This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e38372e302f32342d3332203d3e203531313637.roa File: 3139342e3139352e38372e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: UdPN8ua/8xoBAAi5lxlUt1z0J8rZh1dSSdzEqbTfOCA= Subject key identifier: 10:4A:44:B1:2E:F0:32:B3:F0:9A:60:00:80:71:E7:CC:B2:FE:3B:14 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 793191939A39211B39127C5D923233092A353374 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e38372e302f32342d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:50:36 +0000 ROA not before: Mon 29 Dec 2025 09:45:36 +0000 ROA not after: Mon 28 Dec 2026 09:50:36 +0000 asID: 51167 IP address blocks: 194.195.87.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:31:91:93:9a:39:21:1b:39:12:7c:5d:92:32:33:09:2a:35:33:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:36 2025 GMT Not After : Dec 28 09:50:36 2026 GMT Subject: CN=104A44B12EF032B3F09A60008071E7CCB2FE3B14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c0:4d:cd:75:92:4f:95:66:47:6e:51:4b:46: 66:e8:88:55:8f:ca:10:cc:8f:86:a2:66:ae:ab:df: a3:b6:da:6c:c2:d2:7e:9b:b6:c0:1a:4f:c7:80:77: 23:13:bb:1e:31:ea:43:81:cd:25:26:0d:23:79:d0: b0:0d:70:79:7d:c7:38:7a:84:cf:c4:6c:13:d4:cd: 29:b6:84:fb:35:0c:ae:fd:c4:76:d4:5e:50:44:83: 04:e2:a1:07:ad:e3:d3:1a:75:ac:36:5a:54:2e:29: 1b:26:2f:bd:00:bf:45:5f:d9:2a:24:85:34:53:e2: 90:87:de:a1:fc:17:57:8e:51:9c:c3:fd:6d:2a:42: cc:d5:2b:f5:3c:c0:cf:f4:8d:dd:79:a9:c0:53:08: b0:38:c7:8a:f0:ad:be:e8:b9:9d:dd:f4:6b:ed:4a: cb:69:f4:ba:a8:d9:28:ed:a9:1a:aa:f8:19:69:36: 76:73:f6:75:79:d2:c2:81:b5:6d:9a:0d:76:1f:1c: ef:40:d9:3d:53:dc:e8:08:75:7e:40:9a:5c:26:0b: 11:b1:08:b2:d7:7a:62:b0:c0:b4:0a:ab:f1:29:63: 2a:c3:ad:4b:68:c7:ab:1b:14:2f:c2:fc:45:43:db: 3e:20:98:6e:49:90:50:e7:47:04:2f:69:ad:5d:12: e8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4A:44:B1:2E:F0:32:B3:F0:9A:60:00:80:71:E7:CC:B2:FE:3B:14 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e38372e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.195.87.0/24 Signature Algorithm: sha256WithRSAEncryption 04:a8:6f:47:60:fd:c8:ad:70:c8:f1:6a:ee:0d:44:12:e4:eb: 9f:a5:f5:bb:64:1f:ff:c9:e8:ac:d1:ca:07:a6:2e:51:f5:91: 6a:80:97:4d:14:93:24:8b:c6:f4:f4:9a:4c:e1:85:fb:00:9b: ed:e3:89:32:3a:06:f8:8d:82:93:8d:d7:ae:c9:cb:ad:4d:51: a8:a4:04:42:e8:98:1e:9e:ee:ec:db:a3:d4:8e:49:b6:85:44: 6a:7f:df:f8:dc:13:9d:4c:d8:3a:a9:f5:8b:34:5a:2c:2c:71: c1:4d:0b:58:5c:59:08:99:37:78:42:af:69:b4:dc:d4:dc:22: f9:4b:b4:91:79:c2:61:b9:6c:c4:1e:62:e6:de:96:77:f7:d2: fa:88:d9:74:0d:48:7c:6f:13:8d:15:88:e7:d4:f7:1a:91:e5: a7:7f:b4:05:c6:93:84:a8:31:49:db:af:34:0e:e6:93:73:a4: 73:2c:ad:5b:15:29:91:60:08:81:44:41:e4:61:1b:2f:54:07: 54:67:d2:51:b6:4d:59:0e:f2:e8:98:c6:b6:c6:9b:b7:fb:1d: 72:c5:e5:88:98:2d:c1:df:78:ae:38:d7:4a:67:f8:96:3a:d2: 74:5a:85:a4:cb:1e:00:ba:21:94:41:7c:78:9e:d2:51:f6:9e: 5b:ed:50:bd -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUeTGRk5o5IRs5EnxdkjIzCSo1M3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1MzZaFw0yNjEyMjgwOTUwMzZaMDMxMTAvBgNV BAMTKDEwNEE0NEIxMkVGMDMyQjNGMDlBNjAwMDgwNzFFN0NDQjJGRTNCMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHwE3NdZJPlWZHblFLRmboiFWP yhDMj4aiZq6r36O22mzC0n6btsAaT8eAdyMTux4x6kOBzSUmDSN50LANcHl9xzh6 hM/EbBPUzSm2hPs1DK79xHbUXlBEgwTioQet49Madaw2WlQuKRsmL70Av0Vf2Sok hTRT4pCH3qH8F1eOUZzD/W0qQszVK/U8wM/0jd15qcBTCLA4x4rwrb7ouZ3d9Gvt Sstp9Lqo2SjtqRqq+BlpNnZz9nV50sKBtW2aDXYfHO9A2T1T3OgIdX5AmlwmCxGx CLLXemKwwLQKq/EpYyrDrUtox6sbFC/C/EVD2z4gmG5JkFDnRwQvaa1dEujbAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUEEpEsS7wMrPwmmAAgHHnzLL+OxQwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMTM5MzUyZTM4 MzcyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA wsNXMA0GCSqGSIb3DQEBCwUAA4IBAQAEqG9HYP3IrXDI8WruDUQS5OufpfW7ZB// yeis0coHpi5R9ZFqgJdNFJMki8b09JpM4YX7AJvt44kyOgb4jYKTjdeuycutTVGo pARC6Jgenu7s26PUjkm2hURqf9/43BOdTNg6qfWLNFosLHHBTQtYXFkImTd4Qq9p tNzU3CL5S7SRecJhuWzEHmLm3pZ399L6iNl0DUh8bxONFYjn1PcakeWnf7QFxpOE qDFJ2680DuaTc6RzLK1bFSmRYAiBREHkYRsvVAdUZ9JRtk1ZDvLomMa2xpu3+x1y xeWImC3B33iuONdKZ/iWOtJ0WoWkyx4AuiGUQXx4ntJR9p5b7VC9 -----END CERTIFICATE-----Generated at Sun Jan 25 07:23:07 2026 by rpki-client