This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/38392e3135302e34392e302f32342d3234203d3e2030.roa File: 38392e3135302e34392e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: ALU/WiKi+F/SsajUvhBxkSVoNXo5oZajppJ0LbHGyXc= Subject key identifier: 9B:58:F1:EC:4D:E3:4E:CD:DA:05:B9:A7:8A:C7:A8:FE:03:9E:64:EE Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Certificate serial: 175BD448AB48E15AEE419E7583B448E68F6E66B5 Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/38392e3135302e34392e302f32342d3234203d3e2030.roa Signing time: Mon 12 Jan 2026 11:59:50 +0000 ROA not before: Mon 12 Jan 2026 11:54:50 +0000 ROA not after: Mon 11 Jan 2027 11:59:50 +0000 asID: 0 IP address blocks: 89.150.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:5b:d4:48:ab:48:e1:5a:ee:41:9e:75:83:b4:48:e6:8f:6e:66:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Validity Not Before: Jan 12 11:54:50 2026 GMT Not After : Jan 11 11:59:50 2027 GMT Subject: CN=9B58F1EC4DE34ECDDA05B9A78AC7A8FE039E64EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c1:bf:cb:25:14:e0:f7:00:9d:b4:f0:0e:68: 8d:76:b3:6c:78:65:b9:dc:c4:02:34:7d:59:4a:14: 91:16:72:06:bd:af:ec:74:ac:60:43:da:9d:fb:3f: 66:e6:2b:12:f7:e7:5f:dd:d5:68:c0:79:cc:b7:4a: 34:96:84:19:fe:16:3c:a4:38:cd:5f:8a:81:79:fd: ec:9a:7f:02:de:4f:88:47:40:cb:64:7b:32:b0:60: b4:ef:42:eb:11:03:69:b1:7e:81:01:b2:c4:5f:89: 4a:b1:e1:d4:2c:20:41:81:c9:88:ad:e0:84:29:5b: 30:33:af:8b:08:7b:a8:6b:28:e3:0b:7e:72:89:4e: 96:ba:65:23:74:2e:f5:36:e6:ba:e4:83:1a:16:1b: 19:72:1f:fb:75:de:45:60:7c:5f:23:d6:7f:49:a9: 1d:95:c5:91:3d:11:28:95:88:63:38:f1:94:45:78: 4e:ac:3a:fe:78:2f:bc:f8:a1:9c:e4:14:f9:bf:73: 02:ba:c8:35:d0:62:7f:82:d3:1a:45:19:be:8b:fa: b3:ca:84:2c:3a:66:f4:47:24:ce:ff:ed:f6:5f:44: fb:41:bb:7f:a6:61:8a:5d:49:6f:90:0f:88:c9:b0: 38:26:23:e1:46:1f:fc:20:70:c0:d0:d6:b2:ca:f4: 02:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:58:F1:EC:4D:E3:4E:CD:DA:05:B9:A7:8A:C7:A8:FE:03:9E:64:EE X509v3 Authority Key Identifier: keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/38392e3135302e34392e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.150.49.0/24 Signature Algorithm: sha256WithRSAEncryption 35:e2:44:e0:a4:ed:fc:e7:4a:fd:a8:5d:37:2c:7d:2c:0f:b6: 40:f1:05:2d:03:8e:d1:42:a1:63:25:7e:f3:95:05:9a:49:d1: b4:6b:de:44:fe:0f:8d:56:36:82:27:24:7b:cf:fd:a5:e5:9a: c2:7e:08:43:65:c3:3e:fc:9c:e8:6d:75:33:ac:51:ba:d2:61: fa:2e:dd:d9:ce:d7:47:be:ef:16:fe:84:4a:8e:72:4b:96:bf: f4:c2:f9:a0:75:d7:10:13:27:e8:15:c7:8e:61:a5:12:31:16: b4:be:da:92:b5:04:27:77:20:ed:40:f7:84:84:0f:09:d9:49: 59:0e:cb:4b:b7:d6:dc:c3:44:d6:22:39:a4:44:5f:72:44:d3: 7b:da:0b:8d:4b:7a:15:2e:6a:e8:3a:a1:df:a5:23:4a:7b:f7: 95:b6:79:27:f3:bb:0a:3e:57:cf:f4:e9:61:ef:b2:6f:cc:85: 03:7f:4a:55:24:18:8e:05:79:ee:e4:73:d4:c5:c4:c7:96:13: 1e:fe:b8:f7:02:ac:8c:1a:89:60:17:a6:63:5c:ec:68:09:73: 58:85:19:7e:34:c0:cc:a0:4c:42:07:d8:64:a3:67:53:b0:c5: b2:a3:cb:ab:69:4d:5d:ad:88:c4:85:17:a4:04:47:88:89:7d: 2a:2f:74:de -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUF1vUSKtI4VruQZ51g7RI5o9uZrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTFmMzUxMmY1MWRjNDJiYjllYjEyYWJjMGJiNTI5NjY4 YjJlZGVlNDAeFw0yNjAxMTIxMTU0NTBaFw0yNzAxMTExMTU5NTBaMDMxMTAvBgNV BAMTKDlCNThGMUVDNERFMzRFQ0REQTA1QjlBNzhBQzdBOEZFMDM5RTY0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcwb/LJRTg9wCdtPAOaI12s2x4 ZbncxAI0fVlKFJEWcga9r+x0rGBD2p37P2bmKxL351/d1WjAecy3SjSWhBn+Fjyk OM1fioF5/eyafwLeT4hHQMtkezKwYLTvQusRA2mxfoEBssRfiUqx4dQsIEGByYit 4IQpWzAzr4sIe6hrKOMLfnKJTpa6ZSN0LvU25rrkgxoWGxlyH/t13kVgfF8j1n9J qR2VxZE9ESiViGM48ZRFeE6sOv54L7z4oZzkFPm/cwK6yDXQYn+C0xpFGb6L+rPK hCw6ZvRHJM7/7fZfRPtBu3+mYYpdSW+QD4jJsDgmI+FGH/wgcMDQ1rLK9AKBAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUm1jx7E3jTs3aBbmniseo/gOeZO4wHwYDVR0j BBgwFoAU4fNRL1HcQruesSq8C7UpZosu3uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3 OWE3LzAvRTFGMzUxMkY1MURDNDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmTlJMMUhjUXJ1ZXNTcThDN1VwWm9z dTN1US5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgt ZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3OWE3LzAvMzgzOTJlMzEzNTMwMmUzNDM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZljEwDQYJKoZI hvcNAQELBQADggEBADXiROCk7fznSv2oXTcsfSwPtkDxBS0DjtFCoWMlfvOVBZpJ 0bRr3kT+D41WNoInJHvP/aXlmsJ+CENlwz78nOhtdTOsUbrSYfou3dnO10e+7xb+ hEqOckuWv/TC+aB11xATJ+gVx45hpRIxFrS+2pK1BCd3IO1A94SEDwnZSVkOy0u3 1tzDRNYiOaREX3JE03vaC41LehUuaug6od+lI0p795W2eSfzuwo+V8/06WHvsm/M hQN/SlUkGI4Fee7kc9TFxMeWEx7+uPcCrIwaiWAXpmNc7GgJc1iFGX40wMygTEIH 2GSjZ1OwxbKjy6tpTV2tiMSFF6QER4iJfSovdN4= -----END CERTIFICATE-----Generated at Sun Jan 25 13:56:44 2026 by rpki-client