This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37312e302f32342d3234203d3e20313336373837.roa File: 3135352e3133332e37312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 9b99NxqjJzqq9yqmc8BS2KLewMc+TYxFYmLi2Gd/YxI= Subject key identifier: 01:FF:0B:98:BB:CE:35:21:7A:85:A4:D3:08:64:F8:23:89:9F:3F:83 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 6972B4229B5DB5FDF6A387F2A00E994CEE6E5365 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37312e302f32342d3234203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:51:05 +0000 ROA not before: Mon 29 Dec 2025 09:46:05 +0000 ROA not after: Mon 28 Dec 2026 09:51:05 +0000 asID: 136787 IP address blocks: 155.133.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:72:b4:22:9b:5d:b5:fd:f6:a3:87:f2:a0:0e:99:4c:ee:6e:53:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:46:05 2025 GMT Not After : Dec 28 09:51:05 2026 GMT Subject: CN=01FF0B98BBCE35217A85A4D30864F823899F3F83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:99:92:07:9d:6e:61:14:73:1b:5a:96:bf:d8: 1a:9a:12:ee:2c:bb:40:ec:fa:d9:86:df:5d:7e:e1: a7:2e:e2:4a:72:f0:33:33:1e:11:12:67:4f:ea:36: 78:05:f4:6b:22:89:f9:98:31:59:78:26:8c:1c:c1: 40:7b:9a:62:88:25:fe:c8:f8:23:d2:ca:85:69:7a: a9:f5:50:6d:30:a3:84:7c:5b:5d:47:9e:c8:85:b8: 46:41:63:45:18:f3:36:fa:09:27:c4:84:15:a6:8a: ef:73:c9:8d:97:bb:22:b3:54:4a:95:1e:15:31:be: c7:a5:2e:31:ed:d2:d0:2f:6e:a5:53:cc:b1:3b:bd: 1f:45:df:c1:5a:62:60:91:aa:64:96:88:b9:c6:53: 84:ec:5d:39:32:d3:a9:65:aa:e6:85:4f:e1:9e:ae: 61:b6:ee:fa:42:f2:1d:65:f7:46:cd:8a:ce:59:82: 36:c1:12:6e:74:f8:b9:ab:91:38:c6:40:44:85:31: cc:a0:b9:03:42:be:47:19:b3:84:b0:af:10:2f:0e: f2:43:7d:25:c8:07:10:b2:d6:f4:b9:79:23:f1:a2: da:d5:ab:e1:62:45:d4:9f:47:09:d1:69:8e:d9:4f: fe:d4:4a:7a:21:9d:93:3b:a9:81:8b:9b:b7:4e:f1: 42:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FF:0B:98:BB:CE:35:21:7A:85:A4:D3:08:64:F8:23:89:9F:3F:83 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.133.71.0/24 Signature Algorithm: sha256WithRSAEncryption 57:58:99:a9:a5:70:6d:88:ef:8b:ca:b0:8f:90:cf:fe:14:89: c4:a0:49:af:f8:96:be:55:cb:54:e5:a7:37:31:92:ab:b1:45: b8:89:81:b9:96:25:aa:6e:f0:e8:91:72:86:5f:17:3f:a7:f0: a8:fe:a0:f8:18:36:18:a8:17:f9:68:59:54:5b:cf:5a:d7:3a: f4:6a:86:ca:cb:82:3f:2b:78:3d:d2:dd:d7:5e:1a:40:be:c3: db:e7:cd:72:23:7e:d1:05:3f:90:6c:6b:d8:b9:73:62:0f:f8: 19:46:36:ee:17:41:60:4e:b2:61:95:53:94:0b:c8:5b:ed:be: 35:68:de:b6:12:96:ba:ea:7f:69:cb:7f:08:fb:5f:ba:4e:1e: dc:b7:28:89:49:71:a7:6d:71:b7:9f:1f:54:67:5d:d0:60:da: 41:8a:a7:d4:8e:8c:b2:80:38:11:e8:c3:f5:2f:82:23:6c:87: 0e:bb:21:f8:a1:02:ac:58:ed:e1:31:07:1b:07:3c:0b:9e:a6: 9f:09:98:3c:93:a2:ed:d8:05:5d:12:a6:1f:ad:57:6f:98:6c: 3d:af:3d:22:05:dd:69:70:6e:c2:3b:87:2d:c8:6f:fe:5c:73: 7f:2e:3e:51:76:2b:d0:33:48:84:20:04:f6:cc:fd:0a:35:96: b3:1d:67:54 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUaXK0Iptdtf32o4fyoA6ZTO5uU2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ2MDVaFw0yNjEyMjgwOTUxMDVaMDMxMTAvBgNV BAMTKDAxRkYwQjk4QkJDRTM1MjE3QTg1QTREMzA4NjRGODIzODk5RjNGODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLmZIHnW5hFHMbWpa/2BqaEu4s u0Ds+tmG311+4acu4kpy8DMzHhESZ0/qNngF9GsiifmYMVl4JowcwUB7mmKIJf7I +CPSyoVpeqn1UG0wo4R8W11HnsiFuEZBY0UY8zb6CSfEhBWmiu9zyY2XuyKzVEqV HhUxvselLjHt0tAvbqVTzLE7vR9F38FaYmCRqmSWiLnGU4TsXTky06llquaFT+Ge rmG27vpC8h1l90bNis5ZgjbBEm50+LmrkTjGQESFMcyguQNCvkcZs4SwrxAvDvJD fSXIBxCy1vS5eSPxotrVq+FiRdSfRwnRaY7ZT/7USnohnZM7qYGLm7dO8UKBAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUAf8LmLvONSF6haTTCGT4I4mfP4MwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM1MmUzMTMzMzMyZTM3 MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACbhUcwDQYJKoZIhvcNAQELBQADggEBAFdYmamlcG2I74vKsI+Qz/4UicSgSa/4 lr5Vy1TlpzcxkquxRbiJgbmWJapu8OiRcoZfFz+n8Kj+oPgYNhioF/loWVRbz1rX OvRqhsrLgj8reD3S3ddeGkC+w9vnzXIjftEFP5Bsa9i5c2IP+BlGNu4XQWBOsmGV U5QLyFvtvjVo3rYSlrrqf2nLfwj7X7pOHty3KIlJcadtcbefH1RnXdBg2kGKp9SO jLKAOBHow/UvgiNshw67IfihAqxY7eExBxsHPAuepp8JmDyTou3YBV0Sph+tV2+Y bD2vPSIF3WlwbsI7hy3Ib/5cc38uPlF2K9AzSIQgBPbM/Qo1lrMdZ1Q= -----END CERTIFICATE-----Generated at Sun Jan 25 10:39:15 2026 by rpki-client