This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39382e302f32342d3332203d3e20313336373837.roa File: 3139342e3233332e39382e302f32342d3332203d3e20313336373837.roa (raw, json) Hash identifier: CeiHfo5X1qPoiu9HGzpLP0WmlFYZ26oFOZ6oqJYiUuo= Subject key identifier: B9:E2:A3:C3:AB:F0:78:64:52:1C:17:F8:F3:45:7E:DE:F1:8A:18:00 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 70CCE04F9DC93105A01B1DFD0620866259CBACFF Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39382e302f32342d3332203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:51:03 +0000 ROA not before: Mon 29 Dec 2025 09:46:03 +0000 ROA not after: Mon 28 Dec 2026 09:51:03 +0000 asID: 136787 IP address blocks: 194.233.98.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:cc:e0:4f:9d:c9:31:05:a0:1b:1d:fd:06:20:86:62:59:cb:ac:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:46:03 2025 GMT Not After : Dec 28 09:51:03 2026 GMT Subject: CN=B9E2A3C3ABF07864521C17F8F3457EDEF18A1800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:14:2b:a9:63:6f:fa:7f:ba:ec:64:98:69:9c: e7:79:68:ca:5d:19:32:5b:26:67:e1:5b:e6:7e:f6: 26:1a:d6:8c:86:1c:6e:05:77:83:8f:e2:12:30:9e: e8:c4:43:a8:4b:d8:ae:04:43:ed:5c:65:ae:68:64: 58:ef:23:58:7d:a2:49:43:79:31:66:c8:bc:96:a5: c3:e8:24:00:55:7c:d6:88:c1:25:d4:48:88:65:06: d9:15:fc:e5:84:c2:f4:22:b0:d7:9f:5f:79:56:e7: 0a:ba:15:0d:87:0b:9b:d3:09:ca:6a:1f:a6:6e:ba: dd:e0:71:98:c4:cb:95:4a:4a:46:dd:ca:69:99:5c: 20:16:c8:ef:d8:4b:71:63:a0:f2:6a:db:7e:2f:a8: 59:61:1c:58:17:f2:78:4c:74:5d:83:71:67:aa:16: 66:10:c6:26:ad:f9:3c:47:2d:ce:f6:00:a1:e8:de: 2a:e5:2d:ef:59:90:2b:84:d4:0d:b8:8b:fe:1e:a7: 89:16:6e:d3:7a:36:56:2d:f9:90:31:86:52:4b:dc: ad:bf:67:35:aa:fd:27:60:2d:38:39:51:a9:20:1f: f5:13:7b:7e:3f:e1:1b:17:31:19:22:39:37:50:0e: d2:5d:85:48:12:72:9a:6d:5c:79:8d:e9:1d:51:bd: 7e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E2:A3:C3:AB:F0:78:64:52:1C:17:F8:F3:45:7E:DE:F1:8A:18:00 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39382e302f32342d3332203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.233.98.0/24 Signature Algorithm: sha256WithRSAEncryption 86:35:7f:a1:2b:72:73:52:68:5a:57:f0:72:be:47:b5:9f:3f: e2:04:60:44:42:09:9e:d0:34:ff:78:ab:1e:c7:e0:7c:bc:30: 60:fc:0d:4c:35:2d:d8:bc:9c:03:c1:e8:2c:d2:95:41:26:17: d3:f6:11:93:2e:09:ad:9a:1e:20:73:a4:47:2e:1f:ce:3d:f4: 66:6b:8e:18:db:50:34:d2:52:30:87:82:e9:78:15:13:8e:19: 3e:df:3a:23:9f:ec:87:dc:90:7b:d2:e2:39:b9:78:6a:72:75: a5:d3:e7:54:d8:97:15:9e:5b:67:30:bd:ab:a6:29:91:3d:e0: 5e:40:09:06:03:3f:ad:c8:f4:1a:56:95:0b:05:2d:0c:36:07: ec:f0:7f:30:00:a9:7e:7d:bc:0f:bf:6b:de:a5:a9:eb:a7:d7: 2c:07:fc:ce:b8:eb:6a:97:d5:87:d5:d9:48:50:8e:43:a9:f6: 42:44:e2:46:30:40:3b:ff:23:e5:2b:db:3f:83:61:08:c7:d1: 01:4a:7f:a2:30:a7:75:1d:dd:6f:96:a3:ba:c1:1e:a2:8c:28: 85:99:d8:20:fc:b3:9b:d4:e7:77:09:0d:13:c2:bc:65:c9:fe: fc:62:51:33:c0:30:c7:4e:6e:aa:fb:39:05:eb:aa:e2:93:f1: 67:75:bb:53 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUcMzgT53JMQWgGx39BiCGYlnLrP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ2MDNaFw0yNjEyMjgwOTUxMDNaMDMxMTAvBgNV BAMTKEI5RTJBM0MzQUJGMDc4NjQ1MjFDMTdGOEYzNDU3RURFRjE4QTE4MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFCupY2/6f7rsZJhpnOd5aMpd GTJbJmfhW+Z+9iYa1oyGHG4Fd4OP4hIwnujEQ6hL2K4EQ+1cZa5oZFjvI1h9oklD eTFmyLyWpcPoJABVfNaIwSXUSIhlBtkV/OWEwvQisNefX3lW5wq6FQ2HC5vTCcpq H6Zuut3gcZjEy5VKSkbdymmZXCAWyO/YS3FjoPJq234vqFlhHFgX8nhMdF2DcWeq FmYQxiat+TxHLc72AKHo3irlLe9ZkCuE1A24i/4ep4kWbtN6NlYt+ZAxhlJL3K2/ ZzWq/SdgLTg5UakgH/UTe34/4RsXMRkiOTdQDtJdhUgScpptXHmN6R1RvX4HAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUueKjw6vweGRSHBf480V+3vGKGAAwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMjMzMzMyZTM5 MzgyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADC6WIwDQYJKoZIhvcNAQELBQADggEBAIY1f6ErcnNSaFpX8HK+R7WfP+IEYERC CZ7QNP94qx7H4Hy8MGD8DUw1Ldi8nAPB6CzSlUEmF9P2EZMuCa2aHiBzpEcuH849 9GZrjhjbUDTSUjCHgul4FROOGT7fOiOf7IfckHvS4jm5eGpydaXT51TYlxWeW2cw vaumKZE94F5ACQYDP63I9BpWlQsFLQw2B+zwfzAAqX59vA+/a96lqeun1ywH/M64 62qX1YfV2UhQjkOp9kJE4kYwQDv/I+Ur2z+DYQjH0QFKf6Iwp3Ud3W+Wo7rBHqKM KIWZ2CD8s5vU53cJDRPCvGXJ/vxiUTPAMMdObqr7OQXrquKT8Wd1u1M= -----END CERTIFICATE-----Generated at Sun Jan 25 12:38:54 2026 by rpki-client