This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137392e302f32342d3234203d3e20313336373837.roa File: 3137362e35332e3137392e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: wwhZUCxUGKwiWy1ym5RpOTt0d0Bp8JYJxno1nvpaHWI= Subject key identifier: 3F:A3:1E:88:5A:22:20:C6:D0:77:34:2F:84:11:7B:92:D6:40:5B:9A Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 399BB0D7A5FA1AF1D8E515F5B82706234A95473B Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137392e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 19:49:57 +0000 ROA not before: Fri 28 Nov 2025 19:44:57 +0000 ROA not after: Fri 27 Nov 2026 19:49:57 +0000 asID: 136787 IP address blocks: 176.53.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:9b:b0:d7:a5:fa:1a:f1:d8:e5:15:f5:b8:27:06:23:4a:95:47:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 28 19:44:57 2025 GMT Not After : Nov 27 19:49:57 2026 GMT Subject: CN=3FA31E885A2220C6D077342F84117B92D6405B9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:20:f8:cf:d0:36:d5:7a:f4:ce:76:9e:00:d2: 25:12:bc:17:0c:15:03:0f:3a:49:81:5a:87:fd:3c: a3:b0:f5:77:56:f5:1b:b1:43:7a:7d:90:33:3f:8e: 2d:7c:95:3c:a2:9f:48:d8:1b:e1:80:76:31:d4:f0: 78:88:f9:5f:f3:d8:b4:74:2a:08:24:76:75:ac:60: d7:4f:bc:71:81:7e:df:e7:ce:bd:d9:50:7d:9a:52: 61:f1:ed:ee:8b:a9:bb:01:60:69:55:93:52:09:b7: 01:2a:82:8b:af:85:05:e4:30:fe:ba:65:2b:3b:1d: 64:9d:33:90:a7:4c:a0:85:db:72:8a:a9:83:08:d0: 76:88:f4:11:51:73:05:b6:24:83:f5:55:a2:76:ec: 8a:9c:45:80:01:5c:e9:97:ed:df:0f:00:1c:24:99: 7b:a8:9f:24:45:cb:24:91:ed:3f:ed:d1:c0:ef:1d: 01:6c:e1:5b:8a:4d:be:ac:f6:90:1e:f5:f0:b5:b0: 78:c7:07:73:a2:e2:52:08:3e:91:5a:d7:53:ff:b7: 69:bc:91:c9:6e:b6:bb:4c:d4:4e:99:67:d0:25:c3: 5f:ae:df:09:f9:25:60:04:a5:10:88:79:2d:67:e5: f5:ef:3c:14:14:bf:d4:49:90:b2:1d:4c:db:65:8e: 35:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A3:1E:88:5A:22:20:C6:D0:77:34:2F:84:11:7B:92:D6:40:5B:9A X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137392e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.53.179.0/24 Signature Algorithm: sha256WithRSAEncryption 93:fb:c0:39:a8:b0:ed:3d:72:bd:7c:5b:ea:00:b5:8a:18:c8: b4:b4:ac:cc:3a:62:70:b1:95:7b:e1:e3:f3:e1:c4:04:78:19: bf:b2:7d:b0:65:76:bd:6e:80:3e:db:88:35:40:31:7e:13:6f: 32:4b:8d:cd:64:e6:85:7d:b6:41:e1:47:82:5a:8f:19:46:b0: cc:4b:25:62:e0:6f:c9:a4:7b:9f:e6:4d:2e:20:cf:b2:7d:2b: 8d:8e:5d:4a:36:6e:bd:74:79:29:af:f0:49:c2:65:e7:8f:ce: 26:b7:3d:3a:97:73:ac:c7:39:7c:e0:e7:ae:33:aa:37:86:8c: be:e8:39:d0:ad:4a:53:05:10:e6:27:a2:7d:e7:71:62:95:58: ec:19:7a:e5:bf:1e:97:ee:fd:d4:cd:18:8b:2a:bd:7a:cb:c8: d8:09:e9:26:fb:82:34:81:5e:60:85:fd:67:51:05:89:f6:31: d2:cd:be:c3:91:2a:34:0f:33:bd:09:c7:ef:d4:61:ff:f0:58: a3:94:ad:fe:03:97:ce:ff:fc:4d:81:ef:21:24:56:99:c5:8a: 6a:07:6e:e0:3b:20:0b:51:23:79:23:51:a9:42:85:39:6b:ad: a0:7a:fe:d8:de:36:bf:6f:d8:68:40:70:83:21:5b:59:70:8b: 23:64:1e:31 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUOZuw16X6GvHY5RX1uCcGI0qVRzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjgxOTQ0NTdaFw0yNjExMjcxOTQ5NTdaMDMxMTAvBgNV BAMTKDNGQTMxRTg4NUEyMjIwQzZEMDc3MzQyRjg0MTE3QjkyRDY0MDVCOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7IPjP0DbVevTOdp4A0iUSvBcM FQMPOkmBWof9PKOw9XdW9RuxQ3p9kDM/ji18lTyin0jYG+GAdjHU8HiI+V/z2LR0 KggkdnWsYNdPvHGBft/nzr3ZUH2aUmHx7e6LqbsBYGlVk1IJtwEqgouvhQXkMP66 ZSs7HWSdM5CnTKCF23KKqYMI0HaI9BFRcwW2JIP1VaJ27IqcRYABXOmX7d8PABwk mXuonyRFyySR7T/t0cDvHQFs4VuKTb6s9pAe9fC1sHjHB3Oi4lIIPpFa11P/t2m8 kclutrtM1E6ZZ9Alw1+u3wn5JWAEpRCIeS1n5fXvPBQUv9RJkLIdTNtljjWRAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUP6MeiFoiIMbQdzQvhBF7ktZAW5owHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNzM2MmUzNTMzMmUzMTM3 MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACwNbMwDQYJKoZIhvcNAQELBQADggEBAJP7wDmosO09cr18W+oAtYoYyLS0rMw6 YnCxlXvh4/PhxAR4Gb+yfbBldr1ugD7biDVAMX4TbzJLjc1k5oV9tkHhR4JajxlG sMxLJWLgb8mke5/mTS4gz7J9K42OXUo2br10eSmv8EnCZeePzia3PTqXc6zHOXzg 564zqjeGjL7oOdCtSlMFEOYnon3ncWKVWOwZeuW/Hpfu/dTNGIsqvXrLyNgJ6Sb7 gjSBXmCF/WdRBYn2MdLNvsORKjQPM70Jx+/UYf/wWKOUrf4Dl87//E2B7yEkVpnF imoHbuA7IAtRI3kjUalChTlrraB6/tjeNr9v2GhAcIMhW1lwiyNkHjE= -----END CERTIFICATE-----Generated at Sat Dec 6 17:42:12 2025 by rpki-client