This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e35352e3232382e302f32322d3234203d3e20333936333139.roa File: 3139342e35352e3232382e302f32322d3234203d3e20333936333139.roa (raw, json) Hash identifier: RCTkKUXJ7VTzn15JBCTzmmsyH20/Kad8U3/qZKufyUs= Subject key identifier: EF:E4:CE:21:CC:AA:8F:35:A5:5C:C0:99:1E:7C:51:1E:8D:03:C5:C6 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 7B648045B8C40FF21F02412BCAD15EF8F794AD03 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e35352e3232382e302f32322d3234203d3e20333936333139.roa Signing time: Mon 29 Dec 2025 09:50:30 +0000 ROA not before: Mon 29 Dec 2025 09:45:30 +0000 ROA not after: Mon 28 Dec 2026 09:50:30 +0000 asID: 396319 IP address blocks: 194.55.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:64:80:45:b8:c4:0f:f2:1f:02:41:2b:ca:d1:5e:f8:f7:94:ad:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 29 09:45:30 2025 GMT Not After : Dec 28 09:50:30 2026 GMT Subject: CN=EFE4CE21CCAA8F35A55CC0991E7C511E8D03C5C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:30:94:d1:89:e7:b9:12:54:34:c9:0e:e0:a0: c6:71:68:6f:21:bf:9c:13:57:82:3a:ea:92:10:cd: 10:81:a4:ec:09:c3:60:98:e5:56:f2:09:46:60:2c: 26:61:ab:65:3a:b3:b0:a2:72:c1:43:74:af:c9:47: a3:b7:93:5f:e5:ba:4e:8c:cb:67:ff:b5:8a:66:16: 5e:b1:6e:a9:1f:0a:a0:9a:a1:6f:76:56:0d:0d:03: b3:19:57:05:30:ef:00:30:0b:d3:c1:32:d2:69:4a: 07:72:a0:6b:dc:7b:3d:0d:28:ed:2e:d0:aa:8c:f9: 3f:28:9c:bf:f9:4d:9c:a4:d5:d5:45:5b:43:1d:6d: 50:25:01:59:d2:3f:76:03:99:a9:12:32:2f:01:b8: aa:36:9d:47:c5:4d:3c:6a:d0:95:f7:12:31:39:7e: ab:fe:a6:16:80:0f:1e:07:fe:84:37:db:6f:3c:9e: bf:27:92:d9:2a:f1:62:d6:d2:e5:82:d0:06:a2:eb: d7:70:dc:f8:a5:2c:1d:3f:fe:53:2d:e2:cc:2a:dc: e9:a8:89:2b:20:30:4a:ee:b7:41:68:2c:d2:19:27: 08:94:4f:53:bb:b7:3c:4c:e9:fe:c0:ac:2c:8c:ba: d0:99:dd:23:5a:40:64:aa:df:41:a0:6f:63:8f:64: 60:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E4:CE:21:CC:AA:8F:35:A5:5C:C0:99:1E:7C:51:1E:8D:03:C5:C6 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e35352e3232382e302f32322d3234203d3e20333936333139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.55.228.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:73:30:f6:6a:ba:41:f5:b5:cb:f6:81:3c:bb:34:ea:9c:db: 3c:97:19:6d:21:fe:57:c1:ed:dd:ed:75:82:39:e2:d7:b1:c7: 21:d4:4b:ef:14:3e:bf:f6:bf:c0:98:12:00:bf:ca:09:10:5f: 3f:9b:8b:99:64:07:40:47:f9:0c:0c:ff:dc:44:93:f8:84:d5: 89:11:5b:59:03:01:d5:ed:c3:44:e5:dd:7c:b2:c9:b7:73:f0: f5:6e:ac:d3:5d:20:f6:59:7f:66:8b:e8:a9:bd:97:03:04:6c: e3:38:9e:36:ec:16:fa:41:11:27:8d:5c:02:31:83:87:2c:b1: 8b:d5:0c:1c:52:41:41:87:00:c6:af:81:de:b4:11:af:eb:cc: f9:1c:76:88:d2:9c:ab:c3:c2:72:62:fe:18:a7:1a:75:2d:89: ae:5d:57:71:82:2c:9f:a4:1d:fc:26:5c:c1:5e:96:d8:96:f8: cf:24:77:d3:e5:55:e3:58:5c:0a:81:e7:13:2c:db:c0:1d:b2: cb:fb:7a:ea:c6:4b:12:fe:67:ad:c8:c1:27:1d:e8:a3:d7:69: 79:8b:cc:91:29:32:8c:ed:9d:58:e8:b0:bf:5e:db:27:24:26: 22:f1:6e:63:46:80:66:fd:2c:3c:d8:39:54:6a:e9:60:b4:0b: 3f:1a:20:eb -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUe2SARbjED/IfAkErytFe+PeUrQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMjkwOTQ1MzBaFw0yNjEyMjgwOTUwMzBaMDMxMTAvBgNV BAMTKEVGRTRDRTIxQ0NBQThGMzVBNTVDQzA5OTFFN0M1MTFFOEQwM0M1QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMJTRiee5ElQ0yQ7goMZxaG8h v5wTV4I66pIQzRCBpOwJw2CY5VbyCUZgLCZhq2U6s7CicsFDdK/JR6O3k1/luk6M y2f/tYpmFl6xbqkfCqCaoW92Vg0NA7MZVwUw7wAwC9PBMtJpSgdyoGvcez0NKO0u 0KqM+T8onL/5TZyk1dVFW0MdbVAlAVnSP3YDmakSMi8BuKo2nUfFTTxq0JX3EjE5 fqv+phaADx4H/oQ32288nr8nktkq8WLW0uWC0Aai69dw3PilLB0//lMt4swq3Omo iSsgMErut0FoLNIZJwiUT1O7tzxM6f7ArCyMutCZ3SNaQGSq30Ggb2OPZGCfAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU7+TOIcyqjzWlXMCZHnxRHo0DxcYwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzOTM0MmUzNTM1MmUzMjMy MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMzM5MzYzMzMxMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BALCN+QwDQYJKoZIhvcNAQELBQADggEBAA9zMPZqukH1tcv2gTy7NOqc2zyXGW0h /lfB7d3tdYI54texxyHUS+8UPr/2v8CYEgC/ygkQXz+bi5lkB0BH+QwM/9xEk/iE 1YkRW1kDAdXtw0Tl3Xyyybdz8PVurNNdIPZZf2aL6Km9lwMEbOM4njbsFvpBESeN XAIxg4cssYvVDBxSQUGHAMavgd60Ea/rzPkcdojSnKvDwnJi/hinGnUtia5dV3GC LJ+kHfwmXMFeltiW+M8kd9PlVeNYXAqB5xMs28Adssv7eurGSxL+Z63IwScd6KPX aXmLzJEpMoztnVjosL9e2yckJiLxbmNGgGb9LDzYOVRq6WC0Cz8aIOs= -----END CERTIFICATE-----Generated at Sun Jan 25 23:13:46 2026 by rpki-client