This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31342e3135322e302f32322d3234203d3e203437353833.roa File: 3134352e31342e3135322e302f32322d3234203d3e203437353833.roa (raw, json) Hash identifier: H4mOmXV9uMrwkMVr826CMahNtW28zvAf8FLhyu0HQ0o= Subject key identifier: 6E:D2:69:DA:E2:23:7B:3A:63:8D:E6:71:CA:C2:52:99:C9:30:ED:1D Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 2A05A962C4652454C609C069FF3EE3D6CF12594C Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31342e3135322e302f32322d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:55 +0000 ROA not before: Mon 29 Dec 2025 09:45:55 +0000 ROA not after: Mon 28 Dec 2026 09:50:55 +0000 asID: 47583 IP address blocks: 145.14.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:05:a9:62:c4:65:24:54:c6:09:c0:69:ff:3e:e3:d6:cf:12:59:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:55 2025 GMT Not After : Dec 28 09:50:55 2026 GMT Subject: CN=6ED269DAE2237B3A638DE671CAC25299C930ED1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ef:50:12:3d:07:85:52:28:fe:72:58:69:36: 21:18:07:b1:02:b4:a4:4d:b1:c1:10:60:bb:ed:d2: 5c:24:62:52:87:e8:f8:69:ee:12:4c:2b:6d:fb:7c: ae:31:c0:5b:cb:0f:0b:cf:80:66:7b:16:56:89:45: ba:71:c7:47:53:b2:28:b4:a0:5b:ad:6c:dc:b6:54: 66:ca:37:ba:50:29:c0:d2:bd:35:ee:ed:f6:bc:18: bb:78:cf:52:4d:0d:c7:4d:dd:ec:32:0c:07:24:a5: 6d:09:13:7e:cb:dd:7a:43:0f:3e:4b:24:c8:0e:27: 0e:42:5c:d3:d6:3f:52:b6:a1:4c:cd:60:06:b5:f1: 42:92:79:7b:c1:b9:e7:7b:50:9f:b9:ea:de:b3:66: ab:2b:c5:70:ee:dd:3d:7f:bf:9d:2d:8a:fe:9d:85: 1b:08:5b:70:2e:4a:25:1c:24:09:41:64:35:5e:86: 44:a3:ef:c7:cf:36:99:13:01:15:fa:63:bb:3c:c5: d8:11:65:35:d0:d5:25:e2:a5:62:77:99:46:2e:7a: 8a:f7:56:0d:ff:bb:26:f7:03:05:7c:8b:bc:3c:18: a9:cf:7d:1e:e2:c4:4e:a3:e0:49:38:e8:48:12:f6: f8:36:d0:6a:5e:ee:58:67:e2:40:01:0c:fd:f7:e8: fd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D2:69:DA:E2:23:7B:3A:63:8D:E6:71:CA:C2:52:99:C9:30:ED:1D X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31342e3135322e302f32322d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.14.152.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:95:3a:fe:c1:56:96:ce:3e:fe:8a:cf:f3:73:96:37:9a:e0: 3c:e8:f7:ce:4c:c3:e7:68:2c:4c:d9:9c:df:26:5a:32:83:fb: 16:27:6f:0c:05:6b:db:e2:f9:e4:ea:b6:af:d4:f9:81:be:da: 53:ec:30:bc:e1:53:04:c9:d8:65:9d:c5:8b:c0:6e:c9:5b:c3: 30:2a:8a:47:15:9e:4d:b2:3a:b9:f7:fc:e4:7d:9e:43:0a:ca: 99:ce:5e:4b:f6:d1:8f:7f:d4:b8:2d:4a:87:74:cc:8f:97:f4: 74:a7:ba:bd:d1:ce:e9:98:9a:53:8e:2d:07:82:70:45:80:69: 7e:f8:be:1f:01:c2:bb:17:5e:3f:49:a5:64:60:75:6b:4f:5f: 4c:69:e0:64:d5:ad:4e:17:00:19:d7:3a:56:c0:2f:83:d2:fd: 5c:cb:8c:61:dd:30:b8:b0:38:fd:0e:4a:ee:cc:cb:3e:3f:d9: 31:7f:4f:69:ac:36:8a:21:b6:65:1c:d3:19:3e:de:cb:b0:e7: 22:7d:c8:f7:44:d1:6c:3e:61:fa:e1:4b:93:b8:c8:a1:47:5e: d4:55:f1:e2:3b:7f:be:ab:a2:48:e8:d8:26:5d:2b:08:72:f9: c6:bf:99:7a:85:02:28:b7:fd:9a:9a:ff:3b:de:29:58:ef:2a: bb:c5:9d:bf -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUKgWpYsRlJFTGCcBp/z7j1s8SWUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTVaFw0yNjEyMjgwOTUwNTVaMDMxMTAvBgNV BAMTKDZFRDI2OURBRTIyMzdCM0E2MzhERTY3MUNBQzI1Mjk5QzkzMEVEMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY71ASPQeFUij+clhpNiEYB7EC tKRNscEQYLvt0lwkYlKH6Php7hJMK237fK4xwFvLDwvPgGZ7FlaJRbpxx0dTsii0 oFutbNy2VGbKN7pQKcDSvTXu7fa8GLt4z1JNDcdN3ewyDAckpW0JE37L3XpDDz5L JMgOJw5CXNPWP1K2oUzNYAa18UKSeXvBued7UJ+56t6zZqsrxXDu3T1/v50tiv6d hRsIW3AuSiUcJAlBZDVehkSj78fPNpkTARX6Y7s8xdgRZTXQ1SXipWJ3mUYueor3 Vg3/uyb3AwV8i7w8GKnPfR7ixE6j4Ek46EgS9vg20Gpe7lhn4kABDP336P1hAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUbtJp2uIjezpjjeZxysJSmckw7R0wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzMTM0MmUzMTM1 MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC kQ6YMA0GCSqGSIb3DQEBCwUAA4IBAQANlTr+wVaWzj7+is/zc5Y3muA86PfOTMPn aCxM2ZzfJloyg/sWJ28MBWvb4vnk6rav1PmBvtpT7DC84VMEydhlncWLwG7JW8Mw KopHFZ5Nsjq59/zkfZ5DCsqZzl5L9tGPf9S4LUqHdMyPl/R0p7q90c7pmJpTji0H gnBFgGl++L4fAcK7F14/SaVkYHVrT19MaeBk1a1OFwAZ1zpWwC+D0v1cy4xh3TC4 sDj9DkruzMs+P9kxf09prDaKIbZlHNMZPt7LsOcifcj3RNFsPmH64UuTuMihR17U VfHiO3++q6JI6NgmXSsIcvnGv5l6hQIot/2amv873ilY7yq7xZ2/ -----END CERTIFICATE-----Generated at Sun Jan 25 15:33:56 2026 by rpki-client