This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34302e302f32342d3234203d3e20383334.roa File: 3134312e39382e34302e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: 1TukN0pM0sLV0WOTh4i1NM+3ZCa+53jVC714ffS/R84= Subject key identifier: E0:68:DF:4B:15:91:25:94:96:28:C9:25:69:80:39:69:2B:10:78:FA Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 135D34BAF401D7D11EA0D047BF1792F4F9622340 Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34302e302f32342d3234203d3e20383334.roa Signing time: Wed 17 Dec 2025 09:35:47 +0000 ROA not before: Wed 17 Dec 2025 09:30:47 +0000 ROA not after: Wed 16 Dec 2026 09:35:47 +0000 asID: 834 IP address blocks: 141.98.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5d:34:ba:f4:01:d7:d1:1e:a0:d0:47:bf:17:92:f4:f9:62:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Dec 17 09:30:47 2025 GMT Not After : Dec 16 09:35:47 2026 GMT Subject: CN=E068DF4B159125949628C925698039692B1078FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:05:2e:ce:17:1a:ec:ea:0e:f9:8d:6c:8e:92: d1:92:61:37:af:8b:39:ba:d6:ee:c4:7d:af:df:d9: a3:e7:a0:ce:fc:eb:52:85:32:12:79:9d:52:76:5b: 1b:73:8f:1c:fe:49:0d:39:a2:44:e0:3c:34:fc:d3: de:a3:35:68:ef:ce:9b:8d:45:d3:6d:7b:2f:11:39: 36:50:3b:74:85:e3:81:bb:d0:fa:ea:31:d4:bc:d3: 33:9e:32:82:06:3e:e8:0e:86:2c:70:94:34:2c:2d: 09:bf:b3:32:88:ac:8c:a7:81:9f:a9:01:24:3d:f8: 3e:8b:0b:aa:3e:b8:65:a7:85:ca:c6:04:b4:54:99: b6:9a:8f:ec:f8:20:5b:37:0b:00:f6:76:ff:15:33: ae:7b:e7:a6:a6:43:9b:83:60:1d:35:d2:e2:02:e1: 45:b9:13:b1:78:90:d1:68:83:b7:34:89:ba:b2:9b: 07:3c:0c:84:f3:48:09:6a:0c:08:d3:0d:0e:55:6d: 65:02:46:6f:ad:54:57:79:d1:32:49:21:41:f9:d7: 9c:7a:8d:dc:12:a2:a7:d4:31:80:63:2a:42:2b:80: 0d:78:05:a1:70:c4:7d:7d:ca:4b:04:8c:4e:12:35: 2a:b4:45:a3:f3:ec:53:ae:48:74:3a:05:2b:4f:86: fa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:68:DF:4B:15:91:25:94:96:28:C9:25:69:80:39:69:2B:10:78:FA X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34302e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.40.0/24 Signature Algorithm: sha256WithRSAEncryption c2:f1:99:1d:e9:46:a9:98:09:d1:65:e9:04:9e:c5:dd:3e:18: 65:4f:9b:ee:9b:81:4e:e3:2c:ab:b9:7a:6e:6f:4e:9e:79:dc: c9:ba:1f:5b:ec:5b:15:67:61:a2:55:35:eb:a8:f1:23:b6:55: 10:80:be:d1:16:a2:38:e4:ce:fc:a3:c3:94:3a:38:88:be:65: 8b:1b:d1:9e:b6:a6:ab:0e:16:d8:65:b4:86:86:83:0d:91:e0: 42:bf:41:6c:9d:c4:ce:f9:90:3c:1c:ca:3f:91:46:db:bf:e7: 4c:8d:ee:c6:29:cc:37:82:7c:91:dc:62:0e:f2:da:bd:02:50: b7:8f:40:37:42:77:ef:01:b8:12:16:df:bd:d7:33:85:1f:89: cc:e7:15:80:f1:ff:c5:62:10:ac:e7:40:16:81:ff:19:65:3f: 58:20:39:76:cc:7c:ce:82:c8:8a:28:65:86:94:0e:bd:c5:a7: 9b:e7:41:92:72:c2:8b:9d:1f:14:a6:72:0a:ee:94:e4:9c:04: e0:f0:96:3c:70:6a:99:8b:2a:c7:48:d0:47:a0:14:e8:e0:28: 21:a5:39:10:c5:ba:bf:0e:87:14:73:4d:1f:4d:81:97:ab:dc: 45:c3:3a:fd:8a:ca:72:af:04:d5:cc:4f:7e:8d:c1:f6:ae:e2: 7a:d8:fa:50 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUE100uvQB19EeoNBHvxeS9PliI0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNTEyMTcwOTMwNDdaFw0yNjEyMTYwOTM1NDdaMDMxMTAvBgNV BAMTKEUwNjhERjRCMTU5MTI1OTQ5NjI4QzkyNTY5ODAzOTY5MkIxMDc4RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2BS7OFxrs6g75jWyOktGSYTev izm61u7Efa/f2aPnoM7861KFMhJ5nVJ2Wxtzjxz+SQ05okTgPDT8096jNWjvzpuN RdNtey8ROTZQO3SF44G70PrqMdS80zOeMoIGPugOhixwlDQsLQm/szKIrIyngZ+p ASQ9+D6LC6o+uGWnhcrGBLRUmbaaj+z4IFs3CwD2dv8VM65756amQ5uDYB010uIC 4UW5E7F4kNFog7c0ibqymwc8DITzSAlqDAjTDQ5VbWUCRm+tVFd50TJJIUH515x6 jdwSoqfUMYBjKkIrgA14BaFwxH19yksEjE4SNSq0RaPz7FOuSHQ6BStPhvrvAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU4GjfSxWRJZSWKMklaYA5aSsQePowHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODgxYjdmMDgt ZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJiZDMyLzAvMzEzNDMxMmUzOTM4MmUzNDMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWIoMA0G CSqGSIb3DQEBCwUAA4IBAQDC8Zkd6UapmAnRZekEnsXdPhhlT5vum4FO4yyruXpu b06eedzJuh9b7FsVZ2GiVTXrqPEjtlUQgL7RFqI45M78o8OUOjiIvmWLG9Getqar DhbYZbSGhoMNkeBCv0FsncTO+ZA8HMo/kUbbv+dMje7GKcw3gnyR3GIO8tq9AlC3 j0A3QnfvAbgSFt+91zOFH4nM5xWA8f/FYhCs50AWgf8ZZT9YIDl2zHzOgsiKKGWG lA69xaeb50GScsKLnR8UpnIK7pTknATg8JY8cGqZiyrHSNBHoBTo4CghpTkQxbq/ DocUc00fTYGXq9xFwzr9ispyrwTVzE9+jcH2ruJ62PpQ -----END CERTIFICATE-----Generated at Sat Dec 20 13:00:42 2025 by rpki-client