This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3136302e302f32322d3234203d3e20383334.roa File: 3231372e3231362e3136302e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: 0wNJ93+f0s5TIICYmHI6GmDJVvD3i3C52uB5MvnJo/w= Subject key identifier: 88:E0:E4:C8:BA:F5:91:80:F5:A0:29:AA:30:D7:10:D5:E7:29:FC:72 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 171D8DA47C9B6A3DA0988D808E85A53314C3F9AF Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3136302e302f32322d3234203d3e20383334.roa Signing time: Thu 22 Jan 2026 19:20:51 +0000 ROA not before: Thu 22 Jan 2026 19:15:51 +0000 ROA not after: Thu 21 Jan 2027 19:20:51 +0000 asID: 834 IP address blocks: 217.216.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:1d:8d:a4:7c:9b:6a:3d:a0:98:8d:80:8e:85:a5:33:14:c3:f9:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 22 19:15:51 2026 GMT Not After : Jan 21 19:20:51 2027 GMT Subject: CN=88E0E4C8BAF59180F5A029AA30D710D5E729FC72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:19:62:99:f7:f8:20:43:99:c9:c3:92:5f:a8: 07:22:e1:8d:da:6f:7e:fd:1d:c9:92:f2:16:9c:98: ca:87:8e:56:65:50:81:d9:e3:e3:ce:9b:8f:15:4b: 22:73:fb:16:97:6a:74:c0:c8:54:23:2a:28:b7:11: 0d:84:f9:7b:b0:79:f1:08:e0:13:cb:0a:4f:82:dc: bc:c5:2d:50:67:3e:e0:1f:fe:01:61:cf:cf:2d:7b: 62:b0:5e:5e:c9:e7:35:c0:17:98:a7:53:41:fa:c8: aa:2f:7d:8b:a0:9e:af:e7:27:a9:ac:1d:95:7c:8f: 5f:cb:64:a6:3f:0a:0b:9b:be:42:f9:07:ee:70:b2: aa:67:33:38:32:e7:39:00:c0:5e:dc:cc:04:5f:60: d8:d9:86:f5:d7:a4:df:cf:59:9d:83:d0:c3:2c:71: d5:24:e0:91:b1:4e:c0:a1:96:91:bf:3c:2e:9a:bc: 00:03:d0:5b:2b:dd:25:d4:44:10:29:6b:60:e3:0d: 7f:5d:5e:04:25:ff:fd:67:02:c3:1e:96:19:0b:10: 3e:20:e5:5c:cf:75:03:ea:f7:c1:c5:89:88:1b:74: 6d:f4:75:0e:bb:1a:3e:77:9b:d0:b9:e0:d6:d2:5c: 1d:f6:29:73:b6:65:7f:49:54:3c:a5:1d:7e:bf:b5: 67:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E0:E4:C8:BA:F5:91:80:F5:A0:29:AA:30:D7:10:D5:E7:29:FC:72 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3136302e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.160.0/22 Signature Algorithm: sha256WithRSAEncryption 79:17:e0:8b:f5:13:9e:a1:1a:7e:61:51:bd:2d:a4:f9:7c:b7: 68:0e:8b:eb:d1:11:17:1f:f9:c1:4b:10:68:cf:87:8c:dd:84: 0e:cf:6d:4d:83:14:82:5c:2d:64:7a:29:75:0c:c1:94:d8:05: 28:d9:ff:8c:51:b8:4e:c3:94:a6:04:25:d8:e8:8b:b5:15:0c: f1:63:47:70:45:41:2a:aa:c8:da:c0:b0:db:5a:b2:e5:dc:0d: c1:c5:68:f6:34:f2:93:32:f7:32:55:8e:6e:ff:95:03:49:ff: 70:29:6f:78:cb:f1:fb:55:75:d5:68:76:32:92:53:aa:e1:ab: ac:0a:8b:5e:84:12:f5:82:e1:e1:a4:94:c6:a1:d9:53:58:48: 48:e1:b5:26:16:68:13:c0:72:be:b0:c2:74:02:f1:53:52:77: a2:73:14:5c:69:61:fe:40:17:54:97:ab:4a:86:50:28:14:d5: 69:05:f3:42:9d:93:f0:d4:bb:ac:21:87:aa:89:03:5c:8e:b9: 04:58:b0:9b:05:d0:cf:a9:e2:e3:37:ba:02:a5:56:f8:a3:e7: 65:19:68:43:45:67:62:03:17:d8:6f:cf:55:40:55:5c:3d:cf: b2:da:a9:b4:17:15:da:e9:46:e9:3f:68:03:db:e6:37:81:b6: 00:c7:d7:c4 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUFx2NpHybaj2gmI2AjoWlMxTD+a8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMjIxOTE1NTFaFw0yNzAxMjExOTIwNTFaMDMxMTAvBgNV BAMTKDg4RTBFNEM4QkFGNTkxODBGNUEwMjlBQTMwRDcxMEQ1RTcyOUZDNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGWKZ9/ggQ5nJw5JfqAci4Y3a b379HcmS8hacmMqHjlZlUIHZ4+POm48VSyJz+xaXanTAyFQjKii3EQ2E+XuwefEI 4BPLCk+C3LzFLVBnPuAf/gFhz88te2KwXl7J5zXAF5inU0H6yKovfYugnq/nJ6ms HZV8j1/LZKY/CgubvkL5B+5wsqpnMzgy5zkAwF7czARfYNjZhvXXpN/PWZ2D0MMs cdUk4JGxTsChlpG/PC6avAAD0Fsr3SXURBApa2DjDX9dXgQl//1nAsMelhkLED4g 5VzPdQPq98HFiYgbdG30dQ67Gj53m9C54NbSXB32KXO2ZX9JVDylHX6/tWcBAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUiODkyLr1kYD1oCmqMNcQ1ecp/HIwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx MzYzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtnY oDANBgkqhkiG9w0BAQsFAAOCAQEAeRfgi/UTnqEafmFRvS2k+Xy3aA6L69ERFx/5 wUsQaM+HjN2EDs9tTYMUglwtZHopdQzBlNgFKNn/jFG4TsOUpgQl2OiLtRUM8WNH cEVBKqrI2sCw21qy5dwNwcVo9jTykzL3MlWObv+VA0n/cClveMvx+1V11Wh2MpJT quGrrAqLXoQS9YLh4aSUxqHZU1hISOG1JhZoE8ByvrDCdALxU1J3onMUXGlh/kAX VJerSoZQKBTVaQXzQp2T8NS7rCGHqokDXI65BFiwmwXQz6ni4ze6AqVW+KPnZRlo Q0VnYgMX2G/PVUBVXD3PstqptBcV2ulG6T9oA9vmN4G2AMfXxA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:36 2026 by rpki-client