This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e34302e302f32342d3234203d3e203436383434.roa File: 39312e3230392e34302e302f32342d3234203d3e203436383434.roa (raw, json) Hash identifier: lOyC9nhHln4w/6aFWRWEGti2qbnJIh38POtRvVGBI4s= Subject key identifier: A9:05:45:74:93:34:A7:71:5C:70:F3:15:7C:99:49:2E:FF:C3:8E:6D Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Certificate serial: 55D0166FBF22FA4086A5AD44206C2FB889447CBC Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e34302e302f32342d3234203d3e203436383434.roa Signing time: Sat 20 Dec 2025 20:25:53 +0000 ROA not before: Sat 20 Dec 2025 20:20:53 +0000 ROA not after: Sat 19 Dec 2026 20:25:53 +0000 asID: 46844 IP address blocks: 91.209.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d0:16:6f:bf:22:fa:40:86:a5:ad:44:20:6c:2f:b8:89:44:7c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Validity Not Before: Dec 20 20:20:53 2025 GMT Not After : Dec 19 20:25:53 2026 GMT Subject: CN=A90545749334A7715C70F3157C99492EFFC38E6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c3:cf:62:f7:1e:8b:3e:82:c8:cd:80:b9:4a: 4b:54:a6:b7:a9:0d:c2:a8:4e:2a:50:89:39:25:2a: 39:ee:5f:8e:be:89:aa:ab:2e:63:31:87:4d:70:5b: 25:20:00:26:98:d0:74:b2:b8:84:51:85:1b:8c:c7: 90:d1:25:16:d5:2e:5a:99:f2:3f:57:d4:50:1e:62: a8:9b:55:2a:54:fe:73:96:34:24:aa:20:40:f5:85: 95:1a:1d:66:26:5a:ae:b2:b5:23:b9:fe:ef:aa:25: 1a:7a:a6:98:90:a5:14:f9:7f:01:a9:da:76:06:ed: a6:98:ad:4e:43:6c:22:f5:ee:c3:84:06:ed:1a:69: 3e:cb:b7:62:bc:2c:8e:ae:ac:0b:ec:44:c6:4a:96: bf:32:2e:69:15:76:78:95:e8:71:94:1b:19:dc:43: 9a:21:fb:8a:4f:38:e5:0d:82:de:80:48:f1:e7:0e: 7a:dc:78:34:72:5a:ad:18:d9:2b:5c:0f:c8:42:e6: 6c:0e:be:24:4a:9e:7a:76:17:3f:97:86:aa:e1:13: 2b:fb:9a:ef:45:8b:45:13:db:52:a8:91:9b:55:21: 95:3a:96:37:7e:3b:a4:3f:23:ac:25:bc:1b:d0:d1: c1:95:2b:85:85:c6:54:db:cb:ff:b7:30:06:d1:9b: b1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:05:45:74:93:34:A7:71:5C:70:F3:15:7C:99:49:2E:FF:C3:8E:6D X509v3 Authority Key Identifier: keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e34302e302f32342d3234203d3e203436383434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.40.0/24 Signature Algorithm: sha256WithRSAEncryption 86:8a:23:27:68:04:aa:a5:09:cb:7c:47:10:e8:64:15:dd:67: 21:9f:60:61:ae:ba:f2:64:c8:20:44:c0:fb:f7:9c:08:55:0b: 4a:e5:c8:3c:b2:fd:66:9a:e2:2e:28:89:1f:4c:61:b4:1e:68: 5e:8f:90:d4:f9:e8:ab:cd:61:20:6d:26:2d:12:1b:0f:a7:17: f5:5f:d9:b2:a7:15:d4:a6:70:7c:17:f6:18:8f:72:27:6a:50: 29:79:04:c9:5d:16:ea:94:66:91:40:82:79:9f:18:b3:a0:7e: e0:f9:ff:c6:68:10:4f:8a:d5:fc:c2:e7:0d:19:07:92:bc:ab: b7:82:18:e3:3a:ed:a5:fc:41:0b:18:55:66:58:f6:02:fb:ab: 70:ea:1a:2e:91:71:0c:57:e5:d5:09:10:b4:76:46:d3:f7:5a: 8a:5d:6a:4b:ab:c1:12:53:fd:d5:7d:1e:14:64:f9:63:13:d6: e9:6d:3e:35:d6:e1:f0:7e:3e:3d:5b:2d:00:17:c6:e5:f1:65: b2:95:43:da:27:8a:55:b2:0c:19:99:98:06:f5:2a:74:87:04: 38:da:5c:01:9d:19:c5:15:0a:d1:ac:23:14:29:44:e9:36:f2: 5e:21:dc:c9:c5:65:04:81:f0:35:98:98:b2:04:45:d4:21:31: 41:55:0f:70 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUVdAWb78i+kCGpa1EIGwvuIlEfLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3 NjI2MDBlNjAeFw0yNTEyMjAyMDIwNTNaFw0yNjEyMTkyMDI1NTNaMDMxMTAvBgNV BAMTKEE5MDU0NTc0OTMzNEE3NzE1QzcwRjMxNTdDOTk0OTJFRkZDMzhFNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgw89i9x6LPoLIzYC5SktUprep DcKoTipQiTklKjnuX46+iaqrLmMxh01wWyUgACaY0HSyuIRRhRuMx5DRJRbVLlqZ 8j9X1FAeYqibVSpU/nOWNCSqIED1hZUaHWYmWq6ytSO5/u+qJRp6ppiQpRT5fwGp 2nYG7aaYrU5DbCL17sOEBu0aaT7Lt2K8LI6urAvsRMZKlr8yLmkVdniV6HGUGxnc Q5oh+4pPOOUNgt6ASPHnDnrceDRyWq0Y2StcD8hC5mwOviRKnnp2Fz+XhqrhEyv7 mu9Fi0UT21KokZtVIZU6ljd+O6Q/I6wlvBvQ0cGVK4WFxlTby/+3MAbRm7HTAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUqQVFdJM0p3FccPMVfJlJLv/Djm0wHwYDVR0j BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1 N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ bUFPWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEt ODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1N2ZlLzAvMzkzMTJlMzIzMDM5MmUzNDMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNjM4MzQzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvR KDANBgkqhkiG9w0BAQsFAAOCAQEAhoojJ2gEqqUJy3xHEOhkFd1nIZ9gYa668mTI IETA+/ecCFULSuXIPLL9ZpriLiiJH0xhtB5oXo+Q1Pnoq81hIG0mLRIbD6cX9V/Z sqcV1KZwfBf2GI9yJ2pQKXkEyV0W6pRmkUCCeZ8Ys6B+4Pn/xmgQT4rV/MLnDRkH kryrt4IY4zrtpfxBCxhVZlj2AvurcOoaLpFxDFfl1QkQtHZG0/dail1qS6vBElP9 1X0eFGT5YxPW6W0+Ndbh8H4+PVstABfG5fFlspVD2ieKVbIMGZmYBvUqdIcEONpc AZ0ZxRUK0awjFClE6TbyXiHcycVlBIHwNZiYsgRF1CExQVUPcA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:47:26 2025 by rpki-client