This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231372e3137312e302f32342d3234203d3e20313336373837.roa File: 3138352e3231372e3137312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: vYx8aW3hb4IHHqd2m6up+f6+o5wHELBRHLLrgx26VYc= Subject key identifier: EF:78:AE:39:27:B0:6D:27:F5:56:78:7C:10:8C:BD:71:43:22:80:A0 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 704AA658085078960BEEF3C9B21BB75C2060279D Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231372e3137312e302f32342d3234203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:50:46 +0000 ROA not before: Mon 29 Dec 2025 09:45:46 +0000 ROA not after: Mon 28 Dec 2026 09:50:46 +0000 asID: 136787 IP address blocks: 185.217.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:4a:a6:58:08:50:78:96:0b:ee:f3:c9:b2:1b:b7:5c:20:60:27:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:46 2025 GMT Not After : Dec 28 09:50:46 2026 GMT Subject: CN=EF78AE3927B06D27F556787C108CBD71432280A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5e:2c:2c:82:bb:65:1c:62:42:f6:2a:1c:80: 80:81:9b:d1:29:1a:64:06:9b:d8:b3:14:4e:5c:ce: 77:38:48:9d:85:4e:65:92:f2:42:08:71:0e:f4:6a: 4b:7b:58:82:89:1d:19:46:76:bc:79:0e:a9:0f:b7: 3a:ab:30:09:0c:88:16:c3:62:3a:54:2d:e9:d3:0e: 28:45:74:23:5a:ae:a8:2a:68:75:bf:ad:a4:d4:ad: 18:70:16:d7:d0:63:fc:4b:cd:06:f7:a8:25:62:32: 9f:02:20:20:0f:68:6f:de:61:38:ae:b2:ae:9e:95: 56:13:51:c9:89:97:0e:75:57:c1:91:5d:9a:51:20: 6a:c0:84:fb:3c:ae:bb:09:ba:99:4f:6c:6c:e2:23: 58:f8:bb:91:d2:fe:39:a5:9f:e6:8d:88:26:76:38: b7:68:d0:ea:d7:78:aa:09:1d:d5:16:b3:0e:06:46: 80:6b:a3:82:a2:63:eb:92:84:bd:dd:b8:c1:78:8b: 52:5e:d4:58:00:46:2c:0b:f0:e3:9d:0f:b9:c5:57: 19:c4:3f:f3:ca:72:b9:a4:79:a9:25:87:db:12:03: 78:de:6f:df:d6:a7:bf:94:ec:39:13:bb:02:7c:09: 38:46:73:7c:4e:89:df:99:32:0f:2c:1d:24:9a:7e: 01:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:78:AE:39:27:B0:6D:27:F5:56:78:7C:10:8C:BD:71:43:22:80:A0 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231372e3137312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.171.0/24 Signature Algorithm: sha256WithRSAEncryption 26:6b:21:3f:d3:4c:3b:b8:cc:bc:2e:a9:02:f8:86:a9:05:70: 5d:17:0c:a6:2f:1e:a2:e0:a6:fb:f2:ef:26:3f:bd:69:c6:39: a7:86:86:c0:dd:01:e1:40:45:da:08:01:42:cf:70:4f:e2:e5: b1:a4:b1:96:07:a6:3a:a3:44:53:3b:dc:86:de:dc:b7:8b:ad: 9e:46:90:82:37:b9:a8:bb:8b:71:9b:5f:00:f2:04:0a:e0:12: b3:d0:83:b1:a9:fa:e9:b6:06:1f:7e:35:19:41:42:43:45:f6: 49:db:54:1f:12:86:ea:cb:d0:e5:ed:e3:95:16:4f:59:f1:78: ad:2c:72:bb:cb:8f:68:99:c7:12:8e:00:58:bd:4f:51:0f:57: 37:83:0d:32:ad:bc:ca:1c:18:53:73:6e:fc:a1:c7:0e:bf:b9: c0:f3:7d:ce:73:f7:66:0b:2b:cb:de:62:34:77:f3:5c:3f:ac: c2:ec:78:d4:49:dd:0e:d8:8b:9b:b2:74:55:01:93:67:7a:48: 34:49:73:33:0e:5e:eb:c1:90:bf:72:d0:69:ae:04:ac:a1:07: 06:35:ca:83:fd:98:17:01:a2:1a:13:53:bd:03:90:af:e3:5f: aa:76:0f:48:57:5e:5b:bb:07:a0:2f:ea:86:b0:1d:b4:77:85: d5:2e:ef:d1 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUcEqmWAhQeJYL7vPJshu3XCBgJ50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDZaFw0yNjEyMjgwOTUwNDZaMDMxMTAvBgNV BAMTKEVGNzhBRTM5MjdCMDZEMjdGNTU2Nzg3QzEwOENCRDcxNDMyMjgwQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHXiwsgrtlHGJC9iocgICBm9Ep GmQGm9izFE5cznc4SJ2FTmWS8kIIcQ70akt7WIKJHRlGdrx5DqkPtzqrMAkMiBbD YjpULenTDihFdCNarqgqaHW/raTUrRhwFtfQY/xLzQb3qCViMp8CICAPaG/eYTiu sq6elVYTUcmJlw51V8GRXZpRIGrAhPs8rrsJuplPbGziI1j4u5HS/jmln+aNiCZ2 OLdo0OrXeKoJHdUWsw4GRoBro4KiY+uShL3duMF4i1Je1FgARiwL8OOdD7nFVxnE P/PKcrmkeaklh9sSA3jeb9/Wp7+U7DkTuwJ8CThGc3xOid+ZMg8sHSSafgGjAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQU73iuOSewbSf1Vnh8EIy9cUMigKAwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMxMzcyZTMx MzczMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALnZqzANBgkqhkiG9w0BAQsFAAOCAQEAJmshP9NMO7jMvC6pAviGqQVwXRcM pi8eouCm+/LvJj+9acY5p4aGwN0B4UBF2ggBQs9wT+LlsaSxlgemOqNEUzvcht7c t4utnkaQgje5qLuLcZtfAPIECuASs9CDsan66bYGH341GUFCQ0X2SdtUHxKG6svQ 5e3jlRZPWfF4rSxyu8uPaJnHEo4AWL1PUQ9XN4MNMq28yhwYU3Nu/KHHDr+5wPN9 znP3Zgsry95iNHfzXD+swux41EndDtiLm7J0VQGTZ3pINElzMw5e68GQv3LQaa4E rKEHBjXKg/2YFwGiGhNTvQOQr+NfqnYPSFdeW7sHoC/qhrAdtHeF1S7v0Q== -----END CERTIFICATE-----Generated at Sun Jan 25 10:23:02 2026 by rpki-client