This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa File: 3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa (raw, json) Hash identifier: 0Uta0mciJtwdV1pzRO+5GA2qv0qJ2rULFPtgrlRyMi0= Subject key identifier: 9D:9F:D7:DA:30:6F:75:D4:38:D9:7B:64:A2:0E:EC:73:C1:10:F1:81 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 170E602A955D3AF50166EA537754583A440305C9 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa Signing time: Thu 15 Jan 2026 14:27:24 +0000 ROA not before: Thu 15 Jan 2026 14:22:24 +0000 ROA not after: Thu 14 Jan 2027 14:27:24 +0000 asID: 206150 IP address blocks: 185.130.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0e:60:2a:95:5d:3a:f5:01:66:ea:53:77:54:58:3a:44:03:05:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Jan 15 14:22:24 2026 GMT Not After : Jan 14 14:27:24 2027 GMT Subject: CN=9D9FD7DA306F75D438D97B64A20EEC73C110F181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2a:aa:1f:fa:be:76:37:49:0e:e9:dc:93:05: 43:28:7e:e3:08:bd:e3:9d:07:92:f6:68:15:36:4a: f7:3d:23:e1:7f:76:f9:7a:e6:38:ea:ea:2d:cb:f7: ac:e2:65:79:b0:13:23:c0:b0:e9:bf:c4:52:73:c9: 1e:82:2b:2d:68:e2:59:1d:87:49:ec:6b:65:b3:29: 8b:0f:dc:be:47:79:eb:e4:78:e0:f9:fe:6c:55:fe: 7a:c2:72:2b:27:a4:52:09:75:b2:71:94:da:7a:59: f2:22:81:71:9c:85:38:b3:34:18:3b:36:c7:b9:6d: 02:24:ff:87:f7:85:cf:06:dc:6c:b7:c7:27:ba:9d: ab:89:ee:13:52:69:a3:00:df:c4:41:10:01:d9:92: be:2b:4e:2a:12:63:63:97:73:dd:2b:62:0d:3c:c5: 36:f2:85:6b:ff:d1:63:98:c5:bb:9e:e9:e1:36:ff: fc:c9:d4:12:60:ff:25:e0:f2:03:c3:d3:88:fe:07: b8:88:88:cf:85:1b:65:eb:ec:d5:40:a5:ce:3b:23: 49:71:7d:22:c2:54:39:a3:c4:da:7b:22:db:33:60: c2:83:a4:b1:6a:0c:2d:88:a6:04:d4:53:a5:44:f6: 5f:85:75:c0:6a:1a:64:0b:46:e3:c2:71:36:46:1e: 5b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9F:D7:DA:30:6F:75:D4:38:D9:7B:64:A2:0E:EC:73:C1:10:F1:81 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.62.0/24 Signature Algorithm: sha256WithRSAEncryption 60:55:1c:fd:46:c2:47:42:b4:8d:5f:eb:3a:09:bd:eb:7b:36: f2:51:d1:e6:51:1e:18:a6:24:30:52:53:fe:08:61:28:3c:f6: 76:c9:66:5c:a1:83:50:4c:fa:0c:9e:d4:c6:a5:7c:1c:8d:0c: e2:b3:7a:e4:c3:5b:7b:0c:46:7d:22:e3:66:b4:dd:f6:c2:bc: 6a:23:b7:41:b9:f4:ce:09:2e:e9:9d:55:1f:73:9a:25:72:4d: f6:56:7e:8c:d7:ed:d9:a7:6c:b9:1f:22:1a:c7:7c:81:31:a1: dc:be:f3:d8:28:9a:a8:4c:35:61:c0:dc:46:bc:77:49:c4:dc: 1c:52:f6:2b:20:62:1a:eb:4c:13:76:d8:c7:a6:b9:b2:42:60: c1:e2:09:1f:fa:74:e4:ac:5f:14:fd:4a:b6:1a:2d:e8:c2:8a: 1a:c0:8a:d0:9f:b6:e4:21:49:30:a7:37:5f:79:77:76:44:4d: aa:43:69:80:01:5f:c2:e5:76:3b:a5:d7:3c:3d:44:61:e4:40: 49:37:b7:ad:37:cb:4e:19:70:06:0c:7a:88:c4:37:b0:c5:67: 80:5c:92:a6:ec:3b:f5:55:ea:67:a6:3d:10:f5:3c:88:00:92: 9b:c5:5f:26:4b:0b:b4:73:b4:06:14:20:f6:f7:5d:d0:6b:ca: 23:2b:16:69 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUFw5gKpVdOvUBZupTd1RYOkQDBckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjAxMTUxNDIyMjRaFw0yNzAxMTQxNDI3MjRaMDMxMTAvBgNV BAMTKDlEOUZEN0RBMzA2Rjc1RDQzOEQ5N0I2NEEyMEVFQzczQzExMEYxODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYKqof+r52N0kO6dyTBUMofuMI veOdB5L2aBU2Svc9I+F/dvl65jjq6i3L96ziZXmwEyPAsOm/xFJzyR6CKy1o4lkd h0nsa2WzKYsP3L5HeevkeOD5/mxV/nrCcisnpFIJdbJxlNp6WfIigXGchTizNBg7 Nse5bQIk/4f3hc8G3Gy3xye6nauJ7hNSaaMA38RBEAHZkr4rTioSY2OXc90rYg08 xTbyhWv/0WOYxbue6eE2//zJ1BJg/yXg8gPD04j+B7iIiM+FG2Xr7NVApc47I0lx fSLCVDmjxNp7ItszYMKDpLFqDC2IpgTUU6VE9l+FdcBqGmQLRuPCcTZGHlsJAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUnZ/X2jBvddQ42Xtkog7sc8EQ8YEwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzEzODM1MmUzMTMzMzAyZTM2 MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzYzMTM1MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5gj4wDQYJKoZIhvcNAQELBQADggEBAGBVHP1GwkdCtI1f6zoJvet7NvJR0eZR HhimJDBSU/4IYSg89nbJZlyhg1BM+gye1MalfByNDOKzeuTDW3sMRn0i42a03fbC vGojt0G59M4JLumdVR9zmiVyTfZWfozX7dmnbLkfIhrHfIExody+89gomqhMNWHA 3Ea8d0nE3BxS9isgYhrrTBN22MemubJCYMHiCR/6dOSsXxT9SrYaLejCihrAitCf tuQhSTCnN195d3ZETapDaYABX8Lldjul1zw9RGHkQEk3t603y04ZcAYMeojEN7DF Z4BckqbsO/VV6memPRD1PIgAkpvFXyZLC7RztAYUIPb3XdBryiMrFmk= -----END CERTIFICATE-----Generated at Sun Jan 25 10:21:07 2026 by rpki-client