This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137332e3232342e302f32342d3234203d3e20323033333830.roa File: 3138352e3137332e3232342e302f32342d3234203d3e20323033333830.roa (raw, json) Hash identifier: HNdYI3hBkgUemEQ40T1GqteKBcUfO3qsoJLCJbn4ZuM= Subject key identifier: 3B:0F:26:3F:EF:1A:71:28:27:3A:24:33:C1:B6:B4:95:B6:72:8A:D2 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 15B9BBA56A1B0D42F87E9AD20429DF4853548E61 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137332e3232342e302f32342d3234203d3e20323033333830.roa Signing time: Mon 29 Dec 2025 09:50:41 +0000 ROA not before: Mon 29 Dec 2025 09:45:41 +0000 ROA not after: Mon 28 Dec 2026 09:50:41 +0000 asID: 203380 IP address blocks: 185.173.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:b9:bb:a5:6a:1b:0d:42:f8:7e:9a:d2:04:29:df:48:53:54:8e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:41 2025 GMT Not After : Dec 28 09:50:41 2026 GMT Subject: CN=3B0F263FEF1A7128273A2433C1B6B495B6728AD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e3:d6:73:c4:09:6b:e6:4a:66:1f:53:cd:19: 1c:31:76:4b:a9:d3:c0:03:87:3f:42:99:d1:17:85: f7:e3:e1:5e:e5:26:2d:a2:52:f3:a9:68:73:31:da: 01:c7:c4:87:52:4e:4c:59:8c:36:1b:18:26:f6:8a: e4:ba:a1:4c:d3:c9:31:b9:bc:0e:8c:8c:79:6d:75: 31:3f:aa:3f:a3:8b:a8:0b:74:62:92:47:ec:93:af: 58:dd:ae:06:86:6e:19:32:61:77:e9:98:92:59:37: 7a:17:78:77:a7:72:af:aa:5d:d9:a0:7b:67:65:55: 1a:bd:e0:dc:cf:a2:a3:61:e1:7b:0a:48:1e:c6:b7: 6d:c8:3a:2d:10:8e:f4:2e:9f:c0:16:5c:53:d8:57: 34:9b:24:34:20:44:17:26:ba:d5:e3:a9:74:9e:5d: 49:b8:16:42:46:c3:a6:ee:ed:ea:3f:58:a6:9e:fa: 02:f5:6f:e0:01:d4:d9:f7:cb:00:f0:d2:a5:33:91: 90:c6:13:51:e5:00:91:6e:ea:31:31:25:13:2a:e2: c0:da:29:d5:3a:61:6d:15:6d:bc:7d:d8:cc:98:d4: b5:b1:0c:6a:8e:f7:8d:7f:46:fc:59:74:38:bf:d7: c2:cc:e0:6f:61:02:4d:8b:1e:69:96:8e:2c:87:76: a2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0F:26:3F:EF:1A:71:28:27:3A:24:33:C1:B6:B4:95:B6:72:8A:D2 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137332e3232342e302f32342d3234203d3e20323033333830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.173.224.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:82:21:ef:a2:57:c1:b2:57:60:91:fc:6b:b3:a5:2b:8b:38: 14:33:7c:b2:41:34:12:04:c8:a4:df:fa:ac:19:40:5c:6a:9d: 17:0e:98:b2:1c:c1:b5:0b:1a:40:a4:c5:e4:76:44:f0:33:df: ab:51:1c:bd:cf:a6:63:e1:90:96:84:d0:9b:9e:58:4f:c5:02: 17:ef:b9:17:69:2f:6a:b3:53:b2:86:65:05:99:ce:c5:e4:24: c5:7e:31:06:ed:a9:16:51:d4:23:31:8e:05:78:41:b2:c3:af: 20:09:7a:71:e7:dd:25:e0:89:5f:d0:af:3e:ca:8c:09:14:eb: 61:7d:85:cf:6a:78:aa:80:f6:0c:ab:40:90:b1:ce:8e:9c:f1: db:17:b4:02:9e:32:2f:0d:0d:b5:b3:96:f9:80:f7:96:44:ee: 5f:bc:f3:84:19:17:8f:80:2b:8f:c5:49:8f:39:13:aa:b2:4c: 45:eb:83:bb:84:ee:d9:db:1f:60:76:c5:b1:09:6a:8d:31:e1: a3:7d:aa:2d:cd:ba:f6:59:04:ab:ba:f1:d4:6e:86:e8:55:d4: da:8e:ad:0b:20:4e:61:76:e7:9e:af:5a:f2:7b:68:fb:84:5b: bf:8b:d9:94:0d:61:2d:ae:41:b4:cd:c8:2e:ca:92:c5:24:21: 47:a2:a2:86 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUFbm7pWobDUL4fprSBCnfSFNUjmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDFaFw0yNjEyMjgwOTUwNDFaMDMxMTAvBgNV BAMTKDNCMEYyNjNGRUYxQTcxMjgyNzNBMjQzM0MxQjZCNDk1QjY3MjhBRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb49ZzxAlr5kpmH1PNGRwxdkup 08ADhz9CmdEXhffj4V7lJi2iUvOpaHMx2gHHxIdSTkxZjDYbGCb2iuS6oUzTyTG5 vA6MjHltdTE/qj+ji6gLdGKSR+yTr1jdrgaGbhkyYXfpmJJZN3oXeHencq+qXdmg e2dlVRq94NzPoqNh4XsKSB7Gt23IOi0QjvQun8AWXFPYVzSbJDQgRBcmutXjqXSe XUm4FkJGw6bu7eo/WKae+gL1b+AB1Nn3ywDw0qUzkZDGE1HlAJFu6jExJRMq4sDa KdU6YW0Vbbx92MyY1LWxDGqO941/RvxZdDi/18LM4G9hAk2LHmmWjiyHdqIlAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUOw8mP+8acSgnOiQzwba0lbZyitIwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM3MzMyZTMy MzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMzMzMzgzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALmt4DANBgkqhkiG9w0BAQsFAAOCAQEAioIh76JXwbJXYJH8a7OlK4s4FDN8 skE0EgTIpN/6rBlAXGqdFw6YshzBtQsaQKTF5HZE8DPfq1Ecvc+mY+GQloTQm55Y T8UCF++5F2kvarNTsoZlBZnOxeQkxX4xBu2pFlHUIzGOBXhBssOvIAl6cefdJeCJ X9CvPsqMCRTrYX2Fz2p4qoD2DKtAkLHOjpzx2xe0Ap4yLw0NtbOW+YD3lkTuX7zz hBkXj4Arj8VJjzkTqrJMReuDu4Tu2dsfYHbFsQlqjTHho32qLc269lkEq7rx1G6G 6FXU2o6tCyBOYXbnnq9a8nto+4Rbv4vZlA1hLa5BtM3ILsqSxSQhR6Kihg== -----END CERTIFICATE-----Generated at Sun Jan 25 07:19:37 2026 by rpki-client