This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3137312e302f32342d3234203d3e20313336373837.roa File: 3138352e3138372e3137312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: E5eTAsVX5GvwqsQ8CCoWpGGGszATyelzQw6MH0Fomwk= Subject key identifier: 19:B5:CE:89:57:C5:45:C2:FF:43:46:6A:A5:BC:DA:9C:85:58:C8:07 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 4F7488D261D0CEB95FAD309D9662C57187BCE4EF Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3137312e302f32342d3234203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:50:44 +0000 ROA not before: Mon 29 Dec 2025 09:45:44 +0000 ROA not after: Mon 28 Dec 2026 09:50:44 +0000 asID: 136787 IP address blocks: 185.187.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:74:88:d2:61:d0:ce:b9:5f:ad:30:9d:96:62:c5:71:87:bc:e4:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:44 2025 GMT Not After : Dec 28 09:50:44 2026 GMT Subject: CN=19B5CE8957C545C2FF43466AA5BCDA9C8558C807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:61:2c:b1:33:39:6a:a1:aa:92:e0:3b:c1: 82:91:df:83:e3:73:e7:3e:66:c9:3f:96:84:d7:8d: d9:49:cb:c7:5c:cf:eb:d3:5d:40:97:67:51:7b:fb: fd:62:b4:48:2c:0b:77:a9:5d:f0:a8:0d:a6:ab:a8: ec:7b:73:f5:8e:50:70:e5:65:ac:cf:be:7e:bb:22: 8d:c9:c8:80:a9:b3:35:f0:75:be:69:13:19:43:6d: bc:9a:48:84:24:8a:23:43:92:85:09:ea:03:90:cf: 25:af:f0:86:d3:ed:2e:84:56:e1:40:cf:e4:dc:41: a8:04:bf:e6:a2:24:f6:2c:6e:eb:ee:29:d8:ef:90: 4a:65:1d:69:63:be:66:05:6f:68:47:35:51:da:73: 23:65:38:67:06:6a:01:cf:ec:2d:8c:6b:04:7b:9f: 34:eb:b3:60:f6:ea:80:b7:9a:78:96:9b:e6:7f:40: 10:94:74:d5:f0:cf:59:9a:83:a7:63:1c:1f:f6:ce: 7a:2f:c3:9b:26:f1:9b:f5:30:2e:30:f5:b4:44:f6: 12:5d:0f:89:1d:1f:44:29:dc:3f:d9:1a:13:84:c2: 30:a4:ca:59:1e:ab:82:4c:3e:45:30:75:7b:4a:e4: 9f:19:dc:a0:f4:1f:05:70:87:e6:19:bd:7c:85:4f: 02:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B5:CE:89:57:C5:45:C2:FF:43:46:6A:A5:BC:DA:9C:85:58:C8:07 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3137312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.171.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:68:1b:3e:83:ec:ab:93:02:b5:a3:20:7c:36:84:28:5d:3c: 1e:1b:d1:c6:31:42:60:80:50:d6:29:bb:e1:34:ea:c4:06:c8: 9b:8a:52:72:c2:47:1e:35:b2:e5:6d:79:3a:91:10:9d:5f:05: 03:11:58:ac:98:20:81:e6:ca:bb:19:cf:0d:1d:d3:09:b6:72: 44:b1:96:ec:c2:74:df:b0:04:95:1e:d3:b3:f9:b1:54:90:51: ba:29:70:7d:2f:35:85:c8:a2:99:3e:a0:f3:cb:69:d6:ac:14: 62:d1:86:3a:25:96:e7:4d:bc:34:dc:5a:31:e7:b2:c0:8f:e0: f3:20:6e:b9:70:40:8d:04:5b:5f:3b:e7:5a:c2:3c:c1:02:4d: 99:7c:40:f4:91:36:19:83:a4:d3:6c:b6:14:a2:3b:24:c4:f8: 17:81:8a:35:87:6c:31:2e:98:84:9a:00:03:d5:bb:65:09:b7: c2:b7:31:b8:c3:1a:4c:77:6b:e6:35:f1:21:e7:1c:ac:a8:9c: d4:71:ae:4b:7a:11:1b:92:d3:8c:00:c4:a4:20:f1:44:16:c3: 70:2e:21:2c:14:5d:6d:10:14:55:a1:c2:9f:de:2d:d2:db:33: a7:a3:33:1a:89:fc:41:8e:ae:14:5a:31:b9:d6:c6:5e:92:80: bc:cb:41:7c -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUT3SI0mHQzrlfrTCdlmLFcYe85O8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDRaFw0yNjEyMjgwOTUwNDRaMDMxMTAvBgNV BAMTKDE5QjVDRTg5NTdDNTQ1QzJGRjQzNDY2QUE1QkNEQTlDODU1OEM4MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCeWEssTM5aqGqkuA7wYKR34Pj c+c+Zsk/loTXjdlJy8dcz+vTXUCXZ1F7+/1itEgsC3epXfCoDaarqOx7c/WOUHDl ZazPvn67Io3JyICpszXwdb5pExlDbbyaSIQkiiNDkoUJ6gOQzyWv8IbT7S6EVuFA z+TcQagEv+aiJPYsbuvuKdjvkEplHWljvmYFb2hHNVHacyNlOGcGagHP7C2MawR7 nzTrs2D26oC3mniWm+Z/QBCUdNXwz1mag6djHB/2znovw5sm8Zv1MC4w9bRE9hJd D4kdH0Qp3D/ZGhOEwjCkylkeq4JMPkUwdXtK5J8Z3KD0HwVwh+YZvXyFTwIbAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUGbXOiVfFRcL/Q0ZqpbzanIVYyAcwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM4MzcyZTMx MzczMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALm7qzANBgkqhkiG9w0BAQsFAAOCAQEAOmgbPoPsq5MCtaMgfDaEKF08HhvR xjFCYIBQ1im74TTqxAbIm4pScsJHHjWy5W15OpEQnV8FAxFYrJgggebKuxnPDR3T CbZyRLGW7MJ037AElR7Ts/mxVJBRuilwfS81hciimT6g88tp1qwUYtGGOiWW5028 NNxaMeeywI/g8yBuuXBAjQRbXzvnWsI8wQJNmXxA9JE2GYOk02y2FKI7JMT4F4GK NYdsMS6YhJoAA9W7ZQm3wrcxuMMaTHdr5jXxIeccrKic1HGuS3oRG5LTjADEpCDx RBbDcC4hLBRdbRAUVaHCn94t0tszp6MzGon8QY6uFFoxudbGXpKAvMtBfA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:22:56 2026 by rpki-client