This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38382e302f32342d3234203d3e203530303935.roa File: 3135352e3133332e38382e302f32342d3234203d3e203530303935.roa (raw, json) Hash identifier: ITjNkRGsnCf6b74J5BqyqQzR9xEAfrqbGYi4UFJnnEI= Subject key identifier: 17:E0:F2:35:43:90:8D:8B:2F:5D:5B:EE:6A:A6:B2:AF:21:45:E9:6A Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 63719C1DEDBF862E99E7863153723A0CE12FAE8F Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38382e302f32342d3234203d3e203530303935.roa Signing time: Wed 05 Nov 2025 16:48:48 +0000 ROA not before: Wed 05 Nov 2025 16:43:48 +0000 ROA not after: Wed 04 Nov 2026 16:48:48 +0000 asID: 50095 IP address blocks: 155.133.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:71:9c:1d:ed:bf:86:2e:99:e7:86:31:53:72:3a:0c:e1:2f:ae:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 5 16:43:48 2025 GMT Not After : Nov 4 16:48:48 2026 GMT Subject: CN=17E0F23543908D8B2F5D5BEE6AA6B2AF2145E96A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:b2:66:ba:b7:05:72:44:4d:43:43:81:82: 9b:ea:6d:d7:a2:66:b4:b4:f1:9c:0e:f9:a3:70:75: a5:b6:fd:4f:f2:0f:4d:a5:94:3d:c5:fb:25:22:bb: 88:2d:b6:3d:e0:08:99:94:1f:e9:8b:80:8d:ea:e0: ff:51:a4:53:53:f7:97:4f:f9:66:d1:d2:30:ec:52: a9:32:61:01:1c:25:64:d0:32:ae:d4:08:12:ae:de: d8:97:c3:4c:1a:16:54:8c:d4:ff:7b:8f:e3:bc:d8: 65:0f:e7:46:53:a7:80:50:5b:ec:6f:83:2d:34:40: 6c:9b:3b:2f:e1:c8:e8:64:47:e3:f4:75:58:18:97: c4:9f:0b:57:cf:6a:d3:32:eb:88:03:f0:af:ca:8e: 93:69:b8:f5:49:08:53:78:82:49:f3:ad:8c:77:5c: 3b:6a:b2:4f:e4:c8:66:a4:5e:f0:2d:23:41:24:ff: 1f:fd:e1:b5:5b:5b:4d:e5:1c:c8:eb:bd:bd:84:01: b5:73:8a:9a:57:98:98:7f:b3:63:b2:95:06:64:6d: 6b:de:d8:a3:83:45:c5:dc:1d:5a:8d:6e:fb:f6:ee: 81:11:91:e4:9a:73:60:1a:4f:ca:7b:16:fc:41:23: 88:53:7d:37:b6:e9:a7:f4:e2:d7:0d:73:c1:41:c7: e6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E0:F2:35:43:90:8D:8B:2F:5D:5B:EE:6A:A6:B2:AF:21:45:E9:6A X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38382e302f32342d3234203d3e203530303935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.133.88.0/24 Signature Algorithm: sha256WithRSAEncryption 41:57:43:fd:0e:91:51:cc:2c:3b:28:02:63:22:ba:f0:c3:95: 2c:60:ce:7a:44:fc:8a:c4:21:08:65:b0:78:06:6d:57:6f:c6: 45:6b:23:d9:41:94:ea:e7:f1:f0:8b:0b:79:20:42:3c:38:ff: 77:17:ac:09:e7:d6:d3:62:a6:92:aa:d7:24:4b:e3:e3:8a:b2: fa:c7:d2:7b:a9:68:f2:c5:82:c5:59:ff:43:c2:a7:ae:c2:d2: 6f:75:eb:44:fa:29:8f:dc:a0:a5:45:29:3a:57:26:1c:ca:7d: 33:fe:3a:39:e4:76:ba:56:e2:57:59:b6:1c:28:b1:65:f2:f1: 57:c0:0c:9e:a9:3f:20:10:fd:49:1a:9d:f3:01:3a:4a:08:c3: e9:63:72:13:b6:b2:2d:d9:b9:6e:a3:e6:a5:15:d5:74:67:f6: 1f:8b:c0:d1:09:2f:a3:1e:b0:0b:35:fa:71:9f:09:42:86:29: 0e:69:4a:24:d7:6a:1d:16:41:4e:d1:20:6e:50:5b:59:7c:a8: 0d:e1:8f:9c:fb:86:29:95:f4:4b:11:65:28:b3:b1:f6:4f:4d: 7b:48:22:bf:13:6c:d5:09:71:a0:c0:22:86:18:39:71:aa:e3: 60:4e:28:29:e0:18:84:64:9d:32:fb:15:e4:c8:9b:70:6b:45: 47:31:d0:a1 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUY3GcHe2/hi6Z54YxU3I6DOEvro8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMDUxNjQzNDhaFw0yNjExMDQxNjQ4NDhaMDMxMTAvBgNV BAMTKDE3RTBGMjM1NDM5MDhEOEIyRjVENUJFRTZBQTZCMkFGMjE0NUU5NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqvrJmurcFckRNQ0OBgpvqbdei ZrS08ZwO+aNwdaW2/U/yD02llD3F+yUiu4gttj3gCJmUH+mLgI3q4P9RpFNT95dP +WbR0jDsUqkyYQEcJWTQMq7UCBKu3tiXw0waFlSM1P97j+O82GUP50ZTp4BQW+xv gy00QGybOy/hyOhkR+P0dVgYl8SfC1fPatMy64gD8K/KjpNpuPVJCFN4gknzrYx3 XDtqsk/kyGakXvAtI0Ek/x/94bVbW03lHMjrvb2EAbVzippXmJh/s2OylQZkbWve 2KODRcXcHVqNbvv27oERkeSac2AaT8p7FvxBI4hTfTe26af04tcNc8FBx+bXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUF+DyNUOQjYsvXVvuaqayryFF6WowHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM1MmUzMTMzMzMyZTM4 MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMwMzAzOTM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA m4VYMA0GCSqGSIb3DQEBCwUAA4IBAQBBV0P9DpFRzCw7KAJjIrrww5UsYM56RPyK xCEIZbB4Bm1Xb8ZFayPZQZTq5/Hwiwt5IEI8OP93F6wJ59bTYqaSqtckS+PjirL6 x9J7qWjyxYLFWf9DwqeuwtJvdetE+imP3KClRSk6VyYcyn0z/jo55Ha6VuJXWbYc KLFl8vFXwAyeqT8gEP1JGp3zATpKCMPpY3ITtrIt2bluo+alFdV0Z/Yfi8DRCS+j HrALNfpxnwlChikOaUok12odFkFO0SBuUFtZfKgN4Y+c+4YplfRLEWUos7H2T017 SCK/E2zVCXGgwCKGGDlxquNgTigp4BiEZJ0y+xXkyJtwa0VHMdCh -----END CERTIFICATE-----Generated at Sat Dec 6 14:08:34 2025 by rpki-client