This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e32382e32312e302f32342d3234203d3e20323031333431.roa File: 3139352e32382e32312e302f32342d3234203d3e20323031333431.roa (raw, json) Hash identifier: g96WLVnOmK4EkZB8gCrArCjz9/LjlxfGYpH2OgU8jeQ= Subject key identifier: 9E:BA:86:2E:18:F9:C5:00:69:F2:04:01:87:E1:3C:4C:01:96:C6:91 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 377C46E6C89A63532AA0E355E6FB204AF48F9C4D Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e32382e32312e302f32342d3234203d3e20323031333431.roa Signing time: Mon 29 Dec 2025 09:51:02 +0000 ROA not before: Mon 29 Dec 2025 09:46:02 +0000 ROA not after: Mon 28 Dec 2026 09:51:02 +0000 asID: 201341 IP address blocks: 195.28.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:7c:46:e6:c8:9a:63:53:2a:a0:e3:55:e6:fb:20:4a:f4:8f:9c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:46:02 2025 GMT Not After : Dec 28 09:51:02 2026 GMT Subject: CN=9EBA862E18F9C50069F2040187E13C4C0196C691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4d:82:13:65:0e:78:8d:1c:fb:7e:95:fd:cd: df:b8:31:14:e2:39:7f:e4:68:aa:d1:22:6b:60:eb: 84:da:4d:fd:77:78:18:8f:1d:0c:61:15:3b:e5:51: ae:d3:bc:9f:2f:56:1b:21:13:b1:06:24:c1:78:c2: 71:20:43:e9:4f:51:71:52:f0:39:4f:b4:4a:19:76: 93:63:63:48:34:b5:6b:13:52:2b:e5:fd:e5:ac:30: a5:04:6f:72:47:03:8f:09:8c:d9:b3:b7:36:cc:41: 86:e7:8c:74:19:c3:3e:7e:40:7c:85:75:a2:d7:9b: fd:cd:53:7d:f4:81:9e:5a:04:b0:da:ce:d2:01:2c: c2:3a:e7:32:b8:44:2d:6b:0d:ec:12:e5:82:66:de: c4:a3:ce:7c:41:a2:56:fd:32:dd:b9:0b:f2:80:30: 39:3d:73:97:07:92:3a:15:ac:1d:29:dd:43:c9:ff: 7b:4d:ca:50:15:c3:94:44:0d:8c:48:24:c8:47:b2: 91:7f:8e:67:cb:61:cb:bd:87:af:c2:79:07:67:3b: 4d:44:06:fc:17:ef:21:15:75:ec:2b:a1:50:f5:1a: 78:d8:e1:06:5a:78:1e:67:ac:b6:82:56:c7:0e:7d: 66:73:a8:aa:ff:bf:86:89:fd:05:fc:a2:07:ca:26: 92:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BA:86:2E:18:F9:C5:00:69:F2:04:01:87:E1:3C:4C:01:96:C6:91 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e32382e32312e302f32342d3234203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.28.21.0/24 Signature Algorithm: sha256WithRSAEncryption 43:dd:93:22:ba:4a:1b:46:51:87:9e:d4:63:58:ee:4f:c9:fc: 12:56:ef:0b:36:83:a4:fc:91:df:f7:5e:8d:3c:68:41:9a:9e: 88:bc:d1:bc:38:46:7f:b9:81:22:05:cf:d8:d7:da:5e:97:a2: 2a:44:a1:d8:b2:4a:08:17:ed:61:a6:c8:fd:ed:58:c5:05:67: 2a:cd:b4:ca:4b:ca:30:cb:ad:dd:bc:43:7a:83:f1:87:75:05: 1a:9f:90:5e:18:0f:ee:24:19:10:44:b8:b3:c3:04:af:33:ab: 50:8f:cb:21:ef:00:03:81:ee:31:c4:dc:65:0b:7b:cf:6d:a7: 59:45:51:16:98:94:71:33:fc:13:de:fa:fa:a0:0e:89:3e:37: b8:a6:14:44:1d:e4:68:5d:63:66:2c:68:08:cd:33:18:a0:52: 65:01:6f:42:b1:10:32:bf:f0:cd:56:44:18:38:fe:6b:00:90: 93:e8:94:2b:7d:45:71:f9:ed:4a:6e:23:40:f6:7e:3b:2e:9a: 05:25:32:1f:1c:b8:1e:bf:30:1f:18:c1:b1:8e:bb:7f:9d:19: dd:ac:4b:f4:cb:be:60:53:fc:ec:e5:31:e7:bb:07:1f:4e:3d: db:fd:41:4f:e9:14:c1:24:eb:5f:c7:61:c9:db:47:08:c4:5c: d9:1d:e9:5c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUN3xG5siaY1MqoONV5vsgSvSPnE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ2MDJaFw0yNjEyMjgwOTUxMDJaMDMxMTAvBgNV BAMTKDlFQkE4NjJFMThGOUM1MDA2OUYyMDQwMTg3RTEzQzRDMDE5NkM2OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCTYITZQ54jRz7fpX9zd+4MRTi OX/kaKrRImtg64TaTf13eBiPHQxhFTvlUa7TvJ8vVhshE7EGJMF4wnEgQ+lPUXFS 8DlPtEoZdpNjY0g0tWsTUivl/eWsMKUEb3JHA48JjNmztzbMQYbnjHQZwz5+QHyF daLXm/3NU330gZ5aBLDaztIBLMI65zK4RC1rDewS5YJm3sSjznxBolb9Mt25C/KA MDk9c5cHkjoVrB0p3UPJ/3tNylAVw5REDYxIJMhHspF/jmfLYcu9h6/CeQdnO01E BvwX7yEVdewroVD1GnjY4QZaeB5nrLaCVscOfWZzqKr/v4aJ/QX8ogfKJpI9AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUnrqGLhj5xQBp8gQBh+E8TAGWxpEwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM1MmUzMjM4MmUzMjMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMxMzMzNDMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA wxwVMA0GCSqGSIb3DQEBCwUAA4IBAQBD3ZMiukobRlGHntRjWO5PyfwSVu8LNoOk /JHf916NPGhBmp6IvNG8OEZ/uYEiBc/Y19pel6IqRKHYskoIF+1hpsj97VjFBWcq zbTKS8owy63dvEN6g/GHdQUan5BeGA/uJBkQRLizwwSvM6tQj8sh7wADge4xxNxl C3vPbadZRVEWmJRxM/wT3vr6oA6JPje4phREHeRoXWNmLGgIzTMYoFJlAW9CsRAy v/DNVkQYOP5rAJCT6JQrfUVx+e1KbiNA9n47LpoFJTIfHLgevzAfGMGxjrt/nRnd rEv0y75gU/zs5THnuwcfTj3b/UFP6RTBJOtfx2HJ20cIxFzZHelc -----END CERTIFICATE-----Generated at Sun Jan 25 08:57:28 2026 by rpki-client