This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39322e3131382e34392e302f32342d3234203d3e20313336373837.roa File: 39322e3131382e34392e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: FVTXYowWxHZ/WJFi93W6glpRkcioxR7OTUo2reS5k6c= Subject key identifier: AC:99:C6:77:95:0D:FB:5E:FC:19:52:8E:C2:B9:10:0D:9F:4D:E3:F1 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 07CD07013B9019EDCD32AB7CFBC9A55D2D639719 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39322e3131382e34392e302f32342d3234203d3e20313336373837.roa Signing time: Sat 03 Jan 2026 22:51:15 +0000 ROA not before: Sat 03 Jan 2026 22:46:15 +0000 ROA not after: Sat 02 Jan 2027 22:51:15 +0000 asID: 136787 IP address blocks: 92.118.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:cd:07:01:3b:90:19:ed:cd:32:ab:7c:fb:c9:a5:5d:2d:63:97:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 3 22:46:15 2026 GMT Not After : Jan 2 22:51:15 2027 GMT Subject: CN=AC99C677950DFB5EFC19528EC2B9100D9F4DE3F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:06:cd:a5:7a:4d:27:b2:6e:01:50:ee:4c:33: 3f:6b:24:07:60:6a:07:d1:8e:41:38:3c:a9:15:8e: db:c3:e7:fd:0b:38:e2:85:d5:b5:d8:fe:c4:c0:7b: ba:49:8b:dc:03:a2:ba:a4:d3:2c:6b:6f:11:5c:ca: 7a:0b:72:18:37:33:17:cf:e8:f8:25:eb:78:5e:1d: 78:26:98:40:90:d3:84:6a:b2:77:06:e9:82:32:a1: cc:41:9e:df:72:92:ea:53:d0:12:5e:40:f6:8c:92: cc:81:c3:f1:8f:ef:b5:97:bc:13:40:ff:85:b0:b8: 29:e4:8f:dc:92:57:72:33:4d:b6:96:07:ae:c1:ba: 30:28:87:32:c0:41:a8:55:16:9f:25:1d:5b:df:e1: d2:cf:91:22:84:47:4f:35:5d:b6:73:63:9b:93:15: 04:9b:a5:56:70:bb:47:c8:e2:d7:9f:56:e3:b4:30: 84:09:c1:47:bc:a3:0c:20:d2:87:57:fd:1e:48:c4: 22:9e:47:c1:1f:e1:96:a4:c2:c4:67:6d:16:c2:02: 9e:7f:22:84:fe:2f:10:72:cb:30:43:f1:f7:f5:c7: 13:85:cf:03:6f:b6:08:a6:c1:bd:b9:8e:e8:e7:8b: 19:fa:ed:26:bf:3f:9c:b0:ad:59:94:ae:b1:b3:8e: 34:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:99:C6:77:95:0D:FB:5E:FC:19:52:8E:C2:B9:10:0D:9F:4D:E3:F1 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39322e3131382e34392e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.49.0/24 Signature Algorithm: sha256WithRSAEncryption 29:0f:86:d3:52:07:8d:fa:e5:28:7c:f0:df:27:8c:d3:ee:6a: af:4b:dd:67:64:99:95:d1:2f:94:01:ac:44:1c:51:fb:6e:61: e6:7c:ac:e3:97:8f:f6:c1:9f:96:c6:fe:b9:25:85:8f:3c:3c: 8f:bd:e5:45:9f:b7:c9:92:f4:2d:24:33:ec:66:b1:dc:ce:c2: 15:9d:5c:cb:af:f9:23:65:9a:e4:34:03:93:92:19:ee:6a:44: f9:b2:71:a7:0f:27:59:0b:ab:fd:28:2a:60:71:69:de:d5:66: 9c:68:a6:7e:b0:57:9f:25:76:09:74:b4:d5:a8:c0:92:0e:87: bc:d8:28:5d:12:5d:1d:da:a1:bb:c5:20:9a:25:4e:be:59:4f: b2:7c:d3:84:a1:1b:4b:1d:2f:67:0f:6e:7a:e1:a1:30:6c:22: fd:dd:7a:3b:5c:50:c7:9d:ca:99:30:c6:bc:41:7e:32:a3:b8: ff:32:1e:aa:0a:a5:89:a2:39:08:77:e0:1f:df:75:69:08:ce: 80:b9:eb:5e:f8:66:06:58:36:17:59:c1:13:89:ad:83:97:6b: 04:88:8f:45:c0:d6:5c:bd:40:c7:bd:fd:79:79:dc:b9:f4:59: 0e:f6:a0:6f:01:c4:6e:39:da:35:01:04:5b:b7:43:7e:88:fd: f3:ba:8a:af -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUB80HATuQGe3NMqt8+8mlXS1jlxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMDMyMjQ2MTVaFw0yNzAxMDIyMjUxMTVaMDMxMTAvBgNV BAMTKEFDOTlDNjc3OTUwREZCNUVGQzE5NTI4RUMyQjkxMDBEOUY0REUzRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsBs2lek0nsm4BUO5MMz9rJAdg agfRjkE4PKkVjtvD5/0LOOKF1bXY/sTAe7pJi9wDorqk0yxrbxFcynoLchg3MxfP 6Pgl63heHXgmmECQ04RqsncG6YIyocxBnt9ykupT0BJeQPaMksyBw/GP77WXvBNA /4WwuCnkj9ySV3IzTbaWB67BujAohzLAQahVFp8lHVvf4dLPkSKER081XbZzY5uT FQSbpVZwu0fI4tefVuO0MIQJwUe8owwg0odX/R5IxCKeR8Ef4ZakwsRnbRbCAp5/ IoT+LxByyzBD8ff1xxOFzwNvtgimwb25jujnixn67Sa/P5ywrVmUrrGzjjTzAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUrJnGd5UN+178GVKOwrkQDZ9N4/EwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzMjJlMzEzMTM4MmUzNDM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA XHYxMA0GCSqGSIb3DQEBCwUAA4IBAQApD4bTUgeN+uUofPDfJ4zT7mqvS91nZJmV 0S+UAaxEHFH7bmHmfKzjl4/2wZ+Wxv65JYWPPDyPveVFn7fJkvQtJDPsZrHczsIV nVzLr/kjZZrkNAOTkhnuakT5snGnDydZC6v9KCpgcWne1WacaKZ+sFefJXYJdLTV qMCSDoe82ChdEl0d2qG7xSCaJU6+WU+yfNOEoRtLHS9nD2564aEwbCL93Xo7XFDH ncqZMMa8QX4yo7j/Mh6qCqWJojkId+Af33VpCM6Auete+GYGWDYXWcETia2Dl2sE iI9FwNZcvUDHvf15edy59FkO9qBvAcRuOdo1AQRbt0N+iP3zuoqv -----END CERTIFICATE-----Generated at Mon Jan 26 00:45:26 2026 by rpki-client