This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa File: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (raw, json) Hash identifier: oZOogcZA7gOpZC0s0tbGMXCZZe5qdoNGw7VhUnq2iag= Subject key identifier: 4A:25:B0:B2:4F:77:66:71:9E:82:99:7C:2B:4C:40:2B:65:13:C5:0A Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 388BF4A6B43B5B3885A6B0F6042A15163E98D688 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa Signing time: Tue 13 Jan 2026 13:55:33 +0000 ROA not before: Tue 13 Jan 2026 13:50:33 +0000 ROA not after: Tue 12 Jan 2027 13:55:33 +0000 asID: 397423 IP address blocks: 185.244.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:8b:f4:a6:b4:3b:5b:38:85:a6:b0:f6:04:2a:15:16:3e:98:d6:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Jan 13 13:50:33 2026 GMT Not After : Jan 12 13:55:33 2027 GMT Subject: CN=4A25B0B24F7766719E82997C2B4C402B6513C50A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:be:59:de:46:01:e7:68:95:44:26:46:74:47: 8b:6f:9b:44:a4:54:81:7c:cb:eb:4d:28:29:e7:9d: 0d:09:71:c4:96:b2:f4:43:93:d2:cd:fd:84:96:ff: a1:aa:7e:37:ff:34:47:5c:46:c2:31:ed:18:7c:cd: 18:be:84:80:ce:7c:5f:7e:2b:91:83:cb:96:1c:b3: b2:20:02:e9:a6:04:cb:9a:8e:7d:0a:da:46:32:eb: d8:b4:7a:72:8e:ac:f1:2d:0c:e1:b8:77:9f:46:35: ad:16:70:af:52:48:e9:49:73:6f:79:1b:d6:f9:a2: 1c:81:fe:a8:9b:9e:52:6d:88:2a:48:bc:a5:92:e6: 57:e4:db:32:0c:4c:ea:07:45:44:63:bb:f3:14:89: cd:41:fa:19:4c:d3:bd:1f:9f:e6:2e:93:91:5f:3b: e0:de:f1:2d:7f:ce:4e:76:87:83:fb:d7:cd:a2:f4: 83:4b:88:e4:5d:70:e0:07:88:13:c1:ec:c9:4b:30: 27:9a:89:d5:6c:f8:ce:97:ba:e4:02:07:d9:e6:14: f1:3e:8b:33:47:c9:10:92:86:fb:2f:1a:78:22:86: d6:26:f1:47:02:a2:57:18:61:80:18:21:a2:32:5f: b2:29:c0:1c:4f:10:a5:ee:67:00:2f:4c:a0:53:72: a0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:25:B0:B2:4F:77:66:71:9E:82:99:7C:2B:4C:40:2B:65:13:C5:0A X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.94.0/24 Signature Algorithm: sha256WithRSAEncryption 82:bc:5a:d4:08:bf:ae:3b:0c:99:7a:9e:1c:fe:ea:5e:fa:2d: 70:87:97:74:a1:bb:5a:d2:32:83:90:b6:d1:f6:83:81:7b:60: 01:d4:58:df:69:ff:f9:82:02:d4:ae:a0:54:c4:ad:68:5e:ec: 63:b0:a7:d4:79:72:37:13:6c:c2:10:2b:df:91:88:4e:32:65: 9a:fd:f8:aa:95:90:a5:be:99:b2:5a:a5:74:7f:5d:97:ae:37: 2c:b1:79:00:4c:97:5e:63:fa:61:55:16:64:ae:41:05:e1:d4: 3d:6f:d1:68:27:6b:23:5e:6f:d1:60:3b:a5:3a:48:c0:20:d0: e7:13:91:f3:25:8f:ca:5f:8c:b6:93:a1:a5:6f:9a:65:51:b2: 13:85:c2:90:8d:70:40:49:9c:8e:66:db:29:f3:3e:07:fe:f3: 68:c0:9f:da:ed:4f:33:a8:ad:44:0f:f4:e8:5b:87:1b:5e:91: fd:ca:35:7a:75:fb:e9:02:6c:7a:07:dd:9e:6a:ba:38:31:b9: f5:43:f4:e8:0b:17:b2:ae:a6:73:60:d5:e8:fe:e4:19:9b:bc: 19:99:bb:27:6a:81:c6:7c:74:2b:51:c4:44:eb:ac:ca:0e:43: 64:40:08:2a:b4:7c:82:49:3b:3e:28:1c:9f:f4:4e:48:c6:c8: 00:98:cb:e1 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUOIv0prQ7WziFprD2BCoVFj6Y1ogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjAxMTMxMzUwMzNaFw0yNzAxMTIxMzU1MzNaMDMxMTAvBgNV BAMTKDRBMjVCMEIyNEY3NzY2NzE5RTgyOTk3QzJCNEM0MDJCNjUxM0M1MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUvlneRgHnaJVEJkZ0R4tvm0Sk VIF8y+tNKCnnnQ0JccSWsvRDk9LN/YSW/6Gqfjf/NEdcRsIx7Rh8zRi+hIDOfF9+ K5GDy5Ycs7IgAummBMuajn0K2kYy69i0enKOrPEtDOG4d59GNa0WcK9SSOlJc295 G9b5ohyB/qibnlJtiCpIvKWS5lfk2zIMTOoHRURju/MUic1B+hlM070fn+Yuk5Ff O+De8S1/zk52h4P7182i9INLiORdcOAHiBPB7MlLMCeaidVs+M6XuuQCB9nmFPE+ izNHyRCShvsvGngihtYm8UcColcYYYAYIaIyX7IpwBxPEKXuZwAvTKBTcqCBAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUSiWwsk93ZnGegpl8K0xAK2UTxQowHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzEzODM1MmUzMjM0MzQyZTM5 MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzczNDMyMzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC59F4wDQYJKoZIhvcNAQELBQADggEBAIK8WtQIv647DJl6nhz+6l76LXCHl3Sh u1rSMoOQttH2g4F7YAHUWN9p//mCAtSuoFTErWhe7GOwp9R5cjcTbMIQK9+RiE4y ZZr9+KqVkKW+mbJapXR/XZeuNyyxeQBMl15j+mFVFmSuQQXh1D1v0WgnayNeb9Fg O6U6SMAg0OcTkfMlj8pfjLaToaVvmmVRshOFwpCNcEBJnI5m2ynzPgf+82jAn9rt TzOorUQP9Ohbhxtekf3KNXp1++kCbHoH3Z5qujgxufVD9OgLF7KupnNg1ej+5Bmb vBmZuydqgcZ8dCtRxETrrMoOQ2RACCq0fIJJOz4oHJ/0TkjGyACYy+E= -----END CERTIFICATE-----Generated at Sun Jan 25 22:02:50 2026 by rpki-client