This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3139332e31372e39352e302f32342d3234203d3e20313938353834.roa File: 3139332e31372e39352e302f32342d3234203d3e20313938353834.roa (raw, json) Hash identifier: MkExyo8U1yyFCZEb3tQEd4BjY7tmz/8ir10w+z/6Mqg= Subject key identifier: 3E:C8:12:2F:EC:AB:5C:FF:52:D0:0B:9B:11:51:C6:13:D3:9D:B9:90 Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Certificate serial: 388BA7B488541C7F99551122DD97B6873057A697 Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3139332e31372e39352e302f32342d3234203d3e20313938353834.roa Signing time: Mon 22 Dec 2025 15:54:11 +0000 ROA not before: Mon 22 Dec 2025 15:49:11 +0000 ROA not after: Mon 21 Dec 2026 15:54:11 +0000 asID: 198584 IP address blocks: 193.17.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:8b:a7:b4:88:54:1c:7f:99:55:11:22:dd:97:b6:87:30:57:a6:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Validity Not Before: Dec 22 15:49:11 2025 GMT Not After : Dec 21 15:54:11 2026 GMT Subject: CN=3EC8122FECAB5CFF52D00B9B1151C613D39DB990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:10:32:98:b5:60:03:d4:0e:e2:a8:0e:39:60: 8d:9d:18:9b:a0:3f:ba:a6:68:89:0a:41:2d:95:2d: 49:82:1d:ca:2c:db:da:e1:da:93:5b:be:ec:e0:6e: 4b:5c:e4:39:55:3e:33:96:96:12:36:65:41:1c:95: bf:dc:33:8d:46:46:7c:d8:fa:b8:84:c9:b6:84:4a: 81:8a:54:a4:87:40:a2:4e:ba:28:e9:79:7e:41:7a: e9:58:1e:8a:c8:c1:37:cf:e8:a0:aa:24:68:42:2e: 8a:47:38:59:b6:37:3a:db:c3:59:d4:c1:ba:29:51: 17:ac:d7:13:0b:96:9d:59:01:cd:71:70:9c:e0:d0: 1d:9b:86:9b:28:a9:b6:22:9b:3c:6b:8a:43:a8:49: 01:3a:75:be:93:82:cb:c0:3b:52:49:ae:04:01:6b: 9c:c3:b2:e4:1a:10:9e:c3:61:ce:af:16:23:a6:52: 91:0e:36:7b:d1:ec:6a:6a:1b:37:9f:4d:99:35:23: 80:50:88:2f:90:6f:53:27:52:a9:44:95:4f:56:97: 73:b7:6b:2d:3b:27:42:ab:fc:b0:08:c3:0e:c2:b9: 7f:7f:4b:a9:10:b1:66:58:18:94:6b:54:c9:e0:29: ef:c9:48:ac:e8:71:0b:db:c3:56:b2:3d:dc:91:1b: 15:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C8:12:2F:EC:AB:5C:FF:52:D0:0B:9B:11:51:C6:13:D3:9D:B9:90 X509v3 Authority Key Identifier: keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3139332e31372e39352e302f32342d3234203d3e20313938353834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.95.0/24 Signature Algorithm: sha256WithRSAEncryption 32:be:a8:de:35:50:0d:08:24:ee:a7:c0:1c:ad:49:5d:0b:ed: f6:29:68:b7:d2:6b:df:6b:c9:c3:78:b5:fd:97:81:d8:e4:c9: 5e:3a:1e:30:23:90:c3:c1:0b:82:03:5b:88:ca:82:70:54:30: d5:1c:0d:e8:04:cd:c5:99:36:be:ec:5f:90:94:61:34:cf:ce: 0f:0e:ee:f7:1a:09:ae:55:dd:fc:d5:d4:50:3d:d8:4d:53:a4: 6e:14:f1:5a:c3:62:49:f8:c1:b7:26:5d:5c:d8:1b:e0:ee:fe: 08:83:05:c4:19:0b:fd:75:e6:1c:3b:ca:b6:35:00:57:75:7a: f1:6c:5c:f1:2c:48:ff:43:8f:f7:b3:12:f4:c4:5a:36:f7:89: 94:51:fb:c3:da:6a:59:72:29:8c:42:fc:f8:0f:68:1a:30:58: 66:1d:78:f8:b2:44:5f:45:c9:d1:cd:d7:86:b6:62:cc:45:4b: 92:56:95:02:b9:3b:a2:04:27:05:8e:6d:52:87:bb:d7:b5:c7: 66:0f:1f:bb:8e:80:fc:af:8e:17:61:ff:21:3a:54:61:cc:8b: ac:19:b5:94:55:2e:05:03:ba:24:1e:85:1a:1e:9f:63:ee:6c: fe:9f:2a:cb:6b:b1:6a:4e:b3:c9:54:1f:82:97:56:85:d7:88: 35:aa:31:1e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOIuntIhUHH+ZVREi3Ze2hzBXppcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTFmMzUxMmY1MWRjNDJiYjllYjEyYWJjMGJiNTI5NjY4 YjJlZGVlNDAeFw0yNTEyMjIxNTQ5MTFaFw0yNjEyMjExNTU0MTFaMDMxMTAvBgNV BAMTKDNFQzgxMjJGRUNBQjVDRkY1MkQwMEI5QjExNTFDNjEzRDM5REI5OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaEDKYtWAD1A7iqA45YI2dGJug P7qmaIkKQS2VLUmCHcos29rh2pNbvuzgbktc5DlVPjOWlhI2ZUEclb/cM41GRnzY +riEybaESoGKVKSHQKJOuijpeX5BeulYHorIwTfP6KCqJGhCLopHOFm2Nzrbw1nU wbopURes1xMLlp1ZAc1xcJzg0B2bhpsoqbYimzxrikOoSQE6db6TgsvAO1JJrgQB a5zDsuQaEJ7DYc6vFiOmUpEONnvR7GpqGzefTZk1I4BQiC+Qb1MnUqlElU9Wl3O3 ay07J0Kr/LAIww7CuX9/S6kQsWZYGJRrVMngKe/JSKzocQvbw1ayPdyRGxWxAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUPsgSL+yrXP9S0AubEVHGE9OduZAwHwYDVR0j BBgwFoAU4fNRL1HcQruesSq8C7UpZosu3uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3 OWE3LzAvRTFGMzUxMkY1MURDNDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmTlJMMUhjUXJ1ZXNTcThDN1VwWm9z dTN1US5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgt ZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3OWE3LzAvMzEzOTMzMmUzMTM3MmUzOTM1 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM4MzUzODM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA wRFfMA0GCSqGSIb3DQEBCwUAA4IBAQAyvqjeNVANCCTup8AcrUldC+32KWi30mvf a8nDeLX9l4HY5MleOh4wI5DDwQuCA1uIyoJwVDDVHA3oBM3FmTa+7F+QlGE0z84P Du73GgmuVd381dRQPdhNU6RuFPFaw2JJ+MG3Jl1c2Bvg7v4IgwXEGQv9deYcO8q2 NQBXdXrxbFzxLEj/Q4/3sxL0xFo294mUUfvD2mpZcimMQvz4D2gaMFhmHXj4skRf RcnRzdeGtmLMRUuSVpUCuTuiBCcFjm1Sh7vXtcdmDx+7joD8r44XYf8hOlRhzIus GbWUVS4FA7okHoUaHp9j7mz+nyrLa7FqTrPJVB+Cl1aF14g1qjEe -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:19 2026 by rpki-client