This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139352e34322e3131322e302f32342d3234203d3e203438343335.roa File: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (raw, json) Hash identifier: tbJb4NeQxaqdUwJnx0mi5eYh93xW1wx/PyQm3nNKQlk= Subject key identifier: 09:E1:20:60:0D:05:BC:5E:CD:A2:24:BD:E3:DD:17:62:22:0F:8F:62 Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 7DB046E45F042F327C037EE189B29144833F6F94 Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139352e34322e3131322e302f32342d3234203d3e203438343335.roa Signing time: Tue 20 Jan 2026 17:55:35 +0000 ROA not before: Tue 20 Jan 2026 17:50:35 +0000 ROA not after: Tue 19 Jan 2027 17:55:35 +0000 asID: 48435 IP address blocks: 195.42.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b0:46:e4:5f:04:2f:32:7c:03:7e:e1:89:b2:91:44:83:3f:6f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Jan 20 17:50:35 2026 GMT Not After : Jan 19 17:55:35 2027 GMT Subject: CN=09E120600D05BC5ECDA224BDE3DD1762220F8F62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ba:cb:10:2f:aa:15:16:12:6d:40:9d:47:a8: 92:3b:3d:71:89:d2:df:95:82:5d:31:ca:80:7f:b8: 00:71:0e:8f:f8:7d:1e:f3:e0:bc:53:ac:f8:05:7a: 45:4e:c7:b1:a0:23:b1:23:85:62:28:5c:42:b0:1a: 21:d5:40:91:d9:b7:8b:3a:c1:5d:0c:fe:49:37:7c: df:bf:5e:cf:3e:7b:6e:be:47:96:2f:ea:54:ee:27: 29:df:a8:dd:d1:d4:a8:9a:2b:1d:89:42:fc:bf:e0: 34:d3:17:fa:65:01:e0:56:2b:01:7e:0e:0c:eb:eb: fd:4b:1b:03:b2:d1:ff:8e:12:b5:50:d7:02:5b:69: 0f:ea:65:5f:cf:d8:69:20:80:d4:a4:96:95:ad:89: 23:b3:82:fc:19:c1:01:6f:b2:26:d9:1b:e3:5a:c0: e3:53:a7:e8:bf:12:12:04:53:0c:7f:ad:1d:fd:4e: 61:24:96:94:92:5d:67:35:8f:7a:56:71:e0:42:da: ab:7f:3b:4c:d7:08:75:90:1c:19:35:fa:72:bc:21: e8:6f:07:86:2a:b4:d9:cb:da:4b:22:e6:db:f0:30: 9a:54:9b:63:90:bd:98:ba:41:7e:19:57:27:51:0d: dc:ae:2d:b5:ba:bd:b6:8b:3a:da:f3:22:02:90:0b: d5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E1:20:60:0D:05:BC:5E:CD:A2:24:BD:E3:DD:17:62:22:0F:8F:62 X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139352e34322e3131322e302f32342d3234203d3e203438343335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.42.112.0/24 Signature Algorithm: sha256WithRSAEncryption 60:9a:d0:52:f8:8c:98:ef:be:b6:40:5b:d4:b1:cb:d1:13:30: db:3d:eb:18:56:40:9b:2f:c2:60:68:64:53:96:11:2f:bd:c0: ef:8c:05:8f:37:b5:aa:d3:fd:2c:78:2e:8f:ad:40:ff:b8:7c: 9a:b8:6a:6f:f7:d4:3e:cc:4c:c6:04:e9:b4:2c:49:89:13:b5: 02:fa:d7:ee:7c:fe:f3:31:b0:a3:cc:da:57:b0:30:4f:2e:dd: 39:98:9e:b5:d3:91:ab:a4:7a:bb:61:29:33:eb:f8:0d:ec:37: d6:13:05:a4:da:41:22:cd:f7:69:ce:c7:5a:eb:4b:dc:c5:ff: e2:b3:47:b4:ce:b1:d3:e6:f1:56:fa:b1:76:1c:01:a2:7d:81: a8:ea:6d:4b:ba:22:c5:d4:ef:97:64:5e:cb:ec:0a:e2:ef:72: ad:32:ef:a7:1f:e9:1f:49:77:83:36:e0:34:a7:12:83:7e:15: 5e:58:f1:2e:14:90:d4:15:e7:66:36:d6:21:d7:cf:00:bf:69: 60:10:33:4f:81:18:5a:16:ac:2f:cd:d3:81:97:07:bc:c0:a6: 53:d8:42:59:9d:87:2e:74:51:95:55:6c:65:0a:37:ba:c8:75: 62:e7:97:0a:39:b7:50:d8:46:3d:ab:51:86:26:6a:a0:f3:ec: b5:d4:3b:67 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUfbBG5F8ELzJ8A37hibKRRIM/b5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjAxMjAxNzUwMzVaFw0yNzAxMTkxNzU1MzVaMDMxMTAvBgNV BAMTKDA5RTEyMDYwMEQwNUJDNUVDREEyMjRCREUzREQxNzYyMjIwRjhGNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ussQL6oVFhJtQJ1HqJI7PXGJ 0t+Vgl0xyoB/uABxDo/4fR7z4LxTrPgFekVOx7GgI7EjhWIoXEKwGiHVQJHZt4s6 wV0M/kk3fN+/Xs8+e26+R5Yv6lTuJynfqN3R1KiaKx2JQvy/4DTTF/plAeBWKwF+ Dgzr6/1LGwOy0f+OErVQ1wJbaQ/qZV/P2GkggNSklpWtiSOzgvwZwQFvsibZG+Na wONTp+i/EhIEUwx/rR39TmEklpSSXWc1j3pWceBC2qt/O0zXCHWQHBk1+nK8Iehv B4YqtNnL2ksi5tvwMJpUm2OQvZi6QX4ZVydRDdyuLbW6vbaLOtrzIgKQC9WfAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUCeEgYA0FvF7NoiS9490XYiIPj2IwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWMxNDMzODct ZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUxZTRhLzAvMzEzOTM1MmUzNDMyMmUzMTMx MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzMzM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA wypwMA0GCSqGSIb3DQEBCwUAA4IBAQBgmtBS+IyY7762QFvUscvREzDbPesYVkCb L8JgaGRTlhEvvcDvjAWPN7Wq0/0seC6PrUD/uHyauGpv99Q+zEzGBOm0LEmJE7UC +tfufP7zMbCjzNpXsDBPLt05mJ6105GrpHq7YSkz6/gN7DfWEwWk2kEizfdpzsda 60vcxf/is0e0zrHT5vFW+rF2HAGifYGo6m1LuiLF1O+XZF7L7Ari73KtMu+nH+kf SXeDNuA0pxKDfhVeWPEuFJDUFedmNtYh188Av2lgEDNPgRhaFqwvzdOBlwe8wKZT 2EJZnYcudFGVVWxlCje6yHVi55cKObdQ2EY9q1GGJmqg8+y11Dtn -----END CERTIFICATE-----Generated at Sun Jan 25 21:13:07 2026 by rpki-client