This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3139312e302f32342d3234203d3e20323031333431.roa File: 3135332e39322e3139312e302f32342d3234203d3e20323031333431.roa (raw, json) Hash identifier: N6KAp5p7LtZJbhzooFR+1OsvrbqBW12TMOEIUr0DWjI= Subject key identifier: 88:A7:BF:57:FA:6D:72:69:9D:AE:39:DF:21:CA:51:DF:04:DD:6E:ED Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 643CEAB03A9FFAD722584B6E58E87D6CC5174156 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3139312e302f32342d3234203d3e20323031333431.roa Signing time: Mon 29 Dec 2025 09:50:34 +0000 ROA not before: Mon 29 Dec 2025 09:45:34 +0000 ROA not after: Mon 28 Dec 2026 09:50:34 +0000 asID: 201341 IP address blocks: 153.92.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:3c:ea:b0:3a:9f:fa:d7:22:58:4b:6e:58:e8:7d:6c:c5:17:41:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:34 2025 GMT Not After : Dec 28 09:50:34 2026 GMT Subject: CN=88A7BF57FA6D72699DAE39DF21CA51DF04DD6EED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fc:50:04:45:70:47:c6:60:b7:76:ae:c9:8b: f1:85:57:0b:89:d5:c9:f5:55:ed:63:c2:d1:9f:4a: 7a:0d:a5:4a:46:cf:8d:a3:b4:3a:2f:6b:9f:e3:a1: 03:d5:a6:e2:dd:70:14:3e:10:da:ca:f8:22:8d:42: 10:6d:59:55:41:c6:23:91:70:c2:eb:4e:4e:76:26: 99:03:5a:64:fe:c4:cf:f3:3b:95:5e:ef:60:f4:db: 64:ec:e3:27:34:e5:9b:3f:aa:54:e4:16:5a:28:3e: ee:d0:8e:6f:ab:ef:ce:24:01:9b:4b:4c:fc:f8:37: 9f:4c:97:42:bd:0b:e7:ae:42:e7:0b:24:fc:a2:31: f1:70:74:8c:bb:78:51:d2:12:b2:25:ab:e9:63:b5: 52:ec:d7:a5:52:56:a5:0d:b2:bf:ac:48:33:52:bd: cf:4f:9b:81:ef:c1:be:67:b8:51:cf:c3:31:62:cb: c6:df:7a:ae:8e:1b:de:e1:07:68:25:60:0d:85:0c: 75:64:cf:a9:dd:2e:3d:cd:30:2c:74:33:5c:8a:c4: 8a:94:0b:0e:ed:f7:60:9a:56:4a:b2:42:fd:05:78: a2:58:37:ea:17:9b:59:9a:b5:a9:21:86:aa:2f:7b: de:76:f2:66:4c:43:5d:fb:f0:28:97:b5:6e:0b:f2: dd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A7:BF:57:FA:6D:72:69:9D:AE:39:DF:21:CA:51:DF:04:DD:6E:ED X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3139312e302f32342d3234203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.92.191.0/24 Signature Algorithm: sha256WithRSAEncryption 72:54:df:83:a0:e7:89:ef:cc:22:4d:eb:9c:eb:84:99:b1:d5: eb:78:fd:a6:a6:41:47:86:cc:e3:03:13:e9:5c:45:97:d7:db: f0:5b:20:01:e3:55:7e:42:bd:7b:98:c5:9b:32:ca:a5:e6:51: a2:41:57:0c:0f:bf:1c:5f:60:73:91:5d:04:6e:bd:23:ac:fb: 01:d5:5b:8a:5c:f8:ea:f7:fe:a1:be:ad:b5:be:40:b7:a1:cd: d2:74:93:cb:d6:8f:49:0a:9d:17:cf:eb:d7:64:33:51:d7:a9: fb:80:d3:f2:bd:ba:ac:cf:aa:df:f1:0b:26:14:e9:43:72:85: 31:8b:22:fc:b1:ed:88:ed:d0:63:37:f7:02:59:a6:a7:1f:a1: 94:bf:91:83:ab:69:86:b2:bf:fc:22:13:09:36:60:3a:3f:98: d7:51:02:ed:78:4d:20:cf:cc:c9:5a:28:78:8d:0f:51:68:2b: 31:3f:58:d3:17:7e:f8:07:36:43:58:af:92:8e:f7:c0:3b:90: 9b:34:09:d4:f0:8f:b6:32:1b:68:da:5a:24:d7:5c:60:c6:72: 47:1f:87:46:8a:47:e1:49:1f:c0:12:fd:77:a2:2e:02:58:82: 42:86:11:55:ad:70:0a:9d:68:3b:54:4d:3c:14:46:dc:75:b2: 43:fe:a2:29 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUZDzqsDqf+tciWEtuWOh9bMUXQVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1MzRaFw0yNjEyMjgwOTUwMzRaMDMxMTAvBgNV BAMTKDg4QTdCRjU3RkE2RDcyNjk5REFFMzlERjIxQ0E1MURGMDRERDZFRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK/FAERXBHxmC3dq7Ji/GFVwuJ 1cn1Ve1jwtGfSnoNpUpGz42jtDova5/joQPVpuLdcBQ+ENrK+CKNQhBtWVVBxiOR cMLrTk52JpkDWmT+xM/zO5Ve72D022Ts4yc05Zs/qlTkFlooPu7Qjm+r784kAZtL TPz4N59Ml0K9C+euQucLJPyiMfFwdIy7eFHSErIlq+ljtVLs16VSVqUNsr+sSDNS vc9Pm4Hvwb5nuFHPwzFiy8bfeq6OG97hB2glYA2FDHVkz6ndLj3NMCx0M1yKxIqU Cw7t92CaVkqyQv0FeKJYN+oXm1matakhhqove9528mZMQ1378CiXtW4L8t0TAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUiKe/V/ptcmmdrjnfIcpR3wTdbu0wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTMzMmUzOTMyMmUzMTM5 MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzEzMzM0MzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACZXL8wDQYJKoZIhvcNAQELBQADggEBAHJU34Og54nvzCJN65zrhJmx1et4/aam QUeGzOMDE+lcRZfX2/BbIAHjVX5CvXuYxZsyyqXmUaJBVwwPvxxfYHORXQRuvSOs +wHVW4pc+Or3/qG+rbW+QLehzdJ0k8vWj0kKnRfP69dkM1HXqfuA0/K9uqzPqt/x CyYU6UNyhTGLIvyx7Yjt0GM39wJZpqcfoZS/kYOraYayv/wiEwk2YDo/mNdRAu14 TSDPzMlaKHiND1FoKzE/WNMXfvgHNkNYr5KO98A7kJs0CdTwj7YyG2jaWiTXXGDG ckcfh0aKR+FJH8AS/XeiLgJYgkKGEVWtcAqdaDtUTTwURtx1skP+oik= -----END CERTIFICATE-----Generated at Mon Jan 26 01:20:17 2026 by rpki-client