFAAOCAQEAV0acA6wlTYoseX7TleoQEDxOhkci kLKjXqcZyNM9IekQqxTp02eD/hvX85uoYd+uYyI/9dnotzX8FhJN7r4p9sXFOku7 AiM6XWjCKwqKMmEOJquyDuB27TFjDROqmtov7m4mfgXlHonT1Bn5PJkMM8Ms7T5F gMRjH/llgSOU/rxVIDVRG8Pi1h2Wn0R7QtEMHxmnBg2NYgDcQL/k3zimKoa4vt94 XTn29kCBTJx8YCpZjqbjw+ZCRRAfmfnVaB9x8Hfi3qMuONPyTURJrB4TA0NuUp6E eEtSgEtaewNlHNgD1lhsadnSp0V9cQ69DTgRs8EIX5ZYDUGhVJ45d+CjOw== -----END CERTIFICATE-----Generated at Tue Dec 16 05:18:04 2025 by rpki-client