This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139372e302f32342d3234203d3e20313335333931.roa File: 3139332e3130392e3139372e302f32342d3234203d3e20313335333931.roa (raw, json) Hash identifier: GT01IL6l3phOCDnxOV83Iei+zV/IqiEzdvVAts/cvNo= Subject key identifier: D8:48:2D:4B:C4:59:95:D3:73:ED:16:EE:87:06:EB:69:E2:99:EE:AE Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 4A03EEC7732D1B9D687EF5242F5EC4D512E43CD6 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139372e302f32342d3234203d3e20313335333931.roa Signing time: Sat 13 Dec 2025 09:11:29 +0000 ROA not before: Sat 13 Dec 2025 09:06:29 +0000 ROA not after: Sat 12 Dec 2026 09:11:29 +0000 asID: 135391 IP address blocks: 193.109.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 17:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:03:ee:c7:73:2d:1b:9d:68:7e:f5:24:2f:5e:c4:d5:12:e4:3c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:29 2025 GMT Not After : Dec 12 09:11:29 2026 GMT Subject: CN=D8482D4BC45995D373ED16EE8706EB69E299EEAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3f:48:ae:c3:25:75:2d:43:d3:22:1f:59:cb: cb:c6:41:fe:3c:10:c1:f0:f7:ad:3b:41:94:44:5d: 2b:e6:a2:1b:46:73:18:02:d3:37:84:6e:9a:44:fa: 6f:43:2b:89:30:4b:3b:24:10:e2:8f:f8:89:df:89: db:f9:80:5e:7c:77:5f:f7:d7:be:98:da:07:21:7b: 48:1f:66:a5:86:cd:da:83:8f:42:74:89:b3:5d:f3: cb:74:2b:47:bb:f6:ed:fd:9d:e7:d0:e3:17:7b:ff: f4:b8:ba:e3:98:9e:b6:41:c2:a0:72:52:15:2d:93: 62:22:43:34:16:e9:aa:a0:df:84:01:78:d9:3c:da: e2:ff:55:59:22:8d:90:75:80:f8:05:b9:29:69:0e: b0:fa:23:d2:ce:b5:69:88:63:69:33:56:48:9d:b3: b5:93:ee:3f:56:a1:0d:91:73:e5:c0:50:77:0a:ed: 5c:fb:88:80:0f:03:69:1a:5e:4d:21:8c:43:41:20: a9:32:bf:57:1b:0f:89:f5:fc:b9:f3:98:ae:61:88: 13:a8:7e:e2:a8:3d:e4:31:fe:72:5b:c8:ca:3b:c7: be:e8:42:83:18:9b:94:7b:6e:77:50:f1:9f:be:90: b5:e3:fe:90:39:d5:b0:35:fa:61:3d:db:88:3b:92: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:48:2D:4B:C4:59:95:D3:73:ED:16:EE:87:06:EB:69:E2:99:EE:AE X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139372e302f32342d3234203d3e20313335333931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.197.0/24 Signature Algorithm: sha256WithRSAEncryption 75:49:33:60:03:2c:c4:79:4b:9e:c9:93:a1:38:f4:94:e5:ce: 76:a3:e4:f8:53:9e:f7:62:99:b7:09:ca:dc:f0:02:99:ab:81: 60:71:63:b8:a5:8d:ab:d1:2c:34:5a:7e:7e:24:ea:02:18:26: 4f:99:08:8d:9c:a3:e8:a3:4b:3b:b1:0f:ef:aa:51:e0:70:2f: be:4b:6c:30:19:f6:25:e5:7e:ec:ba:bc:06:4b:2d:bc:70:4c: d3:54:c9:14:ec:52:a0:4b:ff:19:3d:d0:c4:bb:69:ac:b2:8c: ab:80:f1:df:63:5d:81:29:b4:53:d5:87:15:fe:b6:3d:a6:11: e8:9a:39:19:46:81:52:19:9e:bd:34:e4:2c:8b:56:fd:75:a0: 40:1c:eb:df:b9:d0:85:b0:5d:69:c9:cf:b2:4c:e6:22:a9:9b: 7a:af:59:ce:20:1e:00:c6:aa:5f:e6:ad:49:9f:a3:72:5b:15: b6:7a:d9:32:de:0d:b8:0e:b5:96:7d:2f:24:d6:b2:2b:df:2a: 34:00:a6:e0:be:ef:78:76:1c:29:2b:a2:69:e6:83:d2:53:bb: b5:1a:16:27:f0:fa:d1:61:ee:09:8d:c9:c0:03:e2:7d:46:27: 89:30:e8:79:af:81:c4:5d:e0:81:28:e9:f7:3c:3b:2d:4e:2c: 27:97:73:76 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUSgPux3MtG51ofvUkL17E1RLkPNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MjlaFw0yNjEyMTIwOTExMjlaMDMxMTAvBgNV BAMTKEQ4NDgyRDRCQzQ1OTk1RDM3M0VEMTZFRTg3MDZFQjY5RTI5OUVFQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEP0iuwyV1LUPTIh9Zy8vGQf48 EMHw9607QZREXSvmohtGcxgC0zeEbppE+m9DK4kwSzskEOKP+Infidv5gF58d1/3 176Y2gche0gfZqWGzdqDj0J0ibNd88t0K0e79u39nefQ4xd7//S4uuOYnrZBwqBy UhUtk2IiQzQW6aqg34QBeNk82uL/VVkijZB1gPgFuSlpDrD6I9LOtWmIY2kzVkid s7WT7j9WoQ2Rc+XAUHcK7Vz7iIAPA2kaXk0hjENBIKkyv1cbD4n1/LnzmK5hiBOo fuKoPeQx/nJbyMo7x77oQoMYm5R7bndQ8Z++kLXj/pA51bA1+mE924g7kl3VAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQU2EgtS8RZldNz7RbuhwbraeKZ7q4wHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzOTMzMmUzMTMwMzkyZTMx MzkzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTMzMzkzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMFtxTANBgkqhkiG9w0BAQsFAAOCAQEAdUkzYAMsxHlLnsmToTj0lOXOdqPk +FOe92KZtwnK3PACmauBYHFjuKWNq9EsNFp+fiTqAhgmT5kIjZyj6KNLO7EP76pR 4HAvvktsMBn2JeV+7Lq8BkstvHBM01TJFOxSoEv/GT3QxLtprLKMq4Dx32NdgSm0 U9WHFf62PaYR6Jo5GUaBUhmevTTkLItW/XWgQBzr37nQhbBdacnPskzmIqmbeq9Z ziAeAMaqX+atSZ+jclsVtnrZMt4NuA61ln0vJNayK98qNACm4L7veHYcKSuiaeaD 0lO7tRoWJ/D60WHuCY3JwAPifUYniTDoea+BxF3ggSjp9zw7LU4sJ5dzdg== -----END CERTIFICATE-----Generated at Tue Dec 16 05:18:51 2025 by rpki-client