This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231352e302f32342d3234203d3e203432383331.roa File: 3134362e31392e3231352e302f32342d3234203d3e203432383331.roa (raw, json) Hash identifier: rZD8rahYSCJKmrmYmBTS/7vmJS9IDa+dMQdQnVTzzLc= Subject key identifier: F8:36:BB:71:9B:17:07:F1:C2:6A:04:0B:30:15:D6:45:72:98:43:21 Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4 Certificate serial: 5A0162253925378CCBC03D7F44E104EDE13E2F21 Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231352e302f32342d3234203d3e203432383331.roa Signing time: Wed 24 Dec 2025 20:55:32 +0000 ROA not before: Wed 24 Dec 2025 20:50:32 +0000 ROA not after: Wed 23 Dec 2026 20:55:32 +0000 asID: 42831 IP address blocks: 146.19.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:01:62:25:39:25:37:8c:cb:c0:3d:7f:44:e1:04:ed:e1:3e:2f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4 Validity Not Before: Dec 24 20:50:32 2025 GMT Not After : Dec 23 20:55:32 2026 GMT Subject: CN=F836BB719B1707F1C26A040B3015D64572984321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:92:ba:3f:28:4d:81:a8:3d:87:09:fe:88:dc: c9:cf:a9:50:f7:09:e9:6e:b0:72:2e:6d:75:05:44: bb:58:5e:33:51:09:90:e3:f9:8c:80:c8:a1:bc:63: 0e:1c:b2:b6:d4:ac:1a:14:64:f0:35:da:b3:f1:fb: fc:ae:48:02:82:18:7c:77:05:9b:4e:67:11:30:d4: c2:5f:cd:e4:1d:af:88:87:ba:a2:97:31:7f:b1:92: b6:de:ac:c8:be:dc:f0:7e:9b:7c:a2:61:25:32:60: 76:2d:3f:4c:76:48:b2:82:79:39:3b:69:4f:c2:46: 6b:d5:41:79:74:87:cd:c2:b8:93:78:d4:62:8a:98: e7:f9:16:6d:c3:fe:db:60:ef:b2:4d:17:ac:2c:94: 5e:31:3a:56:a8:02:5e:cd:76:83:77:f5:11:f2:18: 11:88:66:5e:8e:ce:4d:6b:87:43:ca:54:c6:6d:66: 9f:a2:9c:0d:a0:cb:24:26:96:58:e9:f5:e0:d9:0f: d7:0e:ad:df:8a:3e:b5:04:57:e5:52:d5:b5:4b:72: 3f:c3:62:52:93:9a:c0:3e:88:df:dd:88:d9:ee:1f: 11:3e:f3:b1:17:9a:b5:cf:d3:a0:64:fc:3d:74:58: 39:c6:1a:49:2b:f5:44:34:ad:ff:81:e4:11:fe:cc: 07:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:36:BB:71:9B:17:07:F1:C2:6A:04:0B:30:15:D6:45:72:98:43:21 X509v3 Authority Key Identifier: keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231352e302f32342d3234203d3e203432383331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.215.0/24 Signature Algorithm: sha256WithRSAEncryption 63:bb:2b:79:4b:b4:42:75:ae:05:66:02:10:c8:e6:78:5d:49: 8f:25:8c:37:45:e5:b2:2e:ad:27:51:d2:fe:aa:d6:1c:a5:43: f2:5e:35:93:5b:dc:a5:06:80:cb:cc:1b:c3:22:ef:3c:4a:92: 1c:47:c1:4c:ad:fa:99:b8:57:69:34:48:24:28:1b:51:9b:e4: 17:db:90:18:80:42:0e:f3:d0:0e:3f:b6:e5:f1:f8:af:02:18: c7:c4:bc:b9:49:b8:c6:8e:97:2d:6d:10:ee:5e:cf:21:34:87: 3a:b0:5f:ce:cb:4e:3c:b5:0b:1b:fd:dd:41:71:50:29:60:aa: dd:a8:a1:40:98:ce:dc:76:a4:ce:b3:42:83:00:ee:9e:26:e9: 44:b0:13:c1:f4:9b:01:db:06:cd:b4:3c:3b:2b:80:ca:c2:05: cd:65:bd:8b:0f:d8:f8:ea:89:06:23:cd:d6:3a:ca:0b:69:2f: aa:a8:d7:9d:f7:3d:96:3b:67:4c:a8:21:d7:82:be:36:d2:9e: 03:3f:21:f5:cb:7a:5b:42:33:2e:75:b7:13:04:67:31:9d:7c: e9:06:97:20:79:f7:7f:aa:ad:37:27:72:6a:a3:1c:88:45:7e: 2e:bd:9e:7e:9d:e9:ba:c1:c1:00:0b:98:e1:9e:93:d5:95:d8: 02:48:ee:56 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUWgFiJTklN4zLwD1/ROEE7eE+LyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm NTg3M2RjNDAeFw0yNTEyMjQyMDUwMzJaFw0yNjEyMjMyMDU1MzJaMDMxMTAvBgNV BAMTKEY4MzZCQjcxOUIxNzA3RjFDMjZBMDQwQjMwMTVENjQ1NzI5ODQzMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKkro/KE2BqD2HCf6I3MnPqVD3 CelusHIubXUFRLtYXjNRCZDj+YyAyKG8Yw4csrbUrBoUZPA12rPx+/yuSAKCGHx3 BZtOZxEw1MJfzeQdr4iHuqKXMX+xkrberMi+3PB+m3yiYSUyYHYtP0x2SLKCeTk7 aU/CRmvVQXl0h83CuJN41GKKmOf5Fm3D/ttg77JNF6wslF4xOlaoAl7NdoN39RHy GBGIZl6Ozk1rh0PKVMZtZp+inA2gyyQmlljp9eDZD9cOrd+KPrUEV+VS1bVLcj/D YlKTmsA+iN/diNnuHxE+87EXmrXP06Bk/D10WDnGGkkr9UQ0rf+B5BH+zAcTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU+Da7cZsXB/HCagQLMBXWRXKYQyEwHwYDVR0j BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX SFBjUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzEzNDM2MmUzMTM5MmUzMjMx MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMyMzgzMzMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA khPXMA0GCSqGSIb3DQEBCwUAA4IBAQBjuyt5S7RCda4FZgIQyOZ4XUmPJYw3ReWy Lq0nUdL+qtYcpUPyXjWTW9ylBoDLzBvDIu88SpIcR8FMrfqZuFdpNEgkKBtRm+QX 25AYgEIO89AOP7bl8fivAhjHxLy5SbjGjpctbRDuXs8hNIc6sF/Oy048tQsb/d1B cVApYKrdqKFAmM7cdqTOs0KDAO6eJulEsBPB9JsB2wbNtDw7K4DKwgXNZb2LD9j4 6okGI83WOsoLaS+qqNed9z2WO2dMqCHXgr420p4DPyH1y3pbQjMudbcTBGcxnXzp Bpcgefd/qq03J3JqoxyIRX4uvZ5+nem6wcEAC5jhnpPVldgCSO5W -----END CERTIFICATE-----Generated at Sun Jan 25 10:46:26 2026 by rpki-client