This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e302e302f32312d3234203d3e203432353332.roa File: 3136392e34302e302e302f32312d3234203d3e203432353332.roa (raw, json) Hash identifier: mEc1mzP2Ts/BVtWabs/HMLQ4zZdhsdyzmb200Yr/rkI= Subject key identifier: 12:FD:60:E4:85:BD:44:80:5F:F0:12:8B:6F:A9:86:1B:97:0A:A5:66 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 58402AD560B91DD9ADD921D9ACE6F51A1C376C15 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e302e302f32312d3234203d3e203432353332.roa Signing time: Fri 05 Dec 2025 19:52:57 +0000 ROA not before: Fri 05 Dec 2025 19:47:57 +0000 ROA not after: Fri 04 Dec 2026 19:52:57 +0000 asID: 42532 IP address blocks: 169.40.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:40:2a:d5:60:b9:1d:d9:ad:d9:21:d9:ac:e6:f5:1a:1c:37:6c:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 5 19:47:57 2025 GMT Not After : Dec 4 19:52:57 2026 GMT Subject: CN=12FD60E485BD44805FF0128B6FA9861B970AA566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:56:f3:f0:70:41:f4:77:0e:89:07:7c:85: f4:2e:c1:32:1e:17:26:84:20:e6:e0:c6:95:4f:2e: b2:3b:58:9b:f9:78:98:2d:ca:f1:9e:39:81:79:fd: ab:f7:ec:4e:e6:eb:0f:7d:cb:31:af:3f:46:d7:b2: 0f:cf:68:2a:8d:5a:04:11:bf:d1:3f:1f:35:a8:c7: 13:26:fd:c1:74:96:c7:ad:4a:21:12:28:16:db:e3: f7:f4:4b:5c:25:12:2c:06:25:0f:3e:bd:c4:7d:07: be:95:b2:66:d5:b3:8b:ba:91:b2:f4:a8:2e:b5:ed: d4:29:22:77:cc:b2:c9:a3:01:9d:57:c1:67:80:c3: 9c:0d:b0:ab:c7:c0:84:c3:e8:ee:43:d6:af:32:47: 6d:d7:33:71:28:d7:c3:41:ac:d5:31:a6:d0:94:35: 6d:d5:50:46:d3:21:5c:1a:13:34:4a:17:e3:86:ce: ab:8c:ed:31:c9:21:21:c7:42:c3:76:98:bf:78:98: e1:21:30:6d:d6:03:ab:ae:0d:09:22:cd:b7:19:c3: 49:63:87:ee:c3:b4:42:ae:24:8e:c8:df:52:40:87: 92:af:e0:07:30:94:76:67:52:dd:26:c9:10:26:6a: a7:4b:c5:6e:61:52:1c:7e:29:64:ff:97:d8:01:3e: 51:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FD:60:E4:85:BD:44:80:5F:F0:12:8B:6F:A9:86:1B:97:0A:A5:66 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e302e302f32312d3234203d3e203432353332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.0.0/21 Signature Algorithm: sha256WithRSAEncryption 1b:78:96:29:14:e9:d5:d8:45:69:fe:10:44:e9:8c:8c:b5:4e: 1b:c4:57:95:26:f6:75:96:58:d5:3b:db:a3:a5:4f:49:1a:1e: 0e:f9:a8:69:e7:66:27:f9:4e:35:74:ee:3f:08:99:83:54:66: c0:ae:26:eb:46:37:97:8d:e9:a3:85:fc:0d:91:a8:36:cf:d9: 55:0e:9b:e0:31:e7:32:44:50:05:5c:3c:bd:6a:69:25:d3:eb: bc:40:d0:4b:a8:bb:37:9c:ae:b5:b0:58:91:ee:ed:28:bc:7b: 62:10:75:ba:b8:9e:74:f4:0c:0f:35:12:18:61:25:c8:15:e9: f4:e5:54:00:b0:fe:be:a2:a7:d6:d3:b3:3a:a6:7c:c3:b3:79: af:4c:5e:fc:f5:6c:55:17:ba:d6:6a:b7:cb:aa:bd:78:ae:d2: 20:df:70:d9:70:c6:4d:2e:02:72:5b:94:95:bf:8e:15:f7:4c: 91:2e:10:4f:54:10:1d:67:7a:a1:ac:5c:7b:8d:7f:ec:fc:88: 28:4a:2b:b6:17:d7:1a:a2:c4:31:a3:f8:77:b4:53:4d:77:1d: fa:f8:f1:1a:be:4c:d8:fc:ff:bc:90:41:ff:3c:20:77:1a:62: f8:ec:46:2a:8f:63:f2:49:2e:97:9f:b2:1a:04:86:99:9c:c2: 5a:94:01:a1 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUWEAq1WC5Hdmt2SHZrOb1Ghw3bBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMDUxOTQ3NTdaFw0yNjEyMDQxOTUyNTdaMDMxMTAvBgNV BAMTKDEyRkQ2MEU0ODVCRDQ0ODA1RkYwMTI4QjZGQTk4NjFCOTcwQUE1NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuOFbz8HBB9HcOiQd8hfQuwTIe FyaEIObgxpVPLrI7WJv5eJgtyvGeOYF5/av37E7m6w99yzGvP0bXsg/PaCqNWgQR v9E/HzWoxxMm/cF0lsetSiESKBbb4/f0S1wlEiwGJQ8+vcR9B76VsmbVs4u6kbL0 qC617dQpInfMssmjAZ1XwWeAw5wNsKvHwITD6O5D1q8yR23XM3Eo18NBrNUxptCU NW3VUEbTIVwaEzRKF+OGzquM7THJISHHQsN2mL94mOEhMG3WA6uuDQkizbcZw0lj h+7DtEKuJI7I31JAh5Kv4AcwlHZnUt0myRAmaqdLxW5hUhx+KWT/l9gBPlHBAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUEv1g5IW9RIBf8BKLb6mGG5cKpWYwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNjM5MmUzNDMwMmUzMDJl MzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM0MzIzNTMzMzIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOpKAAw DQYJKoZIhvcNAQELBQADggEBABt4likU6dXYRWn+EETpjIy1ThvEV5Um9nWWWNU7 26OlT0kaHg75qGnnZif5TjV07j8ImYNUZsCuJutGN5eN6aOF/A2RqDbP2VUOm+Ax 5zJEUAVcPL1qaSXT67xA0EuouzecrrWwWJHu7Si8e2IQdbq4nnT0DA81EhhhJcgV 6fTlVACw/r6ip9bTszqmfMOzea9MXvz1bFUXutZqt8uqvXiu0iDfcNlwxk0uAnJb lJW/jhX3TJEuEE9UEB1neqGsXHuNf+z8iChKK7YX1xqixDGj+He0U013Hfr48Rq+ TNj8/7yQQf88IHcaYvjsRiqPY/JJLpefshoEhpmcwlqUAaE= -----END CERTIFICATE-----Generated at Sat Dec 6 16:33:48 2025 by rpki-client