This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38322e302f32342d3234203d3e20313336373837.roa File: 3135352e3133332e38322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: NrbMHAU8BJsP6VDkF2v1YlOyJbrM82dwFoIvovPFpo4= Subject key identifier: 5F:73:01:3C:F2:0C:83:E1:DD:64:41:2C:A3:4E:6C:91:FC:28:B1:D9 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 286743C1A4AD387AF0FC89C161D20A8E9E56D72C Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38322e302f32342d3234203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:50:57 +0000 ROA not before: Mon 29 Dec 2025 09:45:57 +0000 ROA not after: Mon 28 Dec 2026 09:50:57 +0000 asID: 136787 IP address blocks: 155.133.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:67:43:c1:a4:ad:38:7a:f0:fc:89:c1:61:d2:0a:8e:9e:56:d7:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:57 2025 GMT Not After : Dec 28 09:50:57 2026 GMT Subject: CN=5F73013CF20C83E1DD64412CA34E6C91FC28B1D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:d9:43:72:67:12:db:56:67:68:20:d0:ba: f0:08:9a:06:98:3a:1c:64:ad:e2:3c:37:0b:3d:a4: 28:6e:cd:ed:72:6a:ae:4b:97:44:3f:c5:a4:de:07: 3f:92:f2:16:87:64:bc:4c:c2:a9:db:dc:1e:83:f0: 36:1e:28:73:35:6b:13:0b:92:0d:f0:c4:5b:06:d8: 55:3a:f3:da:48:18:50:06:5a:8c:c7:0a:0d:d8:f3: 91:c4:a1:cd:43:f9:9c:05:76:09:e6:63:56:34:f7: 6f:c6:8c:26:91:05:bb:ef:05:b6:94:a6:11:c5:da: 8a:d6:da:50:23:1b:8d:9a:0b:47:e5:49:97:bb:1a: 4f:05:70:a2:6e:8c:99:76:b6:c4:d6:06:9c:47:81: 36:a4:97:b1:96:da:d1:c6:1c:22:53:41:46:2d:30: b5:78:bd:79:01:7a:53:c5:77:fe:a6:4e:dd:ce:6e: 66:bd:18:7e:6a:88:65:d6:1e:0f:8a:3f:1c:e1:dd: 19:96:d4:d9:19:02:fb:86:17:af:26:f1:cb:0c:7b: 48:8f:f8:e4:72:06:90:6c:ef:7d:d5:43:a0:ad:db: 9d:19:c8:8d:1f:4b:ce:b3:c7:64:2c:40:cd:ed:e8: 3a:04:67:e6:43:f7:ee:59:78:ad:8d:4d:a7:ba:77: 5b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:73:01:3C:F2:0C:83:E1:DD:64:41:2C:A3:4E:6C:91:FC:28:B1:D9 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.133.82.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:ac:d9:35:b1:78:b7:96:e5:44:00:dc:79:4d:4f:17:bf:0d: 38:58:ff:83:50:01:20:45:0a:db:4a:df:36:bc:6a:c8:a9:35: b8:99:51:82:4e:af:1f:64:ed:9d:f4:9b:cd:16:10:cf:b0:49: 97:e6:be:92:04:0b:d9:2e:71:04:c6:ea:d5:5a:a9:15:db:5f: b1:65:d9:1f:33:c4:33:55:35:16:32:30:26:5b:74:b1:b6:70: e7:eb:c6:25:2d:c9:dd:46:84:ad:df:a1:1f:e2:fe:e6:61:dc: c1:43:32:19:3d:50:1a:d8:67:04:22:e2:0b:0e:c1:6a:0f:eb: a7:01:3e:5e:88:c7:53:2f:46:e7:34:e7:8b:88:52:d5:e3:5a: 32:f1:35:81:55:b4:7e:4c:60:1e:c3:45:5f:93:ae:19:77:08: b7:1d:5e:37:ca:f5:f8:ea:a6:53:b3:3e:3e:bb:c6:cb:24:fb: f7:4c:7b:0e:d1:d7:e0:c3:78:e1:4f:a7:ae:6f:3f:23:84:f4: 23:f7:de:bc:6d:06:2d:5c:5c:63:e1:1a:d4:71:25:89:06:e9: 63:0b:3b:d5:1b:99:45:5e:b8:96:1f:f4:ef:bf:4c:4b:89:6a: 49:2a:6d:76:01:81:03:ea:cc:b2:88:30:f3:46:1a:cf:65:b5: 37:6d:ed:2d -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUKGdDwaStOHrw/InBYdIKjp5W1ywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTdaFw0yNjEyMjgwOTUwNTdaMDMxMTAvBgNV BAMTKDVGNzMwMTNDRjIwQzgzRTFERDY0NDEyQ0EzNEU2QzkxRkMyOEIxRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NtlDcmcS21ZnaCDQuvAImgaY OhxkreI8Nws9pChuze1yaq5Ll0Q/xaTeBz+S8haHZLxMwqnb3B6D8DYeKHM1axML kg3wxFsG2FU689pIGFAGWozHCg3Y85HEoc1D+ZwFdgnmY1Y092/GjCaRBbvvBbaU phHF2orW2lAjG42aC0flSZe7Gk8FcKJujJl2tsTWBpxHgTakl7GW2tHGHCJTQUYt MLV4vXkBelPFd/6mTt3Obma9GH5qiGXWHg+KPxzh3RmW1NkZAvuGF68m8csMe0iP +ORyBpBs733VQ6Ct250ZyI0fS86zx2QsQM3t6DoEZ+ZD9+5ZeK2NTae6d1uvAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUX3MBPPIMg+HdZEEso05skfwosdkwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM1MmUzMTMzMzMyZTM4 MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACbhVIwDQYJKoZIhvcNAQELBQADggEBAI2s2TWxeLeW5UQA3HlNTxe/DThY/4NQ ASBFCttK3za8asipNbiZUYJOrx9k7Z30m80WEM+wSZfmvpIEC9kucQTG6tVaqRXb X7Fl2R8zxDNVNRYyMCZbdLG2cOfrxiUtyd1GhK3foR/i/uZh3MFDMhk9UBrYZwQi 4gsOwWoP66cBPl6Ix1MvRuc054uIUtXjWjLxNYFVtH5MYB7DRV+Trhl3CLcdXjfK 9fjqplOzPj67xssk+/dMew7R1+DDeOFPp65vPyOE9CP33rxtBi1cXGPhGtRxJYkG 6WMLO9UbmUVeuJYf9O+/TEuJakkqbXYBgQPqzLKIMPNGGs9ltTdt7S0= -----END CERTIFICATE-----Generated at Sun Jan 25 12:36:01 2026 by rpki-client