This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231372e3137302e302f32342d3332203d3e20313336373837.roa File: 3138352e3231372e3137302e302f32342d3332203d3e20313336373837.roa (raw, json) Hash identifier: zwvpoIQKfxyvGnr0Vx0mwiA4Fwyr5Ox9O7aEusW27vU= Subject key identifier: 24:91:5B:B1:61:86:D2:BD:09:1D:C1:D9:1E:99:E2:81:3E:E9:3A:27 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 519C91D9B835391971FEA38AA5CA7B9E455BC60D Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231372e3137302e302f32342d3332203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:50:44 +0000 ROA not before: Mon 29 Dec 2025 09:45:44 +0000 ROA not after: Mon 28 Dec 2026 09:50:44 +0000 asID: 136787 IP address blocks: 185.217.170.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:9c:91:d9:b8:35:39:19:71:fe:a3:8a:a5:ca:7b:9e:45:5b:c6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:44 2025 GMT Not After : Dec 28 09:50:44 2026 GMT Subject: CN=24915BB16186D2BD091DC1D91E99E2813EE93A27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:08:48:aa:d2:29:df:72:92:da:b7:33:3d: 79:a2:29:d8:23:b0:95:32:c7:84:f6:22:e1:df:e7: 81:77:6f:a7:dd:17:bf:49:62:fb:dd:44:c7:bd:17: 79:4a:73:3a:45:13:41:54:96:f8:ca:61:ef:b3:bd: b4:a0:2c:ee:06:73:6c:ab:c2:9b:04:0f:bf:7e:10: 9d:be:a1:e6:c7:ba:8f:1e:32:d7:8f:12:0b:fb:cd: 36:ba:52:98:15:6b:fc:8a:e7:8e:f0:1c:fb:6f:9f: 9a:d7:45:ef:e6:4c:91:8c:ac:3e:53:2e:74:20:4e: 4f:34:e3:d0:1d:d8:0d:c7:be:ee:2d:1e:71:15:61: 09:05:c4:01:7c:b9:8f:72:5d:bc:2c:36:b3:47:6e: 15:2f:d0:56:f2:b6:c4:e6:07:a8:48:73:e0:01:87: 07:d9:29:54:f3:e1:75:57:03:21:6d:8c:a6:46:df: f8:e2:00:8d:40:14:d6:ba:d7:19:5c:9f:38:1b:78: 1d:43:1f:3c:ca:4d:1b:48:f9:56:84:e8:03:b5:af: e1:9a:da:47:6f:d0:6b:a0:b1:ca:7c:58:a0:96:34: f7:6c:8b:8c:3a:02:e0:fb:8c:31:b3:b3:a5:5a:cc: cd:6f:0c:a3:61:a2:6b:bd:86:3b:18:9a:74:5f:f5: b5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:91:5B:B1:61:86:D2:BD:09:1D:C1:D9:1E:99:E2:81:3E:E9:3A:27 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231372e3137302e302f32342d3332203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.170.0/24 Signature Algorithm: sha256WithRSAEncryption 07:c9:29:2e:a6:0d:ac:69:0f:80:c8:4d:cb:09:1c:20:64:c2: f9:22:43:7d:43:6a:90:d4:04:5d:c3:75:ba:e5:b1:b1:33:9c: 73:f8:ad:9a:d8:69:ed:d4:41:e1:1b:22:fc:02:64:b1:bb:2d: f9:0d:15:b0:36:b7:77:9e:b6:25:e4:f0:cc:04:8d:92:e5:6f: 94:20:bd:f5:15:9d:22:4a:65:6d:11:95:fc:fe:61:77:10:5d: 46:1c:9e:7c:7d:67:f6:8a:59:0b:3a:42:be:79:3b:22:19:af: 02:7d:a8:79:45:ac:aa:91:e1:8c:62:12:73:87:b1:fe:b2:02: 2f:2f:cc:4e:9a:f5:0d:81:a8:d0:52:92:b3:b6:96:d3:f0:d4: 5e:89:17:1d:16:aa:24:96:54:c5:9c:f5:a0:bd:59:0a:14:68: e9:32:ef:d3:97:c4:f7:6b:53:d4:ea:9f:7a:e1:fc:09:99:5a: 52:76:99:c8:61:25:9c:63:cf:ad:74:fd:9c:cc:63:fe:41:42: d0:b3:dd:c5:c9:4b:8e:3b:7e:92:93:0b:43:58:2e:58:32:08: 38:e0:78:93:bb:22:a1:58:a4:e9:89:d0:e7:da:2d:97:bf:70: be:db:f0:da:72:ab:68:89:dd:3e:8f:5c:74:18:ec:9d:e3:79: 59:8b:d6:5b -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUUZyR2bg1ORlx/qOKpcp7nkVbxg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDRaFw0yNjEyMjgwOTUwNDRaMDMxMTAvBgNV BAMTKDI0OTE1QkIxNjE4NkQyQkQwOTFEQzFEOTFFOTlFMjgxM0VFOTNBMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIowhIqtIp33KS2rczPXmiKdgj sJUyx4T2IuHf54F3b6fdF79JYvvdRMe9F3lKczpFE0FUlvjKYe+zvbSgLO4Gc2yr wpsED79+EJ2+oebHuo8eMtePEgv7zTa6UpgVa/yK547wHPtvn5rXRe/mTJGMrD5T LnQgTk8049Ad2A3Hvu4tHnEVYQkFxAF8uY9yXbwsNrNHbhUv0FbytsTmB6hIc+AB hwfZKVTz4XVXAyFtjKZG3/jiAI1AFNa61xlcnzgbeB1DHzzKTRtI+VaE6AO1r+Ga 2kdv0Gugscp8WKCWNPdsi4w6AuD7jDGzs6VazM1vDKNhomu9hjsYmnRf9bVPAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUJJFbsWGG0r0JHcHZHpnigT7pOicwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMxMzcyZTMx MzczMDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALnZqjANBgkqhkiG9w0BAQsFAAOCAQEAB8kpLqYNrGkPgMhNywkcIGTC+SJD fUNqkNQEXcN1uuWxsTOcc/itmthp7dRB4Rsi/AJksbst+Q0VsDa3d562JeTwzASN kuVvlCC99RWdIkplbRGV/P5hdxBdRhyefH1n9opZCzpCvnk7IhmvAn2oeUWsqpHh jGISc4ex/rICLy/MTpr1DYGo0FKSs7aW0/DUXokXHRaqJJZUxZz1oL1ZChRo6TLv 05fE92tT1OqfeuH8CZlaUnaZyGElnGPPrXT9nMxj/kFC0LPdxclLjjt+kpMLQ1gu WDIIOOB4k7sioVik6YnQ59otl79wvtvw2nKraIndPo9cdBjsneN5WYvWWw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:29:24 2026 by rpki-client