This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e31302e302f32342d3332203d3e20313336373837.roa File: 39342e3134302e31302e302f32342d3332203d3e20313336373837.roa (raw, json) Hash identifier: HVrKnmxTWVhkWiGLvvtQMjomVyes+acRy7GekQ4WCv0= Subject key identifier: 84:5A:79:DA:23:1F:B5:FE:64:1D:FB:86:DC:4E:1B:DC:42:B5:BC:C6 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 4E9473DF989D5FE6BA5ABE72E8E3F50AB314CBF9 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e31302e302f32342d3332203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:51:02 +0000 ROA not before: Mon 29 Dec 2025 09:46:02 +0000 ROA not after: Mon 28 Dec 2026 09:51:02 +0000 asID: 136787 IP address blocks: 94.140.10.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:94:73:df:98:9d:5f:e6:ba:5a:be:72:e8:e3:f5:0a:b3:14:cb:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:46:02 2025 GMT Not After : Dec 28 09:51:02 2026 GMT Subject: CN=845A79DA231FB5FE641DFB86DC4E1BDC42B5BCC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:81:3b:f9:fa:14:c6:d5:bf:30:28:fd:95: 98:cb:56:0d:ec:3a:1d:8e:e2:53:bc:3c:d3:9c:ce: be:1c:43:e4:cd:05:c3:64:4b:6b:63:96:86:db:88: 0f:4f:3a:d2:91:68:3a:ef:2d:f5:e8:c1:11:e1:a0: 59:ba:0c:c6:f2:60:99:b6:b8:35:a2:f9:b4:04:31: 23:d5:f1:7d:ae:fd:1f:fc:30:14:61:4a:72:df:d8: 3e:31:32:bc:e2:f2:e3:97:b6:62:d6:c2:c3:be:2d: f7:28:0f:dc:9b:bf:e3:54:63:81:ed:14:94:0a:38: 1b:38:e2:a5:5d:d7:ae:63:2c:fe:dc:41:fd:fa:3e: 2f:7f:e7:00:4d:8a:43:83:11:57:c5:59:f6:fd:cd: c9:eb:49:79:2f:47:30:93:64:dc:a9:22:9a:71:99: c6:90:a2:6f:e3:4d:81:42:cf:8f:fa:f4:f2:3c:39: 5c:3a:14:91:40:95:08:10:3e:ab:8d:d1:8a:7d:4c: 03:a9:33:b5:a1:46:8d:6b:1a:7e:2a:5c:9d:b0:27: 6e:ac:97:d4:1a:c0:1d:71:05:77:dc:a6:88:8e:7b: 39:81:40:64:88:ec:71:28:8b:f0:09:ce:1b:20:29: 55:00:ea:e6:e5:7a:2b:4e:9f:9f:64:7c:e6:b0:2a: 46:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5A:79:DA:23:1F:B5:FE:64:1D:FB:86:DC:4E:1B:DC:42:B5:BC:C6 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e31302e302f32342d3332203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.140.10.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:33:8e:e9:78:86:78:98:ff:af:c9:c0:29:e1:5e:d5:71:c2: b7:a0:42:62:b6:92:81:9b:cc:8e:24:07:87:97:9a:fe:db:3e: a1:68:06:d4:73:75:62:12:82:b6:6b:f2:72:d2:1f:42:71:42: 63:45:ca:17:9c:f7:27:64:3e:9a:f8:ca:8d:f2:1e:30:7f:e5: 89:a9:63:52:98:2f:0e:89:a4:2f:65:9f:9e:aa:b9:d9:92:18: 85:20:44:3b:9c:2c:00:e2:d3:e7:50:1b:e7:33:14:3f:fc:ab: a0:6e:a8:d5:10:0d:17:ad:2e:0d:65:56:c3:69:5a:42:76:84: d4:31:b0:b8:da:3c:41:c1:22:45:26:f7:c9:fb:eb:38:bb:75: e7:9c:5c:e4:b9:31:90:80:3c:46:83:85:95:b5:50:bd:13:a5: 70:0a:b8:f7:72:d8:d3:65:ee:dd:be:87:67:72:f7:04:00:30: 20:df:c1:63:7b:86:7a:fe:a9:b9:09:b8:68:5b:d8:b3:fc:f3: 7d:6c:c5:c9:e3:96:d5:1a:66:e0:86:49:e2:f1:70:67:3c:df: 6e:2a:e6:44:3a:90:b4:44:fa:96:ae:fb:1f:6e:9d:95:ce:cd: 09:f9:53:60:c0:1d:68:12:57:18:b8:81:f1:dd:43:4a:71:d5: 4e:53:37:8f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUTpRz35idX+a6Wr5y6OP1CrMUy/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ2MDJaFw0yNjEyMjgwOTUxMDJaMDMxMTAvBgNV BAMTKDg0NUE3OURBMjMxRkI1RkU2NDFERkI4NkRDNEUxQkRDNDJCNUJDQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPkoE7+foUxtW/MCj9lZjLVg3s Oh2O4lO8PNOczr4cQ+TNBcNkS2tjlobbiA9POtKRaDrvLfXowRHhoFm6DMbyYJm2 uDWi+bQEMSPV8X2u/R/8MBRhSnLf2D4xMrzi8uOXtmLWwsO+LfcoD9ybv+NUY4Ht FJQKOBs44qVd165jLP7cQf36Pi9/5wBNikODEVfFWfb9zcnrSXkvRzCTZNypIppx mcaQom/jTYFCz4/69PI8OVw6FJFAlQgQPquN0Yp9TAOpM7WhRo1rGn4qXJ2wJ26s l9QawB1xBXfcpoiOezmBQGSI7HEoi/AJzhsgKVUA6ubleitOn59kfOawKkbDAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUhFp52iMftf5kHfuG3E4b3EK1vMYwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzNDJlMzEzNDMwMmUzMTMw MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA XowKMA0GCSqGSIb3DQEBCwUAA4IBAQAMM47peIZ4mP+vycAp4V7VccK3oEJitpKB m8yOJAeHl5r+2z6haAbUc3ViEoK2a/Jy0h9CcUJjRcoXnPcnZD6a+MqN8h4wf+WJ qWNSmC8OiaQvZZ+eqrnZkhiFIEQ7nCwA4tPnUBvnMxQ//KugbqjVEA0XrS4NZVbD aVpCdoTUMbC42jxBwSJFJvfJ++s4u3XnnFzkuTGQgDxGg4WVtVC9E6VwCrj3ctjT Ze7dvodncvcEADAg38Fje4Z6/qm5CbhoW9iz/PN9bMXJ45bVGmbghkni8XBnPN9u KuZEOpC0RPqWrvsfbp2Vzs0J+VNgwB1oElcYuIHx3UNKcdVOUzeP -----END CERTIFICATE-----Generated at Sun Jan 25 15:39:45 2026 by rpki-client