This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230382e3230342e302f32332d3332203d3e203536383736.roa File: 3138352e3230382e3230342e302f32332d3332203d3e203536383736.roa (raw, json) Hash identifier: Mh4BC0YmhmMvMYZCENbeG8H+uvqzh6sKcPZkKyeyCus= Subject key identifier: BE:4B:AB:C2:69:FF:18:CA:D9:0D:DF:21:9A:FA:2F:A4:6F:55:F5:9D Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 50B22408D7C4B176F03C718DDBD92CF132E46469 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230382e3230342e302f32332d3332203d3e203536383736.roa Signing time: Mon 29 Dec 2025 09:50:35 +0000 ROA not before: Mon 29 Dec 2025 09:45:35 +0000 ROA not after: Mon 28 Dec 2026 09:50:35 +0000 asID: 56876 IP address blocks: 185.208.204.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b2:24:08:d7:c4:b1:76:f0:3c:71:8d:db:d9:2c:f1:32:e4:64:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:35 2025 GMT Not After : Dec 28 09:50:35 2026 GMT Subject: CN=BE4BABC269FF18CAD90DDF219AFA2FA46F55F59D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d3:47:42:c1:3d:88:6c:f9:7b:ef:91:e8:d2: f8:67:68:ec:6e:4a:b6:32:69:f5:01:69:e4:eb:e3: 70:0e:c2:aa:a7:b3:f9:42:2a:13:80:7f:df:df:62: 11:77:9e:40:c4:42:1c:58:19:c7:8e:5a:3b:56:05: d5:4b:e9:28:b7:69:d5:bd:4f:cc:30:f0:80:65:a8: 5b:b8:dc:cf:6e:bb:9b:3e:4f:be:74:71:88:f5:3a: 3b:f0:03:b0:df:38:b1:eb:0b:2a:6a:65:cf:33:c1: 1a:c3:83:e4:df:25:37:57:b1:45:5b:2d:77:b7:9c: b4:bd:66:37:ec:e8:e4:16:5a:ad:73:b0:99:f1:c1: 84:7e:0a:34:f0:7a:18:9a:d7:41:95:60:3d:7f:24: f6:47:ba:a7:cb:8d:a0:f4:59:f8:60:2c:19:86:cf: de:83:c8:af:09:11:cd:89:e6:8a:3b:16:82:9c:8f: 42:49:c8:bc:cc:f8:b8:af:ef:93:55:13:ac:e1:92: 76:0f:1a:b9:2f:1b:33:10:23:3e:eb:80:a4:b4:69: db:a4:e2:e5:95:83:95:e2:f0:fa:a9:dd:fc:63:1b: 61:d7:2e:28:30:0a:1b:0e:59:4d:5d:cf:78:d7:c9: f8:0b:83:43:71:52:5d:67:b2:36:24:4a:76:4f:37: 6a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4B:AB:C2:69:FF:18:CA:D9:0D:DF:21:9A:FA:2F:A4:6F:55:F5:9D X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230382e3230342e302f32332d3332203d3e203536383736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.208.204.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:23:b1:fa:1e:05:b5:37:77:fe:da:9c:fb:c9:ec:c3:81:0e: 3f:71:45:17:ca:45:b9:de:c1:65:7a:9d:d8:19:a9:7f:35:5e: 2c:a6:cc:b3:7f:2b:b3:c3:cd:03:c2:c5:ca:37:a8:50:c5:3e: 64:02:e8:bc:83:24:99:53:1c:02:37:5c:74:31:80:ef:22:09: f6:76:fb:6c:38:03:db:02:37:44:5d:75:eb:b6:8c:8e:db:f0: d9:da:3f:d9:69:a7:70:ad:f6:37:45:f8:00:3c:3f:b0:bf:a1: d7:25:55:5f:33:a8:48:a3:f7:45:e9:c3:4e:84:7a:44:8d:6e: 74:9e:69:1a:01:b2:58:12:45:91:18:40:b8:47:db:5c:cc:ec: 41:4f:bd:e8:01:25:f3:0b:b3:c9:2f:5c:02:76:19:11:23:26: 21:90:75:22:40:ec:40:d7:08:b4:67:6a:43:5f:dd:84:bb:2e: f6:45:b0:27:29:bc:f3:98:38:2c:8f:e8:53:19:4b:ac:12:ca: 75:3b:3d:80:f8:61:a7:ef:c9:13:f0:f9:50:97:ea:9d:7c:22: 5b:c3:d2:42:16:4b:38:85:48:35:f0:3a:e4:ae:7c:6b:db:f1: 53:95:e1:0b:97:c3:1a:5b:c8:f9:6b:a2:bd:b6:21:ec:70:8f: a7:47:53:98 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUULIkCNfEsXbwPHGN29ks8TLkZGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1MzVaFw0yNjEyMjgwOTUwMzVaMDMxMTAvBgNV BAMTKEJFNEJBQkMyNjlGRjE4Q0FEOTBEREYyMTlBRkEyRkE0NkY1NUY1OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh00dCwT2IbPl775Ho0vhnaOxu SrYyafUBaeTr43AOwqqns/lCKhOAf9/fYhF3nkDEQhxYGceOWjtWBdVL6Si3adW9 T8ww8IBlqFu43M9uu5s+T750cYj1OjvwA7DfOLHrCypqZc8zwRrDg+TfJTdXsUVb LXe3nLS9Zjfs6OQWWq1zsJnxwYR+CjTwehia10GVYD1/JPZHuqfLjaD0WfhgLBmG z96DyK8JEc2J5oo7FoKcj0JJyLzM+Liv75NVE6zhknYPGrkvGzMQIz7rgKS0aduk 4uWVg5Xi8Pqp3fxjG2HXLigwChsOWU1dz3jXyfgLg0NxUl1nsjYkSnZPN2rvAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUvkurwmn/GMrZDd8hmvovpG9V9Z0wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMwMzgyZTMy MzAzNDJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDM1MzYzODM3MzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAG50MwwDQYJKoZIhvcNAQELBQADggEBAJsjsfoeBbU3d/7anPvJ7MOBDj9xRRfK RbnewWV6ndgZqX81XiymzLN/K7PDzQPCxco3qFDFPmQC6LyDJJlTHAI3XHQxgO8i CfZ2+2w4A9sCN0Rddeu2jI7b8NnaP9lpp3Ct9jdF+AA8P7C/odclVV8zqEij90Xp w06EekSNbnSeaRoBslgSRZEYQLhH21zM7EFPvegBJfMLs8kvXAJ2GREjJiGQdSJA 7EDXCLRnakNf3YS7LvZFsCcpvPOYOCyP6FMZS6wSynU7PYD4YafvyRPw+VCX6p18 IlvD0kIWSziFSDXwOuSufGvb8VOV4QuXwxpbyPlror22Iexwj6dHU5g= -----END CERTIFICATE-----Generated at Sun Jan 25 12:16:50 2026 by rpki-client