This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/39312e3230372e31332e302f32342d3234203d3e203532313132.roa File: 39312e3230372e31332e302f32342d3234203d3e203532313132.roa (raw, json) Hash identifier: YRttKbBVKmVFJCLqXVNyqXBZwi5ZooomBxSDP4Gl2m4= Subject key identifier: 4F:EB:4D:FB:DA:9A:4C:C2:43:7E:1D:EC:93:55:C6:0B:7F:16:7E:7D Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace Certificate serial: 2A57AA05F4AA6B4AE822ED5A59F6681803241FE4 Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/39312e3230372e31332e302f32342d3234203d3e203532313132.roa Signing time: Tue 16 Dec 2025 10:31:50 +0000 ROA not before: Tue 16 Dec 2025 10:26:50 +0000 ROA not after: Tue 15 Dec 2026 10:31:50 +0000 asID: 52112 IP address blocks: 91.207.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 00:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:57:aa:05:f4:aa:6b:4a:e8:22:ed:5a:59:f6:68:18:03:24:1f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace Validity Not Before: Dec 16 10:26:50 2025 GMT Not After : Dec 15 10:31:50 2026 GMT Subject: CN=4FEB4DFBDA9A4CC2437E1DEC9355C60B7F167E7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c5:c5:42:10:d2:80:2d:cc:1c:ce:ab:3f:ff: 20:a4:73:15:26:8e:2a:d6:af:9c:12:12:e7:4a:0a: 79:9c:85:7c:8a:e2:a7:20:d8:e8:7c:86:38:ed:0f: 4b:f2:93:d3:8a:17:f2:8d:f6:8b:88:d4:9c:c2:f0: 32:2a:ce:e1:dd:33:d6:34:eb:38:41:d6:cf:db:8b: e3:2f:6f:87:57:5d:a8:d4:24:bc:b7:97:47:d4:5c: 77:09:7c:6a:17:73:da:78:28:8a:e2:57:bc:3b:07: b6:2d:3d:2e:d3:42:df:16:25:01:46:ea:82:78:f4: 6b:62:69:1f:3a:87:a3:75:d7:86:ee:c5:1a:85:ac: 31:59:0f:b3:6c:3c:56:b9:67:a5:f9:89:c7:7d:46: f7:8a:58:a3:94:0c:9d:59:fe:ca:b2:1a:45:d9:d9: d6:c1:73:da:de:12:10:cd:fc:42:33:e1:eb:0e:62: 53:53:20:97:21:82:e1:6b:88:9e:05:0d:9b:b2:73: 9b:bb:0b:f5:5c:6c:3f:b2:59:5f:56:5c:d7:25:00: 92:22:a1:0a:0e:49:b0:4d:89:1a:06:cd:00:3b:0c: b6:79:fe:3b:c4:85:b7:d4:ad:b0:54:6f:fc:2e:26: af:bf:33:00:c3:7f:06:84:a4:b5:55:55:59:63:fc: 20:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EB:4D:FB:DA:9A:4C:C2:43:7E:1D:EC:93:55:C6:0B:7F:16:7E:7D X509v3 Authority Key Identifier: keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/39312e3230372e31332e302f32342d3234203d3e203532313132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.13.0/24 Signature Algorithm: sha256WithRSAEncryption 85:61:28:a1:47:51:73:c5:5f:13:cf:e7:4f:b6:49:4a:f2:48: f9:8a:61:3a:75:3a:f0:7b:2c:b4:fd:59:f3:ee:0b:3b:af:c8: 61:38:66:98:8b:a9:c5:e2:d2:2f:53:f7:80:c6:5c:d2:5b:d4: 4d:7a:52:c2:70:88:7b:70:84:e4:fd:f9:77:3a:b7:d8:a7:f7: b3:5a:49:59:69:0b:7d:47:94:d9:2d:9a:86:e5:cb:09:56:40: f5:c6:3b:15:29:30:8e:20:a1:9d:98:d9:56:35:10:03:bd:24: 93:98:87:7b:46:b8:50:20:23:7e:52:e1:7a:25:44:b9:3a:21: 3c:39:cb:71:c3:3a:68:c5:b8:dc:46:dd:ff:52:a1:fb:78:80: 81:fe:49:d5:0f:67:83:fd:6f:61:01:88:4b:32:43:8b:62:66: b2:97:b1:8a:48:03:c4:d1:e5:6d:d9:f3:8f:f1:fc:04:e4:6e: 35:b4:d2:e9:fd:9d:4d:6e:7c:4c:1b:5e:2b:c2:d3:3a:80:3b: e9:40:b5:71:27:ee:7d:0e:ad:b4:17:b3:00:c0:22:5f:bf:10: 93:97:64:67:a1:77:6c:f3:52:9a:dd:c9:09:11:0e:9d:fa:16: bd:45:0a:c2:76:4c:58:31:4f:e8:30:f7:ba:74:31:8d:ad:d2: cf:2a:ae:80 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUKleqBfSqa0roIu1aWfZoGAMkH+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjFkMDU3MmZlNzI5OTFiZDMyODU0YmFjNzE2Njc2ZWJk YWQyMmFjZTAeFw0yNTEyMTYxMDI2NTBaFw0yNjEyMTUxMDMxNTBaMDMxMTAvBgNV BAMTKDRGRUI0REZCREE5QTRDQzI0MzdFMURFQzkzNTVDNjBCN0YxNjdFN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCixcVCENKALcwczqs//yCkcxUm jirWr5wSEudKCnmchXyK4qcg2Oh8hjjtD0vyk9OKF/KN9ouI1JzC8DIqzuHdM9Y0 6zhB1s/bi+Mvb4dXXajUJLy3l0fUXHcJfGoXc9p4KIriV7w7B7YtPS7TQt8WJQFG 6oJ49GtiaR86h6N114buxRqFrDFZD7NsPFa5Z6X5icd9RveKWKOUDJ1Z/sqyGkXZ 2dbBc9reEhDN/EIz4esOYlNTIJchguFriJ4FDZuyc5u7C/VcbD+yWV9WXNclAJIi oQoOSbBNiRoGzQA7DLZ5/jvEhbfUrbBUb/wuJq+/MwDDfwaEpLVVVVlj/CCPAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUT+tN+9qaTMJDfh3sk1XGC38Wfn0wHwYDVR0j BBgwFoAU8dBXL+cpkb0yhUuscWZ269rSKs4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzAvRjFEMDU3MkZFNzI5OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkQlhMLWNwa2IweWhVdXNjV1oyNjly U0tzNC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTMwZGU4NGIt NDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1YjQ5LzAvMzkzMTJlMzIzMDM3MmUzMTMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMxMzEzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvP DTANBgkqhkiG9w0BAQsFAAOCAQEAhWEooUdRc8VfE8/nT7ZJSvJI+YphOnU68Hss tP1Z8+4LO6/IYThmmIupxeLSL1P3gMZc0lvUTXpSwnCIe3CE5P35dzq32Kf3s1pJ WWkLfUeU2S2ahuXLCVZA9cY7FSkwjiChnZjZVjUQA70kk5iHe0a4UCAjflLheiVE uTohPDnLccM6aMW43Ebd/1Kh+3iAgf5J1Q9ng/1vYQGISzJDi2JmspexikgDxNHl bdnzj/H8BORuNbTS6f2dTW58TBteK8LTOoA76UC1cSfufQ6ttBezAMAiX78Qk5dk Z6F3bPNSmt3JCREOnfoWvUUKwnZMWDFP6DD3unQxja3SzyqugA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:55 2026 by rpki-client