This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e3139362e302f32322d3232203d3e20323031333431.roa File: 3135352e3133332e3139362e302f32322d3232203d3e20323031333431.roa (raw, json) Hash identifier: yJIS/kri4tmUI6ffO6NssBxz+uBjGIdoc7ZM8VbETt4= Subject key identifier: 99:A2:CC:DE:43:F5:EE:51:3B:4E:81:AD:D8:42:1B:08:EE:23:3C:96 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 0A927A5DE622CDCDEA7E2CEE3984E8FA91BD934D Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e3139362e302f32322d3232203d3e20323031333431.roa Signing time: Mon 29 Dec 2025 09:50:49 +0000 ROA not before: Mon 29 Dec 2025 09:45:49 +0000 ROA not after: Mon 28 Dec 2026 09:50:49 +0000 asID: 201341 IP address blocks: 155.133.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:92:7a:5d:e6:22:cd:cd:ea:7e:2c:ee:39:84:e8:fa:91:bd:93:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:49 2025 GMT Not After : Dec 28 09:50:49 2026 GMT Subject: CN=99A2CCDE43F5EE513B4E81ADD8421B08EE233C96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e8:66:49:fe:4a:5a:7e:e7:9c:01:5b:d2:02: 2c:95:b9:f5:a3:42:87:fd:88:38:da:23:80:6c:14: 03:93:e6:5f:43:8f:af:d4:5a:a9:2a:8c:72:8e:b9: 82:08:4b:2f:98:da:94:fe:dc:88:ca:fb:f2:47:5f: 77:53:41:73:fe:9b:e8:2b:ab:80:40:f9:29:8e:76: 4b:d0:8c:61:b4:fa:ef:93:0e:1b:ad:9c:94:2e:8c: 71:1f:f5:e7:a6:da:b8:5c:e3:d7:d0:3f:35:b6:f0: 90:5c:74:fb:5c:ee:67:e6:6f:b6:09:e1:ff:28:0a: 33:e2:4b:4a:4c:0b:21:f3:e0:67:e3:a0:6c:97:e1: a1:d5:4d:fa:73:b0:c3:69:47:71:25:87:9c:41:01: a0:72:5f:fa:87:14:30:36:57:6f:96:34:80:00:91: ae:e1:84:49:c4:22:e9:9c:04:67:97:de:31:9e:7c: 1d:ef:04:ff:89:da:32:07:69:09:42:aa:03:42:0a: 06:68:61:f4:12:8a:1c:84:c9:da:ec:05:76:5e:d7: a2:c9:1d:47:4f:e5:00:08:4a:78:7d:07:97:01:31: 6d:14:08:2f:00:73:14:c4:8f:17:38:c6:b0:60:3f: 6c:01:e1:93:fc:81:7f:ce:ae:11:ea:46:1e:6a:a0: 78:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A2:CC:DE:43:F5:EE:51:3B:4E:81:AD:D8:42:1B:08:EE:23:3C:96 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e3139362e302f32322d3232203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.133.196.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:63:ca:6f:fb:3f:27:e8:fb:50:52:91:a2:e5:a8:8f:99:8d: f1:56:b0:f8:7c:20:bc:3d:79:d9:c3:c8:78:2d:81:b6:54:a7: 2d:71:a6:79:bc:20:ea:09:b2:6a:be:62:b3:54:3d:16:23:a9: fc:b7:71:44:de:f8:b6:ee:71:c9:28:86:4a:25:5d:fc:7b:03: 8c:7d:10:81:e5:c0:d0:c8:16:48:ed:80:8c:19:61:fa:9b:78: be:e3:1f:2e:d0:8b:4a:80:7b:c1:0d:5b:82:27:97:b2:f0:ad: c1:60:6b:32:55:b0:ba:a7:c7:81:75:35:f3:e9:77:3a:91:52: a6:45:0e:22:76:54:41:8b:10:73:34:96:1f:f3:98:10:99:ec: 82:44:9f:ad:c8:98:4d:4a:87:1d:53:c7:83:25:78:62:e7:f7: 00:55:6b:36:19:f1:b9:cf:d4:f4:8d:36:ef:42:84:d0:ed:22: f7:b0:52:d3:90:cb:d8:24:0b:74:b5:4e:ff:7d:13:4e:92:7c: 56:53:a6:13:48:79:16:4c:13:a8:55:ce:6b:ec:1f:36:bf:fc: d3:38:ee:34:ef:a8:8c:56:cd:37:d9:ec:6b:e4:dc:4b:99:a0: 77:11:39:a1:8e:b9:bb:73:16:55:2d:cc:16:dc:32:3b:e1:de: ee:d5:14:32 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUCpJ6XeYizc3qfizuOYTo+pG9k00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDlaFw0yNjEyMjgwOTUwNDlaMDMxMTAvBgNV BAMTKDk5QTJDQ0RFNDNGNUVFNTEzQjRFODFBREQ4NDIxQjA4RUUyMzNDOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi6GZJ/kpafuecAVvSAiyVufWj Qof9iDjaI4BsFAOT5l9Dj6/UWqkqjHKOuYIISy+Y2pT+3IjK+/JHX3dTQXP+m+gr q4BA+SmOdkvQjGG0+u+TDhutnJQujHEf9eem2rhc49fQPzW28JBcdPtc7mfmb7YJ 4f8oCjPiS0pMCyHz4GfjoGyX4aHVTfpzsMNpR3Elh5xBAaByX/qHFDA2V2+WNIAA ka7hhEnEIumcBGeX3jGefB3vBP+J2jIHaQlCqgNCCgZoYfQSihyEydrsBXZe16LJ HUdP5QAISnh9B5cBMW0UCC8AcxTEjxc4xrBgP2wB4ZP8gX/OrhHqRh5qoHjLAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUmaLM3kP17lE7ToGt2EIbCO4jPJYwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM1MmUzMTMzMzMyZTMx MzkzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEApuFxDANBgkqhkiG9w0BAQsFAAOCAQEAXGPKb/s/J+j7UFKRouWoj5mN8Vaw +HwgvD152cPIeC2BtlSnLXGmebwg6gmyar5is1Q9FiOp/LdxRN74tu5xySiGSiVd /HsDjH0QgeXA0MgWSO2AjBlh+pt4vuMfLtCLSoB7wQ1bgieXsvCtwWBrMlWwuqfH gXU18+l3OpFSpkUOInZUQYsQczSWH/OYEJnsgkSfrciYTUqHHVPHgyV4Yuf3AFVr Nhnxuc/U9I0270KE0O0i97BS05DL2CQLdLVO/30TTpJ8VlOmE0h5FkwTqFXOa+wf Nr/80zjuNO+ojFbNN9nsa+TcS5mgdxE5oY65u3MWVS3MFtwyO+He7tUUMg== -----END CERTIFICATE-----Generated at Sun Jan 25 08:59:23 2026 by rpki-client