This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39322e3131382e35312e302f32342d3234203d3e20313336373837.roa File: 39322e3131382e35312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 75EEnSLY3CaRbHKCa5uyreIyr2BuEe1OuH1ILjp3/zY= Subject key identifier: B2:CD:8B:27:55:A0:64:30:CB:0E:88:CD:F2:FD:F1:FC:0B:45:81:DE Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 3AC97D3D17377D00A6254486D227DB25DA78362B Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39322e3131382e35312e302f32342d3234203d3e20313336373837.roa Signing time: Sat 03 Jan 2026 22:51:15 +0000 ROA not before: Sat 03 Jan 2026 22:46:15 +0000 ROA not after: Sat 02 Jan 2027 22:51:15 +0000 asID: 136787 IP address blocks: 92.118.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c9:7d:3d:17:37:7d:00:a6:25:44:86:d2:27:db:25:da:78:36:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 3 22:46:15 2026 GMT Not After : Jan 2 22:51:15 2027 GMT Subject: CN=B2CD8B2755A06430CB0E88CDF2FDF1FC0B4581DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:fa:7e:7c:44:b3:88:65:cd:1a:e5:99:ab: 96:92:f9:ac:91:2f:03:b6:53:f5:90:e2:b8:e2:c2: 25:b2:f1:a3:d7:1b:09:92:61:d9:89:2d:27:7d:64: 25:e9:64:cf:73:bc:8a:b0:b9:a7:dc:87:36:7e:a3: 59:1f:08:c2:98:a9:5e:00:30:e6:a5:7f:13:42:09: 64:dc:6b:cb:b7:0b:60:57:03:d6:d6:72:18:0b:3b: f1:56:b7:6b:bf:3e:0e:a0:0f:7a:a4:d0:6a:42:eb: 10:0b:9c:6f:64:bb:48:bc:c6:b3:53:d3:d4:00:0b: 56:34:80:a2:40:cf:bf:ae:c9:e8:66:ff:f1:35:5c: aa:33:44:eb:5c:4d:33:3d:56:c3:40:68:c9:b4:0b: 12:2c:e8:6d:28:70:39:c0:ea:97:d5:43:e8:84:13: 54:83:85:ef:c6:8d:4b:18:b9:ed:69:c1:d9:09:d1: 66:ec:e2:94:e0:15:40:49:9b:bf:aa:f2:0e:c0:49: 5d:a1:63:0f:b9:24:99:65:15:f4:57:f5:db:45:c0: 5a:98:b3:c2:5e:c3:91:3d:ee:60:72:b5:ac:a2:2f: 58:8c:0f:26:6c:e9:56:ad:a4:d6:21:7a:ef:3c:9f: 50:a6:1d:6a:37:a7:9a:61:36:da:56:b6:d0:72:a1: 25:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CD:8B:27:55:A0:64:30:CB:0E:88:CD:F2:FD:F1:FC:0B:45:81:DE X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39322e3131382e35312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.51.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:de:b0:84:56:c6:5c:62:5d:17:f1:1d:8d:85:3f:8e:32:e7: 63:d0:29:b5:28:0e:61:ee:6e:5b:8c:d4:e5:bd:e2:54:fe:f4: 54:9b:c0:ab:a8:82:34:1f:2a:ee:ea:c2:78:03:be:0f:91:d7: 9a:21:31:fb:a7:04:fd:ac:10:73:4d:bb:ea:3e:14:bf:4a:1a: ab:59:69:b0:eb:8e:ce:84:04:af:0e:5a:39:d3:5e:33:c0:e6: 47:6f:2f:88:be:09:f1:a0:5f:db:93:6f:f8:2c:89:14:c3:32: 1a:9a:78:8b:37:a8:df:f6:dd:ab:7b:73:f7:43:f4:21:11:3b: 54:54:8d:9a:10:72:39:a8:42:e4:bc:d1:1f:ca:0b:4a:15:73: 61:f0:64:75:36:0f:bd:ed:ef:ed:b2:8d:9a:b3:4f:a1:37:b0: e0:d7:f8:16:93:e3:31:ea:fd:b5:7c:45:25:27:28:da:fb:6a: ba:db:da:4f:dd:3a:34:a0:fa:09:06:ae:73:85:96:0e:1f:4a: a8:f8:ec:48:b9:60:fc:19:f2:f0:c2:4e:c1:e1:b9:c7:c3:0d: 84:11:c9:66:f3:46:de:14:01:85:3d:19:e7:f5:3a:84:ba:25: b4:1f:e6:2e:4b:97:0f:55:e2:cc:f3:fd:06:ee:5b:37:38:3a: 71:0d:a3:c6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOsl9PRc3fQCmJUSG0ifbJdp4NiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMDMyMjQ2MTVaFw0yNzAxMDIyMjUxMTVaMDMxMTAvBgNV BAMTKEIyQ0Q4QjI3NTVBMDY0MzBDQjBFODhDREYyRkRGMUZDMEI0NTgxREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Kvp+fESziGXNGuWZq5aS+ayR LwO2U/WQ4rjiwiWy8aPXGwmSYdmJLSd9ZCXpZM9zvIqwuafchzZ+o1kfCMKYqV4A MOalfxNCCWTca8u3C2BXA9bWchgLO/FWt2u/Pg6gD3qk0GpC6xALnG9ku0i8xrNT 09QAC1Y0gKJAz7+uyehm//E1XKozROtcTTM9VsNAaMm0CxIs6G0ocDnA6pfVQ+iE E1SDhe/GjUsYue1pwdkJ0Wbs4pTgFUBJm7+q8g7ASV2hYw+5JJllFfRX9dtFwFqY s8Jew5E97mBytayiL1iMDyZs6VatpNYheu88n1CmHWo3p5phNtpWttByoSUTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUss2LJ1WgZDDLDojN8v3x/AtFgd4wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzMjJlMzEzMTM4MmUzNTMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA XHYzMA0GCSqGSIb3DQEBCwUAA4IBAQBs3rCEVsZcYl0X8R2NhT+OMudj0Cm1KA5h 7m5bjNTlveJU/vRUm8CrqII0Hyru6sJ4A74PkdeaITH7pwT9rBBzTbvqPhS/Shqr WWmw647OhASvDlo5014zwOZHby+IvgnxoF/bk2/4LIkUwzIamniLN6jf9t2re3P3 Q/QhETtUVI2aEHI5qELkvNEfygtKFXNh8GR1Ng+97e/tso2as0+hN7Dg1/gWk+Mx 6v21fEUlJyja+2q629pP3To0oPoJBq5zhZYOH0qo+OxIuWD8GfLwwk7B4bnHww2E Eclm80beFAGFPRnn9TqEuiW0H+YuS5cPVeLM8/0G7ls3ODpxDaPG -----END CERTIFICATE-----Generated at Sun Jan 25 10:23:04 2026 by rpki-client