This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3139392e3131322e302f32302d3332203d3e203531313637.roa File: 3130392e3139392e3131322e302f32302d3332203d3e203531313637.roa (raw, json) Hash identifier: 1izvAsT7sTIYuccB6WLYhMfKe8C5WNmWMeSATAlCmhE= Subject key identifier: 06:DF:4E:21:E0:90:F3:A7:03:75:1C:0F:82:54:C2:CA:52:C8:6D:72 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 767AF3FF7404FB78BD068FC17B9B2098341AB18F Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3139392e3131322e302f32302d3332203d3e203531313637.roa Signing time: Wed 17 Dec 2025 12:50:18 +0000 ROA not before: Wed 17 Dec 2025 12:45:18 +0000 ROA not after: Wed 16 Dec 2026 12:50:18 +0000 asID: 51167 IP address blocks: 109.199.112.0/20 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 15:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:7a:f3:ff:74:04:fb:78:bd:06:8f:c1:7b:9b:20:98:34:1a:b1:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 17 12:45:18 2025 GMT Not After : Dec 16 12:50:18 2026 GMT Subject: CN=06DF4E21E090F3A703751C0F8254C2CA52C86D72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0f:dd:fd:46:e3:10:8f:80:c3:45:7d:41:64: 4a:a1:5c:ba:ee:17:63:d1:0e:76:15:d3:fc:0b:cd: f6:a4:cb:ea:5a:a3:29:79:cf:4e:49:c7:c1:a2:f6: 82:d4:e8:76:e6:82:20:65:0f:0c:43:97:22:98:05: 07:04:7b:b7:71:a0:0f:b0:63:25:6b:b1:ff:25:e5: fd:55:6d:7f:78:f9:d9:ae:81:16:44:ee:b3:93:2a: 28:03:70:e7:ff:d7:02:95:9e:84:c8:5c:6c:22:60: f6:ac:af:5e:34:96:ed:61:6a:5c:46:5f:ea:cd:ca: f3:e7:b8:e2:58:5b:73:c9:eb:ac:e7:ed:6c:08:b5: 13:a3:e1:76:db:f9:d8:0d:e7:f0:5c:21:45:a5:52: b0:94:bc:8d:d2:8e:7a:8c:85:a4:b2:d4:da:98:92: 0a:28:47:b1:5c:6c:50:83:4a:6e:f4:01:8b:16:a2: da:d9:6d:b1:10:c7:88:9c:fb:f0:2d:0e:19:ee:85: 62:48:45:a5:06:df:a4:51:97:fe:cf:1a:d1:ba:f0: 98:8c:86:32:6c:ee:f2:0c:67:e7:a4:c5:b5:9f:67: a4:f7:77:27:cb:19:3e:5d:0e:20:86:b7:8b:a8:02: 63:e6:6f:85:de:c0:46:0a:27:02:1a:30:27:c2:f0: b6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DF:4E:21:E0:90:F3:A7:03:75:1C:0F:82:54:C2:CA:52:C8:6D:72 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3139392e3131322e302f32302d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.199.112.0/20 Signature Algorithm: sha256WithRSAEncryption 65:9c:e6:38:98:a8:16:6e:49:7f:09:98:70:6f:8a:91:84:97: 75:2e:5e:8c:f2:79:fe:d1:fb:33:85:e1:de:37:f3:eb:94:a4: 38:58:3c:15:78:f7:11:b7:94:07:5c:91:cd:04:a0:fa:87:4f: d7:a1:68:e4:ec:63:75:82:72:2d:23:07:a8:dd:62:46:47:3c: 8e:a3:fe:08:e6:60:0d:12:fb:7a:5a:fb:08:70:20:c1:00:a0: c8:94:f5:e0:b3:74:67:bc:e4:3a:a7:e7:0d:7c:b0:6f:91:cc: 38:d7:05:9d:a0:ee:36:af:c3:5f:c3:fd:9b:3b:27:3f:7f:8a: 26:14:79:75:80:2a:76:1a:96:27:0e:9f:f2:01:4e:fa:c4:a1: ee:42:bf:de:bb:2a:f0:40:b9:a0:cb:33:54:66:47:1e:20:fe: d6:f0:b6:46:18:95:ee:0d:96:29:e7:17:ec:7e:14:d1:f8:1d: 71:33:8f:ef:33:7e:b8:ce:f0:e6:49:03:07:99:7f:5f:b5:1d: f1:bb:da:a3:ef:1f:e1:a4:32:d5:7a:a7:56:76:35:98:93:24: 92:e6:9a:dd:b0:f5:0c:b3:10:b7:47:84:2e:7b:a8:e5:4c:e1: 0b:f7:23:44:35:67:d7:1b:92:37:c8:99:c7:f9:bd:89:c5:3d: 71:3a:f9:bd -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUdnrz/3QE+3i9Bo/Be5sgmDQasY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMTcxMjQ1MThaFw0yNjEyMTYxMjUwMThaMDMxMTAvBgNV BAMTKDA2REY0RTIxRTA5MEYzQTcwMzc1MUMwRjgyNTRDMkNBNTJDODZENzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhD939RuMQj4DDRX1BZEqhXLru F2PRDnYV0/wLzfaky+paoyl5z05Jx8Gi9oLU6HbmgiBlDwxDlyKYBQcEe7dxoA+w YyVrsf8l5f1VbX94+dmugRZE7rOTKigDcOf/1wKVnoTIXGwiYPasr140lu1halxG X+rNyvPnuOJYW3PJ66zn7WwItROj4Xbb+dgN5/BcIUWlUrCUvI3SjnqMhaSy1NqY kgooR7FcbFCDSm70AYsWotrZbbEQx4ic+/AtDhnuhWJIRaUG36RRl/7PGtG68JiM hjJs7vIMZ+ekxbWfZ6T3dyfLGT5dDiCGt4uoAmPmb4XewEYKJwIaMCfC8LYzAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUBt9OIeCQ86cDdRwPglTCylLIbXIwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzMDM5MmUzMTM5MzkyZTMx MzEzMjJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BARtx3AwDQYJKoZIhvcNAQELBQADggEBAGWc5jiYqBZuSX8JmHBvipGEl3UuXozy ef7R+zOF4d438+uUpDhYPBV49xG3lAdckc0EoPqHT9ehaOTsY3WCci0jB6jdYkZH PI6j/gjmYA0S+3pa+whwIMEAoMiU9eCzdGe85Dqn5w18sG+RzDjXBZ2g7javw1/D /Zs7Jz9/iiYUeXWAKnYalicOn/IBTvrEoe5Cv967KvBAuaDLM1RmRx4g/tbwtkYY le4NlinnF+x+FNH4HXEzj+8zfrjO8OZJAweZf1+1HfG72qPvH+GkMtV6p1Z2NZiT JJLmmt2w9QyzELdHhC57qOVM4Qv3I0Q1Z9cbkjfImcf5vYnFPXE6+b0= -----END CERTIFICATE-----Generated at Thu Dec 18 07:44:41 2025 by rpki-client