This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139322e39382e302f32342d3234203d3e20323036323634.roa File: 3138352e3139322e39382e302f32342d3234203d3e20323036323634.roa (raw, json) Hash identifier: ykyfEW0uF5Q2Gqo/t6LcEOl1PxxaRUwzqgQMCattEKE= Subject key identifier: E1:A3:E3:6C:D0:97:8C:4C:7B:4B:8F:D9:C6:2A:0B:9D:8B:9C:66:EF Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 383C91F9DEB99220E94AFF1B533EE6BB7B42D2AC Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139322e39382e302f32342d3234203d3e20323036323634.roa Signing time: Mon 29 Dec 2025 09:51:00 +0000 ROA not before: Mon 29 Dec 2025 09:46:00 +0000 ROA not after: Mon 28 Dec 2026 09:51:00 +0000 asID: 206264 IP address blocks: 185.192.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:3c:91:f9:de:b9:92:20:e9:4a:ff:1b:53:3e:e6:bb:7b:42:d2:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:46:00 2025 GMT Not After : Dec 28 09:51:00 2026 GMT Subject: CN=E1A3E36CD0978C4C7B4B8FD9C62A0B9D8B9C66EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:f5:2c:29:d1:09:bd:65:b0:e0:a4:c1:5d: 4c:4f:bb:d1:64:ad:ad:15:25:27:c6:06:fa:fd:97: ee:e9:ff:82:fc:68:6f:a0:bf:6b:24:71:45:01:b0: ae:59:86:de:29:e1:40:c2:b5:51:58:95:17:f2:94: ce:4f:de:f0:22:de:60:a0:e0:24:4a:5f:60:5a:55: 12:a7:14:23:8a:2e:cf:0a:47:5f:03:69:47:b5:42: 40:af:3f:02:07:63:16:97:e7:36:b7:6c:fd:ae:79: 8f:4d:8f:42:70:60:72:10:cb:28:27:1c:01:36:4c: cc:e2:08:09:25:61:42:17:36:bb:f0:a9:a0:40:34: 3e:e9:e7:59:a8:f3:63:ab:e5:d1:e2:b3:e9:ed:b6: 61:3c:30:2c:66:87:84:8c:39:26:97:7f:0a:8f:74: 9d:f6:4c:09:96:ae:5e:0c:1b:c5:dd:10:a2:29:c2: ee:07:14:31:b3:83:8e:41:f9:01:ec:41:33:26:0c: 93:36:45:fd:cf:3f:62:4c:69:ae:d0:1b:64:c4:05: dc:f6:63:63:53:aa:aa:b4:5a:17:d8:69:cc:7f:39: fb:35:64:6c:da:27:42:83:8c:7b:8e:cc:88:ee:5a: ac:84:d3:48:18:8f:ff:7d:5f:7e:92:c7:30:2d:db: 6a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A3:E3:6C:D0:97:8C:4C:7B:4B:8F:D9:C6:2A:0B:9D:8B:9C:66:EF X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139322e39382e302f32342d3234203d3e20323036323634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.98.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:a1:b0:4b:f5:17:a1:b2:53:06:b9:0b:c0:15:8e:51:df:a5: c2:9f:c9:0a:cc:be:86:9d:24:5c:59:fc:e0:3b:28:08:b6:05: ab:f3:6e:cd:9e:ee:98:75:fe:d8:8f:6a:8e:8d:5b:d0:34:cb: 6a:a4:d1:a1:c6:1d:57:95:39:97:8c:d6:36:c6:76:70:37:ae: 06:e3:b7:48:f8:bb:17:70:4a:16:82:be:85:ef:44:4c:59:b0: fe:e3:29:15:32:82:91:0a:da:c2:27:0b:10:a9:2b:e2:77:3f: 8b:4b:06:32:96:7f:a3:49:ff:7b:0b:6e:8b:85:af:f4:10:b7: d1:94:2b:6c:1e:43:0f:fe:d5:0c:a5:5c:6c:b4:7e:a3:06:7b: 34:e1:85:83:c0:b7:8c:f4:eb:0d:92:fa:24:01:11:57:d7:01: 6c:15:40:16:45:0d:f7:e0:93:47:1c:f8:9b:a3:73:5a:aa:b3: 4b:4c:11:bf:f1:8f:07:e0:94:2e:7d:f2:81:db:2c:7c:20:3e: 83:5d:b1:3c:9b:44:b5:93:3c:25:5d:81:18:ab:a8:a3:d3:81: 52:47:a2:bf:ed:c0:ae:f9:24:fc:21:42:e6:62:64:e1:e9:a0: f3:11:cd:58:c7:af:f1:fc:b9:ae:23:2c:a5:a7:b1:6a:86:3d: b2:b3:b8:a3 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUODyR+d65kiDpSv8bUz7mu3tC0qwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ2MDBaFw0yNjEyMjgwOTUxMDBaMDMxMTAvBgNV BAMTKEUxQTNFMzZDRDA5NzhDNEM3QjRCOEZEOUM2MkEwQjlEOEI5QzY2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8GfUsKdEJvWWw4KTBXUxPu9Fk ra0VJSfGBvr9l+7p/4L8aG+gv2skcUUBsK5Zht4p4UDCtVFYlRfylM5P3vAi3mCg 4CRKX2BaVRKnFCOKLs8KR18DaUe1QkCvPwIHYxaX5za3bP2ueY9Nj0JwYHIQyygn HAE2TMziCAklYUIXNrvwqaBAND7p51mo82Or5dHis+nttmE8MCxmh4SMOSaXfwqP dJ32TAmWrl4MG8XdEKIpwu4HFDGzg45B+QHsQTMmDJM2Rf3PP2JMaa7QG2TEBdz2 Y2NTqqq0WhfYacx/Ofs1ZGzaJ0KDjHuOzIjuWqyE00gYj/99X36SxzAt22pdAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU4aPjbNCXjEx7S4/ZxioLnYucZu8wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM5MzIyZTM5 MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzYzMjM2MzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5wGIwDQYJKoZIhvcNAQELBQADggEBAAqhsEv1F6GyUwa5C8AVjlHfpcKfyQrM voadJFxZ/OA7KAi2Bavzbs2e7ph1/tiPao6NW9A0y2qk0aHGHVeVOZeM1jbGdnA3 rgbjt0j4uxdwShaCvoXvRExZsP7jKRUygpEK2sInCxCpK+J3P4tLBjKWf6NJ/3sL bouFr/QQt9GUK2weQw/+1QylXGy0fqMGezThhYPAt4z06w2S+iQBEVfXAWwVQBZF Dffgk0cc+Jujc1qqs0tMEb/xjwfglC598oHbLHwgPoNdsTybRLWTPCVdgRirqKPT gVJHor/twK75JPwhQuZiZOHpoPMRzVjHr/H8ua4jLKWnsWqGPbKzuKM= -----END CERTIFICATE-----Generated at Sun Jan 25 08:57:31 2026 by rpki-client