This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232372e3133332e302f32342d3234203d3e20313336373837.roa File: 3138352e3232372e3133332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 0/4YNdec7Xnoh7Tmpamf8YKUX5NL4MmGL51UAmXw3DE= Subject key identifier: 77:7B:9C:B6:C5:D3:43:4F:B3:33:DE:33:C3:43:08:8A:EC:EB:CE:EF Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 6628A0674D7B36A4910430D319F69FC9046B1FDA Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232372e3133332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 19:49:56 +0000 ROA not before: Fri 28 Nov 2025 19:44:56 +0000 ROA not after: Fri 27 Nov 2026 19:49:56 +0000 asID: 136787 IP address blocks: 185.227.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:28:a0:67:4d:7b:36:a4:91:04:30:d3:19:f6:9f:c9:04:6b:1f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 28 19:44:56 2025 GMT Not After : Nov 27 19:49:56 2026 GMT Subject: CN=777B9CB6C5D3434FB333DE33C343088AECEBCEEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:99:43:8f:94:d1:62:a0:7c:ef:21:8d:05:b7: 22:d8:70:06:d4:7f:6a:e3:20:f2:11:0c:24:42:e0: 24:93:2f:cc:a5:3e:3b:bc:6c:db:9c:e7:4c:11:1b: af:e2:44:79:93:5b:d1:79:99:e3:c2:9b:e8:e0:40: d3:6c:35:7c:62:85:4b:61:f9:4f:f2:b3:95:53:21: 1a:e3:26:27:5d:82:7e:46:ed:bf:a6:a8:db:fc:85: 5f:32:9e:7a:9d:b0:02:62:75:57:5c:5a:70:6e:6e: d9:5c:9c:e7:53:0c:f2:60:4a:8c:1f:a9:0d:cc:1c: ce:08:c4:96:de:60:9a:e4:dd:f2:9c:66:86:6f:96: 01:c8:bf:39:c5:ec:b6:17:54:51:91:09:15:b0:52: 58:7f:ab:69:c1:08:29:70:5a:cf:fb:b8:9b:b1:5c: 46:7c:a1:a8:f9:97:1b:4f:69:cf:02:b5:dc:1f:09: 0d:45:f1:ae:e4:b2:ea:87:e8:45:96:73:83:d0:05: 46:08:61:e1:6d:ab:f5:9c:90:94:62:84:98:17:ac: 20:01:4c:9a:0e:e7:db:b7:e2:d8:1b:38:9b:0a:11: 12:52:f8:41:59:ce:63:1c:ec:db:6d:e1:3b:d3:3d: e5:03:fa:c4:d0:9a:77:7b:e4:1e:3f:e1:03:3d:f3: c9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7B:9C:B6:C5:D3:43:4F:B3:33:DE:33:C3:43:08:8A:EC:EB:CE:EF X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232372e3133332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.227.133.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:9d:43:6a:51:c0:5e:8a:15:c8:47:c2:c6:80:f7:fe:a5:09: 47:0d:20:5a:d3:ae:2e:bc:86:6d:84:8c:be:7c:4c:60:df:99: b0:9a:91:15:bc:d4:dd:43:33:9e:a4:5b:de:d5:9e:5c:cc:75: 77:f9:dd:5c:79:02:9a:46:79:88:ea:87:54:2b:85:29:58:62: 13:a1:07:c8:49:37:dc:61:0c:b0:a6:fb:d8:b7:3c:a4:b9:65: 3c:72:53:d7:a3:0c:7e:df:d9:bd:44:f7:85:8d:4f:f5:4c:1f: 36:4c:54:d8:1c:e5:f1:33:85:21:9e:98:dd:d3:c7:91:ab:d2: 8b:10:47:63:ba:21:fe:1f:75:95:6a:0f:de:82:bf:07:3b:5a: c1:13:eb:be:17:90:6c:c9:ab:e7:e8:ec:10:27:1b:fa:65:b0: bc:5c:f6:72:49:d0:33:9c:d3:e2:ef:24:bb:00:3e:6d:bb:d9: 29:f2:44:09:00:35:b0:b7:99:84:bf:99:90:fe:a3:ac:55:a5: d4:94:4c:df:7f:67:8b:36:fc:81:a0:b3:4e:d1:71:ce:0c:5a: 22:69:76:17:06:7d:f3:f9:bb:f4:f8:11:8b:5b:a9:d7:89:f3: dd:5c:13:ba:a7:1e:81:20:62:00:4d:f8:46:0d:9e:fa:6a:0d: 80:be:77:8f -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUZiigZ017NqSRBDDTGfafyQRrH9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjgxOTQ0NTZaFw0yNjExMjcxOTQ5NTZaMDMxMTAvBgNV BAMTKDc3N0I5Q0I2QzVEMzQzNEZCMzMzREUzM0MzNDMwODhBRUNFQkNFRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdmUOPlNFioHzvIY0FtyLYcAbU f2rjIPIRDCRC4CSTL8ylPju8bNuc50wRG6/iRHmTW9F5mePCm+jgQNNsNXxihUth +U/ys5VTIRrjJiddgn5G7b+mqNv8hV8ynnqdsAJidVdcWnBubtlcnOdTDPJgSowf qQ3MHM4IxJbeYJrk3fKcZoZvlgHIvznF7LYXVFGRCRWwUlh/q2nBCClwWs/7uJux XEZ8oaj5lxtPac8CtdwfCQ1F8a7ksuqH6EWWc4PQBUYIYeFtq/WckJRihJgXrCAB TJoO59u34tgbOJsKERJS+EFZzmMc7Ntt4TvTPeUD+sTQmnd75B4/4QM988m9AgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUd3uctsXTQ0+zM94zw0MIiuzrzu8wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMyMzcyZTMx MzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALnjhTANBgkqhkiG9w0BAQsFAAOCAQEAT51DalHAXooVyEfCxoD3/qUJRw0g WtOuLryGbYSMvnxMYN+ZsJqRFbzU3UMznqRb3tWeXMx1d/ndXHkCmkZ5iOqHVCuF KVhiE6EHyEk33GEMsKb72Lc8pLllPHJT16MMft/ZvUT3hY1P9UwfNkxU2Bzl8TOF IZ6Y3dPHkavSixBHY7oh/h91lWoP3oK/BztawRPrvheQbMmr5+jsECcb+mWwvFz2 cknQM5zT4u8kuwA+bbvZKfJECQA1sLeZhL+ZkP6jrFWl1JRM339nizb8gaCzTtFx zgxaIml2FwZ98/m79PgRi1up14nz3VwTuqcegSBiAE34Rg2e+moNgL53jw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:09:18 2025 by rpki-client