This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa File: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (raw, json) Hash identifier: O+6twnNOV5ruNsTz6gyqZDCueGHR/39L745XmWi2d5I= Subject key identifier: 87:04:47:E5:A3:D9:61:46:A9:17:18:13:27:EA:2C:CF:AF:BE:AD:3F Certificate issuer: /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3 Certificate serial: 5E6D4032C3513C7E5B63A7EC39B57E00DCA5DD12 Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa Signing time: Wed 14 Jan 2026 14:40:25 +0000 ROA not before: Wed 14 Jan 2026 14:35:25 +0000 ROA not after: Wed 13 Jan 2027 14:40:25 +0000 asID: 215296 IP address blocks: 103.147.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6d:40:32:c3:51:3c:7e:5b:63:a7:ec:39:b5:7e:00:dc:a5:dd:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3 Validity Not Before: Jan 14 14:35:25 2026 GMT Not After : Jan 13 14:40:25 2027 GMT Subject: CN=870447E5A3D96146A917181327EA2CCFAFBEAD3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a6:ce:0b:ca:5f:64:92:9b:70:c3:91:a2:70: 3d:38:57:5c:22:57:b9:8c:0b:2f:c5:b2:a8:63:26: 5b:a7:61:ee:39:ee:9b:67:a0:c8:7e:be:80:5c:e5: 77:bb:48:4c:5c:32:cc:85:7a:7c:a6:7d:1e:3b:56: 3d:94:b5:ba:0c:13:1f:99:24:de:b9:be:1c:26:ed: 1c:0b:66:32:a6:0d:51:32:b4:3c:c4:03:f9:d5:6a: a7:9e:b6:58:30:ec:42:96:bf:46:12:79:f1:77:6e: be:91:fa:1a:59:c9:d4:2e:e9:40:50:3c:e2:2d:16: a2:67:83:a5:93:b3:34:0f:61:5c:9e:bb:09:f1:5d: db:1b:7e:5e:19:39:c2:87:ec:88:5c:b8:46:a9:3f: 50:b8:65:c6:65:0f:de:34:33:6e:09:e2:b2:ff:7a: a0:ff:ab:2e:0f:5f:25:80:d8:75:7d:48:b1:3f:be: e7:27:28:c8:81:ef:11:f2:df:25:56:5f:84:fc:23: d1:77:bb:21:17:a2:d1:a5:d6:79:e0:9e:23:ac:89: a3:db:48:1e:53:cb:cd:a9:44:6c:78:a1:e0:9a:aa: ff:36:a7:0f:61:2e:97:75:31:ff:b6:7f:c6:18:a4: bb:ef:15:d8:9f:1c:27:ac:2d:fb:66:aa:7c:f1:f9: 0c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:04:47:E5:A3:D9:61:46:A9:17:18:13:27:EA:2C:CF:AF:BE:AD:3F X509v3 Authority Key Identifier: keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.153.0/24 Signature Algorithm: sha256WithRSAEncryption 93:b5:03:35:71:99:6f:4c:ae:ba:f6:39:41:98:a7:2c:1e:b9: 2d:fb:39:a3:4e:3f:5b:43:a2:e5:7c:b8:a5:76:87:f6:17:f4: f1:d7:32:c8:c8:ac:59:17:0c:77:71:4f:77:93:08:e0:3d:64: 27:e2:e4:95:69:d4:10:d3:d7:e4:ba:2d:3c:44:64:4f:41:f0: 43:fb:1f:ad:dc:23:f4:d3:0b:f7:cd:e0:0e:ba:c6:c3:4c:be: 66:eb:b3:ff:36:4c:ce:23:ba:e8:cb:bb:17:26:97:61:c2:00: 1f:a2:cd:ed:e1:45:81:e4:d7:4c:ff:91:5d:1b:be:fb:60:45: 57:0d:bc:24:e6:cf:cc:05:fe:a5:28:1f:cd:57:8e:fa:8a:96: de:d5:51:70:5b:ba:26:37:be:2e:f1:60:91:84:44:c4:22:03: 9c:69:0c:e0:0f:80:c2:3b:15:54:ab:4f:0b:3b:e1:8d:9b:e8: d6:71:46:b3:b6:78:76:8b:7b:55:4e:49:f9:04:46:27:d9:8e: 59:8d:de:13:7b:c4:ed:e5:c5:da:c0:63:5d:1f:04:20:ad:68: 1e:6b:fb:06:1b:90:a4:58:2e:bf:39:ab:a5:86:57:31:8e:c4: 1e:8c:b6:c9:6c:4b:3a:9b:b1:35:e7:15:fc:62:e8:92:99:ab: 91:06:0f:6e -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUXm1AMsNRPH5bY6fsObV+ANyl3RIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4ZDdkYzk3NzliMjc4MTVlYmI1YzNmNWZjZjA3Y2M1 ODM3MDhiMzAeFw0yNjAxMTQxNDM1MjVaFw0yNzAxMTMxNDQwMjVaMDMxMTAvBgNV BAMTKDg3MDQ0N0U1QTNEOTYxNDZBOTE3MTgxMzI3RUEyQ0NGQUZCRUFEM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpps4Lyl9kkptww5GicD04V1wi V7mMCy/FsqhjJlunYe457ptnoMh+voBc5Xe7SExcMsyFenymfR47Vj2UtboMEx+Z JN65vhwm7RwLZjKmDVEytDzEA/nVaqeetlgw7EKWv0YSefF3br6R+hpZydQu6UBQ POItFqJng6WTszQPYVyeuwnxXdsbfl4ZOcKH7IhcuEapP1C4ZcZlD940M24J4rL/ eqD/qy4PXyWA2HV9SLE/vucnKMiB7xHy3yVWX4T8I9F3uyEXotGl1nngniOsiaPb SB5Ty82pRGx4oeCaqv82pw9hLpd1Mf+2f8YYpLvvFdifHCesLftmqnzx+QxTAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUhwRH5aPZYUapFxgTJ+osz6++rT8wHwYDVR0j BBgwFoAUV419yXebJ4Feu1w/X88HzFg3CLMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWNhMjUzNTAtOWUzZi00NmUxLWFlMmItMWM2MWI2ZWE1 YWUyLzAvNTc4RDdEQzk3NzlCMjc4MTVFQkI1QzNGNUZDRjA3Q0M1ODM3MDhCMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Y0MTl5WGViSjRGZXUxd19YODhIekZn M0NMTS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWNhMjUzNTAt OWUzZi00NmUxLWFlMmItMWM2MWI2ZWE1YWUyLzAvMzEzMDMzMmUzMTM0MzcyZTMx MzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNTMyMzkzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGeTmTANBgkqhkiG9w0BAQsFAAOCAQEAk7UDNXGZb0yuuvY5QZinLB65Lfs5 o04/W0Oi5Xy4pXaH9hf08dcyyMisWRcMd3FPd5MI4D1kJ+LklWnUENPX5LotPERk T0HwQ/sfrdwj9NML983gDrrGw0y+Zuuz/zZMziO66Mu7FyaXYcIAH6LN7eFFgeTX TP+RXRu++2BFVw28JObPzAX+pSgfzVeO+oqW3tVRcFu6Jje+LvFgkYRExCIDnGkM 4A+AwjsVVKtPCzvhjZvo1nFGs7Z4dot7VU5J+QRGJ9mOWY3eE3vE7eXF2sBjXR8E IK1oHmv7BhuQpFguvzmrpYZXMY7EHoy2yWxLOpuxNecV/GLokpmrkQYPbg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:45:08 2026 by rpki-client