This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39372e302f32342d3234203d3e203439343533.roa File: 3139342e3233332e39372e302f32342d3234203d3e203439343533.roa (raw, json) Hash identifier: XgYoCCK1gfIzRVe0zHnBCcPkHe34B9KjKBe+0gwwtME= Subject key identifier: 38:6D:5C:60:0F:0A:E0:36:9F:A0:25:74:AF:8F:B1:68:3F:37:15:02 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 0652646F0C4C8200FA4B329E65A0D6075854DDEB Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39372e302f32342d3234203d3e203439343533.roa Signing time: Mon 29 Dec 2025 09:50:37 +0000 ROA not before: Mon 29 Dec 2025 09:45:37 +0000 ROA not after: Mon 28 Dec 2026 09:50:37 +0000 asID: 49453 IP address blocks: 194.233.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:52:64:6f:0c:4c:82:00:fa:4b:32:9e:65:a0:d6:07:58:54:dd:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:37 2025 GMT Not After : Dec 28 09:50:37 2026 GMT Subject: CN=386D5C600F0AE0369FA02574AF8FB1683F371502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0c:5a:84:f0:d2:eb:54:30:04:fd:09:99:c2: d4:dd:2e:33:dd:f4:37:bb:60:3b:aa:6e:81:ff:7a: 3b:ff:73:68:19:dd:3e:cd:26:0f:08:12:72:9d:9f: b8:25:33:f7:86:0a:4c:a5:6c:34:c1:c3:fd:0e:91: 80:5d:e8:7f:c0:d5:3a:23:33:c0:51:32:8b:ee:90: 70:67:83:3b:32:63:46:dc:76:a1:37:07:4f:26:e7: 58:76:7d:44:e8:2f:6b:56:1a:98:19:6a:8c:01:d6: 63:60:cf:bb:56:91:fe:6f:92:61:0c:51:41:30:43: 87:2c:21:b1:c8:41:17:02:2c:b7:48:3b:1c:d3:00: 38:6e:10:51:44:5d:5e:bd:58:af:51:da:b8:9c:10: 5a:a8:cb:c8:41:91:db:f5:0c:b5:7d:a6:cd:bb:88: 50:16:a6:6c:bc:4d:ba:62:c0:fd:e2:c1:28:94:a7: 86:8f:04:bb:c1:7d:3f:92:44:e0:53:68:e9:d5:d7: 07:ae:97:93:5d:10:07:99:cb:0d:aa:61:1c:ee:f6: 85:18:3b:61:64:81:a7:64:0c:42:50:6e:2d:fa:75: 34:b1:db:55:81:d5:02:c4:9b:93:58:83:1a:ed:b4: 2d:02:9b:b7:68:39:33:56:85:6f:3e:6b:60:e5:7a: 94:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6D:5C:60:0F:0A:E0:36:9F:A0:25:74:AF:8F:B1:68:3F:37:15:02 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39372e302f32342d3234203d3e203439343533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.233.97.0/24 Signature Algorithm: sha256WithRSAEncryption 96:79:1b:ad:eb:d3:ba:ff:cb:a4:4f:8e:07:22:87:64:a4:9b: b4:0a:d2:16:6c:91:3d:48:17:4a:a4:22:87:74:2e:ba:8f:3d: 27:d1:55:4a:87:bf:39:e8:28:59:ff:d7:fd:15:4f:0b:85:fd: cd:b3:06:53:fd:7d:02:05:a5:14:06:0d:93:ea:1b:1b:17:df: 9e:25:3f:3c:d1:c4:9e:50:53:93:2b:ee:f7:39:e0:2d:0f:31: a3:8d:0e:3b:09:88:0b:d0:42:52:91:a2:6f:d0:0b:04:83:dd: 0a:70:a1:77:cb:d8:5a:dc:ad:42:8c:71:e5:74:60:90:59:20: 9c:34:38:7a:7a:ba:22:c6:7a:32:6e:2d:5e:a9:6c:83:76:17: b4:ee:b3:80:0d:2f:0e:58:76:e3:ac:58:58:dc:bc:d1:22:83: e5:b7:b1:54:de:bc:01:21:e5:3e:79:b9:11:37:ad:1d:e3:b8: d9:22:0d:b1:47:59:28:fd:08:a3:f9:08:99:f9:81:ba:97:7b: b7:d4:89:40:29:08:e7:67:0d:a7:47:08:90:11:c2:2a:52:18: 96:87:6a:ae:4c:62:56:10:a4:d8:44:da:f4:b4:5f:fc:8a:1d: 9c:6b:d5:21:48:f0:7c:7e:d0:8c:8d:9b:91:86:93:ad:4b:3e: c5:1e:28:b7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUBlJkbwxMggD6SzKeZaDWB1hU3eswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1MzdaFw0yNjEyMjgwOTUwMzdaMDMxMTAvBgNV BAMTKDM4NkQ1QzYwMEYwQUUwMzY5RkEwMjU3NEFGOEZCMTY4M0YzNzE1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCDFqE8NLrVDAE/QmZwtTdLjPd 9De7YDuqboH/ejv/c2gZ3T7NJg8IEnKdn7glM/eGCkylbDTBw/0OkYBd6H/A1Toj M8BRMovukHBngzsyY0bcdqE3B08m51h2fUToL2tWGpgZaowB1mNgz7tWkf5vkmEM UUEwQ4csIbHIQRcCLLdIOxzTADhuEFFEXV69WK9R2ricEFqoy8hBkdv1DLV9ps27 iFAWpmy8TbpiwP3iwSiUp4aPBLvBfT+SROBTaOnV1weul5NdEAeZyw2qYRzu9oUY O2FkgadkDEJQbi36dTSx21WB1QLEm5NYgxrttC0Cm7doOTNWhW8+a2DlepQHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUOG1cYA8K4DafoCV0r4+xaD83FQIwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMjMzMzMyZTM5 MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM5MzQzNTMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA wulhMA0GCSqGSIb3DQEBCwUAA4IBAQCWeRut69O6/8ukT44HIodkpJu0CtIWbJE9 SBdKpCKHdC66jz0n0VVKh7856ChZ/9f9FU8Lhf3NswZT/X0CBaUUBg2T6hsbF9+e JT880cSeUFOTK+73OeAtDzGjjQ47CYgL0EJSkaJv0AsEg90KcKF3y9ha3K1CjHHl dGCQWSCcNDh6eroixnoybi1eqWyDdhe07rOADS8OWHbjrFhY3LzRIoPlt7FU3rwB IeU+ebkRN60d47jZIg2xR1ko/Qij+QiZ+YG6l3u31IlAKQjnZw2nRwiQEcIqUhiW h2quTGJWEKTYRNr0tF/8ih2ca9UhSPB8ftCMjZuRhpOtSz7FHii3 -----END CERTIFICATE-----Generated at Sun Jan 25 07:23:05 2026 by rpki-client