This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33382e35332e302f32342d3234203d3e20323132363039.roa File: 3139332e33382e35332e302f32342d3234203d3e20323132363039.roa (raw, json) Hash identifier: DqTd62cGduiF2PoLZx9MnMA/1B6Y//AfgIcnK2PJ2/Q= Subject key identifier: F7:DB:61:5A:6B:F2:F7:70:4B:60:6E:64:E6:2E:E8:B5:2C:BE:D3:80 Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 2C62A6A7BB2D2E4C0D14A0B2DBE039D55DC46493 Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33382e35332e302f32342d3234203d3e20323132363039.roa Signing time: Wed 24 Dec 2025 19:55:32 +0000 ROA not before: Wed 24 Dec 2025 19:50:32 +0000 ROA not after: Wed 23 Dec 2026 19:55:32 +0000 asID: 212609 IP address blocks: 193.38.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:62:a6:a7:bb:2d:2e:4c:0d:14:a0:b2:db:e0:39:d5:5d:c4:64:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Dec 24 19:50:32 2025 GMT Not After : Dec 23 19:55:32 2026 GMT Subject: CN=F7DB615A6BF2F7704B606E64E62EE8B52CBED380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3f:01:21:a2:4b:37:1d:6b:73:4a:ab:0e:67: 74:bc:87:98:39:db:fe:40:cd:b5:db:12:e3:4c:55: ae:94:3a:4c:ce:b9:94:ff:d5:e8:ec:bc:04:02:57: 77:e9:e0:97:7b:c0:32:22:86:4d:a4:ce:f9:ac:9d: de:82:96:93:f9:d9:82:60:b8:ff:69:90:47:c2:d2: ed:e1:d9:51:8d:c4:d4:26:16:9e:9a:0e:dc:c9:27: 67:4a:46:6c:0e:a5:14:0a:9a:78:a5:ad:fc:00:14: af:eb:34:ec:89:8e:21:b8:58:4a:97:f0:c1:1a:14: 73:f4:7a:8d:29:86:1c:d7:63:c2:c8:1c:12:4a:2a: 33:93:be:28:0a:8f:bf:89:64:99:b0:1f:ba:63:8d: 76:c9:2b:3c:da:81:a8:74:c0:47:12:e2:8e:f7:48: 73:05:c3:30:21:95:98:76:aa:1a:9b:92:0e:ae:03: a0:d1:94:8a:40:0a:19:4a:d5:95:e8:41:f8:18:fd: 18:89:87:23:4d:ab:60:3b:26:31:27:5b:99:cb:54: 27:b0:df:83:f0:c4:3d:38:14:6e:18:d1:1e:f3:96: f7:de:f3:9a:ed:38:f1:1c:98:71:9a:fb:d5:16:aa: b6:0f:ff:8b:90:76:a7:97:af:fa:5d:c0:c7:a3:22: 4e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DB:61:5A:6B:F2:F7:70:4B:60:6E:64:E6:2E:E8:B5:2C:BE:D3:80 X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33382e35332e302f32342d3234203d3e20323132363039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.38.53.0/24 Signature Algorithm: sha256WithRSAEncryption b9:fa:d9:db:89:32:ea:9c:f2:f0:ad:1a:13:cc:77:86:7c:44: d4:42:94:af:5d:73:3a:a8:28:2e:5f:8e:00:7b:d8:cc:88:a0: ed:d4:fe:6a:30:d9:09:f9:2c:32:6e:88:ef:7d:5a:6b:52:8f: f2:5f:94:26:d4:ec:f4:e2:b5:3c:37:41:22:a4:78:b9:4e:ad: ed:62:99:89:ce:f2:fd:36:c8:44:2e:5a:e3:67:41:26:55:88: d8:0d:13:bb:d3:ca:64:f8:be:e0:70:c1:47:72:4a:d8:b1:9c: dd:35:04:f7:ed:20:93:7a:64:86:09:42:de:79:e2:63:d0:36: ee:1e:c6:87:d4:a4:1e:7d:fd:0d:d5:24:85:16:54:6f:6c:b8: 3b:75:47:69:5f:a6:be:6d:94:7a:43:f9:2e:23:ed:26:40:31: 2c:29:63:10:9c:ae:6e:d3:70:3b:48:06:4b:7c:61:e5:8a:d8: f6:e0:fc:a7:66:36:e5:df:6c:78:1b:4e:f6:2e:48:26:8a:07: c2:cb:17:7d:90:a3:c1:9f:c1:07:fe:51:c0:a9:ae:a7:ab:db: 25:6a:2d:4c:10:b4:c0:9d:ef:0e:75:b4:54:17:0d:b4:1a:c5: 49:a2:48:10:a4:19:7e:01:13:bd:c0:a9:dc:36:5f:b4:a8:75: 94:eb:5a:72 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIULGKmp7stLkwNFKCy2+A51V3EZJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNTEyMjQxOTUwMzJaFw0yNjEyMjMxOTU1MzJaMDMxMTAvBgNV BAMTKEY3REI2MTVBNkJGMkY3NzA0QjYwNkU2NEU2MkVFOEI1MkNCRUQzODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPwEhoks3HWtzSqsOZ3S8h5g5 2/5AzbXbEuNMVa6UOkzOuZT/1ejsvAQCV3fp4Jd7wDIihk2kzvmsnd6ClpP52YJg uP9pkEfC0u3h2VGNxNQmFp6aDtzJJ2dKRmwOpRQKmnilrfwAFK/rNOyJjiG4WEqX 8MEaFHP0eo0phhzXY8LIHBJKKjOTvigKj7+JZJmwH7pjjXbJKzzagah0wEcS4o73 SHMFwzAhlZh2qhqbkg6uA6DRlIpAChlK1ZXoQfgY/RiJhyNNq2A7JjEnW5nLVCew 34PwxD04FG4Y0R7zlvfe85rtOPEcmHGa+9UWqrYP/4uQdqeXr/pdwMejIk7RAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU99thWmvy93BLYG5k5i7otSy+04AwHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzEzOTMzMmUzMzM4MmUzNTMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzYzMDM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA wSY1MA0GCSqGSIb3DQEBCwUAA4IBAQC5+tnbiTLqnPLwrRoTzHeGfETUQpSvXXM6 qCguX44Ae9jMiKDt1P5qMNkJ+SwybojvfVprUo/yX5Qm1Oz04rU8N0EipHi5Tq3t YpmJzvL9NshELlrjZ0EmVYjYDRO708pk+L7gcMFHckrYsZzdNQT37SCTemSGCULe eeJj0DbuHsaH1KQeff0N1SSFFlRvbLg7dUdpX6a+bZR6Q/kuI+0mQDEsKWMQnK5u 03A7SAZLfGHlitj24PynZjbl32x4G072LkgmigfCyxd9kKPBn8EH/lHAqa6nq9sl ai1MELTAne8OdbRUFw20GsVJokgQpBl+ARO9wKncNl+0qHWU61py -----END CERTIFICATE-----Generated at Sat Dec 27 02:16:56 2025 by rpki-client