This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e332e302f32342d3234203d3e203630363935.roa File: 3135352e3133332e332e302f32342d3234203d3e203630363935.roa (raw, json) Hash identifier: h+uqnhos8gqNnZJxeRyEk3GRr+Abf/xgXVzVBDszgTE= Subject key identifier: F5:41:C0:AD:92:37:BC:B9:7E:61:76:9E:B6:44:B0:52:EE:C4:A9:BD Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 670FE4A5A47E4B84299C8078BA2FDC04353636AA Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e332e302f32342d3234203d3e203630363935.roa Signing time: Mon 29 Dec 2025 09:50:41 +0000 ROA not before: Mon 29 Dec 2025 09:45:41 +0000 ROA not after: Mon 28 Dec 2026 09:50:41 +0000 asID: 60695 IP address blocks: 155.133.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:0f:e4:a5:a4:7e:4b:84:29:9c:80:78:ba:2f:dc:04:35:36:36:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:41 2025 GMT Not After : Dec 28 09:50:41 2026 GMT Subject: CN=F541C0AD9237BCB97E61769EB644B052EEC4A9BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6a:cb:88:40:04:69:35:3c:04:82:97:2a:cc: 35:eb:95:13:50:4c:10:fb:6e:d9:56:80:2d:5b:b6: d0:ec:d4:43:93:88:dc:2d:4a:fa:85:f5:51:f3:4c: fc:a0:0f:62:8e:06:f4:69:e3:bc:81:3d:03:62:f8: 2d:d0:cc:4a:43:f4:02:5c:7f:55:92:42:bc:bc:cf: de:f8:ba:ed:61:3c:0f:59:fa:42:44:d3:64:3d:c1: 15:e2:7a:23:17:ff:9b:6f:70:b7:14:8b:9d:7a:1a: 78:1f:d7:37:92:17:4d:dc:13:94:27:b4:9e:88:19: 6e:7d:ee:53:fd:a2:13:21:0c:ff:e5:9f:04:e1:00: 94:f3:27:b4:c6:07:c2:82:13:86:08:e5:ad:20:c9: 95:e4:cd:07:fa:2d:92:d6:31:52:18:92:c8:8c:7f: dc:6d:b9:8f:12:30:c5:b2:13:c4:fc:03:eb:84:3f: 4c:7b:b5:56:6a:46:bf:f5:40:99:49:00:35:b1:1d: 79:e8:6f:20:47:97:16:71:24:37:2d:0e:bd:7a:cf: 31:ad:a5:39:01:99:dd:dd:39:1e:93:8e:af:77:98: 1e:fd:5b:99:cd:65:c6:35:b6:09:2e:b2:5b:e1:85: 7a:39:89:d6:35:19:65:f5:c1:c4:b2:fe:f0:3c:d4: 23:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:41:C0:AD:92:37:BC:B9:7E:61:76:9E:B6:44:B0:52:EE:C4:A9:BD X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e332e302f32342d3234203d3e203630363935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.133.3.0/24 Signature Algorithm: sha256WithRSAEncryption 85:7f:ca:69:7d:19:a4:28:eb:70:2b:ea:4b:e5:e8:19:19:ff: e0:69:16:76:d1:71:6f:d1:96:21:97:10:6e:57:97:ae:cb:9e: 77:9f:73:a4:49:e2:f8:ee:f3:24:f4:dd:69:7b:6a:4e:cf:bb: 6b:b2:d2:a9:10:f8:99:dd:6c:bd:0b:04:83:e8:83:e1:57:42: 06:92:1e:4d:6c:d7:8a:ff:bb:6b:06:1a:ef:61:83:db:42:be: 18:97:96:71:0d:8c:f4:f5:54:f5:15:3f:e0:4f:3e:66:67:c8: 70:82:7b:08:3d:52:09:e8:73:ec:81:34:20:20:2a:1a:d5:d5: b5:3a:83:7c:05:90:6f:ae:03:92:dc:93:9f:87:f1:fa:5f:bd: eb:85:b7:4f:f9:c7:c2:c2:08:25:29:48:15:61:7b:9a:2f:80: 7d:82:85:41:78:83:ba:36:f0:7c:1a:7b:5a:30:c2:b6:4f:91: 03:c2:ed:dd:cd:c6:9b:8b:88:1f:2d:af:1b:8e:3e:b2:22:ac: 8e:4d:f4:85:0b:7c:39:5c:ae:80:4a:50:17:05:dc:18:11:38: 81:2c:1f:e7:51:fe:98:58:04:3c:7a:69:9d:52:a2:c4:db:c4: e9:29:1f:c1:67:7a:24:82:ec:a5:d4:de:04:6a:8a:db:46:fd: 8d:21:b4:5b -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUZw/kpaR+S4QpnIB4ui/cBDU2NqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDFaFw0yNjEyMjgwOTUwNDFaMDMxMTAvBgNV BAMTKEY1NDFDMEFEOTIzN0JDQjk3RTYxNzY5RUI2NDRCMDUyRUVDNEE5QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7asuIQARpNTwEgpcqzDXrlRNQ TBD7btlWgC1bttDs1EOTiNwtSvqF9VHzTPygD2KOBvRp47yBPQNi+C3QzEpD9AJc f1WSQry8z974uu1hPA9Z+kJE02Q9wRXieiMX/5tvcLcUi516Gngf1zeSF03cE5Qn tJ6IGW597lP9ohMhDP/lnwThAJTzJ7TGB8KCE4YI5a0gyZXkzQf6LZLWMVIYksiM f9xtuY8SMMWyE8T8A+uEP0x7tVZqRr/1QJlJADWxHXnobyBHlxZxJDctDr16zzGt pTkBmd3dOR6Tjq93mB79W5nNZcY1tgkuslvhhXo5idY1GWX1wcSy/vA81CM1AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU9UHArZI3vLl+YXaetkSwUu7Eqb0wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM1MmUzMTMzMzMyZTMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMDM2MzkzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJuF AzANBgkqhkiG9w0BAQsFAAOCAQEAhX/KaX0ZpCjrcCvqS+XoGRn/4GkWdtFxb9GW IZcQbleXrsued59zpEni+O7zJPTdaXtqTs+7a7LSqRD4md1svQsEg+iD4VdCBpIe TWzXiv+7awYa72GD20K+GJeWcQ2M9PVU9RU/4E8+ZmfIcIJ7CD1SCehz7IE0ICAq GtXVtTqDfAWQb64DktyTn4fx+l+964W3T/nHwsIIJSlIFWF7mi+AfYKFQXiDujbw fBp7WjDCtk+RA8Lt3c3Gm4uIHy2vG44+siKsjk30hQt8OVyugEpQFwXcGBE4gSwf 51H+mFgEPHppnVKixNvE6SkfwWd6JILspdTeBGqK20b9jSG0Ww== -----END CERTIFICATE-----Generated at Sun Jan 25 12:16:38 2026 by rpki-client