This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32342d3234203d3e2039333034.roa File: 3134352e37392e3134342e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: lqeFK8BtVPXZ67RUBeIDQ8fePjZtX/LKBccE9AfDJNE= Subject key identifier: E7:D1:C6:25:EB:E4:88:6D:98:D6:3F:56:80:AC:CC:77:69:4B:29:30 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 0703F5B2986FF357649FCA1886AD5966DB9D15BE Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32342d3234203d3e2039333034.roa Signing time: Thu 22 Jan 2026 11:23:25 +0000 ROA not before: Thu 22 Jan 2026 11:18:25 +0000 ROA not after: Thu 21 Jan 2027 11:23:25 +0000 asID: 9304 IP address blocks: 145.79.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:03:f5:b2:98:6f:f3:57:64:9f:ca:18:86:ad:59:66:db:9d:15:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 22 11:18:25 2026 GMT Not After : Jan 21 11:23:25 2027 GMT Subject: CN=E7D1C625EBE4886D98D63F5680ACCC77694B2930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9b:c3:1a:cb:88:54:4a:b5:10:dc:f7:1f:81: d1:5c:37:04:e6:5a:c5:10:0c:13:99:8f:32:18:fa: 08:4b:08:7d:db:05:67:c5:03:af:9c:9f:27:2d:6c: 92:9f:9d:e7:e7:92:af:21:72:17:f7:ca:72:25:2a: 55:ad:51:75:07:fa:53:f0:53:39:7f:47:85:42:19: ff:7a:77:95:6c:50:bd:b2:d8:2c:13:eb:13:5a:55: 94:4c:7f:6a:4c:01:55:22:5f:22:6c:5b:5e:3a:59: b7:f9:1e:64:81:dc:b7:b5:37:d5:92:19:1c:44:c1: a8:63:a6:a6:f0:26:ec:3a:82:33:a9:6b:ed:1e:d9: 02:16:79:1d:9f:08:c3:f2:8a:12:e7:19:2b:c5:96: 2b:a5:01:4b:cc:ad:41:9b:f2:72:bb:cd:e0:37:ee: 19:b7:08:5f:15:d4:2d:dd:5a:28:86:44:0a:20:3c: 1b:0f:5d:02:93:4a:71:58:88:aa:8d:cf:c0:ae:fe: 2e:aa:43:0e:ff:34:0b:24:7b:53:a4:41:85:8c:6b: 52:85:ca:c7:96:ce:4d:dc:77:de:70:02:84:1c:a2: 61:ba:3a:33:3a:e5:09:ba:d6:a9:c2:52:c7:4c:77: a1:67:9f:85:2e:6d:31:41:12:6c:f1:e7:c8:42:9c: 55:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D1:C6:25:EB:E4:88:6D:98:D6:3F:56:80:AC:CC:77:69:4B:29:30 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.79.144.0/24 Signature Algorithm: sha256WithRSAEncryption 41:67:5a:35:0b:00:6c:f7:ea:c5:1f:6f:41:8c:12:0c:a0:6b: c0:e0:67:e2:93:c8:a8:bc:16:ce:5a:c5:34:38:d3:57:2e:38: 6a:21:11:ac:63:3e:e7:88:b5:62:12:1a:2f:4a:55:10:ec:72: bb:ea:9b:18:29:fc:de:1d:9c:a6:8a:af:da:fe:29:8b:0f:a5: ca:0f:be:f4:c1:f0:b1:b0:0a:e2:1e:c1:2e:12:54:1b:91:3a: 99:6f:47:08:5e:03:b6:e0:2b:88:fa:6b:1d:6e:b6:2a:76:df: 75:c3:d0:f5:2f:87:cb:85:c5:31:06:e4:bc:b9:61:1a:55:79: 0e:80:0a:8c:a0:39:d5:8b:10:e6:32:d7:db:d1:be:54:9c:7d: 9d:eb:b2:e1:66:ce:29:5b:69:50:1b:0c:19:20:c5:7c:c6:9e: 29:49:9e:d7:be:ea:32:fc:cd:7f:17:f6:6b:a3:63:a8:c5:14: 64:25:51:39:02:ac:c6:4a:7b:a2:aa:14:74:19:c6:cd:b3:5e: 25:45:ce:6d:ed:85:67:39:73:f5:26:5f:98:20:b0:06:96:b1: 36:94:04:54:0c:c9:51:49:3c:ba:4a:67:d6:10:dc:fd:ef:d9: 0e:81:43:66:9a:1e:9e:fc:f2:0e:aa:4c:c2:f0:c2:05:c2:e7: 82:f2:60:ed -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUBwP1sphv81dkn8oYhq1ZZtudFb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMjIxMTE4MjVaFw0yNzAxMjExMTIzMjVaMDMxMTAvBgNV BAMTKEU3RDFDNjI1RUJFNDg4NkQ5OEQ2M0Y1NjgwQUNDQzc3Njk0QjI5MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLm8May4hUSrUQ3PcfgdFcNwTm WsUQDBOZjzIY+ghLCH3bBWfFA6+cnyctbJKfnefnkq8hchf3ynIlKlWtUXUH+lPw Uzl/R4VCGf96d5VsUL2y2CwT6xNaVZRMf2pMAVUiXyJsW146Wbf5HmSB3Le1N9WS GRxEwahjpqbwJuw6gjOpa+0e2QIWeR2fCMPyihLnGSvFliulAUvMrUGb8nK7zeA3 7hm3CF8V1C3dWiiGRAogPBsPXQKTSnFYiKqNz8Cu/i6qQw7/NAske1OkQYWMa1KF yseWzk3cd95wAoQcomG6OjM65Qm61qnCUsdMd6Fnn4UubTFBEmzx58hCnFU3AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU59HGJevkiG2Y1j9WgKzMd2lLKTAwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM0 MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMzMzAzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJFP kDANBgkqhkiG9w0BAQsFAAOCAQEAQWdaNQsAbPfqxR9vQYwSDKBrwOBn4pPIqLwW zlrFNDjTVy44aiERrGM+54i1YhIaL0pVEOxyu+qbGCn83h2cpoqv2v4piw+lyg++ 9MHwsbAK4h7BLhJUG5E6mW9HCF4DtuAriPprHW62KnbfdcPQ9S+Hy4XFMQbkvLlh GlV5DoAKjKA51YsQ5jLX29G+VJx9neuy4WbOKVtpUBsMGSDFfMaeKUme177qMvzN fxf2a6NjqMUUZCVROQKsxkp7oqoUdBnGzbNeJUXObe2FZzlz9SZfmCCwBpaxNpQE VAzJUUk8ukpn1hDc/e/ZDoFDZpoenvzyDqpMwvDCBcLngvJg7Q== -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:59 2026 by rpki-client