This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa File: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (raw, json) Hash identifier: X7Tn/GpCSEBlmrST5TEKgAjVIubIFvn/OXAnR/EzN3o= Subject key identifier: 70:29:44:4C:73:9C:46:4B:73:B2:4C:98:AB:B2:DA:15:10:DC:B1:D2 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 2256B1207007219CDE291A3611D321FE63D18FE0 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa Signing time: Mon 19 Jan 2026 18:55:34 +0000 ROA not before: Mon 19 Jan 2026 18:50:34 +0000 ROA not after: Mon 18 Jan 2027 18:55:34 +0000 asID: 62563 IP address blocks: 185.111.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:56:b1:20:70:07:21:9c:de:29:1a:36:11:d3:21:fe:63:d1:8f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Jan 19 18:50:34 2026 GMT Not After : Jan 18 18:55:34 2027 GMT Subject: CN=7029444C739C464B73B24C98ABB2DA1510DCB1D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6d:99:02:a5:9a:0c:d4:02:fd:b3:3d:87:1d: b6:8e:99:b7:b1:9e:f6:b3:6c:3b:b3:8f:97:72:2e: cd:80:75:86:7e:db:96:de:ae:ee:19:48:ff:d4:11: 5f:fa:d4:73:82:f1:71:19:80:30:3d:3e:00:2b:61: 97:56:58:ce:f1:0f:5c:fb:d8:f4:c7:0e:9c:99:9a: 29:61:c8:8f:4d:b4:7c:46:0e:6f:fe:df:4e:e7:0d: 58:9d:76:04:c5:99:8f:44:78:36:1d:72:03:eb:e9: db:62:72:25:32:e5:6b:28:59:dc:17:bd:b3:b6:4d: 0c:71:bd:0e:32:05:34:95:42:62:e2:e9:9d:c6:39: 5a:7a:90:68:84:41:94:ff:e3:52:6d:74:81:f1:d9: 12:a3:97:b8:f2:8c:0d:52:ea:e9:e4:64:5e:a9:d1: d5:aa:0d:1c:52:b3:4f:08:38:4a:e7:94:51:f4:1a: 9f:1a:56:ae:ca:61:1b:15:56:27:ac:86:5c:40:b9: d1:cf:88:0b:3f:57:4f:29:91:65:28:fc:80:65:07: 39:eb:0c:0a:17:3a:69:a0:db:81:df:45:91:02:76: e6:61:b8:fd:76:e4:fb:bf:7e:15:df:ff:32:cc:13: ae:41:28:c2:df:54:fc:ec:7c:13:1f:b5:9a:34:64: ca:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:29:44:4C:73:9C:46:4B:73:B2:4C:98:AB:B2:DA:15:10:DC:B1:D2 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.111.188.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:61:a7:b8:e6:8b:1d:de:03:71:96:7c:33:7e:34:40:4a:5e: b3:c5:04:87:ef:cc:c1:26:47:71:0e:e4:7b:5a:4c:dc:6d:21: 29:0d:80:10:13:d2:1e:20:eb:47:b9:82:9b:76:65:56:00:63: 3a:74:43:bd:aa:46:f5:ee:22:2b:cd:d7:f9:69:6f:d6:da:13: 41:7c:f7:9b:43:0c:68:be:08:bb:ae:5e:5b:90:28:bb:79:25: 95:7b:16:af:86:b6:7e:73:d5:10:fe:3f:9c:2c:03:2f:10:b6: fe:17:0a:bd:a9:0b:cb:ae:33:b4:9c:ab:25:96:d4:97:bb:23: c4:31:9c:f6:80:6d:4c:7d:ac:be:fc:68:b7:d0:fd:71:21:8a: 29:06:18:db:c6:4f:cf:9f:0a:eb:91:ff:49:52:67:de:e7:d4: de:a8:5f:5f:eb:1d:76:8d:2a:af:e4:a3:20:48:d6:27:82:b2: b4:06:17:b4:d2:11:29:7e:d0:0d:5d:9f:94:36:2e:00:82:97: 8b:7c:43:e8:f2:b8:05:19:93:e5:86:b4:1b:57:3d:00:67:1a: e0:76:ed:92:36:8d:d6:3a:70:92:d3:c6:1a:15:50:5b:8f:e2: e0:08:be:e1:b6:b3:8f:47:3b:f8:7c:27:03:b1:66:dd:cb:ae: d1:b0:6a:89 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUIlaxIHAHIZzeKRo2EdMh/mPRj+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjAxMTkxODUwMzRaFw0yNzAxMTgxODU1MzRaMDMxMTAvBgNV BAMTKDcwMjk0NDRDNzM5QzQ2NEI3M0IyNEM5OEFCQjJEQTE1MTBEQ0IxRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0bZkCpZoM1AL9sz2HHbaOmbex nvazbDuzj5dyLs2AdYZ+25beru4ZSP/UEV/61HOC8XEZgDA9PgArYZdWWM7xD1z7 2PTHDpyZmilhyI9NtHxGDm/+307nDViddgTFmY9EeDYdcgPr6dticiUy5WsoWdwX vbO2TQxxvQ4yBTSVQmLi6Z3GOVp6kGiEQZT/41JtdIHx2RKjl7jyjA1S6unkZF6p 0dWqDRxSs08IOErnlFH0Gp8aVq7KYRsVVieshlxAudHPiAs/V08pkWUo/IBlBznr DAoXOmmg24HfRZECduZhuP125Pu/fhXf/zLME65BKMLfVPzsfBMftZo0ZMoRAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUcClETHOcRktzskyYq7LaFRDcsdIwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzEzODM1MmUzMTMxMzEyZTMx MzgzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzIzNTM2MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5b7wwDQYJKoZIhvcNAQELBQADggEBAA5hp7jmix3eA3GWfDN+NEBKXrPFBIfv zMEmR3EO5HtaTNxtISkNgBAT0h4g60e5gpt2ZVYAYzp0Q72qRvXuIivN1/lpb9ba E0F895tDDGi+CLuuXluQKLt5JZV7Fq+Gtn5z1RD+P5wsAy8Qtv4XCr2pC8uuM7Sc qyWW1Je7I8QxnPaAbUx9rL78aLfQ/XEhiikGGNvGT8+fCuuR/0lSZ97n1N6oX1/r HXaNKq/koyBI1ieCsrQGF7TSESl+0A1dn5Q2LgCCl4t8Q+jyuAUZk+WGtBtXPQBn GuB27ZI2jdY6cJLTxhoVUFuP4uAIvuG2s49HO/h8JwOxZt3LrtGwaok= -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:03 2026 by rpki-client