This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3133392e32382e3136302e302f32322d3234203d3e20333936333139.roa File: 3133392e32382e3136302e302f32322d3234203d3e20333936333139.roa (raw, json) Hash identifier: m8Ljba0IF6I4fhrz9/oSH0JgdO/crE6hpbkNOG1aw5M= Subject key identifier: 0D:9A:70:5A:A9:BA:BE:B3:A0:BA:69:27:89:8F:0E:E4:6F:28:CC:FA Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 48C6934807B60B1589D2D0AE7A9D832A83ABB162 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3133392e32382e3136302e302f32322d3234203d3e20333936333139.roa Signing time: Mon 29 Dec 2025 09:50:27 +0000 ROA not before: Mon 29 Dec 2025 09:45:27 +0000 ROA not after: Mon 28 Dec 2026 09:50:27 +0000 asID: 396319 IP address blocks: 139.28.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c6:93:48:07:b6:0b:15:89:d2:d0:ae:7a:9d:83:2a:83:ab:b1:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 29 09:45:27 2025 GMT Not After : Dec 28 09:50:27 2026 GMT Subject: CN=0D9A705AA9BABEB3A0BA6927898F0EE46F28CCFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0d:20:13:54:01:46:13:ad:eb:e4:43:78:8f: e7:6c:0f:a8:c7:79:ef:4c:c1:48:e3:7a:09:77:e9: 86:29:0b:cb:3a:f9:27:db:4c:b2:f9:cf:bf:f1:37: 2b:75:ce:90:51:f9:81:ab:bf:4d:06:e7:40:f3:c8: b2:f3:58:fd:dc:52:0c:6e:f7:53:86:49:d5:ef:57: 9d:b5:58:ef:85:db:3d:99:85:14:15:7f:4d:96:50: 8d:2e:e8:e1:fd:6d:a9:31:07:08:0e:d2:9e:8f:dc: b1:00:8d:75:ff:be:09:07:51:5a:3c:dd:76:82:c4: c4:85:6c:ef:0d:3d:df:c8:94:dd:4f:ce:25:2e:fd: 74:74:0a:a9:73:cc:f7:3b:74:a9:ea:50:89:f4:eb: 75:ad:1c:11:86:ee:fb:3a:31:a9:96:b5:98:e5:0b: 12:da:9c:ba:94:0e:b6:78:1f:37:e7:91:b5:ab:03: f5:2e:91:66:94:15:a8:00:e9:4a:df:04:bf:cd:4a: 63:36:8e:66:4d:6f:59:47:4e:21:69:7b:75:79:d8: 5e:91:7a:18:28:6a:30:ff:cd:98:77:66:e7:a0:60: 22:40:b6:b0:57:bc:a7:e3:d1:3c:d1:a4:78:3d:ec: 92:42:e9:b0:e6:f6:d3:ec:cb:c6:40:c2:3a:6d:c1: 10:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9A:70:5A:A9:BA:BE:B3:A0:BA:69:27:89:8F:0E:E4:6F:28:CC:FA X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3133392e32382e3136302e302f32322d3234203d3e20333936333139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.160.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:f7:99:38:94:fb:c3:91:38:b4:30:fa:d3:68:70:c2:4e:92: e9:67:0a:9d:3a:29:18:f7:e0:64:a3:54:ee:c7:a0:2f:ab:0f: 2b:ae:c9:d8:59:cd:25:9d:bb:68:d3:16:a4:d0:42:90:a8:87: 8b:b8:49:7b:95:65:94:77:7e:40:0c:1f:05:af:aa:d1:0a:92: f3:2e:07:b8:a5:fd:8a:eb:18:1d:53:be:18:be:97:45:ef:7b: 28:b3:a8:9d:c1:de:41:37:e5:2e:b5:ef:8c:3e:75:67:bc:29: 79:9a:28:76:95:e1:ed:c2:a4:b5:52:ee:3b:75:48:fe:0e:37: 53:3a:68:09:1e:59:5f:ac:a3:fd:ef:ac:d7:c8:94:28:5a:91: 5d:22:ab:01:7e:75:ec:08:21:bf:54:bd:90:f6:25:6f:b1:9e: e7:9e:40:d4:91:3b:a1:0d:e7:2a:88:05:19:4f:df:1e:93:fd: e2:00:1c:0e:a4:bc:0d:90:73:ea:49:c9:9f:05:61:01:b8:58: 76:4c:d6:a9:a5:ab:f9:e2:32:19:df:bf:cf:5b:f0:10:e1:51: c5:bc:6b:7f:ff:be:c8:b1:96:28:4a:9c:44:a8:de:97:c1:97: e9:19:0f:98:fb:5b:dd:76:01:05:1b:82:98:23:6d:8b:bb:b3: 4b:c8:d9:97 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUSMaTSAe2CxWJ0tCuep2DKoOrsWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMjkwOTQ1MjdaFw0yNjEyMjgwOTUwMjdaMDMxMTAvBgNV BAMTKDBEOUE3MDVBQTlCQUJFQjNBMEJBNjkyNzg5OEYwRUU0NkYyOENDRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYDSATVAFGE63r5EN4j+dsD6jH ee9MwUjjegl36YYpC8s6+SfbTLL5z7/xNyt1zpBR+YGrv00G50DzyLLzWP3cUgxu 91OGSdXvV521WO+F2z2ZhRQVf02WUI0u6OH9bakxBwgO0p6P3LEAjXX/vgkHUVo8 3XaCxMSFbO8NPd/IlN1PziUu/XR0CqlzzPc7dKnqUIn063WtHBGG7vs6MamWtZjl CxLanLqUDrZ4HzfnkbWrA/UukWaUFagA6UrfBL/NSmM2jmZNb1lHTiFpe3V52F6R ehgoajD/zZh3ZuegYCJAtrBXvKfj0TzRpHg97JJC6bDm9tPsy8ZAwjptwRCPAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUDZpwWqm6vrOgumkniY8O5G8ozPowHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzMzM5MmUzMjM4MmUzMTM2 MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMzM5MzYzMzMxMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAKLHKAwDQYJKoZIhvcNAQELBQADggEBAA33mTiU+8OROLQw+tNocMJOkulnCp06 KRj34GSjVO7HoC+rDyuuydhZzSWdu2jTFqTQQpCoh4u4SXuVZZR3fkAMHwWvqtEK kvMuB7il/YrrGB1Tvhi+l0XveyizqJ3B3kE35S6174w+dWe8KXmaKHaV4e3CpLVS 7jt1SP4ON1M6aAkeWV+so/3vrNfIlChakV0iqwF+dewIIb9UvZD2JW+xnueeQNSR O6EN5yqIBRlP3x6T/eIAHA6kvA2Qc+pJyZ8FYQG4WHZM1qmlq/niMhnfv89b8BDh UcW8a3//vsixlihKnESo3pfBl+kZD5j7W912AQUbgpgjbYu7s0vI2Zc= -----END CERTIFICATE-----Generated at Sun Jan 25 23:11:51 2026 by rpki-client