This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139342e302f32342d3234203d3e203631333137.roa File: 3139332e3130392e3139342e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: VUdH3MlUpSHyLylCHM5AoDrexAs9Y9TDOa0DQGEpzSs= Subject key identifier: D7:2E:6F:31:6D:B6:AE:27:40:DD:56:70:4F:A0:F6:B9:47:9E:1E:C1 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 68366E491900DA71615640A5315DD21C13ED57FF Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139342e302f32342d3234203d3e203631333137.roa Signing time: Sat 13 Dec 2025 09:11:29 +0000 ROA not before: Sat 13 Dec 2025 09:06:29 +0000 ROA not after: Sat 12 Dec 2026 09:11:29 +0000 asID: 61317 IP address blocks: 193.109.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 17:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:36:6e:49:19:00:da:71:61:56:40:a5:31:5d:d2:1c:13:ed:57:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:29 2025 GMT Not After : Dec 12 09:11:29 2026 GMT Subject: CN=D72E6F316DB6AE2740DD56704FA0F6B9479E1EC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:08:b1:98:85:6c:3f:6c:a0:e4:3b:21:fb:6d: d1:d5:c8:6a:46:3f:24:4d:d2:d9:f1:b3:f0:96:3c: e6:c2:0d:42:a0:17:53:44:07:fd:8c:65:0b:b6:b3: b5:c8:46:f0:ac:80:bf:1b:a4:f6:4d:28:b4:ab:3a: c1:97:72:33:0a:ef:95:c3:85:74:18:cd:60:b2:97: f5:2b:9d:e9:22:2d:18:3d:89:d8:63:da:ee:aa:b5: f5:fd:ff:97:84:27:3e:83:bd:5c:66:00:5c:a0:bd: ed:98:ce:1c:e4:3e:0d:e3:89:6c:c9:aa:1f:8c:a2: 01:5d:54:6f:20:8f:bc:a7:ae:ae:e3:6f:80:73:91: 1d:a0:d0:ab:bd:7e:a6:9d:c8:7e:e3:d4:47:2e:17: cd:5f:15:47:a6:c5:14:ca:fb:32:1e:92:93:45:57: 5f:d4:b2:52:7f:4c:3e:b8:f3:71:64:53:c9:e6:87: ec:53:04:ef:8d:e8:db:ae:0e:42:e5:ee:5d:bd:8a: db:c3:42:71:d4:ad:40:6b:bd:f1:c7:69:bd:f8:ee: f3:5c:cd:68:b4:bd:db:56:77:46:d4:15:8c:b9:2d: d5:c5:ab:bd:87:63:39:c5:57:13:3b:5f:a0:fb:08: 96:ce:a1:f3:51:c3:03:b4:eb:55:f0:a1:01:28:85: 63:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2E:6F:31:6D:B6:AE:27:40:DD:56:70:4F:A0:F6:B9:47:9E:1E:C1 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139342e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.194.0/24 Signature Algorithm: sha256WithRSAEncryption 43:54:5d:fe:ac:e7:cc:84:a0:d1:fe:c3:54:3a:bd:a5:14:d3: 91:42:dc:86:bd:d2:03:60:ff:9d:1b:ef:30:ef:3b:4c:52:97: f0:bb:ff:b4:77:5f:ac:25:af:20:11:73:ae:e3:55:90:04:28: 1c:86:60:b7:f8:8b:0f:a2:c0:26:17:4c:31:09:c8:2e:32:19: 34:80:c0:a4:10:4f:a2:87:9b:1d:90:df:d0:75:bb:17:06:a1: f8:65:0d:b2:21:b0:75:d4:2b:81:93:fe:8f:9b:a8:41:d6:bb: e1:de:1d:0a:7e:d1:0c:1a:c3:7d:3b:54:e8:34:ac:98:4d:82: 79:95:db:22:0c:f1:92:0b:bc:6b:f5:6e:2f:84:18:c6:68:17: 03:ce:45:b4:9e:74:ff:25:2b:1f:f0:75:77:67:3e:73:46:e7: ea:1d:85:08:86:99:63:bf:a2:a8:92:a1:c9:9d:80:5e:b6:9c: c8:7d:7b:a3:93:97:c6:b8:4f:28:44:42:a3:87:f1:58:88:be: f3:de:31:38:19:47:24:0b:b1:7c:a8:ce:d6:6a:5b:dc:37:69: ee:da:56:f6:83:bf:12:37:28:a9:86:20:39:b5:52:6d:70:be: f9:c2:ab:07:81:4d:8c:75:82:69:86:f1:a1:6a:87:51:4b:f3: dc:79:ff:9e -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUaDZuSRkA2nFhVkClMV3SHBPtV/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MjlaFw0yNjEyMTIwOTExMjlaMDMxMTAvBgNV BAMTKEQ3MkU2RjMxNkRCNkFFMjc0MERENTY3MDRGQTBGNkI5NDc5RTFFQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUCLGYhWw/bKDkOyH7bdHVyGpG PyRN0tnxs/CWPObCDUKgF1NEB/2MZQu2s7XIRvCsgL8bpPZNKLSrOsGXcjMK75XD hXQYzWCyl/UrnekiLRg9idhj2u6qtfX9/5eEJz6DvVxmAFygve2YzhzkPg3jiWzJ qh+MogFdVG8gj7ynrq7jb4BzkR2g0Ku9fqadyH7j1EcuF81fFUemxRTK+zIekpNF V1/UslJ/TD6483FkU8nmh+xTBO+N6NuuDkLl7l29itvDQnHUrUBrvfHHab347vNc zWi0vdtWd0bUFYy5LdXFq72HYznFVxM7X6D7CJbOofNRwwO061XwoQEohWPVAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU1y5vMW22ridA3VZwT6D2uUeeHsEwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzOTMzMmUzMTMwMzkyZTMx MzkzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADBbcIwDQYJKoZIhvcNAQELBQADggEBAENUXf6s58yEoNH+w1Q6vaUU05FC3Ia9 0gNg/50b7zDvO0xSl/C7/7R3X6wlryARc67jVZAEKByGYLf4iw+iwCYXTDEJyC4y GTSAwKQQT6KHmx2Q39B1uxcGofhlDbIhsHXUK4GT/o+bqEHWu+HeHQp+0Qwaw307 VOg0rJhNgnmV2yIM8ZILvGv1bi+EGMZoFwPORbSedP8lKx/wdXdnPnNG5+odhQiG mWO/oqiSocmdgF62nMh9e6OTl8a4TyhEQqOH8ViIvvPeMTgZRyQLsXyoztZqW9w3 ae7aVvaDvxI3KKmGIDm1Um1wvvnCqweBTYx1gmmG8aFqh1FL89x5/54= -----END CERTIFICATE-----Generated at Tue Dec 16 05:18:35 2025 by rpki-client