This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e302e302f32322d3232203d3e20323031333431.roa File: 3135362e36372e302e302f32322d3232203d3e20323031333431.roa (raw, json) Hash identifier: t/S56UqCw5QI6fyNKRNQ/i9FkjZZCbx4bLAUA/Occus= Subject key identifier: FC:7A:F4:4A:23:80:59:0E:9C:77:6B:AD:15:6D:5F:0E:B2:6C:F3:81 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 21B705CB669246BF13FEEB888C10710CA25326FA Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e302e302f32322d3232203d3e20323031333431.roa Signing time: Mon 29 Dec 2025 09:50:40 +0000 ROA not before: Mon 29 Dec 2025 09:45:40 +0000 ROA not after: Mon 28 Dec 2026 09:50:40 +0000 asID: 201341 IP address blocks: 156.67.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b7:05:cb:66:92:46:bf:13:fe:eb:88:8c:10:71:0c:a2:53:26:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:40 2025 GMT Not After : Dec 28 09:50:40 2026 GMT Subject: CN=FC7AF44A2380590E9C776BAD156D5F0EB26CF381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8b:ae:ff:c3:d1:fe:ff:a4:60:11:db:3b:dc: de:df:16:67:c0:e1:a6:97:a3:99:da:03:fa:c2:4a: 4a:6e:7e:4e:fb:f9:f6:7e:2a:12:74:77:58:7e:f7: d3:51:be:70:bb:91:ba:ec:5e:c3:7b:30:ab:a5:a0: 7f:94:b1:e5:21:b2:6b:fd:2b:0e:02:41:32:d9:0a: f6:80:a7:e9:13:1d:4b:59:3a:28:e5:23:99:53:d0: f0:8e:0c:39:8f:12:38:9c:d9:0f:b3:47:25:a4:2c: f9:9e:8d:74:b1:7c:3c:9f:22:3a:dd:4a:3c:fe:90: 8e:71:db:02:b5:cf:f8:cc:f7:91:da:a6:98:fb:8c: 0c:17:27:d4:5e:7b:9c:9b:70:41:6f:fc:87:4e:25: 79:69:96:ee:62:73:55:f8:ba:7e:74:bd:57:66:24: 33:60:c7:a9:86:de:e0:36:e3:60:ab:de:aa:2b:6d: 26:a6:ca:e7:15:b3:0c:58:69:19:54:fa:cf:b9:76: 9d:98:85:f5:5e:db:f5:6c:61:d8:00:61:3f:ee:09: e2:4f:e9:a8:fe:0b:e7:71:c6:01:ce:eb:e2:07:92: d8:1e:fd:5b:92:0e:22:58:21:b0:9e:1b:3d:09:49: 9e:76:0c:c0:fd:c3:2c:dd:d9:1d:56:41:4c:5c:97: 47:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7A:F4:4A:23:80:59:0E:9C:77:6B:AD:15:6D:5F:0E:B2:6C:F3:81 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e302e302f32322d3232203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.67.0.0/22 Signature Algorithm: sha256WithRSAEncryption 58:b5:dd:c8:db:ce:72:5d:42:c9:58:72:48:76:88:1b:0c:d2: 82:73:c8:21:d7:07:71:a3:3e:cd:d7:2e:15:05:ea:d4:e2:e2: 81:fd:6f:b4:10:4b:2f:e0:cc:c1:38:34:e4:6a:43:c0:5f:e7: 79:49:93:a7:95:69:25:82:a2:26:53:be:79:e0:0c:e4:86:37: 13:2c:cd:8e:e3:c8:8b:d4:40:95:f5:f2:f0:d3:7c:b1:30:b5: 56:df:ae:8e:87:05:4a:f8:20:2b:de:d4:78:24:11:b4:9c:c2: a7:e7:98:81:47:f5:ab:da:48:25:fc:04:8b:53:ba:20:4e:a9: f6:13:ca:df:06:16:f7:53:7c:27:47:a2:87:ac:2a:75:75:28: 79:4b:03:b7:f6:27:d0:6a:17:49:0f:5f:48:97:ab:7c:6b:fe: 24:af:7d:c6:3c:99:a0:e9:68:15:56:1a:b4:78:6f:ce:2b:37: 01:4f:ae:d3:9f:c9:8e:aa:f2:41:29:3b:ac:ab:e9:3e:8b:50: e1:19:3d:5f:cf:2c:8e:71:9f:41:d6:6b:20:99:ac:fa:6b:c2: 11:7c:a2:b5:e7:a2:7f:5e:63:54:04:e2:2d:8e:f1:78:15:c6: a0:38:18:2e:9c:4e:01:08:b8:56:69:62:26:14:9c:e7:1a:1b: 62:32:03:43 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUIbcFy2aSRr8T/uuIjBBxDKJTJvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDBaFw0yNjEyMjgwOTUwNDBaMDMxMTAvBgNV BAMTKEZDN0FGNDRBMjM4MDU5MEU5Qzc3NkJBRDE1NkQ1RjBFQjI2Q0YzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVi67/w9H+/6RgEds73N7fFmfA 4aaXo5naA/rCSkpufk77+fZ+KhJ0d1h+99NRvnC7kbrsXsN7MKuloH+UseUhsmv9 Kw4CQTLZCvaAp+kTHUtZOijlI5lT0PCODDmPEjic2Q+zRyWkLPmejXSxfDyfIjrd Sjz+kI5x2wK1z/jM95Happj7jAwXJ9Ree5ybcEFv/IdOJXlplu5ic1X4un50vVdm JDNgx6mG3uA242Cr3qorbSamyucVswxYaRlU+s+5dp2YhfVe2/VsYdgAYT/uCeJP 6aj+C+dxxgHO6+IHktge/VuSDiJYIbCeGz0JSZ52DMD9wyzd2R1WQUxcl0fbAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU/Hr0SiOAWQ6cd2utFW1fDrJs84EwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM2MmUzNjM3MmUzMDJl MzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEApxD ADANBgkqhkiG9w0BAQsFAAOCAQEAWLXdyNvOcl1CyVhySHaIGwzSgnPIIdcHcaM+ zdcuFQXq1OLigf1vtBBLL+DMwTg05GpDwF/neUmTp5VpJYKiJlO+eeAM5IY3EyzN juPIi9RAlfXy8NN8sTC1Vt+ujocFSvggK97UeCQRtJzCp+eYgUf1q9pIJfwEi1O6 IE6p9hPK3wYW91N8J0eih6wqdXUoeUsDt/Yn0GoXSQ9fSJerfGv+JK99xjyZoOlo FVYatHhvzis3AU+u05/JjqryQSk7rKvpPotQ4Rk9X88sjnGfQdZrIJms+mvCEXyi teeif15jVATiLY7xeBXGoDgYLpxOAQi4VmliJhSc5xobYjIDQw== -----END CERTIFICATE-----Generated at Sun Jan 25 08:56:33 2026 by rpki-client