This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134312e302f32342d3234203d3e2039333034.roa File: 3134352e37392e3134312e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: XVY8ldyGVe8tpwUB6HJwt7/3a1fv0j6BRtGXugWTbyI= Subject key identifier: CD:A5:74:AB:38:71:EC:91:6D:B3:89:64:52:BA:B7:27:2C:60:CA:93 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 5AAC7EB7E827E5730C138196F67C52F8537632DC Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134312e302f32342d3234203d3e2039333034.roa Signing time: Thu 22 Jan 2026 11:21:21 +0000 ROA not before: Thu 22 Jan 2026 11:16:21 +0000 ROA not after: Thu 21 Jan 2027 11:21:21 +0000 asID: 9304 IP address blocks: 145.79.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ac:7e:b7:e8:27:e5:73:0c:13:81:96:f6:7c:52:f8:53:76:32:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 22 11:16:21 2026 GMT Not After : Jan 21 11:21:21 2027 GMT Subject: CN=CDA574AB3871EC916DB3896452BAB7272C60CA93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1c:80:43:c6:99:f4:49:ff:fd:62:f2:05:8a: 3f:85:e9:74:81:b7:c5:43:a6:00:db:33:5e:4e:86: 3c:a6:59:23:bd:d3:f1:05:26:f5:a1:47:ec:57:59: dc:db:e5:2b:73:9a:36:29:d7:a2:03:21:72:60:be: d8:16:06:f1:6a:23:aa:92:b7:6d:6e:4f:14:08:65: dc:df:8a:6e:20:70:97:c1:6e:ac:b8:cf:f8:40:88: e2:72:a0:b6:b8:3d:36:92:16:ca:4d:a3:3e:49:bf: 10:3e:1f:bc:0a:06:c9:fe:a9:26:ca:06:2e:ec:d0: a3:78:7e:c7:77:2e:13:6f:36:4e:5b:f7:83:ad:20: 4b:ad:4f:b6:dd:e7:61:66:f0:18:29:00:5b:5c:b8: 39:ec:c7:c8:62:0e:f8:80:e0:19:7c:3e:3f:6b:d5: 2f:3a:6e:a8:4e:b2:29:4e:e0:4b:bd:30:93:49:13: 64:2b:52:13:4f:58:1a:04:c0:df:f7:de:e5:c8:d6: bc:49:f0:1d:0b:ed:6f:a2:93:93:f9:ad:ed:6d:2c: c8:d3:7c:c6:ab:ae:73:59:04:dc:48:a1:2a:05:26: 0c:09:49:a9:df:f7:33:9d:be:7c:e5:74:c0:72:a8: 83:ab:1b:4e:7f:63:86:fa:b9:c6:e7:a0:3c:1a:fe: 36:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A5:74:AB:38:71:EC:91:6D:B3:89:64:52:BA:B7:27:2C:60:CA:93 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134312e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.79.141.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:25:92:37:c1:31:cd:fe:bd:38:27:d6:5d:9b:82:6d:ac:26: 78:54:dc:8b:a9:1b:8c:35:b4:98:18:6f:94:a1:ef:47:39:7f: 53:e8:30:46:00:fc:66:10:43:b5:48:b9:d7:c7:a8:8b:b1:e6: 08:b0:87:e7:a2:4e:9a:bd:12:e3:a4:77:7c:27:21:b5:5c:09: b2:b3:98:9b:e5:97:c5:5a:8a:e6:cd:c5:3c:dc:65:fe:b8:e2: 97:c5:69:1e:32:ea:53:9b:b0:85:90:40:35:10:d0:37:f5:75: 96:74:39:2a:21:78:7a:ee:92:56:b4:f6:ae:68:c6:c3:de:82: b2:44:6d:c7:08:ee:86:a7:02:cc:b2:91:fd:e8:98:f6:3f:66: 4d:c8:fb:ed:e6:63:35:9d:0e:ca:ff:0f:ee:0a:7c:57:cc:37: a5:5b:5b:f3:72:bf:0e:ce:c6:11:1e:1b:e8:fa:13:ac:d5:da: c3:3e:9e:a6:62:b3:6e:37:a1:8c:b9:0c:77:a9:2f:b9:53:b9: 91:74:91:c3:f6:45:b2:e1:17:41:ee:ea:2f:82:e3:50:59:56: 0e:7d:a3:ed:3e:5b:35:e3:01:9f:24:5a:e8:e6:d9:01:85:c6: 5a:ae:28:80:e5:e0:a1:a9:9b:c1:5f:3c:e2:ff:03:5b:82:83: 1f:95:0a:a4 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUWqx+t+gn5XMME4GW9nxS+FN2MtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMjIxMTE2MjFaFw0yNzAxMjExMTIxMjFaMDMxMTAvBgNV BAMTKENEQTU3NEFCMzg3MUVDOTE2REIzODk2NDUyQkFCNzI3MkM2MENBOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfHIBDxpn0Sf/9YvIFij+F6XSB t8VDpgDbM15OhjymWSO90/EFJvWhR+xXWdzb5StzmjYp16IDIXJgvtgWBvFqI6qS t21uTxQIZdzfim4gcJfBbqy4z/hAiOJyoLa4PTaSFspNoz5JvxA+H7wKBsn+qSbK Bi7s0KN4fsd3LhNvNk5b94OtIEutT7bd52Fm8BgpAFtcuDnsx8hiDviA4Bl8Pj9r 1S86bqhOsilO4Eu9MJNJE2QrUhNPWBoEwN/33uXI1rxJ8B0L7W+ik5P5re1tLMjT fMarrnNZBNxIoSoFJgwJSanf9zOdvnzldMByqIOrG05/Y4b6ucbnoDwa/jYlAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUzaV0qzhx7JFts4lkUrq3JyxgypMwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM0 MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMzMzAzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJFP jTANBgkqhkiG9w0BAQsFAAOCAQEADSWSN8Exzf69OCfWXZuCbawmeFTci6kbjDW0 mBhvlKHvRzl/U+gwRgD8ZhBDtUi518eoi7HmCLCH56JOmr0S46R3fCchtVwJsrOY m+WXxVqK5s3FPNxl/rjil8VpHjLqU5uwhZBANRDQN/V1lnQ5KiF4eu6SVrT2rmjG w96CskRtxwjuhqcCzLKR/eiY9j9mTcj77eZjNZ0Oyv8P7gp8V8w3pVtb83K/Ds7G ER4b6PoTrNXawz6epmKzbjehjLkMd6kvuVO5kXSRw/ZFsuEXQe7qL4LjUFlWDn2j 7T5bNeMBnyRa6ObZAYXGWq4ogOXgoambwV884v8DW4KDH5UKpA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:51 2026 by rpki-client