This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3130382e3135362e302f32322d3234203d3e20323034313730.roa File: 3138352e3130382e3135362e302f32322d3234203d3e20323034313730.roa (raw, json) Hash identifier: 1af0DBGXRKMjWE6+RBWoxF0YXQj/oJQNYqTTNgyRnv8= Subject key identifier: 7F:05:49:0F:B7:E6:99:27:C3:84:12:A0:90:60:3A:87:DB:73:49:76 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 63EDA046764D56AD777F077392E4705EE9B57ACC Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3130382e3135362e302f32322d3234203d3e20323034313730.roa Signing time: Mon 29 Dec 2025 09:50:47 +0000 ROA not before: Mon 29 Dec 2025 09:45:47 +0000 ROA not after: Mon 28 Dec 2026 09:50:47 +0000 asID: 204170 IP address blocks: 185.108.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ed:a0:46:76:4d:56:ad:77:7f:07:73:92:e4:70:5e:e9:b5:7a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:47 2025 GMT Not After : Dec 28 09:50:47 2026 GMT Subject: CN=7F05490FB7E69927C38412A090603A87DB734976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3d:99:c4:52:f8:c7:09:da:54:d9:3d:7c:f8: 59:f1:f3:7e:54:7c:00:83:58:61:db:d9:cb:e3:b1: be:31:a7:68:2b:fd:4b:4a:77:8e:1d:8c:0d:a0:f9: 06:a1:e7:fd:5c:cc:3d:59:7d:60:bb:31:b4:78:36: c4:77:98:a9:3d:35:d7:da:16:48:22:35:e8:64:bf: 6d:5f:8b:1d:16:83:66:26:b3:db:0f:87:09:ac:8c: 4f:fa:f0:84:22:07:26:c4:68:33:e4:81:58:04:06: 22:6e:f0:7e:20:4a:5a:f3:2d:96:a2:9f:cc:4c:77: 17:a2:2c:b3:2c:8d:73:32:90:17:05:b3:b2:d9:aa: b2:3b:01:a3:2e:46:26:f8:8b:c0:c9:ea:f7:b8:24: 4a:63:96:62:13:5e:04:a8:50:99:cf:7e:63:97:05: b3:19:41:32:1b:9d:b3:bc:e8:cf:3c:5a:ed:08:c0: a1:bc:60:e8:6e:61:79:04:20:19:cb:4a:55:ae:59: cb:68:fc:b7:e9:33:31:78:b9:bf:02:02:f4:2e:51: 84:2b:e5:54:1d:74:2b:2b:73:38:9d:99:20:1b:07: 35:45:24:c6:47:5e:c2:b9:13:b6:39:5b:69:7a:a2: 3d:a5:4e:56:34:a9:b4:0f:d3:55:0a:34:13:11:6c: a7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:05:49:0F:B7:E6:99:27:C3:84:12:A0:90:60:3A:87:DB:73:49:76 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3130382e3135362e302f32322d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.108.156.0/22 Signature Algorithm: sha256WithRSAEncryption 12:2f:56:76:c5:15:db:7f:97:bf:dd:ac:63:3c:ad:c1:7f:07: 16:c5:39:48:74:ae:d5:53:39:ce:cf:33:90:4a:25:93:d0:46: d5:c2:82:7d:3e:6b:5f:70:9f:88:c0:45:af:65:ef:c9:6f:b2: 08:a3:16:4f:50:83:f5:2c:c6:07:50:33:cf:d7:dc:27:64:1d: d2:4c:a2:d3:78:78:65:ed:7d:ff:65:32:ea:75:26:21:61:51: 18:db:0c:df:f7:3c:bf:49:39:30:6d:53:76:5d:d9:87:30:d4: 06:87:3b:04:52:a2:74:92:10:c7:9d:df:9a:36:5e:64:a0:98: 79:30:6b:14:9b:89:d2:14:7f:58:0a:50:57:94:f9:b2:7f:5b: 44:48:50:40:a2:d1:ef:53:d6:d9:34:ff:60:d2:28:d1:16:fc: 65:9d:bb:e4:98:32:20:4e:fb:4c:2a:2d:86:96:17:c2:6f:5b: 8d:63:45:fd:5d:66:92:ff:8a:9b:af:d2:13:7f:57:f9:b3:78: 4b:ef:04:fd:a7:00:b1:7f:97:f6:cc:bc:a5:2d:1b:b1:0d:e0: 60:5c:af:aa:33:23:99:be:80:b1:b4:7a:ef:be:50:d0:67:06: fa:65:85:9f:40:a1:7e:48:60:a5:3b:e5:63:f6:cd:b0:b1:75: 52:5c:83:3a -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUY+2gRnZNVq13fwdzkuRwXum1eswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDdaFw0yNjEyMjgwOTUwNDdaMDMxMTAvBgNV BAMTKDdGMDU0OTBGQjdFNjk5MjdDMzg0MTJBMDkwNjAzQTg3REI3MzQ5NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGPZnEUvjHCdpU2T18+Fnx835U fACDWGHb2cvjsb4xp2gr/UtKd44djA2g+Qah5/1czD1ZfWC7MbR4NsR3mKk9Ndfa FkgiNehkv21fix0Wg2Yms9sPhwmsjE/68IQiBybEaDPkgVgEBiJu8H4gSlrzLZai n8xMdxeiLLMsjXMykBcFs7LZqrI7AaMuRib4i8DJ6ve4JEpjlmITXgSoUJnPfmOX BbMZQTIbnbO86M88Wu0IwKG8YOhuYXkEIBnLSlWuWcto/LfpMzF4ub8CAvQuUYQr 5VQddCsrczidmSAbBzVFJMZHXsK5E7Y5W2l6oj2lTlY0qbQP01UKNBMRbKeVAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUfwVJD7fmmSfDhBKgkGA6h9tzSXYwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTMwMzgyZTMx MzUzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDMxMzczMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArlsnDANBgkqhkiG9w0BAQsFAAOCAQEAEi9WdsUV23+Xv92sYzytwX8HFsU5 SHSu1VM5zs8zkEolk9BG1cKCfT5rX3CfiMBFr2XvyW+yCKMWT1CD9SzGB1Azz9fc J2Qd0kyi03h4Ze19/2Uy6nUmIWFRGNsM3/c8v0k5MG1Tdl3ZhzDUBoc7BFKidJIQ x53fmjZeZKCYeTBrFJuJ0hR/WApQV5T5sn9bREhQQKLR71PW2TT/YNIo0Rb8ZZ27 5JgyIE77TCothpYXwm9bjWNF/V1mkv+Km6/SE39X+bN4S+8E/acAsX+X9sy8pS0b sQ3gYFyvqjMjmb6AsbR6775Q0GcG+mWFn0ChfkhgpTvlY/bNsLF1UlyDOg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:22:14 2026 by rpki-client