This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa File: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (raw, json) Hash identifier: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU= Subject key identifier: BC:B7:6A:6F:4D:22:EA:A2:FA:97:79:B9:B0:CC:DA:FE:1A:8E:F2:2F Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 5061526844CABA3B6EFBEED9C1D2B57FAE84664F Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa Signing time: Thu 18 Dec 2025 20:54:46 +0000 ROA not before: Thu 18 Dec 2025 20:49:46 +0000 ROA not after: Thu 17 Dec 2026 20:54:46 +0000 asID: 41720 IP address blocks: 195.182.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:61:52:68:44:ca:ba:3b:6e:fb:ee:d9:c1:d2:b5:7f:ae:84:66:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Dec 18 20:49:46 2025 GMT Not After : Dec 17 20:54:46 2026 GMT Subject: CN=BCB76A6F4D22EAA2FA9779B9B0CCDAFE1A8EF22F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:69:52:fd:54:48:c2:a6:ae:9e:e6:9d:f1:91: f9:ef:d1:3d:cb:36:be:0a:13:0b:54:fc:5e:fd:03: 85:41:bb:c1:45:e9:aa:c2:67:c1:1e:68:2f:0e:d9: 7b:b4:fb:a7:7e:40:15:47:8a:64:a1:ef:88:61:6b: be:a2:51:ca:cb:59:59:1f:40:db:f9:f0:05:c0:07: fe:27:d0:0a:29:2f:42:69:57:14:7a:8a:da:3e:49: 60:72:a8:4b:d8:d9:1d:49:2b:ad:57:c0:19:31:12: 67:cc:2a:83:cd:45:18:e2:01:65:25:b6:28:d6:b8: bf:ec:11:23:17:db:d6:c7:c5:ea:c6:4d:c7:b6:17: 66:ab:74:e8:8b:49:d1:cb:53:6d:81:70:87:91:d4: 47:0c:49:6b:51:3b:d0:09:0e:e5:d4:09:b6:a9:58: 37:b1:6c:84:0e:4f:f6:24:01:cd:cb:dd:77:c9:ce: 79:be:bc:ec:fb:8c:21:6b:76:7a:13:0c:cb:1a:e1: 2f:04:cd:e7:9d:39:9b:a1:4d:27:bd:14:a7:d8:de: e7:57:88:f3:c7:57:f2:b8:2a:92:af:7b:2f:a4:f0: 3f:36:89:90:7e:eb:05:5f:df:d6:55:16:a7:b3:c9: e4:c1:18:63:66:75:cc:cc:24:3f:9c:26:05:12:2f: ac:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B7:6A:6F:4D:22:EA:A2:FA:97:79:B9:B0:CC:DA:FE:1A:8E:F2:2F X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.182.211.0/24 Signature Algorithm: sha256WithRSAEncryption 01:af:2f:c7:d7:ac:33:7e:35:27:a3:42:a4:d3:ae:f4:67:b7: a0:a6:ec:2d:92:e4:67:11:a2:79:51:23:67:94:2a:0b:73:bd: 78:d4:c9:96:98:5e:fc:1d:3e:01:73:01:8e:24:35:52:9a:93: 56:93:3f:95:68:8b:08:68:c5:c4:ee:c4:51:7a:e0:7c:68:e8: b7:27:20:6f:a1:8b:00:cf:3a:c3:6e:85:b3:4c:1b:f3:98:0a: 87:6c:81:a5:7f:00:11:02:53:f6:d5:c5:32:ae:79:1f:05:42: e1:05:6c:fe:fe:2b:9c:e3:f2:f0:06:a1:70:cb:bc:d6:67:b8: 1a:fc:5d:7a:9d:34:2e:3a:f9:db:8b:19:2e:a6:81:63:bd:c3: 81:9b:29:31:18:0b:31:d4:29:e1:1f:27:d2:76:0a:d5:21:93: a2:13:6d:da:09:3c:05:90:66:fe:fa:00:86:16:50:e2:0d:05: 73:cb:53:e1:1d:a0:04:fd:47:33:15:5f:94:5d:4f:38:dc:3d: 73:e8:f9:7b:71:ac:8f:f7:da:79:17:85:e8:75:ac:56:1f:d1: 06:c7:2f:bc:93:b6:3a:30:d3:52:99:7d:0d:14:bd:8e:8e:81: b1:18:4f:1a:54:d8:c7:a3:9c:02:67:b9:07:42:f4:f9:15:7f: eb:c7:57:97 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUUGFSaETKujtu++7ZwdK1f66EZk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNTEyMTgyMDQ5NDZaFw0yNjEyMTcyMDU0NDZaMDMxMTAvBgNV BAMTKEJDQjc2QTZGNEQyMkVBQTJGQTk3NzlCOUIwQ0NEQUZFMUE4RUYyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOaVL9VEjCpq6e5p3xkfnv0T3L Nr4KEwtU/F79A4VBu8FF6arCZ8EeaC8O2Xu0+6d+QBVHimSh74hha76iUcrLWVkf QNv58AXAB/4n0AopL0JpVxR6ito+SWByqEvY2R1JK61XwBkxEmfMKoPNRRjiAWUl tijWuL/sESMX29bHxerGTce2F2ardOiLSdHLU22BcIeR1EcMSWtRO9AJDuXUCbap WDexbIQOT/YkAc3L3XfJznm+vOz7jCFrdnoTDMsa4S8EzeedOZuhTSe9FKfY3udX iPPHV/K4KpKvey+k8D82iZB+6wVf39ZVFqezyeTBGGNmdczMJD+cJgUSL6w3AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUvLdqb00i6qL6l3m5sMza/hqO8i8wHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQt NjFjNS00MjkwLThhNmQtNWYyYjkwMjczMjJmLzAvMzEzOTM1MmUzMTM4MzIyZTMy MzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzEzNzMyMzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADDttMwDQYJKoZIhvcNAQELBQADggEBAAGvL8fXrDN+NSejQqTTrvRnt6Cm7C2S 5GcRonlRI2eUKgtzvXjUyZaYXvwdPgFzAY4kNVKak1aTP5VoiwhoxcTuxFF64Hxo 6LcnIG+hiwDPOsNuhbNMG/OYCodsgaV/ABECU/bVxTKueR8FQuEFbP7+K5zj8vAG oXDLvNZnuBr8XXqdNC46+duLGS6mgWO9w4GbKTEYCzHUKeEfJ9J2CtUhk6ITbdoJ PAWQZv76AIYWUOINBXPLU+EdoAT9RzMVX5RdTzjcPXPo+XtxrI/32nkXheh1rFYf 0QbHL7yTtjow01KZfQ0UvY6OgbEYTxpU2MejnAJnuQdC9PkVf+vHV5c= -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:04 2025 by rpki-client