This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139332e3136392e37382e302f32332d3234203d3e203438343335.roa File: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (raw, json) Hash identifier: 7BonRadnccE5oClU90cDWqb2zFnrszRs5TdXh7lrUTg= Subject key identifier: 08:0A:1F:04:18:72:C5:C6:61:DA:0C:3C:EF:32:B5:CB:CE:08:2B:FE Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 708A293187F90FC25E54A75D52894DAC00BBB90F Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139332e3136392e37382e302f32332d3234203d3e203438343335.roa Signing time: Tue 20 Jan 2026 17:55:34 +0000 ROA not before: Tue 20 Jan 2026 17:50:34 +0000 ROA not after: Tue 19 Jan 2027 17:55:34 +0000 asID: 48435 IP address blocks: 193.169.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:8a:29:31:87:f9:0f:c2:5e:54:a7:5d:52:89:4d:ac:00:bb:b9:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Jan 20 17:50:34 2026 GMT Not After : Jan 19 17:55:34 2027 GMT Subject: CN=080A1F041872C5C661DA0C3CEF32B5CBCE082BFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:23:f4:b8:e2:1e:9b:6b:08:eb:2f:e8:63:03: a4:c3:0a:ef:fa:01:f0:77:03:2b:3e:72:17:51:95: d9:70:9f:fb:0b:e0:ad:3e:93:2c:da:b6:ae:5b:59: 63:33:a1:b3:b2:01:69:ef:92:26:fc:9e:59:c9:83: 98:d5:cb:bd:08:2a:95:81:90:62:d5:a0:8b:80:4c: d1:61:29:00:d7:87:11:97:16:67:03:e0:14:e1:62: 4d:3b:fb:e4:5e:82:7a:07:c4:f6:6d:01:c7:db:58: e8:90:ef:1c:95:1e:40:f5:c5:dc:97:e4:36:7d:0d: 50:3c:2e:76:ce:70:8b:dd:b3:34:dc:09:5b:b6:fd: 33:09:eb:9f:0e:c7:3c:39:22:b4:3e:2d:47:c0:76: b8:a1:06:b7:af:1a:ff:7a:7c:2a:b4:9a:cc:8e:48: ff:39:21:bf:b6:e3:f6:69:44:5f:ec:f5:21:6a:d8: fd:aa:2e:e5:ca:59:f2:ba:63:50:a2:cd:42:f9:dc: 3b:aa:99:33:a7:24:e1:49:99:bb:1a:94:77:dd:54: 69:af:0d:a3:88:10:0c:67:01:01:ec:3a:e4:66:0c: 1a:62:c4:79:6e:16:f1:3d:51:13:fa:1c:ce:2c:c2: 67:25:b4:1f:97:e1:da:e7:7a:1b:0a:77:97:ae:c3: 5b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0A:1F:04:18:72:C5:C6:61:DA:0C:3C:EF:32:B5:CB:CE:08:2B:FE X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139332e3136392e37382e302f32332d3234203d3e203438343335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.78.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:c2:b7:e7:6c:81:28:e6:3d:91:ca:b0:d0:66:c2:4c:ac:f5: 53:73:03:08:5b:ec:15:92:fa:1b:7b:3c:78:23:85:b6:02:29: 67:e3:e8:68:9d:98:bc:09:80:c1:05:81:a5:44:88:09:4a:c8: e3:f9:c0:d3:ca:50:13:24:50:1a:3b:9a:85:6a:23:22:e7:5e: 16:e6:ec:8f:fb:ae:74:07:8b:24:c7:3e:ae:6a:14:97:12:61: 29:9d:45:71:27:6c:63:69:0a:b0:d9:91:ed:69:03:a5:04:90: 22:5d:dd:9e:3d:68:6f:b7:a6:8d:70:95:d9:12:47:12:ba:4d: 88:49:e6:01:7e:1f:8b:91:20:33:ed:5f:fc:ce:e3:9d:81:c6: ad:bc:05:a2:ae:4f:0f:7b:14:0f:70:4f:52:5a:87:54:d6:49: c6:bf:90:30:72:2d:a9:99:bf:f6:87:9e:2b:c8:6b:be:0d:9e: 72:1e:98:b9:14:b1:9e:42:e9:9e:21:16:6f:d7:7b:98:8b:10: 0f:cb:1b:93:06:e7:f2:82:7e:92:7b:73:e3:fc:85:2e:a2:c0: 50:a7:d3:bf:52:a5:db:4e:e0:89:88:f5:1b:a7:cc:25:4b:78: 2a:61:e3:78:29:a7:4a:b2:8f:68:3f:70:bd:fb:69:88:ae:57: eb:f2:1c:3e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUcIopMYf5D8JeVKddUolNrAC7uQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjAxMjAxNzUwMzRaFw0yNzAxMTkxNzU1MzRaMDMxMTAvBgNV BAMTKDA4MEExRjA0MTg3MkM1QzY2MURBMEMzQ0VGMzJCNUNCQ0UwODJCRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEI/S44h6bawjrL+hjA6TDCu/6 AfB3Ays+chdRldlwn/sL4K0+kyzatq5bWWMzobOyAWnvkib8nlnJg5jVy70IKpWB kGLVoIuATNFhKQDXhxGXFmcD4BThYk07++RegnoHxPZtAcfbWOiQ7xyVHkD1xdyX 5DZ9DVA8LnbOcIvdszTcCVu2/TMJ658Oxzw5IrQ+LUfAdrihBrevGv96fCq0msyO SP85Ib+24/ZpRF/s9SFq2P2qLuXKWfK6Y1CizUL53DuqmTOnJOFJmbsalHfdVGmv DaOIEAxnAQHsOuRmDBpixHluFvE9URP6HM4swmcltB+X4drnehsKd5euw1sjAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUCAofBBhyxcZh2gw87zK1y84IK/4wHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWMxNDMzODct ZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUxZTRhLzAvMzEzOTMzMmUzMTM2MzkyZTM3 MzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM4MzQzMzM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB walOMA0GCSqGSIb3DQEBCwUAA4IBAQBuwrfnbIEo5j2RyrDQZsJMrPVTcwMIW+wV kvobezx4I4W2Ailn4+honZi8CYDBBYGlRIgJSsjj+cDTylATJFAaO5qFaiMi514W 5uyP+650B4skxz6uahSXEmEpnUVxJ2xjaQqw2ZHtaQOlBJAiXd2ePWhvt6aNcJXZ EkcSuk2ISeYBfh+LkSAz7V/8zuOdgcatvAWirk8PexQPcE9SWodU1knGv5Awci2p mb/2h54ryGu+DZ5yHpi5FLGeQumeIRZv13uYixAPyxuTBufygn6Se3Pj/IUuosBQ p9O/UqXbTuCJiPUbp8wlS3gqYeN4KadKso9oP3C9+2mIrlfr8hw+ -----END CERTIFICATE-----Generated at Sun Jan 25 21:13:05 2026 by rpki-client