This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231302e3134342e302f32322d3234203d3e203437353833.roa File: 3138352e3231302e3134342e302f32322d3234203d3e203437353833.roa (raw, json) Hash identifier: pz/+n0MULkEEJOe+PGADn97WQmpJPT426qSFeonGkyY= Subject key identifier: A4:60:60:7A:24:CD:1D:56:43:47:87:A0:98:91:70:38:D5:15:1A:72 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 779632C6B1220A6174F920222BEF18A94E7B8430 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231302e3134342e302f32322d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:47 +0000 ROA not before: Mon 29 Dec 2025 09:45:47 +0000 ROA not after: Mon 28 Dec 2026 09:50:47 +0000 asID: 47583 IP address blocks: 185.210.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:96:32:c6:b1:22:0a:61:74:f9:20:22:2b:ef:18:a9:4e:7b:84:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:47 2025 GMT Not After : Dec 28 09:50:47 2026 GMT Subject: CN=A460607A24CD1D56434787A098917038D5151A72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f9:c6:57:f4:d5:ba:80:69:2c:73:9a:10:3f: 8c:cf:47:aa:af:88:ed:bf:1b:6e:57:79:d1:88:2f: 51:14:86:5e:cc:ef:aa:75:91:ea:ec:88:7f:46:99: 8e:5a:7d:72:de:d2:04:28:29:43:e9:d4:a3:58:9a: 3a:42:1c:8a:6f:bf:29:95:63:24:49:6c:93:ab:6d: e1:19:86:83:19:f6:a6:6d:c6:cf:da:cc:59:41:29: 02:b2:a6:f3:62:80:3e:54:8b:f6:85:1a:8a:b6:be: f1:db:64:5b:36:b1:55:29:a1:42:e0:24:61:0e:f6: 46:92:1f:c1:dd:9b:f4:03:ac:f8:35:af:da:e6:87: 84:f7:50:fa:74:23:43:f0:b3:f7:63:17:31:ce:f7: f1:6d:87:94:68:5a:83:48:98:33:82:62:26:b0:2c: a0:38:29:13:9b:31:cf:a2:fa:cf:2c:8a:b9:32:f3: c0:83:dd:e1:2f:56:a3:07:2a:08:49:f9:95:bf:68: 92:37:98:93:2d:25:09:2d:b6:15:35:f2:a3:cc:ed: bd:e6:f9:0f:96:f8:50:4c:1b:13:f3:ba:a9:30:d8: 7d:3d:b8:ef:cd:90:bc:d3:43:2c:9e:57:68:41:44: 9a:30:89:76:0d:17:86:cb:c4:33:ae:8c:63:13:41: eb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:60:60:7A:24:CD:1D:56:43:47:87:A0:98:91:70:38:D5:15:1A:72 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231302e3134342e302f32322d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.210.144.0/22 Signature Algorithm: sha256WithRSAEncryption 07:cf:f3:06:dd:a7:42:a7:f0:d0:e0:ab:eb:97:3e:70:a5:55: 69:2c:52:79:67:ed:3d:16:4f:fc:94:92:e4:b7:ca:0e:21:97: eb:ac:d7:e7:7d:ee:a4:18:50:29:5f:fb:15:02:18:06:11:3c: 59:4d:85:3d:7c:b6:1a:93:ac:41:28:64:88:2a:0c:ae:3c:ac: 0a:26:3c:2c:13:2c:1f:a3:88:fe:af:9b:7e:71:37:29:a6:84: 8a:75:c0:dd:5f:df:33:e7:bf:17:b2:f9:55:02:25:9a:f8:cb: 40:2b:59:a1:a1:4a:64:e9:52:7d:b8:e1:37:cb:2c:b6:62:97: c4:90:18:22:17:d0:06:c1:d1:10:de:d2:d6:40:22:1c:a8:40: aa:60:4c:5d:61:7c:22:b9:34:72:62:3a:ee:4c:d3:27:98:ba: f7:4d:70:8b:54:c9:f1:42:3d:8e:a8:c2:73:75:75:35:c4:d6: b1:3b:fa:79:7f:8e:b6:d8:0c:2c:42:81:54:54:82:78:07:a6: 73:9b:53:2e:28:a1:8e:50:79:7d:4d:cd:06:90:6b:aa:5d:41: 3a:74:ec:08:bf:bf:be:8f:72:6f:a0:14:de:67:2b:f0:c0:73: 28:6b:a9:3a:ef:c0:45:e8:89:ab:d9:b1:e6:fa:fa:68:e5:af: a5:41:e9:4b -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUd5YyxrEiCmF0+SAiK+8YqU57hDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDdaFw0yNjEyMjgwOTUwNDdaMDMxMTAvBgNV BAMTKEE0NjA2MDdBMjRDRDFENTY0MzQ3ODdBMDk4OTE3MDM4RDUxNTFBNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+cZX9NW6gGksc5oQP4zPR6qv iO2/G25XedGIL1EUhl7M76p1kersiH9GmY5afXLe0gQoKUPp1KNYmjpCHIpvvymV YyRJbJOrbeEZhoMZ9qZtxs/azFlBKQKypvNigD5Ui/aFGoq2vvHbZFs2sVUpoULg JGEO9kaSH8Hdm/QDrPg1r9rmh4T3UPp0I0Pws/djFzHO9/Fth5RoWoNImDOCYiaw LKA4KRObMc+i+s8sirky88CD3eEvVqMHKghJ+ZW/aJI3mJMtJQktthU18qPM7b3m +Q+W+FBMGxPzuqkw2H09uO/NkLzTQyyeV2hBRJowiXYNF4bLxDOujGMTQet5AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUpGBgeiTNHVZDR4egmJFwONUVGnIwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMxMzAyZTMx MzQzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAK50pAwDQYJKoZIhvcNAQELBQADggEBAAfP8wbdp0Kn8NDgq+uXPnClVWksUnln 7T0WT/yUkuS3yg4hl+us1+d97qQYUClf+xUCGAYRPFlNhT18thqTrEEoZIgqDK48 rAomPCwTLB+jiP6vm35xNymmhIp1wN1f3zPnvxey+VUCJZr4y0ArWaGhSmTpUn24 4TfLLLZil8SQGCIX0AbB0RDe0tZAIhyoQKpgTF1hfCK5NHJiOu5M0yeYuvdNcItU yfFCPY6ownN1dTXE1rE7+nl/jrbYDCxCgVRUgngHpnObUy4ooY5QeX1NzQaQa6pd QTp07Ai/v76Pcm+gFN5nK/DAcyhrqTrvwEXoiavZseb6+mjlr6VB6Us= -----END CERTIFICATE-----Generated at Sun Jan 25 12:15:57 2026 by rpki-client