This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139362e302f32342d3234203d3e20323134303235.roa File: 3231372e3231362e3139362e302f32342d3234203d3e20323134303235.roa (raw, json) Hash identifier: 1HOq+8c9z4EUiZgrNxYpNm/A52IGkGKMejWxaU4D14Y= Subject key identifier: 95:AF:D6:15:09:F3:F1:E0:26:0F:65:0E:84:43:60:76:69:96:D7:63 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 51BBAB4D93737186ABA4422D08FA7B981CDF844E Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139362e302f32342d3234203d3e20323134303235.roa Signing time: Sat 24 Jan 2026 12:37:01 +0000 ROA not before: Sat 24 Jan 2026 12:32:01 +0000 ROA not after: Sat 23 Jan 2027 12:37:01 +0000 asID: 214025 IP address blocks: 217.216.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:bb:ab:4d:93:73:71:86:ab:a4:42:2d:08:fa:7b:98:1c:df:84:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 24 12:32:01 2026 GMT Not After : Jan 23 12:37:01 2027 GMT Subject: CN=95AFD61509F3F1E0260F650E844360766996D763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:24:7e:33:2c:e6:4c:c3:78:38:58:e3:48:07: 1f:51:fb:32:a0:b7:73:84:00:b6:49:73:83:fd:bd: 0c:c3:cf:ad:5f:ee:fe:22:fe:28:21:03:ec:2a:19: 8b:9c:33:6a:14:4d:91:bf:38:d2:74:b3:46:da:7c: b3:aa:28:1e:14:d6:ab:51:91:b7:ef:7e:d9:0c:e2: 91:79:b7:3d:93:8e:d9:38:4c:3f:e3:25:06:ae:40: 65:df:39:4b:4f:9c:71:bd:fa:09:f3:9a:32:59:4d: 6a:95:15:3a:a6:68:0b:37:b8:40:c9:7f:70:0d:59: 4d:5a:c4:8d:74:2a:6b:3c:d9:ae:e1:7f:74:eb:16: 3d:f0:1f:cf:41:e3:03:15:19:f2:cb:67:57:00:82: ed:90:bf:16:c9:18:92:35:48:93:a9:ec:4f:bf:7f: 3c:8e:f0:21:32:6f:6b:46:6a:09:9e:5b:f8:22:f7: dd:06:1d:aa:d6:88:87:ae:37:2d:4b:09:f2:a9:ae: 99:2f:05:a5:4e:57:5b:6b:31:2c:66:63:89:9c:8b: d7:da:c2:50:4e:48:59:3e:f1:01:a0:1d:c2:72:3a: 95:24:e4:eb:ef:28:32:13:ef:2e:48:ca:f8:c6:4e: c4:29:7f:ef:ac:50:ea:ef:23:85:aa:9e:3e:8b:90: be:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AF:D6:15:09:F3:F1:E0:26:0F:65:0E:84:43:60:76:69:96:D7:63 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139362e302f32342d3234203d3e20323134303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.196.0/24 Signature Algorithm: sha256WithRSAEncryption 05:b8:0a:19:83:a1:02:e4:54:d5:97:0a:71:b1:9c:45:93:6d: f3:a2:fe:cd:51:43:6d:21:92:9a:76:35:07:02:af:68:97:39: 48:6c:34:ba:68:5f:fa:39:1c:63:3e:dc:23:2f:05:ca:8b:f0: 77:dc:15:31:7a:66:3c:8d:de:40:f2:14:2b:63:e4:34:7d:b9: b9:6d:cc:3f:ef:b0:b9:61:48:ce:25:34:a6:74:34:69:08:5b: fc:8b:6f:e8:51:78:2d:d1:e1:c8:89:0b:af:85:77:e8:94:73: ac:6f:23:83:cf:0d:d9:f9:2c:1f:4a:7c:63:66:e0:6e:92:9b: 22:93:12:7d:4b:c3:f9:29:47:9f:de:8e:d9:c4:21:a0:0d:5c: 13:7c:4b:b4:45:df:3d:2a:43:69:9a:1f:6d:ab:9a:9a:3a:92: d8:91:6e:a8:d4:a4:c2:9d:c2:20:49:0a:da:90:a6:4f:fd:b8: e6:bc:d7:8a:3c:08:3c:2e:24:74:e5:8e:27:20:3d:5f:ee:aa: 47:f1:fc:7d:05:97:5f:92:c8:99:7a:51:41:75:94:23:a7:92: 1d:37:fe:b3:6d:f9:d1:9a:49:99:25:07:49:5f:fd:f8:ec:ce: 9b:b2:ed:f9:b2:44:0b:72:3a:e3:5a:6e:c5:6f:53:a0:6c:53: f4:22:22:21 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUUburTZNzcYarpEItCPp7mBzfhE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMjQxMjMyMDFaFw0yNzAxMjMxMjM3MDFaMDMxMTAvBgNV BAMTKDk1QUZENjE1MDlGM0YxRTAyNjBGNjUwRTg0NDM2MDc2Njk5NkQ3NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJH4zLOZMw3g4WONIBx9R+zKg t3OEALZJc4P9vQzDz61f7v4i/ighA+wqGYucM2oUTZG/ONJ0s0bafLOqKB4U1qtR kbfvftkM4pF5tz2Tjtk4TD/jJQauQGXfOUtPnHG9+gnzmjJZTWqVFTqmaAs3uEDJ f3ANWU1axI10Kms82a7hf3TrFj3wH89B4wMVGfLLZ1cAgu2QvxbJGJI1SJOp7E+/ fzyO8CEyb2tGagmeW/gi990GHarWiIeuNy1LCfKprpkvBaVOV1trMSxmY4mci9fa wlBOSFk+8QGgHcJyOpUk5OvvKDIT7y5IyvjGTsQpf++sUOrvI4Wqnj6LkL7rAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUla/WFQnz8eAmD2UOhENgdmmW12MwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx MzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDMwMzIzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANnYxDANBgkqhkiG9w0BAQsFAAOCAQEABbgKGYOhAuRU1ZcKcbGcRZNt86L+ zVFDbSGSmnY1BwKvaJc5SGw0umhf+jkcYz7cIy8Fyovwd9wVMXpmPI3eQPIUK2Pk NH25uW3MP++wuWFIziU0pnQ0aQhb/Itv6FF4LdHhyIkLr4V36JRzrG8jg88N2fks H0p8Y2bgbpKbIpMSfUvD+SlHn96O2cQhoA1cE3xLtEXfPSpDaZofbauamjqS2JFu qNSkwp3CIEkK2pCmT/245rzXijwIPC4kdOWOJyA9X+6qR/H8fQWXX5LImXpRQXWU I6eSHTf+s2350ZpJmSUHSV/9+OzOm7Lt+bJEC3I641puxW9ToGxT9CIiIQ== -----END CERTIFICATE-----Generated at Sun Jan 25 08:51:46 2026 by rpki-client