This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139332e3136392e37382e302f32332d3234203d3e203530343334.roa File: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (raw, json) Hash identifier: Ozt3uRUP9szxnq6Y/BlUHZo63N6fYBwOlNZT3blQYnY= Subject key identifier: 2C:9B:9B:76:FE:B2:7E:B2:3B:2F:0C:C3:62:81:82:EC:5D:F9:FA:A6 Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 69AE8AFDD9A26189A8C5E5B290A71B2B8E5F5223 Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139332e3136392e37382e302f32332d3234203d3e203530343334.roa Signing time: Tue 20 Jan 2026 17:55:34 +0000 ROA not before: Tue 20 Jan 2026 17:50:34 +0000 ROA not after: Tue 19 Jan 2027 17:55:34 +0000 asID: 50434 IP address blocks: 193.169.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ae:8a:fd:d9:a2:61:89:a8:c5:e5:b2:90:a7:1b:2b:8e:5f:52:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Jan 20 17:50:34 2026 GMT Not After : Jan 19 17:55:34 2027 GMT Subject: CN=2C9B9B76FEB27EB23B2F0CC3628182EC5DF9FAA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:68:d3:4b:ba:10:e9:2f:9d:9a:da:f0:55:f2: 03:f1:94:a3:d7:29:2c:00:d4:99:51:51:ba:ef:e1: a8:16:d1:97:a9:90:f6:f2:46:58:d1:a3:47:55:c0: b1:4b:a9:43:21:c1:95:21:6d:e8:a0:32:5e:34:f8: 77:1b:fc:69:39:49:e9:9b:a3:1b:4c:d3:a0:7c:8c: e2:b9:93:88:8f:2f:03:35:ef:49:4a:ed:71:9a:74: ef:88:69:78:97:db:b4:d0:8e:1d:1c:cc:28:51:b2: 31:53:76:83:11:43:f1:66:51:b8:2d:c6:ac:86:bb: 96:cd:27:c0:cd:29:e0:06:28:9c:a1:10:53:49:c1: 10:ef:37:56:ac:92:a8:2c:a0:0a:96:aa:e6:84:a8: d3:ac:b9:0f:dd:c0:3f:77:d5:e6:46:95:36:63:5b: 94:ca:75:f4:78:5d:80:26:d4:e0:c7:fe:9c:8d:f7: c7:e4:d4:8c:8a:55:69:57:6a:66:40:48:20:1f:87: 0a:b8:ed:f7:3b:e6:78:dd:81:6a:ff:a2:39:2f:28: 21:ef:5e:6a:cd:27:8b:d2:ca:8c:50:2e:c7:03:64: 93:40:9a:df:da:11:0a:00:97:76:26:2b:e0:29:af: 5f:9c:7e:e4:a5:4e:0b:69:8b:cd:92:07:a2:74:e6: 33:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9B:9B:76:FE:B2:7E:B2:3B:2F:0C:C3:62:81:82:EC:5D:F9:FA:A6 X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139332e3136392e37382e302f32332d3234203d3e203530343334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.78.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:c9:c7:fe:4a:a5:ef:a0:db:cb:f4:b4:1f:b9:a7:9a:09:bc: f7:a9:ef:10:d0:f3:9d:dc:07:5d:92:db:ec:97:f7:40:60:00: 9a:d2:f0:f7:d8:04:f7:1e:f9:d3:b0:4f:b9:ff:fe:22:7f:f0: 2d:31:95:91:c4:6e:c7:42:cd:ec:46:f6:aa:93:4c:d4:b9:fa: c8:dc:2e:c2:04:d8:8e:4a:9a:5a:fc:c5:f8:b1:63:08:a8:4d: ba:ac:95:45:5a:e8:8d:61:19:18:ff:ab:1c:1f:74:96:95:f3: 21:a1:3f:30:22:2b:9f:94:89:87:57:9f:66:3e:60:b6:2f:a1: 72:c5:6b:06:4e:89:01:76:d3:3b:63:9f:4e:ed:67:eb:83:44: 03:6b:7c:fb:ee:c9:d8:3f:4e:c8:d0:25:ed:7b:36:c9:94:df: ff:29:59:68:61:06:c8:81:28:57:5d:0e:ee:59:4d:64:95:f6: 64:09:3a:11:83:93:d4:b8:da:8e:69:82:1e:2c:cb:9c:6e:5e: 0a:b6:30:b1:26:42:46:73:c1:a1:90:b1:25:47:94:bb:3d:00: 06:af:5a:bc:d9:78:c7:b4:4f:1c:2f:ab:4a:a7:f6:92:08:2e: 72:ce:c4:2a:a6:57:94:a3:04:3d:96:04:a9:d2:3b:de:06:93: 6a:99:b5:25 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUaa6K/dmiYYmoxeWykKcbK45fUiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjAxMjAxNzUwMzRaFw0yNzAxMTkxNzU1MzRaMDMxMTAvBgNV BAMTKDJDOUI5Qjc2RkVCMjdFQjIzQjJGMENDMzYyODE4MkVDNURGOUZBQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUaNNLuhDpL52a2vBV8gPxlKPX KSwA1JlRUbrv4agW0ZepkPbyRljRo0dVwLFLqUMhwZUhbeigMl40+Hcb/Gk5Semb oxtM06B8jOK5k4iPLwM170lK7XGadO+IaXiX27TQjh0czChRsjFTdoMRQ/FmUbgt xqyGu5bNJ8DNKeAGKJyhEFNJwRDvN1askqgsoAqWquaEqNOsuQ/dwD931eZGlTZj W5TKdfR4XYAm1ODH/pyN98fk1IyKVWlXamZASCAfhwq47fc75njdgWr/ojkvKCHv XmrNJ4vSyoxQLscDZJNAmt/aEQoAl3YmK+Apr1+cfuSlTgtpi82SB6J05jNXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQULJubdv6yfrI7LwzDYoGC7F35+qYwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWMxNDMzODct ZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUxZTRhLzAvMzEzOTMzMmUzMTM2MzkyZTM3 MzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNTMwMzQzMzM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB walOMA0GCSqGSIb3DQEBCwUAA4IBAQBrycf+SqXvoNvL9LQfuaeaCbz3qe8Q0POd 3Addktvsl/dAYACa0vD32AT3HvnTsE+5//4if/AtMZWRxG7HQs3sRvaqk0zUufrI 3C7CBNiOSppa/MX4sWMIqE26rJVFWuiNYRkY/6scH3SWlfMhoT8wIiuflImHV59m PmC2L6FyxWsGTokBdtM7Y59O7Wfrg0QDa3z77snYP07I0CXtezbJlN//KVloYQbI gShXXQ7uWU1klfZkCToRg5PUuNqOaYIeLMucbl4KtjCxJkJGc8GhkLElR5S7PQAG r1q82XjHtE8cL6tKp/aSCC5yzsQqpleUowQ9lgSp0jveBpNqmbUl -----END CERTIFICATE-----Generated at Sun Jan 25 16:29:14 2026 by rpki-client