This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139332e302f32342d3234203d3e20323132323338.roa File: 3139332e3130392e3139332e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: +IyckSW8488gcuiJxDgFK5KfQHdyEkpbZbkvH9fqURg= Subject key identifier: 4A:4F:F6:48:70:DF:5A:A8:EF:2F:BF:E4:31:81:AF:0D:48:4F:67:88 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 52F82382D3D4B0A35B3348D20FFE8E7E0D0FA5C7 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139332e302f32342d3234203d3e20323132323338.roa Signing time: Sat 13 Dec 2025 09:11:31 +0000 ROA not before: Sat 13 Dec 2025 09:06:31 +0000 ROA not after: Sat 12 Dec 2026 09:11:31 +0000 asID: 212238 IP address blocks: 193.109.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 17:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:f8:23:82:d3:d4:b0:a3:5b:33:48:d2:0f:fe:8e:7e:0d:0f:a5:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:31 2025 GMT Not After : Dec 12 09:11:31 2026 GMT Subject: CN=4A4FF64870DF5AA8EF2FBFE43181AF0D484F6788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8c:25:03:c2:e6:f7:41:f4:fc:fa:53:70:8f: ba:85:c5:d4:b9:10:a1:ea:98:d7:9a:99:0e:13:8d: 3e:69:55:3e:fc:9d:92:0c:5b:3d:d2:73:13:cf:8f: 2a:17:6e:cc:c5:2b:82:2a:17:49:26:e5:e4:39:2b: 26:89:12:f5:f5:4c:86:45:2b:e7:15:12:58:4c:e4: 54:a9:e8:85:a5:82:19:54:b5:93:1b:76:e3:c5:8b: 6d:62:56:b3:b2:d5:ea:de:2a:b8:41:39:07:bf:74: ec:40:6b:00:f7:0b:cb:1f:1c:1f:91:6d:04:b8:ad: d8:93:cc:e0:5f:54:94:95:85:4c:85:01:49:cb:68: fc:1f:b3:72:ca:f1:e4:86:ed:38:9d:02:f4:44:c8: f2:cd:ff:1c:8a:fd:52:bf:63:fc:35:30:7b:41:23: 4e:16:e7:f5:83:16:3a:8b:2a:4f:39:ec:8e:88:58: 85:35:b2:ca:d6:f4:f8:35:fc:f0:71:d0:fe:d0:c9: e4:d7:7b:b3:c6:82:0b:96:b4:c6:3b:05:c4:39:90: 99:d2:6a:e6:30:dc:3e:30:f4:59:39:9a:f4:05:9c: 6c:9c:e1:26:49:3c:84:40:ba:b7:54:70:cd:a7:86: 9a:0c:35:4f:52:3f:68:6a:10:9b:93:14:0e:b1:16: ff:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4F:F6:48:70:DF:5A:A8:EF:2F:BF:E4:31:81:AF:0D:48:4F:67:88 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139332e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.193.0/24 Signature Algorithm: sha256WithRSAEncryption 44:32:6a:86:90:ac:de:4d:8c:31:0e:ef:e3:13:8d:54:83:af: c8:68:ac:c6:bf:43:11:22:f8:f5:e5:66:af:57:4f:36:f7:8a: 67:65:9e:5b:ca:f1:52:86:74:c0:82:ba:eb:3a:ee:f4:f6:8f: f1:2a:8c:07:ff:e0:1c:68:09:af:dc:7e:6c:42:d7:da:03:c0: 27:67:7b:a9:c3:9d:fc:6d:b1:3d:98:0d:01:09:63:e9:c2:c2: 21:89:c0:c0:61:38:c4:ab:a5:bd:d2:87:7c:14:9d:a6:ca:79: 1f:31:78:5d:f9:76:14:76:bb:94:e0:cd:3f:1e:da:c7:8d:6d: 9e:d3:f2:df:70:3a:30:32:ab:37:dc:2d:92:00:e7:03:4f:34: 6b:c0:33:dc:7e:f6:0c:b9:db:c1:13:ad:d3:3c:4a:cb:e6:e0: 3f:1b:07:0d:40:4b:b0:76:b3:11:9e:f2:9e:32:ef:e7:16:07: 11:b5:94:78:bc:65:74:e0:59:c2:f4:80:33:9a:1d:1d:61:8d: 09:9b:2a:17:f2:a6:b9:e6:81:99:c8:f7:11:1d:f0:25:58:c5: 2f:dd:bf:20:59:fb:e6:39:91:02:78:fe:df:dd:f5:66:d6:fb: 5f:36:7e:47:21:a9:c3:39:ff:f9:a3:7f:e8:ae:55:10:05:05: 9e:1a:60:1d -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUUvgjgtPUsKNbM0jSD/6Ofg0PpccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzFaFw0yNjEyMTIwOTExMzFaMDMxMTAvBgNV BAMTKDRBNEZGNjQ4NzBERjVBQThFRjJGQkZFNDMxODFBRjBENDg0RjY3ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEjCUDwub3QfT8+lNwj7qFxdS5 EKHqmNeamQ4TjT5pVT78nZIMWz3ScxPPjyoXbszFK4IqF0km5eQ5KyaJEvX1TIZF K+cVElhM5FSp6IWlghlUtZMbduPFi21iVrOy1ereKrhBOQe/dOxAawD3C8sfHB+R bQS4rdiTzOBfVJSVhUyFAUnLaPwfs3LK8eSG7TidAvREyPLN/xyK/VK/Y/w1MHtB I04W5/WDFjqLKk857I6IWIU1ssrW9Pg1/PBx0P7QyeTXe7PGgguWtMY7BcQ5kJnS auYw3D4w9Fk5mvQFnGyc4SZJPIRAurdUcM2nhpoMNU9SP2hqEJuTFA6xFv/XAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUSk/2SHDfWqjvL7/kMYGvDUhPZ4gwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzOTMzMmUzMTMwMzkyZTMx MzkzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMyMzMzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMFtwTANBgkqhkiG9w0BAQsFAAOCAQEARDJqhpCs3k2MMQ7v4xONVIOvyGis xr9DESL49eVmr1dPNveKZ2WeW8rxUoZ0wIK66zru9PaP8SqMB//gHGgJr9x+bELX 2gPAJ2d7qcOd/G2xPZgNAQlj6cLCIYnAwGE4xKulvdKHfBSdpsp5HzF4Xfl2FHa7 lODNPx7ax41tntPy33A6MDKrN9wtkgDnA080a8Az3H72DLnbwROt0zxKy+bgPxsH DUBLsHazEZ7ynjLv5xYHEbWUeLxldOBZwvSAM5odHWGNCZsqF/KmueaBmcj3ER3w JVjFL92/IFn75jmRAnj+3931Ztb7XzZ+RyGpwzn/+aN/6K5VEAUFnhpgHQ== -----END CERTIFICATE-----Generated at Tue Dec 16 05:18:36 2025 by rpki-client