This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e31312e302f32342d3234203d3e20313437303439.roa File: 3136392e34302e31312e302f32342d3234203d3e20313437303439.roa (raw, json) Hash identifier: i73YQSlDyv22dY3MRnPdJT6ugZHSKFtBn0Ft7C9pdOE= Subject key identifier: 84:4B:D3:E2:7C:C4:FC:45:8E:2D:E9:61:63:D1:35:9E:C9:29:90:82 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 5E7033EB8FC59916B23C708609787E75CF53F52B Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e31312e302f32342d3234203d3e20313437303439.roa Signing time: Tue 20 Jan 2026 20:35:50 +0000 ROA not before: Tue 20 Jan 2026 20:30:50 +0000 ROA not after: Tue 19 Jan 2027 20:35:50 +0000 asID: 147049 IP address blocks: 169.40.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:70:33:eb:8f:c5:99:16:b2:3c:70:86:09:78:7e:75:cf:53:f5:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 20 20:30:50 2026 GMT Not After : Jan 19 20:35:50 2027 GMT Subject: CN=844BD3E27CC4FC458E2DE96163D1359EC9299082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:5d:4e:c3:d5:ef:60:a8:44:59:10:f3:83: bc:5a:87:b6:84:ed:6f:9d:e6:7c:64:14:f2:b9:60: 10:84:66:f4:b4:93:d6:ce:62:14:e1:90:c2:84:f5: bc:26:bd:ba:e0:07:9a:3f:d1:b3:ed:06:1f:b1:fe: 39:c7:34:bf:d0:6c:11:f5:7e:3c:ae:d5:0c:11:b1: 15:6e:7a:99:90:78:50:3d:02:30:89:34:eb:50:fd: 30:4f:b0:0d:05:70:51:8a:bf:e6:ff:24:b3:fa:27: 16:37:ce:e9:0e:97:35:a6:60:a8:d7:8a:92:a1:65: b1:99:aa:d8:5c:38:6a:c5:26:44:19:9e:c6:79:cf: eb:b0:02:9f:c2:f1:a8:54:9d:ab:52:4a:c0:cc:cb: a1:fb:f0:24:ad:35:0f:fe:c9:92:cf:ab:31:e7:2f: 89:54:8d:44:77:5d:b1:ef:1c:5a:60:25:db:1e:07: b8:43:a2:db:ad:4d:75:0d:b4:d6:c3:69:4c:ba:00: 8a:28:a7:7e:c8:71:3d:76:d5:2e:0c:4f:8c:00:21: c0:6e:bb:39:3d:2d:9d:83:5e:e0:45:ea:d8:40:58: eb:7e:4d:79:8e:9a:1b:24:c7:4c:cc:03:19:06:97: 69:df:f1:2d:0c:dd:25:10:35:30:66:13:d6:65:69: 03:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4B:D3:E2:7C:C4:FC:45:8E:2D:E9:61:63:D1:35:9E:C9:29:90:82 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e31312e302f32342d3234203d3e20313437303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.11.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:a2:48:74:15:18:70:1e:2c:5b:76:e8:ea:f4:c5:4f:17:81: d0:29:bf:68:19:ec:25:42:8f:9f:75:ac:c9:09:26:0d:40:d1: d5:d4:ce:fe:4b:e9:cd:94:47:ae:06:78:ba:7d:d1:78:ec:3e: 92:80:95:81:2f:e4:51:c2:f7:ae:f9:f6:c1:09:19:36:a4:5d: 46:d4:d8:a3:a7:00:ed:3c:ef:34:29:d8:9f:2c:4c:93:fe:c4: 00:1c:1f:e8:ae:5e:04:f1:54:0a:6e:c1:a1:f2:57:41:4e:d5: 51:5e:25:09:2e:cc:98:3f:06:4b:1c:ff:f3:6f:ac:ec:31:15: 66:ce:35:9b:59:95:cb:6f:f6:6d:82:bd:8b:fc:ca:f4:0e:e5: 81:1f:86:40:0a:51:5d:04:1f:3e:56:c7:97:08:a6:c4:74:16: d5:77:22:70:9a:21:3e:a7:f3:85:52:b0:6b:44:55:7b:dc:dd: f5:9d:57:b1:cd:3b:8c:ce:60:8a:5e:31:a0:84:ca:12:e6:36: 90:49:1c:a0:e6:23:f7:3d:b4:f7:a5:0f:e3:3f:6a:47:4b:e2: e9:fc:b8:68:80:39:90:08:42:22:51:67:5d:76:ff:63:78:04: 9e:10:e2:44:cc:b7:58:6b:bb:6f:54:04:8d:42:26:1c:fd:04: b2:36:00:80 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUXnAz64/FmRayPHCGCXh+dc9T9SswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMjAyMDMwNTBaFw0yNzAxMTkyMDM1NTBaMDMxMTAvBgNV BAMTKDg0NEJEM0UyN0NDNEZDNDU4RTJERTk2MTYzRDEzNTlFQzkyOTkwODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4bl1Ow9XvYKhEWRDzg7xah7aE 7W+d5nxkFPK5YBCEZvS0k9bOYhThkMKE9bwmvbrgB5o/0bPtBh+x/jnHNL/QbBH1 fjyu1QwRsRVuepmQeFA9AjCJNOtQ/TBPsA0FcFGKv+b/JLP6JxY3zukOlzWmYKjX ipKhZbGZqthcOGrFJkQZnsZ5z+uwAp/C8ahUnatSSsDMy6H78CStNQ/+yZLPqzHn L4lUjUR3XbHvHFpgJdseB7hDotutTXUNtNbDaUy6AIoop37IcT121S4MT4wAIcBu uzk9LZ2DXuBF6thAWOt+TXmOmhskx0zMAxkGl2nf8S0M3SUQNTBmE9ZlaQPVAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUhEvT4nzE/EWOLelhY9E1nskpkIIwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNjM5MmUzNDMwMmUzMTMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDM3MzAzNDM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA qSgLMA0GCSqGSIb3DQEBCwUAA4IBAQBuokh0FRhwHixbdujq9MVPF4HQKb9oGewl Qo+fdazJCSYNQNHV1M7+S+nNlEeuBni6fdF47D6SgJWBL+RRwveu+fbBCRk2pF1G 1NijpwDtPO80KdifLEyT/sQAHB/orl4E8VQKbsGh8ldBTtVRXiUJLsyYPwZLHP/z b6zsMRVmzjWbWZXLb/Ztgr2L/Mr0DuWBH4ZAClFdBB8+VseXCKbEdBbVdyJwmiE+ p/OFUrBrRFV73N31nVexzTuMzmCKXjGghMoS5jaQSRyg5iP3PbT3pQ/jP2pHS+Lp /LhogDmQCEIiUWdddv9jeASeEOJEzLdYa7tvVASNQiYc/QSyNgCA -----END CERTIFICATE-----Generated at Sun Jan 25 11:43:04 2026 by rpki-client