This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/39312e3230372e31332e302f32342d3234203d3e203532313132.roa File: 39312e3230372e31332e302f32342d3234203d3e203532313132.roa (raw, json) Hash identifier: iHiHYqsWlJeVORCjaRILfNxM4kvwvM5K91j5Ek4sw54= Subject key identifier: 79:94:19:8E:DD:27:22:A9:93:A3:BA:0B:A7:5B:DD:2F:C0:AE:61:3D Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace Certificate serial: 4E8E3C113011D6F0CDD1BDBD5CE3AD23FA394841 Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/39312e3230372e31332e302f32342d3234203d3e203532313132.roa Signing time: Tue 16 Dec 2025 10:08:57 +0000 ROA not before: Tue 16 Dec 2025 10:03:57 +0000 ROA not after: Tue 15 Dec 2026 10:08:57 +0000 asID: 52112 IP address blocks: 91.207.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8e:3c:11:30:11:d6:f0:cd:d1:bd:bd:5c:e3:ad:23:fa:39:48:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace Validity Not Before: Dec 16 10:03:57 2025 GMT Not After : Dec 15 10:08:57 2026 GMT Subject: CN=7994198EDD2722A993A3BA0BA75BDD2FC0AE613D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9c:57:b5:50:26:b8:5e:b6:4b:91:fe:27:40: 57:60:74:66:1c:e1:e0:a4:33:46:34:32:28:02:1f: f8:c9:f7:22:e1:c4:4a:fd:2d:df:b4:35:9c:eb:a7: 8f:d1:14:e4:d7:f0:3f:d4:06:d5:8f:61:77:20:1f: 3b:b5:36:69:8a:31:3c:92:c5:65:c8:cb:eb:d4:62: 90:5f:c0:71:d9:74:d0:76:23:fc:d1:bc:24:eb:dc: e1:90:8e:9c:80:74:00:78:0d:67:63:92:71:94:01: aa:a0:6b:95:0f:10:12:dd:c4:8a:8f:ad:ad:5f:6e: 72:db:98:cf:a9:dd:3e:04:95:5c:7b:4c:d9:39:9e: 7a:af:ad:3a:12:dc:4d:25:69:9e:cc:d0:e2:94:9f: d8:3b:73:f7:41:20:79:db:1f:54:15:1a:05:94:2f: cb:0c:e4:82:89:10:68:81:0a:4f:fa:8d:57:79:54: 76:87:1f:3e:d3:d3:01:d9:15:c9:6a:58:d7:f5:58: c7:71:6f:aa:93:1b:b3:64:cc:8e:f5:b5:ad:d7:a0: af:b1:08:cb:1c:f1:9a:8a:1a:dd:93:2a:c2:5e:77: 60:b1:ae:fc:91:07:e2:1e:84:2a:ec:9d:2a:06:dc: b0:1a:83:0e:61:ba:94:b1:a5:69:f0:4a:8d:85:54: 86:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:94:19:8E:DD:27:22:A9:93:A3:BA:0B:A7:5B:DD:2F:C0:AE:61:3D X509v3 Authority Key Identifier: keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/39312e3230372e31332e302f32342d3234203d3e203532313132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.13.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:18:8b:16:20:ac:b4:6a:a7:31:5e:76:0e:9c:da:28:33:ca: c8:70:d2:71:49:4c:20:c3:a2:c3:35:8e:54:60:fa:59:a6:99: aa:e6:bc:30:9d:0c:45:7b:2f:c8:57:f1:4a:38:e0:bb:44:dd: d4:1a:ce:53:ff:d4:1c:5f:17:94:f9:b9:c9:9e:49:7a:df:73: 29:c1:ef:0c:04:ce:32:47:3a:6a:17:79:61:db:5b:ca:6c:30: fe:97:32:d1:ed:85:31:f1:30:5c:c9:ad:42:93:ba:41:e4:72: 21:71:2b:3a:15:c4:6f:aa:b0:09:eb:5e:20:c3:2c:3c:bb:3f: bb:64:61:1f:fc:0c:a0:b3:87:a8:11:3f:8a:cf:12:60:bc:29: 02:67:57:93:bd:ef:6b:3c:db:81:6b:12:91:17:ba:d3:0d:95: 31:eb:19:c1:bc:92:66:b0:0c:8e:f8:5f:4a:44:a7:36:1b:85: 5d:ea:43:d6:82:68:4d:62:94:3b:dc:2b:32:0e:d0:61:e5:2f: 65:ad:4f:b2:c3:61:ce:2b:e1:ef:fe:55:fc:52:f8:07:98:a7: 7d:af:29:60:bb:2c:30:20:11:cf:80:38:cc:bb:b9:e4:5f:ad: d4:ee:a0:b1:78:cd:b8:0d:57:49:5f:bd:a1:51:a2:e4:17:a8: b9:5b:5d:fb -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUTo48ETAR1vDN0b29XOOtI/o5SEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjFkMDU3MmZlNzI5OTFiZDMyODU0YmFjNzE2Njc2ZWJk YWQyMmFjZTAeFw0yNTEyMTYxMDAzNTdaFw0yNjEyMTUxMDA4NTdaMDMxMTAvBgNV BAMTKDc5OTQxOThFREQyNzIyQTk5M0EzQkEwQkE3NUJERDJGQzBBRTYxM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsnFe1UCa4XrZLkf4nQFdgdGYc 4eCkM0Y0MigCH/jJ9yLhxEr9Ld+0NZzrp4/RFOTX8D/UBtWPYXcgHzu1NmmKMTyS xWXIy+vUYpBfwHHZdNB2I/zRvCTr3OGQjpyAdAB4DWdjknGUAaqga5UPEBLdxIqP ra1fbnLbmM+p3T4ElVx7TNk5nnqvrToS3E0laZ7M0OKUn9g7c/dBIHnbH1QVGgWU L8sM5IKJEGiBCk/6jVd5VHaHHz7T0wHZFclqWNf1WMdxb6qTG7NkzI71ta3XoK+x CMsc8ZqKGt2TKsJed2CxrvyRB+IehCrsnSoG3LAagw5hupSxpWnwSo2FVIY3AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUeZQZjt0nIqmTo7oLp1vdL8CuYT0wHwYDVR0j BBgwFoAU8dBXL+cpkb0yhUuscWZ269rSKs4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzAvRjFEMDU3MkZFNzI5OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkQlhMLWNwa2IweWhVdXNjV1oyNjly U0tzNC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTMwZGU4NGIt NDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1YjQ5LzAvMzkzMTJlMzIzMDM3MmUzMTMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMxMzEzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvP DTANBgkqhkiG9w0BAQsFAAOCAQEADxiLFiCstGqnMV52DpzaKDPKyHDScUlMIMOi wzWOVGD6WaaZqua8MJ0MRXsvyFfxSjjgu0Td1BrOU//UHF8XlPm5yZ5Jet9zKcHv DATOMkc6ahd5Ydtbymww/pcy0e2FMfEwXMmtQpO6QeRyIXErOhXEb6qwCeteIMMs PLs/u2RhH/wMoLOHqBE/is8SYLwpAmdXk73vazzbgWsSkRe60w2VMesZwbySZrAM jvhfSkSnNhuFXepD1oJoTWKUO9wrMg7QYeUvZa1PssNhzivh7/5V/FL4B5infa8p YLssMCARz4A4zLu55F+t1O6gsXjNuA1XSV+9oVGi5BeouVtd+w== -----END CERTIFICATE-----Generated at Sun Dec 21 13:37:54 2025 by rpki-client