This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3232342e302f32342d3234203d3e20313336373837.roa File: 3130392e3132332e3232342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: cuxpHQ7g8sczbFKH0KlBZcfu4K5FvVXnUsQ2dA4Z/58= Subject key identifier: 28:5F:2E:EF:D3:FF:BA:D8:55:2C:61:F4:EC:D0:54:33:43:93:CD:C5 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 64DBCCBCCFE3CFD418A855BF9F7157B59FB8EA74 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3232342e302f32342d3234203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:50:46 +0000 ROA not before: Mon 29 Dec 2025 09:45:46 +0000 ROA not after: Mon 28 Dec 2026 09:50:46 +0000 asID: 136787 IP address blocks: 109.123.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:db:cc:bc:cf:e3:cf:d4:18:a8:55:bf:9f:71:57:b5:9f:b8:ea:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:46 2025 GMT Not After : Dec 28 09:50:46 2026 GMT Subject: CN=285F2EEFD3FFBAD8552C61F4ECD054334393CDC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ee:d8:e1:f7:81:36:47:d2:b5:7f:75:35:b5: d8:e4:10:63:ed:d1:a2:a4:b0:72:7f:76:b3:4d:72: 87:7e:50:bc:b3:4d:54:2f:89:b8:66:86:18:52:a4: ad:7b:8e:99:aa:18:5e:78:cf:19:3b:3c:76:c0:10: 0c:5d:fe:94:86:00:f4:08:6d:1a:69:e5:fa:86:90: f2:92:f4:d0:5f:39:7a:65:93:28:bc:4f:99:78:76: e7:a2:54:30:8c:cc:0e:4c:16:f1:03:e5:64:a1:49: 07:08:57:04:a8:7d:4a:92:94:7e:43:0f:4a:79:fe: 67:49:ee:1f:db:51:a1:53:e8:7b:39:52:4d:37:35: e9:c2:96:e2:e0:58:ca:c6:94:18:a8:a9:9e:67:63: 62:a0:e0:30:5d:de:f7:84:de:c3:4b:fd:e2:03:ba: 84:bb:05:a9:71:ad:6a:44:15:4d:7d:9c:2a:c0:1c: e3:63:c0:63:2c:56:54:ef:c7:28:06:03:94:e2:0b: a7:f3:e6:2d:04:f1:80:a7:04:c9:03:c3:ab:cc:83: ca:c6:cb:6e:47:4b:68:08:4d:87:26:92:e7:b3:5f: 81:6e:ee:62:b3:9e:bb:99:ce:11:d2:5f:bc:5c:32: 1f:44:67:f2:f2:ed:ea:92:0f:14:bb:ee:e2:18:ca: 91:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5F:2E:EF:D3:FF:BA:D8:55:2C:61:F4:EC:D0:54:33:43:93:CD:C5 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3232342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.123.224.0/24 Signature Algorithm: sha256WithRSAEncryption 51:bc:8e:b4:75:97:b6:81:61:59:b3:6a:5e:11:d1:8b:4e:e0: a2:cd:82:24:ff:9e:1d:93:aa:37:63:77:34:9b:09:69:9b:ef: 39:51:db:3a:5c:ae:9a:53:d8:33:7a:66:37:2c:06:bf:1b:db: ea:bf:85:87:dd:38:97:4c:c2:ec:d8:17:df:7d:2d:bb:12:0e: 82:80:52:8d:d3:03:9a:b4:bb:2a:b0:67:f6:c1:6c:bc:08:76: 9b:10:a0:f1:28:b9:27:d4:19:0c:01:b2:06:fe:26:09:f4:46: 08:6e:94:35:56:9a:6d:20:80:dd:08:50:ba:40:27:0b:8c:f8: a6:a8:42:1c:7e:a2:b4:e6:94:0e:67:24:ee:50:f0:88:ee:0e: 5f:f6:cd:fe:59:a6:7d:a6:15:3a:4f:53:78:ee:25:06:2b:c1: 22:3f:a8:f4:c3:35:74:23:fb:2f:6f:e9:09:7d:b9:69:c7:dc: 90:af:54:30:24:d6:ec:7d:3d:a0:7e:4a:cc:b7:d1:d9:e5:fc: 73:bc:c9:49:89:88:63:21:9e:8a:e5:f2:26:d4:78:a8:db:c5: 81:31:e7:34:05:01:bb:b7:d6:fa:03:df:63:e9:a7:f5:7f:1e: fb:ce:b3:43:02:78:9f:55:ea:75:64:7c:97:db:4d:eb:ad:eb: a0:c7:1e:34 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUZNvMvM/jz9QYqFW/n3FXtZ+46nQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDZaFw0yNjEyMjgwOTUwNDZaMDMxMTAvBgNV BAMTKDI4NUYyRUVGRDNGRkJBRDg1NTJDNjFGNEVDRDA1NDMzNDM5M0NEQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM7tjh94E2R9K1f3U1tdjkEGPt 0aKksHJ/drNNcod+ULyzTVQvibhmhhhSpK17jpmqGF54zxk7PHbAEAxd/pSGAPQI bRpp5fqGkPKS9NBfOXplkyi8T5l4dueiVDCMzA5MFvED5WShSQcIVwSofUqSlH5D D0p5/mdJ7h/bUaFT6Hs5Uk03NenCluLgWMrGlBioqZ5nY2Kg4DBd3veE3sNL/eID uoS7BalxrWpEFU19nCrAHONjwGMsVlTvxygGA5TiC6fz5i0E8YCnBMkDw6vMg8rG y25HS2gITYcmkuezX4Fu7mKznruZzhHSX7xcMh9EZ/Ly7eqSDxS77uIYypFZAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUKF8u79P/uthVLGH07NBUM0OTzcUwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzMDM5MmUzMTMyMzMyZTMy MzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAG174DANBgkqhkiG9w0BAQsFAAOCAQEAUbyOtHWXtoFhWbNqXhHRi07gos2C JP+eHZOqN2N3NJsJaZvvOVHbOlyumlPYM3pmNywGvxvb6r+Fh904l0zC7NgX330t uxIOgoBSjdMDmrS7KrBn9sFsvAh2mxCg8Si5J9QZDAGyBv4mCfRGCG6UNVaabSCA 3QhQukAnC4z4pqhCHH6itOaUDmck7lDwiO4OX/bN/lmmfaYVOk9TeO4lBivBIj+o 9MM1dCP7L2/pCX25acfckK9UMCTW7H09oH5KzLfR2eX8c7zJSYmIYyGeiuXyJtR4 qNvFgTHnNAUBu7fW+gPfY+mn9X8e+86zQwJ4n1XqdWR8l9tN663roMceNA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:19:00 2026 by rpki-client