This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31302e302f32342d3234203d3e20313336373837.roa File: 3135352e3133332e31302e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: wIz6lij0+RtaSkiDA8+p6jh68vz+Qzhiz33ib13TQHA= Subject key identifier: BB:4F:53:FF:1A:D7:C2:5F:5B:C3:B4:3D:83:08:BB:22:E6:C4:93:67 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 4298983C4E90D1EE00292436BB83BF5A166D223B Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31302e302f32342d3234203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:50:41 +0000 ROA not before: Mon 29 Dec 2025 09:45:41 +0000 ROA not after: Mon 28 Dec 2026 09:50:41 +0000 asID: 136787 IP address blocks: 155.133.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:98:98:3c:4e:90:d1:ee:00:29:24:36:bb:83:bf:5a:16:6d:22:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:41 2025 GMT Not After : Dec 28 09:50:41 2026 GMT Subject: CN=BB4F53FF1AD7C25F5BC3B43D8308BB22E6C49367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5c:a9:a6:2c:9e:01:ae:03:6a:57:4d:e4:d0: 55:6b:3f:d9:4a:46:aa:ef:6a:0d:9c:cc:f2:da:bd: 6c:34:7d:4a:08:73:36:a6:6a:ef:20:cb:8f:47:0c: 7d:76:3b:5c:86:b2:dd:b6:c4:4a:b9:c2:3e:99:e3: a9:8b:79:25:78:e8:50:5e:2a:70:db:89:4c:08:63: 53:71:47:39:0b:17:39:9b:c7:36:85:ba:c1:50:6a: 57:ba:9e:eb:95:a9:16:be:e2:64:1b:68:8f:bc:b1: 57:81:1a:84:f1:2b:66:5c:75:6b:86:db:ba:7b:55: 49:4b:56:57:70:20:6a:ca:e3:58:23:93:6c:c7:c8: 5a:2c:5e:11:e3:5a:44:d3:c1:3f:c5:7a:ca:77:5a: 0c:ff:c1:ee:b8:bc:31:a7:6d:56:34:0d:e4:ca:ac: 9d:55:e3:82:6a:11:19:1f:d2:04:47:7a:21:26:96: a6:73:69:f2:51:a9:e9:36:b5:5c:44:be:77:14:05: be:6b:82:48:19:e0:4b:f2:ca:54:92:2d:00:ae:bf: 34:0f:29:d7:b9:b8:ea:08:01:c0:19:d9:39:c5:68: 12:ca:ff:c9:e3:80:56:4b:4f:47:36:2e:f8:e8:1d: 3d:6d:c3:1e:c3:3d:ee:89:f4:49:37:56:94:5e:32: d0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4F:53:FF:1A:D7:C2:5F:5B:C3:B4:3D:83:08:BB:22:E6:C4:93:67 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31302e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.133.10.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:e8:9b:31:11:7f:41:2a:6b:d4:9e:f6:f6:6d:c4:9c:95:ef: fe:62:b1:4d:60:4f:1b:9e:4f:22:69:89:04:be:eb:14:70:d2: ac:04:fe:fa:b0:1b:85:03:99:8a:d1:d3:58:e4:7a:84:87:a5: 3f:7a:43:1a:e4:57:4c:ea:15:f8:17:30:67:51:80:cd:4f:8a: d8:98:3b:c3:7e:76:4f:f4:f9:33:0e:bb:7c:24:f2:08:59:71: 88:f5:a2:b4:6c:e0:31:69:fe:1e:96:ab:32:14:ba:20:be:63: 0e:05:11:0d:57:02:95:1c:1d:d8:21:a9:f8:9e:2a:c7:99:f3: 9f:3a:6d:5d:a5:40:fa:be:a6:cf:b3:c6:b6:20:72:42:49:2d: c6:bc:e3:c1:5d:88:63:19:67:b8:7a:b5:15:57:e3:f3:01:50: 06:43:90:19:fc:f6:63:6b:a9:1b:6a:ae:34:82:ce:25:37:0d: 82:f9:e0:b3:cc:12:50:8f:33:e3:1b:ee:9b:7c:1a:dd:f9:a8: 7e:3e:9d:d3:72:e3:0c:17:7e:42:64:36:45:b7:47:d0:08:88: 4d:46:8b:fc:39:fc:5e:c8:d7:97:3b:1f:39:99:ba:fe:b6:78: 4d:fd:94:8e:6e:26:87:b4:14:6a:ca:23:16:36:c8:84:25:b2: 46:fd:95:1e -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUQpiYPE6Q0e4AKSQ2u4O/WhZtIjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDFaFw0yNjEyMjgwOTUwNDFaMDMxMTAvBgNV BAMTKEJCNEY1M0ZGMUFEN0MyNUY1QkMzQjQzRDgzMDhCQjIyRTZDNDkzNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXKmmLJ4BrgNqV03k0FVrP9lK Rqrvag2czPLavWw0fUoIczamau8gy49HDH12O1yGst22xEq5wj6Z46mLeSV46FBe KnDbiUwIY1NxRzkLFzmbxzaFusFQale6nuuVqRa+4mQbaI+8sVeBGoTxK2ZcdWuG 27p7VUlLVldwIGrK41gjk2zHyFosXhHjWkTTwT/Fesp3Wgz/we64vDGnbVY0DeTK rJ1V44JqERkf0gRHeiEmlqZzafJRqek2tVxEvncUBb5rgkgZ4EvyylSSLQCuvzQP Kde5uOoIAcAZ2TnFaBLK/8njgFZLT0c2LvjoHT1twx7DPe6J9Ek3VpReMtAFAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUu09T/xrXwl9bw7Q9gwi7IubEk2cwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM1MmUzMTMzMzMyZTMx MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACbhQowDQYJKoZIhvcNAQELBQADggEBADromzERf0Eqa9Se9vZtxJyV7/5isU1g TxueTyJpiQS+6xRw0qwE/vqwG4UDmYrR01jkeoSHpT96QxrkV0zqFfgXMGdRgM1P itiYO8N+dk/0+TMOu3wk8ghZcYj1orRs4DFp/h6WqzIUuiC+Yw4FEQ1XApUcHdgh qfieKseZ8586bV2lQPq+ps+zxrYgckJJLca848FdiGMZZ7h6tRVX4/MBUAZDkBn8 9mNrqRtqrjSCziU3DYL54LPMElCPM+Mb7pt8Gt35qH4+ndNy4wwXfkJkNkW3R9AI iE1Gi/w5/F7I15c7HzmZuv62eE39lI5uJoe0FGrKIxY2yIQlskb9lR4= -----END CERTIFICATE-----Generated at Sun Jan 25 10:39:42 2026 by rpki-client