This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3235332e302f32342d3234203d3e20313336373837.roa File: 3136342e352e3235332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: xtfIGG2SKl5I5ai/E5OOpRJF+X4MC7iTwEPIjlU4uAM= Subject key identifier: 53:18:62:89:53:CF:04:CE:37:7C:FB:5B:E6:6B:60:B1:ED:E1:0E:58 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 3C0B54B56E37958B98FD11D028188E954A708F73 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3235332e302f32342d3234203d3e20313336373837.roa Signing time: Wed 21 Jan 2026 12:00:51 +0000 ROA not before: Wed 21 Jan 2026 11:55:51 +0000 ROA not after: Wed 20 Jan 2027 12:00:51 +0000 asID: 136787 IP address blocks: 164.5.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:0b:54:b5:6e:37:95:8b:98:fd:11:d0:28:18:8e:95:4a:70:8f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 21 11:55:51 2026 GMT Not After : Jan 20 12:00:51 2027 GMT Subject: CN=5318628953CF04CE377CFB5BE66B60B1EDE10E58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:25:95:29:8b:44:ad:62:71:0a:ed:2a:32:ba: 83:b3:9e:64:96:03:36:3c:21:1a:af:f1:88:01:fb: 90:96:75:9b:f3:3b:b7:a9:21:f5:e9:ae:4c:a6:f9: 8b:bf:c1:5b:94:ed:aa:1b:f1:e9:ed:41:ec:f0:1d: 38:d2:e3:2c:b1:d9:6a:00:d4:c4:82:80:1e:57:dd: 5b:54:25:77:34:57:40:22:40:3b:4c:42:f3:ad:58: e4:e4:fc:7f:f5:eb:1e:b8:23:3e:f4:d2:52:ea:2c: a2:87:f8:e9:56:5e:3e:c6:67:14:ab:53:f8:89:80: 38:ef:b2:cf:7e:1e:17:97:c2:d3:99:aa:0f:57:7c: 17:d3:a8:e6:0e:65:9d:55:c2:5c:38:71:56:e5:2f: eb:f4:c2:da:07:c4:48:86:7c:96:1e:1e:f7:62:04: fa:8e:3b:1c:dc:8b:b1:f1:ae:4a:cd:fc:2f:d8:a2: 73:9f:f1:c9:f2:25:7c:56:9a:0e:9f:cc:82:32:81: c6:7b:ed:32:af:66:94:6d:2f:15:e3:cc:be:60:5b: c3:54:0d:bf:40:41:9c:b7:bb:69:38:0b:36:1d:a2: dd:f2:49:8b:10:eb:e0:4a:ba:98:30:02:bf:b4:d0: 65:87:85:bb:79:16:33:9a:a7:2a:6a:1f:3c:56:7c: 5d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:18:62:89:53:CF:04:CE:37:7C:FB:5B:E6:6B:60:B1:ED:E1:0E:58 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3235332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.5.253.0/24 Signature Algorithm: sha256WithRSAEncryption 96:67:bd:c9:5b:89:04:69:79:68:e2:83:4b:d7:7b:f3:e6:14: 91:10:33:6c:7e:bf:50:e8:d1:4e:90:2a:77:a2:c2:8c:26:08: 54:6d:9c:db:f7:81:6e:0b:61:7e:51:08:08:5a:0d:eb:93:8a: 8c:68:29:b6:03:17:7d:b6:11:ed:2e:6c:a1:98:8a:ed:ff:71: 77:20:31:a2:26:03:f2:4f:bf:b7:d9:e2:e4:b1:8d:e9:b2:cf: 94:3b:70:6e:08:b4:59:e7:47:b6:ac:25:b1:5d:91:f3:fc:7d: 6d:ff:a3:b3:e4:9a:0e:3a:40:66:30:5e:6d:ec:24:62:e7:a4: c1:e3:67:36:1e:65:71:9a:28:a6:c1:76:f5:f6:f0:56:80:56: 5b:c5:3a:e4:ca:3f:6c:5a:17:c3:8d:62:02:94:e9:60:f0:c5: 98:ef:6f:2c:a0:a5:1e:4c:03:37:c9:97:62:c2:4a:59:50:44: c5:b5:77:30:aa:47:30:e6:db:79:63:5c:3e:50:4f:e7:20:3e: b3:f3:1f:88:56:c3:0c:78:9a:98:9b:2e:ae:5a:dc:7a:e7:98: 49:33:1f:5e:f1:b4:0e:05:74:fc:be:14:ae:67:f7:05:de:15: 05:7c:ec:75:d7:60:a7:3d:2a:ee:04:8a:3c:e0:b9:07:43:8d: f9:4c:04:4f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUPAtUtW43lYuY/RHQKBiOlUpwj3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMjExMTU1NTFaFw0yNzAxMjAxMjAwNTFaMDMxMTAvBgNV BAMTKDUzMTg2Mjg5NTNDRjA0Q0UzNzdDRkI1QkU2NkI2MEIxRURFMTBFNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWJZUpi0StYnEK7SoyuoOznmSW AzY8IRqv8YgB+5CWdZvzO7epIfXprkym+Yu/wVuU7aob8entQezwHTjS4yyx2WoA 1MSCgB5X3VtUJXc0V0AiQDtMQvOtWOTk/H/16x64Iz700lLqLKKH+OlWXj7GZxSr U/iJgDjvss9+HheXwtOZqg9XfBfTqOYOZZ1Vwlw4cVblL+v0wtoHxEiGfJYeHvdi BPqOOxzci7HxrkrN/C/YonOf8cnyJXxWmg6fzIIygcZ77TKvZpRtLxXjzL5gW8NU Db9AQZy3u2k4CzYdot3ySYsQ6+BKupgwAr+00GWHhbt5FjOapypqHzxWfF37AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUUxhiiVPPBM43fPtb5mtgse3hDlgwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNjM0MmUzNTJlMzIzNTMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA pAX9MA0GCSqGSIb3DQEBCwUAA4IBAQCWZ73JW4kEaXlo4oNL13vz5hSREDNsfr9Q 6NFOkCp3osKMJghUbZzb94FuC2F+UQgIWg3rk4qMaCm2Axd9thHtLmyhmIrt/3F3 IDGiJgPyT7+32eLksY3pss+UO3BuCLRZ50e2rCWxXZHz/H1t/6Oz5JoOOkBmMF5t 7CRi56TB42c2HmVxmiimwXb19vBWgFZbxTrkyj9sWhfDjWIClOlg8MWY728soKUe TAM3yZdiwkpZUETFtXcwqkcw5tt5Y1w+UE/nID6z8x+IVsMMeJqYmy6uWtx655hJ Mx9e8bQOBXT8vhSuZ/cF3hUFfOx112CnPSruBIo84LkHQ435TARP -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:49 2026 by rpki-client