This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139332e3136392e37382e302f32332d3233203d3e203438343335.roa File: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (raw, json) Hash identifier: CCPO6h/MpNSX08leEvwwJIjESWw2OEutpIc59PlyY9E= Subject key identifier: 74:C1:D3:BD:CC:D8:A7:7B:CC:83:C1:CF:C6:13:3D:2F:ED:F6:66:4D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 28CDB747077BE425E5554178ED061CA8511F755B Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139332e3136392e37382e302f32332d3233203d3e203438343335.roa Signing time: Tue 20 Jan 2026 17:55:34 +0000 ROA not before: Tue 20 Jan 2026 17:50:34 +0000 ROA not after: Tue 19 Jan 2027 17:55:34 +0000 asID: 48435 IP address blocks: 193.169.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:cd:b7:47:07:7b:e4:25:e5:55:41:78:ed:06:1c:a8:51:1f:75:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Jan 20 17:50:34 2026 GMT Not After : Jan 19 17:55:34 2027 GMT Subject: CN=74C1D3BDCCD8A77BCC83C1CFC6133D2FEDF6664D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4d:84:b6:35:c4:a0:b7:56:ee:d0:d8:81:18: 2a:2a:9c:8f:28:21:bd:27:e8:ef:bf:8d:75:66:6b: 7b:04:fc:0e:58:e7:33:a8:99:45:83:9a:26:fc:79: 40:4f:9e:fd:3a:9e:86:d0:d6:d0:82:69:aa:bf:0d: 29:c0:54:95:61:c2:26:b1:9b:10:37:73:e7:a3:f3: 45:00:dd:77:76:9e:0b:cf:1e:ce:d0:82:f0:4b:a6: 08:16:3d:d8:ca:56:04:cc:1f:43:21:0d:e2:e5:78: cc:de:b9:05:90:20:50:f4:f6:3f:90:25:38:98:25: 4a:0c:58:cf:84:4e:ed:0f:b9:22:36:b0:fe:53:6e: 8b:48:6d:00:a7:bf:77:63:48:94:54:2d:66:c1:a2: c1:28:24:93:12:48:44:df:a9:74:46:fc:aa:98:db: 3a:07:dd:43:e6:62:c4:f1:a5:ee:65:85:f3:2f:6e: 0f:13:08:f6:3d:38:cb:8d:ac:83:76:cc:8c:49:e0: 0f:87:9d:de:9b:c2:6f:8e:27:84:a4:d7:70:8c:c3: bd:3c:2c:79:8f:e0:b3:e4:eb:79:26:c5:df:3b:53: 3e:6a:10:2c:47:d6:d1:1f:1e:a1:7b:06:7c:84:31: 79:09:64:1a:8f:a5:6f:0a:74:d2:9f:c9:75:a5:29: 4c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C1:D3:BD:CC:D8:A7:7B:CC:83:C1:CF:C6:13:3D:2F:ED:F6:66:4D X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139332e3136392e37382e302f32332d3233203d3e203438343335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.78.0/23 Signature Algorithm: sha256WithRSAEncryption 92:f9:ff:08:33:02:d9:46:92:02:0a:47:10:a1:52:d4:d6:bd: 9b:2f:cd:8c:78:1f:2b:eb:82:d7:51:8d:b8:ad:bd:84:e4:be: 25:89:57:ce:dd:6f:d8:64:72:c4:46:cb:2b:19:9b:b4:7d:6b: 27:71:fa:69:7e:2d:87:eb:8c:fe:e5:cb:83:f5:d8:e4:a6:7e: 8c:60:37:62:44:d7:d7:89:6e:cf:f7:7a:0b:75:fd:7c:7e:4e: 9a:50:2a:3f:8d:8f:32:65:32:b4:90:6b:d0:b0:9c:30:3b:49: 1e:c3:88:ac:16:47:ac:e2:97:57:85:fb:d1:c0:c8:36:f0:90: e3:6b:91:e3:77:5c:23:c1:79:de:df:72:4e:d6:63:db:4f:22: df:dd:fc:50:64:54:2f:40:5d:61:01:54:4f:da:3c:72:f7:d9: 0a:da:02:70:38:93:ef:10:04:bb:e3:a4:83:ec:fe:d8:3a:11: 90:c4:96:52:47:29:9c:65:21:5b:7a:79:60:0c:1b:19:49:89: d5:9b:d2:b1:07:e8:26:2d:a7:dd:e0:84:a1:51:56:d2:55:7f: 0f:6a:e3:1b:6e:1a:43:c6:dd:98:5b:51:34:e4:56:d0:a5:92: ed:02:ba:01:ed:50:67:82:8f:74:6a:52:1e:77:f1:d5:7d:c6: de:e9:7e:8e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUKM23Rwd75CXlVUF47QYcqFEfdVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjAxMjAxNzUwMzRaFw0yNzAxMTkxNzU1MzRaMDMxMTAvBgNV BAMTKDc0QzFEM0JEQ0NEOEE3N0JDQzgzQzFDRkM2MTMzRDJGRURGNjY2NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChTYS2NcSgt1bu0NiBGCoqnI8o Ib0n6O+/jXVma3sE/A5Y5zOomUWDmib8eUBPnv06nobQ1tCCaaq/DSnAVJVhwiax mxA3c+ej80UA3Xd2ngvPHs7QgvBLpggWPdjKVgTMH0MhDeLleMzeuQWQIFD09j+Q JTiYJUoMWM+ETu0PuSI2sP5TbotIbQCnv3djSJRULWbBosEoJJMSSETfqXRG/KqY 2zoH3UPmYsTxpe5lhfMvbg8TCPY9OMuNrIN2zIxJ4A+Hnd6bwm+OJ4Sk13CMw708 LHmP4LPk63kmxd87Uz5qECxH1tEfHqF7BnyEMXkJZBqPpW8KdNKfyXWlKUz/AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUdMHTvczYp3vMg8HPxhM9L+32Zk0wHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWMxNDMzODct ZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUxZTRhLzAvMzEzOTMzMmUzMTM2MzkyZTM3 MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzQzMzM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB walOMA0GCSqGSIb3DQEBCwUAA4IBAQCS+f8IMwLZRpICCkcQoVLU1r2bL82MeB8r 64LXUY24rb2E5L4liVfO3W/YZHLERssrGZu0fWsncfppfi2H64z+5cuD9djkpn6M YDdiRNfXiW7P93oLdf18fk6aUCo/jY8yZTK0kGvQsJwwO0kew4isFkes4pdXhfvR wMg28JDja5Hjd1wjwXne33JO1mPbTyLf3fxQZFQvQF1hAVRP2jxy99kK2gJwOJPv EAS746SD7P7YOhGQxJZSRymcZSFbenlgDBsZSYnVm9KxB+gmLafd4IShUVbSVX8P auMbbhpDxt2YW1E05FbQpZLtAroB7VBngo90alIed/HVfcbe6X6O -----END CERTIFICATE-----Generated at Sun Jan 25 16:30:09 2026 by rpki-client